Здравейте,мисля че системата ми е инфектирана,тъй като след като сканирах с Malwarebytes ми откри следните вируси http://i.imgur.com/mVEvvGV.jpg,изтрих ги но...преди малко погледнах,че CPU-то ми е на 100% http://i.imgur.com/3EQ89Tv.png , http://i.imgur.com/MOMt3ph.png и не пада!

Преди да дам логовете,които желаете изтеглих тази програма Filemon,ето ви и логче от нея тук ,не знам дали е достатъчен,но като за начало мисля че е добре!

 

Редактирано 10 март 201313 г. от B-boy[StyLe] (преглед на промените)

Двата лога от DDS са необходими,като ги пействаш директно а не с прикачане.

Ок

 

Attach Log

 

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows XP Professional Boot Device: DeviceHarddiskVolume1 Install Date: 3/6/2013 6:48:23 PM System Uptime: 3/9/2013 10:43:31 PM (2 hours ago) . Motherboard: MSI |  | MS-7236 Processor: Genuine Intel® CPU   2160  @ 1.80GHz | CPU 1 | 1795/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 127 GiB total, 108.731 GiB free. D: is FIXED (NTFS) - 122 GiB total, 114.93 GiB free. E: is FIXED (NTFS) - 124 GiB total, 123.506 GiB free. F: is CDROM () G: is CDROM () H: is CDROM () I: is FIXED (NTFS) - 932 GiB total, 77.483 GiB free. . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP29: 3/8/2013 8:58:05 PM - Контролна точка на системата RP30: 3/8/2013 8:59:39 PM - Installed Ralink Wireless LAN RP31: 3/8/2013 9:54:37 PM - Software Distribution Service 3.0 RP32: 3/8/2013 10:52:11 PM - Software Distribution Service 3.0 RP33: 3/8/2013 11:00:41 PM - Software Distribution Service 3.0 RP34: 3/8/2013 11:07:40 PM - Software Distribution Service 3.0 RP35: 3/8/2013 11:20:10 PM - Software Distribution Service 3.0 RP36: 3/8/2013 11:24:43 PM - Software Distribution Service 3.0 RP37: 3/9/2013 12:21:41 AM - Removed Adobe Reader 9.4.0 - Bulgarian. RP38: 3/9/2013 2:04:13 AM - Installed Java SE Development Kit 7 Update 17 RP39: 3/9/2013 2:04:45 AM - Installed Java 7 Update 17 RP40: 3/9/2013 2:22:48 AM - Installed Java 7 Update 13 RP41: 3/9/2013 3:00:57 AM - Software Distribution Service 3.0 RP42: 3/9/2013 4:44:08 AM - Software Distribution Service 3.0 RP43: 3/9/2013 5:13:44 PM - Software Distribution Service 3.0 RP44: 3/9/2013 11:14:20 PM - Before uninstalling WorkStationOPtimizer . ==== Installed Programs ====================== . µTorrent Пакет за езиков интерфейс на Windows Adobe AIR Adobe Flash Player 11 Plugin Adobe Reader XI (11.0.02) Adobe Shockwave Player 11.6 AIMP2 Ashampoo Burning Studio 12 v.12.0.3 Audacity 2.0 AudioBurst FX for Winamp Auto Gordian Knot 2.55 Avira Free Antivirus AviSynth 2.5 Bejeweled 3 BleachBit Bulgarian (Phonetic) by Iliya Dankov CCleaner DAPlayer 1.0.1.9 EasyBCD 2.2 FFmpeg v0.6.2 for Audacity FormatFactory 2.70 FreeSpacer 1.67 Glary Utilities Pro 2.48.0.1568 HandBrake 0.9.8 Hyperdesk - DarkMatter Subspace IndieVolume 3.3.79.146 iZotope Ozone Free 1.0 for Winamp Java 7 Update 13 Java 7 Update 17 Java Auto Updater Java SE Development Kit 7 Update 17 LADSPA_plugins-win-0.4.15 LAME v3.99.3 (for Windows) LibreOffice 4.0.0.3 Mac Blu-ray Player Malwarebytes Anti-Malware, версия 1.70.0.1100 MediaInfo 0.7.60 Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Bootvis Microsoft DirectX SDK (November 2008) Microsoft Silverlight Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 Mozilla Firefox 18.0.2 (x86 bg) MSXML 4.0 SP3 Parser MSXML 4.0 SP3 Parser (KB2758694) NVIDIA Control Panel 314.07 NVIDIA Graphics Driver 314.07 NVIDIA HD Audio Driver 1.3.23.1 NVIDIA Install Application NVIDIA nView 136.53 NVIDIA PhysX NVIDIA PhysX System Software 9.12.1031 NVIDIA Update 1.12.12 NVIDIA Update Components Passion Audio Player v2.7 Privacy Eraser Pro R-Wipe&Clean 9.5 Ralink RT7x Wireless LAN Card Realtek AC'97 Audio REALTEK GbE & FE Ethernet PCI NIC Driver Security Update for CAPICOM (KB931906) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft .NET Framework 4 Extended (KB2736428) Security Update for Microsoft .NET Framework 4 Extended (KB2742595) Security Update for Windows Internet Explorer 8 (KB2792100) Security Update for Windows Internet Explorer 8 (KB2797052) swMSM UltraPlayer Universal Extractor 1.6.1 Unlocker 1.9.1 VLC media player 2.0.1 WebFldrs XP Winamp WinAVI All in One Converter WinRAR archiver WinTools.net 11.7.1 Ultimate WinXP Manager XviD MPEG4 Video Codec (remove only) Your Uninstaller! 7 Zinf 2.2.1 . ==== Event Viewer Messages From Past Week ======== . 3/9/2013 4:31:04 PM, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume. 3/9/2013 11:14:23 PM, error: Service Control Manager [7034]  - The MBAMScheduler service terminated unexpectedly.  It has done this 1 time(s). 3/9/2013 10:46:13 PM, error: Service Control Manager [7034]  - The Hyperdesk Theme Enabler service terminated unexpectedly.  It has done this 1 time(s). 3/9/2013 1:01:34 AM, error: Service Control Manager [7034]  - The Application Layer Gateway Service service terminated unexpectedly.  It has done this 1 time(s). 3/8/2013 8:58:09 PM, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000034' while processing the file '_filelst.cfg' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume. 3/8/2013 2:30:58 PM, error: UPS [2481]  - The UPS service is not configured correctly. 3/8/2013 2:30:58 PM, error: Service Control Manager [7023]  - The Uninterruptible Power Supply service terminated with the following error:  %%2481 3/8/2013 12:56:47 AM, error: Service Control Manager [7000]  - The portio service failed to start due to the following error:  The system cannot find the file specified. . ==== End Of File ===========================

 

DDS Log

 

