MyCity » Ambulanta -> Arhiva Ambulante » Opterecenost CPU-a 50% a nista ne radim.

Opterecenost CPU-a 50% a nista ne radim.

Napisano na dan: 10.11.2009
1

Opterecenost CPU-a 50% a nista ne radim.
Sledeća strana Pagination

Idi na vrh

Poslao: 10 Nov 2009 16:12
Idi na vrh
offline
  • Pridružio: 09 Nov 2009
  • Poruke: 55

Koristim CPU Intel Core2Duo E7200.Od juce mi opterecenost ne ide ispod 50%.Process "services.exe" vuce stalno 50% i ne pada ispod.

Evo DDS:


DDS (Ver_09-10-26.01) - NTFSx86
Run by Overcloked at 12:41:22,53 on uto 10.11.2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.2.1250.387.1033.18.2047.1414 [GMT -8:00]

AV: avast! antivirus 4.8.1356 [VPS 091110-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DU Meter\DUMeter.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Vimicro\Vimicro UVC USB2.0 PC Camera\x86\VMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Rainmeter\Rainmeter.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Overcloked\Desktop\7l6twptr.exe
C:\Documents and Settings\Overcloked\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = [Link mogu videti samo ulogovani korisnici]
uSearch Page = [Link mogu videti samo ulogovani korisnici]
uSearch Bar = [Link mogu videti samo ulogovani korisnici]
uDefault_Search_URL = [Link mogu videti samo ulogovani korisnici]
mDefault_Search_URL = [Link mogu videti samo ulogovani korisnici]
mStart Page = [Link mogu videti samo ulogovani korisnici]
uSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
mSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uURLSearchHooks: Winamp Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll
uURLSearchHooks: DefaultSearchHook Class: {c94e154b-1459-4a47-966b-4b843befc7db} - c:\program files\asksearch\bin\DefaultSearch.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uURLSearchHooks: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFree.dll
uURLSearchHooks: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTogg.dll
mURLSearchHooks: Winamp Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll
mURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTogg.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: Winamp Toolbar Loader: {25cee8ec-5730-41bc-8b58-22ddc8ab8c20} - c:\program files\winamp toolbar\winamptb.dll
BHO: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFree.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Winamp Toolbar: {ebf2ba02-9094-4c5a-858b-bb198f3d8de2} - c:\program files\winamp toolbar\winamptb.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFree.dll
TB: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTogg.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [SkyTel] SkyTel.EXE
mRun: [track monitor] c:\program files\msn track monitor\msntrack.exe
mRun: [DU Meter] c:\program files\du meter\DUMeter.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [VMonitorVMUVC] "c:\program files\vimicro\vimicro uvc usb2.0 pc camera\x86\VMonitor.exe" VMUVC
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\overcl~1\startm~1\programs\startup\rainme~1.lnk - c:\program files\rainmeter\Rainmeter.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
IE: &Search
IE: &Winamp Search - c:\documents and settings\all users\application data\winamp toolbar\ietoolbar\resources\en-us\local\search.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - [Link mogu videti samo ulogovani korisnici]
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\overcl~1\applic~1\mozilla\firefox\profiles\h9dkou0r.default\
FF - prefs.js: browser.search.defaulturl - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: keyword.URL - [Link mogu videti samo ulogovani korisnici]
FF - component: c:\documents and settings\overcloked\application data\mozilla\firefox\profiles\h9dkou0r.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - component: c:\documents and settings\overcloked\application data\mozilla\firefox\profiles\h9dkou0r.default\extensions\{d3dc5de2-0384-43b1-bea5-80d202086138}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\overcloked\application data\mozilla\firefox\profiles\h9dkou0r.default\extensions\dttoolbar@toolbarnet.com\components\DTToolbarFF.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-8-5 114768]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-10-8 34312]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-8-5 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-6-1 54752]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2009-5-31 36864]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [2009-7-9 17792]
R3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\drivers\VMUVC.sys [2009-9-11 250240]
R3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [2009-9-11 476032]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
S3 XDva259;XDva259;\??\c:\windows\system32\xdva259.sys --> c:\windows\system32\XDva259.sys [?]
S3 XDva279;XDva279;\??\c:\windows\system32\xdva279.sys --> c:\windows\system32\XDva279.sys [?]
S3 XDva302;XDva302;\??\c:\windows\system32\xdva302.sys --> c:\windows\system32\XDva302.sys [?]
S4 ASKUpgrade;ASKUpgrade;c:\program files\askbardis\bar\bin\askupgrade.exe --> c:\program files\askbardis\bar\bin\ASKUpgrade.exe [?]