. DDS (Ver_2011-09-30.01) - NTFS_x86 Internet Explorer: 8.0.6001.18702  BrowserJavaVersion: 10.17.2 Run by sysadminthr1 at 0:37:38 on 2013-03-10 Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.3199.2432 [GMT 2:00] . AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} . ============== Running Processes ================ . C:WINDOWSsystem32spoolsv.exe C:Program FilesAviraAntiVir Desktopsched.exe C:Program FilesAviraAntiVir Desktopavguard.exe C:Program FilesJavajre7binjqs.exe C:WINDOWSsystem32nvsvc32.exe C:Program FilesNVIDIA CorporationNVIDIA Update Coredaemonu.exe C:Program FilesAviraAntiVir Desktopavshadow.exe C:WINDOWSExplorer.EXE C:WINDOWSSOUNDMAN.EXE C:Program FilesAviraAntiVir Desktopavgnt.exe C:WINDOWSsystem32RunDLL32.exe C:Program FilesCommon FilesJavaJava Updatejusched.exe C:WINDOWSsystem32ctfmon.exe C:Program FilesMozilla Firefoxfirefox.exe C:Program FilesMozilla Firefoxplugin-container.exe C:WINDOWSsystem32wscntfy.exe C:WINDOWSsystem32wbemwmiprvse.exe C:WINDOWSSystem32svchost.exe -k netsvcs C:WINDOWSsystem32svchost.exe -k NetworkService C:WINDOWSsystem32svchost.exe -k LocalService C:WINDOWSsystem32svchost.exe -k LocalService . ============== Pseudo HJT Report =============== . BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:program filesjavajre7binssv.dll BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:program filesjavajre7binjp2ssv.dll uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe mRun: [soundMan] SOUNDMAN.EXE mRun: [avgnt] "c:program filesaviraantivir desktopavgnt.exe" /min mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:windowssystem32NvCpl.dll,NvStartup mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login mRun: [nwiz] c:program filesnvidia corporationnviewnwiz.exe /installquiet mRun: [sunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe" dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE uPolicies-Explorer: NoDriveTypeAutoRun = dword:255 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe TCP: NameServer = 192.168.1.254 TCP: Interfaces{998E206F-1AF5-4044-896D-9AE5564566D0} : DHCPNameServer = 192.168.1.254 SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg . ================= FIREFOX =================== . FF - ProfilePath - c:documents and settingssysadminthr1application datamozillafirefoxprofilesgw480ih6.default FF - plugin: c:program filesadobereader 11.0readerairnppdf32.dll FF - plugin: c:program filesjavajre7binplugin2npjp2.dll FF - plugin: c:program filesmicrosoft silverlight5.1.10411.0npctrlui.dll FF - plugin: c:windowssystem32macromedflashNPSWF32_11_6_602_171.dll FF - plugin: c:windowssystem32npDeployJava1.dll FF - plugin: c:windowssystem32npptools.dll . ============= SERVICES / DRIVERS =============== . R0 mv61xxmm;mv61xxmm;c:windowssystem32driversmv61xxmm.sys [2012-6-13 13616] R0 mv64xxmm;mv64xxmm;c:windowssystem32driversmv64xxmm.sys [2012-6-13 5632] R0 mvxxmm;mvxxmm;c:windowssystem32driversmvxxmm.sys [2012-6-13 13616] R1 avkmgr;avkmgr;c:windowssystem32driversavkmgr.sys [2013-3-8 36552] R2 AntiVirSchedulerService;Avira Scheduler;c:program filesaviraantivir desktopsched.exe [2013-3-8 86752] R2 AntiVirService;Avira Real-Time Protection;c:program filesaviraantivir desktopavguard.exe [2013-3-8 110816] R2 avgntflt;avgntflt;c:windowssystem32driversavgntflt.sys [2013-3-8 83944] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:program filesnvidia corporationnvidia update coredaemonu.exe [2013-3-6 1266464] R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:windowssystem32driversthdudf.sys [2013-3-6 66944] R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:windowssystem32driversnvhda32.sys [2013-3-6 128440] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:windowsmicrosoft.netframeworkv4.0.30319mscorsvw.exe [2010-3-18 130384] S2 MBAMScheduler;MBAMScheduler;c:program filesmalwarebytes' anti-malwarembamscheduler.exe [2013-3-9 398184] S2 MBAMService;MBAMService;c:program filesmalwarebytes' anti-malwarembamservice.exe [2013-3-9 682344] S3 MBAMProtector;MBAMProtector;c:windowssystem32driversmbam.sys [2013-3-9 21104] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:windowsmicrosoft.netframeworkv4.0.30319wpfWPFFontCache_v0400.exe [2010-3-18 753504] S4 HdThemeEnabler;Hyperdesk Theme Enabler;c:program filesthe skins factoryhyperdeskcommonHDThemeEnabler.exe [2008-7-23 106496] UnknownUnknown dfg;dfg; [x] . =============== Created Last 30 ================ . 2013-03-09 09:19:04  --------  d-----w-  c:documents and settingssysadminthr1application dataMalwarebytes 2013-03-09 09:18:55  --------  d-----w-  c:documents and settingsall usersapplication dataMalwarebytes 2013-03-09 09:18:52  21104  ----a-w-  c:windowssystem32driversmbam.sys 2013-03-09 09:18:52  --------  d-----w-  c:program filesMalwarebytes' Anti-Malware 2013-03-09 08:23:55  --------  d-----w-  c:program filesuTorrent 2013-03-09 08:23:27  --------  d-----w-  c:documents and settingssysadminthr1application datauTorrent 2013-03-09 08:21:11  --------  d-----w-  c:documents and settingssysadminthr1local settingsapplication dataSun 2013-03-09 01:47:54  --------  d-----w-  c:documents and settingssysadminthr1dwhelper 2013-03-09 00:05:09  861088  ----a-w-  c:windowssystem32npDeployJava1.dll 2013-03-09 00:05:09  782240  ----a-w-  c:windowssystem32deployJava1.dll 2013-03-09 00:05:09  143872  ----a-w-  c:windowssystem32javacpl.cpl 2013-03-09 00:04:56  94112  ----a-w-  c:windowssystem32WindowsAccessBridge.dll 2013-03-08 23:02:36  892704  ----a-w-  c:windowssystem32nvdispgenco3220162.dll 2013-03-08 23:02:36  1012512  ----a-w-  c:windowssystem32nvdispco3220294.dll 2013-03-08 22:16:41  --------  d-----w-  c:windowssystem32NtmsData 2013-03-08 20:38:17  --------  d-----w-  c:documents and settingssysadminthr1application dataAvira 2013-03-08 20:33:02  83944  ----a-w-  c:windowssystem32driversavgntflt.sys 2013-03-08 20:33:02  36552  ----a-w-  c:windowssystem32driversavkmgr.sys 2013-03-08 20:32:57  --------  d-----w-  c:program filesAvira 2013-03-08 20:32:57  --------  d-----w-  c:documents and settingsall usersapplication dataAvira 2013-03-08 19:58:27  --------  d-----w-  c:program filesMicrosoft CAPICOM 2.1.0.2 2013-03-08 19:55:13  --------  d-----w-  c:windowsie8updates 2013-03-08 19:55:11  --------  d--h--w-  c:windows$hf_mig$ 2013-03-08 19:22:55  2193152  -c----w-  c:windowssystem32dllcachentoskrnl.exe 2013-03-08 19:22:55  2148864  -c----w-  c:windowssystem32dllcachentkrnlmp.exe 2013-03-08 19:22:55  2069760  -c----w-  c:windowssystem32dllcachentkrnlpa.exe 2013-03-08 19:22:55  2027520  -c----w-  c:windowssystem32dllcachentkrpamp.exe 2013-03-08 19:06:57  630272  -c----w-  c:windowssystem32dllcachemsfeeds.dll 2013-03-08 19:06:57  55296  -c----w-  c:windowssystem32dllcachemsfeedsbs.dll 2013-03-08 19:06:56  522240  -c----w-  c:windowssystem32dllcachejsdbgui.dll 2013-03-08 19:06:56  247808  -c----w-  c:windowssystem32dllcacheieproxy.dll 2013-03-08 19:06:56  2005504  -c----w-  c:windowssystem32dllcacheiertutil.dll 2013-03-08 19:06:56  12800  -c----w-  c:windowssystem32dllcachexpshims.dll 2013-03-08 19:06:55  743424  -c----w-  c:windowssystem32dllcacheiedvtool.dll 2013-03-08 19:06:54  11112960  -c----w-  c:windowssystem32dllcacheieframe.dll 2013-03-08 19:01:48  --------  d-----w-  c:windowssystem32SoftwareDistribution 2013-03-08 18:59:40  476544  ----a-w-  c:windowssystem32driversrt73.sys 2013-03-08 18:59:39  --------  d-----w-  c:documents and settingsall usersapplication dataRalink Driver 2013-03-08 17:43:19  --------  d-----w-  c:program filesVideoLAN 2013-03-08 15:51:30  --------  d-----w-  c:documents and settingssysadminthr1application dataHandBrake 2013-03-08 15:51:21  --------  d-----w-  c:program filesHandbrake 2013-03-08 08:50:30  --------  d-----w-  c:documents and settingsall usersapplication dataxml_param 2013-03-08 08:48:02  --------  d-----w-  c:program filescommon filesAimersoft 2013-03-08 08:47:58  892928  ----a-w-  c:windowssystem32iconv.dll 2013-03-08 08:47:58  675840  ----a-w-  c:windowssystem32ac3filter.ax 2013-03-08 07:55:59  --------  d-----w-  c:documents and settingssysadminthr1application dataSkinux 2013-03-08 07:47:03  --------  d-----w-  c:program filesThe Skins Factory 2013-03-08 07:10:21  --------  d-----w-  c:program filesMediaInfo 2013-03-07 22:53:02  --------  d-----w-  c:documents and settingssysadminthr1local settingsapplication dataWinAVI 2013-03-07 22:53:02  --------  d-----w-  c:documents and settingssysadminthr1application dataWinAVI 2013-03-07 22:52:56  --------  d-----w-  c:program filesAll in One Converter 2013-03-07 22:39:36  --------  dc-h--w-  c:documents and settingsall usersapplication data{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31} 2013-03-07 21:47:59  --------  dc-h--w-  c:documents and settingsall usersapplication data{1C533CDB-BAC7-4600-B3DE-0B628D9AC643} 2013-03-07 18:14:58  --------  d-----w-  c:documents and settingsall usersapplication dataTrymedia 2013-03-07 18:13:44  --------  d-----w-  c:windowsBejeweled 3 2013-03-07 18:13:44  --------  d-----w-  c:program filesBejeweled 3 2013-03-07 17:14:39  --------  d-----w-  c:program filesLame For Audacity 2013-03-07 17:14:24  --------  d-----w-  c:program filesFfmpeg For Audacity 2013-03-07 17:13:57  --------  d-----w-  c:program filesAudacity 2013-03-07 15:59:17  --------  d-----w-  c:windowssystem32Adobe 2013-03-07 15:49:22  5600  ----a-w-  c:windowssystemWINASPI.DLL 2013-03-07 15:49:22  48128  ----a-w-  c:windowssystem32WNASPI32.DLL 2013-03-07 15:49:22  4672  ----a-w-  c:windowssystemWOWPOST.EXE 2013-03-07 15:49:22  23936  ----a-w-  c:windowssystem32driversASPI32.SYS 2013-03-07 15:48:00  --------  d-----w-  c:program filesaudiograbber 2013-03-07 13:32:24  --------  d-----w-  c:program filesPassion Audio Player 2013-03-07 13:26:32  --------  d-----w-  c:documents and settingsall usersapplication dataR-Wipe&Clean 2013-03-07 13:23:12  --------  d-----w-  c:program filesR-Wipe&Clean 2013-03-07 13:23:12  --------  d-----w-  c:documents and settingssysadminthr1application dataR-Wipe&Clean 2013-03-07 13:09:39  --------  d-----w-  c:documents and settingssysadminthr1application dataGodlike 2013-03-07 13:09:35  --------  d-----w-  c:program filesWinTools Software 2013-03-07 10:54:47  --------  d-----w-  c:program filesIobit toolbox 2013-03-07 10:38:41  --------  d-----w-  c:program filesYamicsoft 2013-03-07 10:33:05  --------  d-----w-  c:documents and settingssysadminthr1application dataGlarySoft 2013-03-07 10:30:19  --------  d-----w-  c:program filesGlary Utilities 2013-03-07 10:27:05  --------  d-----w-  c:program filesPrivacyEraser Computing 2013-03-07 10:25:43  --------  d-----w-  c:documents and settingssysadminthr1application dataBleachBit 