=============== Created Last 30 ================

2009-11-09 02:07:44 0 d-----w- C:\temp
2009-11-09 01:53:13 0 d-----w- c:\program files\nettvplayer 2.0
2009-11-08 22:44:29 0 d-----w- c:\program files\NetTVPlus Player
2009-11-08 18:34:21 0 d-----w- c:\program files\KONAMI
2009-11-08 18:34:21 0 d-----w- c:\docume~1\alluse~1\applic~1\KONAMI
2009-11-08 08:04:33 0 d-----w- c:\docume~1\alluse~1\applic~1\DAEMON Tools Lite
2009-11-08 08:01:59 0 d-----w- c:\program files\DAEMON Tools Toolbar
2009-11-08 08:01:54 0 d-----w- c:\program files\DAEMON Tools Lite
2009-11-08 07:28:13 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-11-08 07:28:12 0 d-----w- c:\docume~1\overcl~1\applic~1\DAEMON Tools Lite
2009-10-30 01:47:29 0 d-----w- c:\docume~1\overcl~1\applic~1\mIRC
2009-10-29 05:57:25 0 d-----w- c:\program files\AliveMedia
2009-10-17 17:31:08 0 d-----w- c:\program files\PhotoScape

==================== Find3M ====================

2009-11-08 23:10:32 910766 ----a-w- c:\program files\NetTVPlus Player.rar
2009-09-29 18:19:06 2146304 ----a-w- c:\windows\system32\GPhotos.scr
2009-09-25 05:56:36 662016 ----a-w- c:\windows\system32\wininet.dll
2009-09-25 05:56:32 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-08-23 21:00:38 922112 ------w- c:\windows\system32\imapi2fs.dll
2009-08-23 21:00:38 426496 ------w- c:\windows\system32\imapi2.dll
2009-08-16 15:08:36 178176 ----a-w- c:\windows\system32\unrar.dll

============= FINISH: 12:41:37,75 ===============



[Link mogu videti samo ulogovani korisnici]




Evo i ova 3 file-a sa Gmer-a:

Gmer1

[Link mogu videti samo ulogovani korisnici]


Gmer2

[Link mogu videti samo ulogovani korisnici]


Gmer3

[Link mogu videti samo ulogovani korisnici]



Poslao: 10 Nov 2009 17:48
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Pozdrav!

U logovima imas ostatke ESET AV-a

Poseti ovaj link:
[Link mogu videti samo ulogovani korisnici]

Znaci deinstaliraj ESET i onda proveri opterecenje procesora nakon restarta PC-a.



Poslao: 10 Nov 2009 18:06
Idi na vrh
offline
  • Pridružio: 09 Nov 2009
  • Poruke: 55

Iskoristio sam oba ona programa na listi za deinstalaciju ESET-a.

Kod ESET Unninstaller-a mi se pojavilo ovo

>>>>>>>>>>>>> BEGIN >>>>>>>>>>>>>>>>>>>>>>>
[11/10/09 17:57:30] C:\Documents and Settings\Overcloked\Desktop\ESETUninstaller.exe 4.0.8.0
[11/10/09 17:57:31] Online (PC booted from fixed disk) mode detected.

[11/10/09 17:57:31] ERROR! PC is running in normal boot, please run safe boot or boot live CD/DVD/USB.
>>>>>>>>>>>>>>>>>>>>>>>> END >>>>>>>>>>>>>>>>>>>>>>>>


>>>>>>>>>>>>>>>>>>>>>>> BEGIN >>>>>>>>>>>>>>>>>>>>>>>
[11/10/09 18:04:00] C:\Documents and Settings\Overcloked\Desktop\ESETUninstaller.exe 4.0.8.0
[11/10/09 18:04:01] Online (PC booted from fixed disk) mode detected.

[11/10/09 18:04:01] ERROR! PC is running in normal boot, please run safe boot or boot live CD/DVD/USB.
>>>>>>>>>>>>>>>>>>>>>>>> END >>>>>>>>>>>>>>>>>>>>>>>>




A kod ovoga drugoga nista..

btw nista se nije popravilo,50% i dalje..U pocetnih 20ak sec sve ok.Opterecenje samo skoci dok se upali msn,skype ili nesto,ali nakon 20ak sec stane na 50%+ i ne pada ispod.