2013-03-07 10:25:36  --------  d-----w-  c:program filesBleachBit 2013-03-07 10:20:46  --------  d-----w-  c:program filesWorkStationOPtimizer 2013-03-07 10:18:18  --------  d-----w-  c:program filesFreeSpacer 2013-03-06 21:11:59  --------  d-----w-  c:documents and settingssysadminthr1local settingsapplication dataMacGo 2013-03-06 21:10:52  --------  d-----w-  c:program filesMacGo 2013-03-06 21:00:42  --------  d-----w-  c:program filesFreeTime 2013-03-06 20:06:13  --------  d-----w-  c:program filesXviD 2013-03-06 20:06:07  --------  d-----w-  c:program filesAviSynth 2.5 2013-03-06 20:05:13  --------  d-----w-  c:program filesAutoGK 2013-03-06 20:03:30  --------  d-----w-  c:program filesIndieVolume 2013-03-06 20:00:34  47360  ----a-r-  c:windowssystem32driversSurroundhp_kern_i386.sys 2013-03-06 20:00:34  47104  ----a-r-  c:windowssystem32driverstshd4_kern_i386.sys 2013-03-06 20:00:34  42112  ----a-r-  c:windowssystem32driverscsiidecoder_kern_i386.sys 2013-03-06 20:00:34  39808  ----a-r-  c:windowssystem32driversSRS_SSCFilter_i386.sys 2013-03-06 20:00:34  32000  ----a-r-  c:windowssystem32driverswowhd_kern_i386.sys 2013-03-06 19:53:56  360580  ----a-w-  c:windowseSellerateEngine.dll 2013-03-06 19:53:56  --------  d-----w-  c:program filesQO Labs 2013-03-06 19:49:38  --------  d-----w-  c:program filesCUE Splitter 2013-03-06 19:42:05  26368  -c--a-w-  c:windowssystem32dllcacheusbstor.sys 2013-03-06 19:34:49  --------  d-----w-  c:documents and settingssysadminthr1application dataDigiarty 2013-03-06 19:34:43  66944  ----a-w-  c:windowssystem32driversthdudf.sys 2013-03-06 19:34:37  --------  d-----w-  c:program filesDigiarty 2013-03-06 19:05:22  --------  d-----w-  c:program filesXingMP3 Player 1.0.0 2013-03-06 19:02:49  --------  d-----w-  c:program filesZinf 2013-03-06 19:02:11  --------  d-----w-  c:program filesUltraPlayer 2013-03-06 19:02:07  217088  ----a-w-  c:program filescommon filesinstallshieldiscriptIScript.dll 2013-03-06 19:02:06  77824  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32ctor.dll 2013-03-06 19:02:06  32768  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32objectps.dll 2013-03-06 19:02:06  217088  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32iuser.dll 2013-03-06 19:02:06  212992  ----a-w-  c:program filescommon filesinstallshieldengine6intel 32ILog.dll 2013-03-06 19:01:50  --------  d-----w-  c:program filesAIMP2 . ==================== Find3M  ==================== . 2013-03-09 21:27:04  71024  ----a-w-  c:windowssystem32FlashPlayerCPLApp.cpl 2013-03-09 21:27:04  691568  ----a-w-  c:windowssystem32FlashPlayerApp.exe 2013-03-08 23:03:05  1079188  ----a-w-  c:windowssystem32nvdrsdb0.bin 2013-03-08 23:03:05  1  ----a-w-  c:windowssystem32nvdrssel.bin 2013-03-08 23:03:01  1079188  ----a-w-  c:windowssystem32nvdrsdb1.bin 2013-03-07 14:37:57  60416  ----a-w-  c:windowsALCFDRTM.VER 2013-03-06 18:33:39  60416  ----a-w-  c:windowsALCFDRTM.EXE 2013-03-06 17:16:48  119120  ----a-w-  c:windowsdxsdkuninst.exe 2013-02-10 03:20:28  7749632  ----a-w-  c:windowssystem32nvcuda.dll 2013-02-10 03:20:28  6070272  ----a-w-  c:windowssystem32nvopencl.dll 2013-02-10 03:20:28  4078976  ----a-w-  c:windowssystem32nv4_disp.dll 2013-02-10 03:20:28  2731296  ----a-w-  c:windowssystem32nvcuvid.dll 2013-02-10 03:20:28  2481664  ----a-w-  c:windowssystem32nvapi.dll 2013-02-10 03:20:28  1990944  ----a-w-  c:windowssystem32nvcuvenc.dll 2013-02-10 03:20:28  19685376  ----a-w-  c:windowssystem32nvoglnt.dll 2013-02-10 03:20:28  17551360  ----a-w-  c:windowssystem32nvcompiler.dll 2013-02-10 03:20:28  10707360  ----a-w-  c:windowssystem32driversnv4_mini.sys 2013-02-10 00:27:31  54272  ----a-w-  c:windowssystem32nvwddi.dll 2013-02-10 00:27:29  223008  ----a-w-  c:windowssystem32nvmctray.dll 2013-02-10 00:27:29  156960  ----a-w-  c:windowssystem32nvsvc32.exe 2013-02-10 00:27:29  15664416  ----a-w-  c:windowssystem32nvcpl.dll 2013-02-10 00:27:28  144160  ----a-w-  c:windowssystem32nvcolor.exe 2013-01-31 12:28:44  773968  ----a-w-  c:windowssystem32msvcr100.dll 2013-01-31 12:28:44  421200  ----a-w-  c:windowssystem32msvcp100.dll 2013-01-26 03:55:10  552448  ----a-w-  c:windowssystem32oleaut32.dll 2013-01-07 01:32:34  2148864  ----a-w-  c:windowssystem32ntoskrnl.exe 2013-01-07 00:45:12  2027520  ----a-w-  c:windowssystem32ntkrnlpa.exe 2013-01-04 01:32:36  1876224  ----a-w-  c:windowssystem32win32k.sys 2013-01-02 06:48:28  148992  ----a-w-  c:windowssystem32mpg2splt.ax 2013-01-02 06:48:28  1292288  ----a-w-  c:windowssystem32quartz.dll 2012-12-29 10:31:25  889784  ----a-w-  c:windowssystem32nvdispgenco32.dll 2012-12-29 10:31:25  65536  ----a-w-  c:windowssystem32OpenCL.dll 2012-12-29 10:31:25  1017272  ----a-w-  c:windowssystem32nvdispco32.dll 2012-12-26 20:15:18  920064  ----a-w-  c:windowssystem32wininet.dll 2012-12-26 20:15:17  43520  ----a-w-  c:windowssystem32licmgr10.dll 2012-12-26 20:15:17  1469440  ----a-w-  c:windowssystem32inetcpl.cpl 2012-12-24 07:02:54  385024  ----a-w-  c:windowssystem32html.iec 2012-12-19 05:41:58  28600  ----a-w-  c:windowssystem32nvhdap32.dll 2012-12-19 05:41:55  128440  ----a-w-  c:windowssystem32driversnvhda32.sys 2012-12-18 08:31:23  892856  ----a-w-  c:windowssystem32nvhdagenco3220103.dll 2012-12-16 12:31:02  290560  ----a-w-  c:windowssystem32atmfd.dll . ============= FINISH:  0:38:23.85 ===============