Poslao: 10 Nov 2009 18:33
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Potrebno je racunar pokrenuti iz Safe Moda

[Link mogu videti samo ulogovani korisnici]

Kad si u Safe Modu,ponovo pokreni Uninstaller sa Desktop-a.

Poslao: 10 Nov 2009 19:00
Idi na vrh
offline
  • Pridružio: 09 Nov 2009
  • Poruke: 55

@magna86

Obrisao sam ga iz Safe Mode-a i nista.I dalje ide 50%.Ja sam imao NOD32 prije jedno 3-4 mjeseca.Obrisao sam ga tada i stojalo je vec ovako do juce.Nikada mi se nije desavalo da CPU ide tako,juce vidim 1. put.A zapazio sam zadnjih mozda 4-5 dana da mi se CPU pogubi tj. zasjekca mi CSS kad igram i sada kada sam usao da igram CSS zasjecka mi kada se poveca opterecenost na 100%.Znaci desava mi se to mozda zadnjih 4-5 dana,sedmica najvise.

Ne zna niko sta da uradim Sad

Poslao: 10 Nov 2009 19:35
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Preuzmi The Avenger na Desktop.
Raspakuj arhivu u neki folder

Dvoklikom pokreni avenger.exe

Iskopiraj tekst koji se nalazi unutar Kod polja u (beli) prozor programa:

Drivers to delete:
XDva259
XDva279
XDva302

Files to delete:
c:\windows\system32\xdva259.sys
c:\windows\system32\xdva279.sys
c:\windows\system32\xdva302.sys

Klikni Execute, a zatim Yes u sledeća dva prozora koji će se otvoriti

Kompjuter će se restartovati (u određenim slučajevima: dva puta) i započeti će proces čišćenja/skeniranja

Kada proces bude završen, logfile C:\avenger.txt će se otvoriti u Notepad-u

Iskopiraj sadržaj dobijenog loga u temu na forumu.
Ponovo pokreni DDS i postavi mi DDS.txt log

Poslao: 10 Nov 2009 19:56
Idi na vrh
offline
  • Pridružio: 09 Nov 2009
  • Poruke: 55

Eh ovako,
Sve sam to odradio cak 2 puta.Skinuo ga,instalirao,pokrenuo,prekopirao taj kod i isao paste tamo,a zatim execute.Racunar se restartovao po 2 puta za svaki put kad sam to uradio,ali problem je sto nakon ta 2 restarta nije uradio scan tako da mi se nije pojavio ni logfile.

Poslao: 10 Nov 2009 20:05
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

magna86 ::
[*]Kada proces bude završen, logfile C:\avenger.txt će se otvoriti u Notepad-u[/list]

Iskopiraj sadržaj dobijenog loga u temu na forumu.
Ponovo pokreni DDS i postavi mi DDS.txt log

Na ovu lokaciju nadji njegov log da vidim sta je odradio
C:\avenger.txt

Postavi mi i svez DDS-ov log

Poslao: 10 Nov 2009 20:15
Idi na vrh
offline
  • Pridružio: 09 Nov 2009
  • Poruke: 55

Morao sam i 3. put uraditi,prva 2 puta stvarno ga nije bilo..

evo 3. put jest

Logfile of The Avenger Version 2.0, (c) by Swandog46
[Link mogu videti samo ulogovani korisnici]

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "iabq" found!
ImagePath: system32\drivers\qpvmsro.sys
Start Type: 0 (Boot)

Rootkit scan completed.


Warning: Invalid contents in ServiceGroupOrder key!
There may be a driver loading earlier than Avenger!


Completed script processing.

*******************

Finished! Terminate.



Logfile of The Avenger Version 2.0, (c) by Swandog46
[Link mogu videti samo ulogovani korisnici]

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Error: registry key "\Registry\Machine\System\CurrentControlSet\Services\XDva259" not found!
Deletion of driver "XDva259" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: registry key "\Registry\Machine\System\CurrentControlSet\Services\XDva279" not found!
Deletion of driver "XDva279" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: registry key "\Registry\Machine\System\CurrentControlSet\Services\XDva302" not found!
Deletion of driver "XDva302" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\xdva259.sys" not found!
Deletion of file "c:\windows\system32\xdva259.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\xdva279.sys" not found!
Deletion of file "c:\windows\system32\xdva279.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\xdva302.sys" not found!
Deletion of file "c:\windows\system32\xdva302.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.