 

Не мисля, че е зловреден софтуер...explorer.exe товари и си мисля, дали не е от програмата за промяна на темите, която сте инсталирали...

 

 

 

Изтеглете Process Explorer
Разархивирайте инструмента и стартирайте файла procexp.exe
Намерете и кликнете върху процеса на explorer.exe
Отидете до секцията Threads
Разпънете графата така че да се виждат по-възможност всички обекти/нишки.
Направете снимка на прозореца.
Докато сте в менюто Threads, кликнете с двукратек клик на мишката върху даден обект и направете снимка на Stack прозореца.
За финал...от Process Explorer => View => сложете отметки пред Show Lower Pane, а на Lower Pane View => сложете отметка пред DLLs.
Сега кликнете пак на explorer.exe и отидете в Process Explorer на File => Save as.
Запазете документа на десктопа и след това го прикачете в следващия си коментар.
Направените снимки (screenshots) ги качете тук .
Публикувайте линкове към снимките за да ги разгледамe в следващия си пост.

Снимка от Stack прозореца http://prikachi.com/images/655/5972655h.png

 

ProcessExplorer Log

 

Process  CPU  Private Bytes  Working Set  PID  Description  Company Name

System Idle Process  48.48  0 K  28 K  0    
System    0 K  244 K  4    
 Interrupts  < 0.01  0 K  0 K  n/a  Hardware Interrupts and DPCs  
 smss.exe    176 K  432 K  444  Windows NT Session Manager  Microsoft Corporation
  csrss.exe    1,792 K  4,176 K  676  Client Server Runtime Process  Microsoft Corporation
  winlogon.exe    7,600 K  2,860 K  704  Windows NT Logon Application  Microsoft Corporation
services.exe    2,004 K  3,904 K  748  Services and Controller app  Microsoft Corporation
  svchost.exe    4,192 K  5,508 K  936  Generic Host Process for Win32 Services  Microsoft Corporation
  svchost.exe    2,836 K  4,840 K  1004  Generic Host Process for Win32 Services  Microsoft Corporation
  svchost.exe    13,224 K  19,296 K  1060  Generic Host Process for Win32 Services  Microsoft Corporation
wscntfy.exe    1,456 K  2,728 K  2408  Windows Security Center Notification App  Microsoft Corporation
  svchost.exe    1,540 K  3,920 K  1216  Generic Host Process for Win32 Services  Microsoft Corporation
  svchost.exe    2,568 K  4,456 K  1288  Generic Host Process for Win32 Services  Microsoft Corporation
  spoolsv.exe    4,016 K  4,928 K  1416  Spooler SubSystem App  Microsoft Corporation
  sched.exe    3,124 K  824 K  1464  Avira Scheduler  Avira Operations GmbH & Co. KG
  svchost.exe    2,268 K  4,340 K  1508  Generic Host Process for Win32 Services  Microsoft Corporation
  avguard.exe    151,388 K  28,116 K  1560  Avira On-Access Service  Avira Operations GmbH & Co. KG
avshadow.exe    1,468 K  2,676 K  964  Avira Shadow Copy Service  Avira Operations GmbH & Co. KG
  jqs.exe    2,356 K  1,908 K  1628  Java Quick Starter Service  Oracle Corporation
  mbamscheduler.exe    3,232 K  5,640 K  1672  Malwarebytes Anti-Malware  Malwarebytes Corporation
  mbamservice.exe    109,332 K  105,964 K  1732  Malwarebytes Anti-Malware  Malwarebytes Corporation
mbamgui.exe    3,528 K  6,480 K  360  Malwarebytes Anti-Malware  Malwarebytes Corporation
  nvsvc32.exe    5,432 K  6,936 K  1744  NVIDIA Driver Helper Service, Version 314.07  NVIDIA Corporation
  daemonu.exe    2,352 K  4,640 K  1760  NVIDIA Settings Update Manager  NVIDIA Corporation
  alg.exe    2,096 K  3,972 K  1800  Application Layer Gateway Service  Microsoft Corporation
  WPFFontCache_v0400.exe    1,308 K  3,792 K  3920  wpffontcache_v0400.exe  Microsoft Corporation
lsass.exe    4,036 K  1,236 K  760  LSA Shell (Export Version)  Microsoft Corporation
explorer.exe    28,488 K  20,800 K  272  Windows Explorer  Microsoft Corporation
 soundman.exe    2,056 K  3,024 K  916  Realtek Sound Manager  Realtek Semiconductor Corp.
 avgnt.exe    8,712 K  3,152 K  988  Avira System Tray Tool  Avira Operations GmbH & Co. KG
 rundll32.exe    8,268 K  10,420 K  1260  Run a DLL as an App  Microsoft Corporation
 jusched.exe    932 K  2,844 K  632  Java Update Scheduler  Sun Microsystems, Inc.
 ctfmon.exe    1,096 K  3,548 K  1144  CTF Loader  Microsoft Corporation
 firefox.exe  50.00  165,196 K  171,056 K  2344  Firefox  Mozilla Corporation
 procexp.exe  1.52  12,932 K  13,284 K  3380  Sysinternals Process Explorer  Sysinternals - www.sysinternals.com
 firefox.exe    221,484 K  226,264 K  3760  Firefox  Mozilla Corporation
 mspaint.exe    9,316 K  1,952 K  3148  Paint  Microsoft Corporation

Process: explorer.exe Pid: 272

Name  Description  Company Name  Path
AcGenral.dll  Windows Compatibility DLL  Microsoft Corporation  C:WINDOWSAppPatchAcGenral.dll
actxprxy.dll  ActiveX Interface Marshaling Library  Microsoft Corporation  C:WINDOWSsystem32actxprxy.dll
advapi32.dll  Advanced Windows 32 Base API  Microsoft Corporation  C:WINDOWSsystem32advapi32.dll
apphelp.dll  Application Compatibility Client Library  Microsoft Corporation  C:WINDOWSsystem32apphelp.dll
atl.dll  ATL Module for Windows XP (Unicode)  Microsoft Corporation  C:WINDOWSsystem32atl.dll
batmeter.dll  Battery Meter Helper DLL  Microsoft Corporation  C:WINDOWSsystem32batmeter.dll
browselc.dll  Shell Browser UI Library  Microsoft Corporation  C:Program FilesInternet ExplorerMUI0402browselc.dll
browseui.dll  Shell Browser UI Library  Microsoft Corporation  C:WINDOWSsystem32browseui.dll
c_1252.nls      C:WINDOWSsystem32c_1252.nls
clbcatq.dll    Microsoft Corporation  C:WINDOWSsystem32clbcatq.dll
comctl32.dll  Common Controls Library  Microsoft Corporation  C:WINDOWSsystem32comctl32.dll
comctl32.dll  User Experience Controls Library  Microsoft Corporation  C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202comctl32.dll
comctl32.dll.mui  User Experience Controls Library  Microsoft Corporation  C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_6.0.2600.2180_bg-BG_c7e796f7comctl32.dll.mui
comdlg32.dll  Common Dialogs DLL  Microsoft Corporation  C:WINDOWSsystem32comdlg32.dll
comres.dll    Microsoft Corporation  C:WINDOWSsystem32comres.dll
credui.dll  Credential Manager User Interface  Microsoft Corporation  C:WINDOWSsystem32credui.dll
crypt32.dll  Crypto API32  Microsoft Corporation  C:WINDOWSsystem32crypt32.dll
cryptnet.dll  Crypto Network Related API  Microsoft Corporation  C:WINDOWSsystem32cryptnet.dll
cryptui.dll  Microsoft Trust UI Provider  Microsoft Corporation  C:WINDOWSsystem32cryptui.dll
cscdll.dll  Offline Network Agent  Microsoft Corporation  C:WINDOWSsystem32cscdll.dll
cscui.dll  Client Side Caching UI  Microsoft Corporation  C:WINDOWSsystem32cscui.dll
ctype.nls      C:WINDOWSsystem32ctype.nls
davclnt.dll  Web DAV Client DLL  Microsoft Corporation  C:WINDOWSsystem32davclnt.dll
dot3api.dll  802.3 Autoconfiguration API  Microsoft Corporation  C:WINDOWSsystem32dot3api.dll
dot3dlg.dll  802.3 UI Helper  Microsoft Corporation  C:WINDOWSsystem32dot3dlg.dll
drprov.dll  Microsoft Terminal Server Network Provider  Microsoft Corporation  C:WINDOWSsystem32drprov.dll
duser.dll  Windows DirectUser Engine  Microsoft Corporation  C:WINDOWSsystem32duser.dll
eappcfg.dll  Eap Peer Config  Microsoft Corporation  C:WINDOWSsystem32eappcfg.dll
eappprxy.dll  Microsoft EAPHost Peer Client DLL  Microsoft Corporation  C:WINDOWSsystem32eappprxy.dll
explorer.exe  Windows Explorer  Microsoft Corporation  C:WINDOWSexplorer.exe
explorer.exe.mui  Windows Explorer  Microsoft Corporation  C:WINDOWSmuiFallback0402explorer.exe.mui
gdi32.dll  GDI Client DLL  Microsoft Corporation  C:WINDOWSsystem32gdi32.dll
GdiPlus.dll  Microsoft GDI+  Microsoft Corporation  C:WINDOWSWinSxSx86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154GdiPlus.dll
ieframe.dll  Internet Explorer  Microsoft Corporation  C:WINDOWSsystem32ieframe.dll
ieframe.dll.mui  Internet Explorer  Microsoft Corporation  C:WINDOWSsystem32en-USieframe.dll.mui
iertutil.dll  Run time utility for Internet Explorer  Microsoft Corporation  C:WINDOWSsystem32iertutil.dll
imagehlp.dll  Windows NT Image Helper  Microsoft Corporation  C:WINDOWSsystem32imagehlp.dll
imm32.dll  Windows XP IMM32 API Client DLL  Microsoft Corporation  C:WINDOWSsystem32imm32.dll
index.dat      C:Documents and Settingssysadminthr1Local SettingsTemporary Internet FilesContent.IE5index.dat
index.dat      C:Documents and Settingssysadminthr1Cookiesindex.dat
index.dat      C:Documents and Settingssysadminthr1Local SettingsHistoryHistory.IE5index.dat
index.dat      C:Documents and Settingssysadminthr1Local SettingsHistoryHistory.IE5MSHist012013031020130311index.dat
iphlpapi.dll  IP Helper API  Microsoft Corporation  C:WINDOWSsystem32iphlpapi.dll
kernel32.dll  Windows NT BASE API Client DLL  Microsoft Corporation  C:WINDOWSsystem32kernel32.dll
linkinfo.dll  Windows Volume Tracking  Microsoft Corporation  C:WINDOWSsystem32linkinfo.dll
locale.nls      C:WINDOWSsystem32locale.nls
lpk.dll  Language Pack  Microsoft Corporation  C:WINDOWSsystem32lpk.dll
midimap.dll  Microsoft MIDI Mapper  Microsoft Corporation  C:WINDOWSsystem32midimap.dll
mlang.dll  Multi Language Support DLL  Microsoft Corporation  C:WINDOWSsystem32mlang.dll
mpr.dll  Multiple Provider Router DLL  Microsoft Corporation  C:WINDOWSsystem32mpr.dll
msacm32.dll  Microsoft ACM Audio Filter  Microsoft Corporation  C:WINDOWSsystem32msacm32.dll
msacm32.drv  Microsoft Sound Mapper  Microsoft Corporation  C:WINDOWSsystem32msacm32.drv
msasn1.dll  ASN.1 Runtime APIs  Microsoft Corporation  C:WINDOWSsystem32msasn1.dll
MSCTF.dll  MSCTF Server DLL  Microsoft Corporation  C:WINDOWSsystem32MSCTF.dll
MSCTFIME.IME  Microsoft Text Frame Work Service IME  Microsoft Corporation  C:WINDOWSsystem32MSCTFIME.IME
msi.dll  Windows Installer  Microsoft Corporation  C:WINDOWSsystem32msi.dll
msimg32.dll  GDIEXT Client DLL  Microsoft Corporation  C:WINDOWSsystem32msimg32.dll
msutb.dll  MSUTB Server DLL  Microsoft Corporation  C:WINDOWSsystem32msutb.dll
msvcp100.dll  Microsoft® C Runtime Library  Microsoft Corporation  C:WINDOWSsystem32msvcp100.dll
msvcp60.dll  Microsoft ® C++ Runtime Library  Microsoft Corporation  C:WINDOWSsystem32msvcp60.dll
msvcr100.dll  Microsoft® C Runtime Library  Microsoft Corporation  C:WINDOWSsystem32msvcr100.dll
msvcrt.dll  Windows NT CRT DLL  Microsoft Corporation  C:WINDOWSsystem32msvcrt.dll
mydocs.dll  My Documents Folder UI  Microsoft Corporation  C:WINDOWSsystem32mydocs.dll
netapi32.dll  Net Win32 API DLL  Microsoft Corporation  C:WINDOWSsystem32netapi32.dll
netrap.dll  Net Remote Admin Protocol DLL  Microsoft Corporation  C:WINDOWSsystem32netrap.dll
netshell.dll  Network Connections Shell  Microsoft Corporation  C:WINDOWSsystem32netshell.dll
netshell.dll.mui  Network Connections Shell  Microsoft Corporation  C:WINDOWSmuiFallback0402netshell.dll.mui
netui0.dll  NT LM UI Common Code - GUI Classes  Microsoft Corporation  C:WINDOWSsystem32netui0.dll