Evo DDS log



DDS (Ver_09-10-26.01) - NTFSx86
Run by Overcloked at 20:13:44,82 on uto 10.11.2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.2.1250.387.1033.18.2047.1394 [GMT -8:00]

AV: avast! antivirus 4.8.1356 [VPS 091110-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DU Meter\DUMeter.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Vimicro\Vimicro UVC USB2.0 PC Camera\x86\VMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Overcloked\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = [Link mogu videti samo ulogovani korisnici]
uSearch Page = [Link mogu videti samo ulogovani korisnici]
uSearch Bar = [Link mogu videti samo ulogovani korisnici]
uDefault_Search_URL = [Link mogu videti samo ulogovani korisnici]
mDefault_Search_URL = [Link mogu videti samo ulogovani korisnici]
mStart Page = [Link mogu videti samo ulogovani korisnici]
uSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
mSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uURLSearchHooks: DefaultSearchHook Class: {c94e154b-1459-4a47-966b-4b843befc7db} - c:\program files\asksearch\bin\DefaultSearch.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uURLSearchHooks: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFree.dll
uURLSearchHooks: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTogg.dll
mURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTogg.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFree.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFree.dll
TB: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTogg.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [SkyTel] SkyTel.EXE
mRun: [track monitor] c:\program files\msn track monitor\msntrack.exe
mRun: [DU Meter] c:\program files\du meter\DUMeter.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [VMonitorVMUVC] "c:\program files\vimicro\vimicro uvc usb2.0 pc camera\x86\VMonitor.exe" VMUVC
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
IE: &Search
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - [Link mogu videti samo ulogovani korisnici]
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\overcl~1\applic~1\mozilla\firefox\profiles\h9dkou0r.default\
FF - prefs.js: browser.search.defaulturl - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: keyword.URL - [Link mogu videti samo ulogovani korisnici]
FF - component: c:\documents and settings\overcloked\application data\mozilla\firefox\profiles\h9dkou0r.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - component: c:\documents and settings\overcloked\application data\mozilla\firefox\profiles\h9dkou0r.default\extensions\{d3dc5de2-0384-43b1-bea5-80d202086138}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\overcloked\application data\mozilla\firefox\profiles\h9dkou0r.default\extensions\dttoolbar@toolbarnet.com\components\DTToolbarFF.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-8-5 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-8-5 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-6-1 54752]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2009-5-31 36864]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [2009-7-9 17792]
R3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\drivers\VMUVC.sys [2009-9-11 250240]
R3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [2009-9-11 476032]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
S4 ASKUpgrade;ASKUpgrade;c:\program files\askbardis\bar\bin\askupgrade.exe --> c:\program files\askbardis\bar\bin\ASKUpgrade.exe [?]

=============== Created Last 30 ================

2009-11-11 01:49:55 0 d-s---w- c:\documents and settings\overcloked\UserData
2009-11-09 01:53:13 0 d-----w- c:\program files\nettvplayer 2.0
2009-11-08 22:44:29 0 d-----w- c:\program files\NetTVPlus Player
2009-11-08 18:34:21 0 d-----w- c:\program files\KONAMI
2009-11-08 18:34:21 0 d-----w- c:\docume~1\alluse~1\applic~1\KONAMI
2009-11-08 08:04:33 0 d-----w- c:\docume~1\alluse~1\applic~1\DAEMON Tools Lite
2009-11-08 08:01:59 0 d-----w- c:\program files\DAEMON Tools Toolbar
2009-11-08 08:01:54 0 d-----w- c:\program files\DAEMON Tools Lite
2009-11-08 07:28:13 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-11-08 07:28:12 0 d-----w- c:\docume~1\overcl~1\applic~1\DAEMON Tools Lite
2009-10-30 01:47:29 0 d-----w- c:\docume~1\overcl~1\applic~1\mIRC
2009-10-17 17:31:08 0 d-----w- c:\program files\PhotoScape