netui1.dll  NT LM UI Common Code - Networking classes  Microsoft Corporation  C:WINDOWSsystem32netui1.dll
normaliz.dll  Unicode Normalization DLL  Microsoft Corporation  C:WINDOWSsystem32normaliz.dll
ntdll.dll  NT Layer DLL  Microsoft Corporation  C:WINDOWSsystem32ntdll.dll
ntlanman.dll  Microsoft® Lan Manager  Microsoft Corporation  C:WINDOWSsystem32ntlanman.dll
ntmarta.dll  Windows NT MARTA provider  Microsoft Corporation  C:WINDOWSsystem32ntmarta.dll
ntshrui.dll  Shell extensions for sharing  Microsoft Corporation  C:WINDOWSsystem32ntshrui.dll
nvapi.dll  NVIDIA NVAPI Library, Version 314.07  NVIDIA Corporation  C:WINDOWSsystem32nvapi.dll
nvcpl.dll  NVIDIA Display Properties Extension  NVIDIA Corporation  C:WINDOWSsystem32nvcpl.dll
nvShell.dll  NVIDIA Desktop Explorer, Version 136.53  NVIDIA Corporation  C:Program FilesNVIDIA CorporationnviewnvShell.dll
ole32.dll  Microsoft OLE for Windows  Microsoft Corporation  C:WINDOWSsystem32ole32.dll
oleacc.dll  Active Accessibility Core Component  Microsoft Corporation  C:WINDOWSsystem32oleacc.dll
oleaccrc.dll  Active Accessibility Resource DLL  Microsoft Corporation  C:WINDOWSsystem32oleaccrc.dll
oleaut32.dll    Microsoft Corporation  C:WINDOWSsystem32oleaut32.dll
onex.dll  IEEE 802.1X supplicant library  Microsoft Corporation  C:WINDOWSsystem32onex.dll
pdfshell.dll  PDF Shell Extension  Adobe Systems, Inc.  C:Program FilesCommon FilesAdobeAcrobatActiveXpdfshell.dll
powrprof.dll  Power Profile Helper DLL  Microsoft Corporation  C:WINDOWSsystem32powrprof.dll
psapi.dll  Process Status Helper  Microsoft Corporation  C:WINDOWSsystem32psapi.dll
RarExt.dll      C:Program FilesWinRARRarExt.dll
rpcrt4.dll  Remote Procedure Call Runtime  Microsoft Corporation  C:WINDOWSsystem32rpcrt4.dll
rsaenh.dll  Microsoft Enhanced Cryptographic Provider  Microsoft Corporation  C:WINDOWSsystem32rsaenh.dll
rtutils.dll  Routing Utilities  Microsoft Corporation  C:WINDOWSsystem32rtutils.dll
samlib.dll  SAM Library DLL  Microsoft Corporation  C:WINDOWSsystem32samlib.dll
secur32.dll  Security Support Provider Interface  Microsoft Corporation  C:WINDOWSsystem32secur32.dll
sensapi.dll  SENS Connectivity API DLL  Microsoft Corporation  C:WINDOWSsystem32sensapi.dll
setupapi.dll  Windows Setup API  Microsoft Corporation  C:WINDOWSsystem32setupapi.dll
setupapi.dll.mui  Windows Setup API  Microsoft Corporation  C:WINDOWSmuiFallback0402setupapi.dll.mui
shdocvw.dll  Shell Doc Object and Control Library  Microsoft Corporation  C:WINDOWSsystem32shdocvw.dll
shell32.dll  Windows Shell Common Dll  Microsoft Corporation  C:WINDOWSsystem32shell32.dll
shell32.dll.mui  Windows Shell Common Dll  Microsoft Corporation  C:WINDOWSmuiFallback0402shell32.dll.mui
shellstyle.dll  Windows Shell Style Resource Dll  Microsoft Corporation  C:WINDOWSsystem32shellstyle.dll
ShellStyle.dll.mui  Windows Shell Style Resource Dll  Microsoft Corporation  C:WINDOWSsystem32mui0402ShellStyle.dll.mui
shimeng.dll  Shim Engine DLL  Microsoft Corporation  C:WINDOWSsystem32shimeng.dll
shlwapi.dll  Shell Light-weight Utility Library  Microsoft Corporation  C:WINDOWSsystem32shlwapi.dll
shlwapi.dll.mui  Shell Light-weight Utility Library  Microsoft Corporation  C:WINDOWSmuiFallback0402shlwapi.dll.mui
shlxthdl.dll    The Document Foundation  C:Program FilesLibreOffice 4.0programshlxthdlshlxthdl.dll
sortkey.nls      C:WINDOWSsystem32sortkey.nls
sorttbls.nls      C:WINDOWSsystem32sorttbls.nls
stobject.dll  Systray shell service object  Microsoft Corporation  C:WINDOWSsystem32stobject.dll
stobject.dll.mui  Systray shell service object  Microsoft Corporation  C:WINDOWSmuiFallback0402stobject.dll.mui
sxs.dll  Fusion 2.5  Microsoft Corporation  C:WINDOWSsystem32sxs.dll
themeui.dll  Windows Theme API  Microsoft Corporation  C:WINDOWSsystem32themeui.dll
unicode.nls      C:WINDOWSsystem32unicode.nls
urlmon.dll  OLE32 Extensions for Win32  Microsoft Corporation  C:WINDOWSsystem32urlmon.dll
urlmon.dll.mui  OLE32 Extensions for Win32  Microsoft Corporation  C:WINDOWSsystem32en-USurlmon.dll.mui
user32.dll  Windows XP USER API Client DLL  Microsoft Corporation  C:WINDOWSsystem32user32.dll
user32.dll.mui  Windows XP USER API Client DLL  Microsoft Corporation  C:WINDOWSmuiFallback0402user32.dll.mui
userenv.dll  Userenv  Microsoft Corporation  C:WINDOWSsystem32userenv.dll
userenv.dll.mui  Userenv  Microsoft Corporation  C:WINDOWSmuiFallback0402userenv.dll.mui
usp10.dll  Uniscribe Unicode script processor  Microsoft Corporation  C:WINDOWSsystem32usp10.dll
uxtheme.dll  Microsoft UxTheme Library  Microsoft Corporation  C:WINDOWSsystem32uxtheme.dll
version.dll  Version Checking and File Installation Libraries  Microsoft Corporation  C:WINDOWSsystem32version.dll
wdmaud.drv  WDM Audio driver mapper  Microsoft Corporation  C:WINDOWSsystem32wdmaud.drv
webcheck.dll  Web Site Monitor  Microsoft Corporation  C:WINDOWSsystem32webcheck.dll
winhttp.dll  Windows HTTP Services  Microsoft Corporation  C:WINDOWSsystem32winhttp.dll
wininet.dll  Internet Extensions for Win32  Microsoft Corporation  C:WINDOWSsystem32wininet.dll
winmm.dll  MCI API DLL  Microsoft Corporation  C:WINDOWSsystem32winmm.dll
winmm.dll.mui  MCI API DLL  Microsoft Corporation  C:WINDOWSmuiFallback0402winmm.dll.mui
winspool.drv  Windows Spooler Driver  Microsoft Corporation  C:WINDOWSsystem32winspool.drv
winsta.dll  Winstation Library  Microsoft Corporation  C:WINDOWSsystem32winsta.dll
wintrust.dll  Microsoft Trust Verification APIs  Microsoft Corporation  C:WINDOWSsystem32wintrust.dll
wldap32.dll  Win32 LDAP API DLL  Microsoft Corporation  C:WINDOWSsystem32wldap32.dll
ws2_32.dll  Windows Socket 2.0 32-Bit DLL  Microsoft Corporation  C:WINDOWSsystem32ws2_32.dll
ws2help.dll  Windows Socket 2.0 Helper for Windows NT  Microsoft Corporation  C:WINDOWSsystem32ws2help.dll
wtsapi32.dll  Windows Terminal Server SDK APIs  Microsoft Corporation  C:WINDOWSsystem32wtsapi32.dll
wzcdlg.dll  Wireless Zero Configuration Service UI  Microsoft Corporation  C:WINDOWSsystem32wzcdlg.dll
wzcsapi.dll  Wireless Zero Configuration service API  Microsoft Corporation  C:WINDOWSsystem32wzcsapi.dll
xpsp2res.dll  Service Pack 2 Messages  Microsoft Corporation  C:WINDOWSsystem32xpsp2res.dll
xpsp2res.dll  Съобщения на Service Pack 2  Microsoft Corporation  C:WINDOWSsystem32mui0402xpsp2res.dll
zipfldr.dll  Compressed (zipped) Folders  Microsoft Corporation  C:WINDOWSsystem32zipfldr.dll