==================== Find3M ====================

2009-09-29 18:19:06 2146304 ----a-w- c:\windows\system32\GPhotos.scr
2009-09-25 05:56:36 662016 ----a-w- c:\windows\system32\wininet.dll
2009-09-25 05:56:32 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-08-23 21:00:38 922112 ------w- c:\windows\system32\imapi2fs.dll
2009-08-23 21:00:38 426496 ------w- c:\windows\system32\imapi2.dll
2009-08-16 15:08:36 178176 ----a-w- c:\windows\system32\unrar.dll

============= FINISH: 20:14:03,48 ===============



Evo attach


[Link mogu videti samo ulogovani korisnici]

Poslao: 10 Nov 2009 22:44
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Preuzmi SysProt AntiRootkit sa sledeće stranice:

SysProt downlaod

Na strani koja se otvori treba kliknuti "here" link.



Raspakuj arhivu u neki folder (uputstvo), a zatim:
dvoklikom pokreni program i pređi na Log karticu;

štikliraj svih osam stavki i klikni Create log;

nakon određenog vremena će se pojaviti upit u kome treba obeležiti
Scan root drive only i kliknuti Start;

po završetku skeniranja pojaviće se obaveštenje koje treba zatvoriti klikom na OK;

izveštaj (log) će biti sačuvan u istom folderu u kome se nalazi i sam program.

Slikoviti prikaz postupka

Priloži kreirani izveštaj uz poruku korišćenjem opcije Prikači fajl.

MyCity » Ambulanta -> Arhiva Ambulante » Opterecenost CPU-a 50% a nista ne radim.

Ko je trenutno na forumu
 

Ukupno su 1183 korisnika na forumu :: 183 registrovanih, 13 sakrivenih i 987 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 1MAP, ALEKSICMILE, bakos022, Bbbggg1979, Ben Roj, Bgorando, Bickoooo, bigfoot, Bivan, black venom, Bob.Rock, bobo85, Bobrock1, boj.an, Bojan198527, Bokimajk, Borac1983, Borski1977, brufen, CCCP, cekic, celt, Chainsaw, CHARLIE JA., Clouseau, cuvarkuca, cyprus, d.arsenal321, dankisha, Dannyboy, dano, DeerHunter, dekan.m, delboy, Demi87, Despot Đurađ, dexteroza, DJUNTA, Djuro2000, doom83, Dorcolac, draganl, draganst, draggan, dulleo, duro1990duro, ElvisP, Ercomero, EVIDENTICAR, feanor, Flanker-G, Folkstar, FOX, gasazem, Geran136, Goran_, Hans Gajger, Hemi, Igor Antonic, Insan, IpMan, ivica976, Jablan, jarovitt, Jeremiah, jnikola23, jodzula, Joint Chief, Jomini, Jose, Jovan1997, jugoslav.70, kaput21, Kazablankasrb, Kenanjoz, kibihrchak, Kobrim, kolateralnasteta, koliko, kori, Koridor, krasta, krca73, kybonacci, Le Banner, lord sir giga, LUDI, luka35, Marko Marković, markoskjk, marsi, matrix_1, max power, mean_machine, medaTT, Mercury, Metanoja, Michellefromrezistance, Miki 84, Miki01, mikrimaus, Milenko1980., miljannis, Milo97, miodrag, Mldo, mm1811, Moldovan, morava_01, Muki 123, Ne doznajem se u oružje, nebidrag, Nele79, Nepopravljivi, neutrino, nixos, oblivion, OrestSand, Pale2025, Papadubi, pein, Pekman, Pilence, Podgoritza, posmatrac300, prasinar, procesor, proljece, Pv123, Radoslava, raster12, Ray1973, rebro1974, Roksi, Romibrat, royst33, samo_srpski, samp1389, sap, saputnik plavetnila, sasa87, scimitar19, Semberija, Sevetar, Shajlok, shlauf, sijecanj, Sinduk, Sir Budimir, siwoti, Smor, Sonic, sovanova95, spalev, ssekir75, Stefan M, stefan95, stingD, strn, Tas011, TBoy, TheBeastOfMG, TheDictator, tomigun, toni061, TripleTwo, tritonus, TRZH92, vdeki, Velizar Laro, Veljko™, vensla, vobo, Wiesel092, yiyi, YugoSlav, Zastava, zgoljo, zil10, zoran-ruma, Zukov, ZZZ, 800077