 

П.П.

Между другото вчера преди да изключа компа,отворих  CMD поставих тази команда : tasklist /svc ,след което копирах това което ми показа :

 

Microsoft Windows XP [Version 5.1.2600]

© Copyright 1985-2001 Microsoft Corp.

C:Documents and Settingssysadminthr1>tasklist /svc

Image Name PID Services
========================= ====== =============================================
System Idle Process   0 N/A
System 4 N/A
smss.exe 444 N/A
csrss.exe   676 N/A
winlogon.exe 712 N/A
services.exe 756 Eventlog, PlugPlay
lsass.exe   768 PolicyAgent, ProtectedStorage, SamSs
svchost.exe   948 DcomLaunch, TermService
svchost.exe 1016 RpcSs
svchost.exe 1124 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, FastUserSwitchingCompatibility,
helpsvc, HidServ, LanmanServer,
lanmanworkstation, Netman, Nla, RasMan,
Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv,
Themes, TrkWks, W32Time, winmgmt, wscsvc,
WZCSVC
svchost.exe 1304 Dnscache
svchost.exe 1356 LmHosts, RemoteRegistry, SSDPSRV
spoolsv.exe 1564 Spooler
sched.exe 1616 AntiVirSchedulerService
svchost.exe 1676 WebClient
avguard.exe 1776 AntiVirService
jqs.exe 1844 JavaQuickStarterService
nvsvc32.exe 1992 NVSvc
daemonu.exe 2020 nvUpdatusService
avshadow.exe   1464 N/A
explorer.exe   2720 N/A
soundman.exe   4024 N/A
avgnt.exe 1240 N/A
rundll32.exe   2364 N/A
jusched.exe 2956 N/A
ctfmon.exe   3576 N/A
firefox.exe 3200 N/A
wscntfy.exe   608 N/A
cmd.exe 4004 N/A
tasklist.exe   2556 N/A
wmiprvse.exe   3780 N/AMicrosoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

Редактирано 10 март 201313 г. от terorDrEaM (преглед на промените)

Интересно...има неща които не са от MS, но не съм убеден, че те предизвикват CPU потреблението на explorer.exe

Да сте стартирали Verifier или някой друг Debugger?

Може и някоя обвивка да прави проблема...

 

 

Изтеглете Autoruns:

1) стартирайте програмата;
2) изберете Options => Filter Options => сложете отметки пред Verify Code Signature и Hide Microsoft Entries;
3) след това изберете File -> Refresh (или бутона F5);
4) след това изберете File -> Save;
5) запазете файла някъде с желано от вас име (във формат arn), архивирайте го с програма по желание в zip и го прикачете към темата.

 

 

Пробвайте временно да върнете темата по-подразбиране (ако сте използвали друга тема или скин).

Не мисля, че е зловреден софтуер...explorer.exe товари и си мисля, дали не е от програмата за промяна на темите, която сте инсталирали...

 

Възможно е,тогава да я изтрия,за да разберем или...

 

Всъщност преди да дам лога от ProcessExplorer,когато отидох на Treads се отвори едно прозорче,което спомена за някакъв дебъгър,изтеглих го и го инсталирах - - -> http://msdn.microsoft.com/en-us/windows/hardware/hh852362.aspx ,след което изпълних процедурата отново,както споменахте.

А относно Autoruns,след като го стартирах,компютъра стана супер бавен,докато не зареди всичко.

Всъщност темата я върнах още вчера на Windows Classic.

Редактирано 10 март 201313 г. от terorDrEaM (преглед на промените)

Не би трябвало Process Explorer да изисква debugger и затова деинсталирайте всеки един Debugger, който сте инсталирали!  

Това за забавянето след Autoruns ми звучи малко несериозно...това си е доказан инструмент от Sysinternals, които са закупени от MS и бачкат доста тясно свързано помежду си.

 

Отворете пак Autoruns и премахнете отметките пред:

Adobe ARM    Adobe Reader and Acrobat Manager    (Verified) Adobe Systems    c:program filescommon filesadobearm1.0adobearm.exeNvCplDaemon    NVIDIA Display Properties Extension    (Verified) NVIDIA Corporation    c:windowssystem32nvcpl.dllNvMediaCenter    NVIDIA Media Center Library    (Verified) NVIDIA Corporation    c:windowssystem32nvmctray.dllnwiz    NVIDIA nView Wizard, Version 136.53     (Verified) NVIDIA Corporation    c:program filesnvidia corporationnviewnwiz.exeSunJavaUpdateSched    Java(TM) Update Scheduler    (Verified) Oracle America    c:program filescommon filesjavajava updatejusched.exen/a    Microsoft .NET IE SECURITY REGISTRATION    (Not verified) Microsoft Corporation    c:windowssystem32mscories.dllAIMPClassic    AIMP2: ShellExt    (Not verified) AIMP DevTeam    c:program filesaimp2systemaimp_shell.dllGlary Utilities    Context Menu Handler    (Verified) Glarysoft Ltd    c:program filesglary utilitiescontexthandler.dllR-Wipe&Clean    R-Wipe&Clean Shell Server    (Not verified) R-tools Technology Inc.    c:program filesr-wipe&cleanrwcsh32.dllAIMPClassic    AIMP2: ShellExt    (Not Verified) AIMP DevTeam    c:program filesaimp2systemaimp_shell.dll00nView    NVIDIA Desktop Explorer, Version 136.53     (Verified) NVIDIA Corporation    c:program filesnvidia corporationnviewnvshell.dllNvCplDesktopContext    NVIDIA Display Properties Extension    (Verified) NVIDIA Corporation    c:windowssystem32nvcpl.dllGlary Utilities    Context Menu Handler    (Verified) Glarysoft Ltd    c:program filesglary utilitiescontexthandler.dllJavaQuickStarterService    Prefetches JRE files for faster startup of Java applets and applications    (Verified) Oracle America    c:program filesjavajre7binjqs.exeNVSvc    NVIDIA Driver Helper Service, Version 314.07    (Verified) NVIDIA Corporation    c:windowssystem32nvsvc32.exenvUpdatusService    NVIDIA Settings Update Manager service, used to check new updates from NVIDIA server.    (Verified) NVIDIA Corporation    c:program filesnvidia corporationnvidia update coredaemonu.exeTe.Service    Wex.Services [v2.9.3k]    (Not verified) Microsoft Corporation    c:program fileswindows kits8.0testingruntimestaefwex.services.exe

 

Рестартирайте и вижте дали проблема остава...Ако да направете нова снимка за да видя, кой процес товари и дали е още explorer.exe

Ако няма промяна след Autoruns деинсталирайте целия пакет - Hyperdesk - DarkMatter Subspace

 

След това изтеглете прикачения файл delete.zip и го разархивирайте на десктопа.

 

Стартирайте delete.bat и рестартирайте отново...после пишете как е положението.

Това за забавянето след Autoruns ми звучи малко несериозно...

 

Така е,но е факт!

 

Премахнах отметките от всичко посочено с изключение на :

 

JavaQuickStarterService ,защото ми изписа следното : Error changing item state: Acess is denied.

 

и

 

Te.Service ,понеже преди това изтрих дебъгъра и това не фигурираше в списъка на Autoruns

 

След това рестартирах,след рестарта CPU-то си беше нормално,докато не включих отново Autoruns и стана отново на 100%,да добавя само че сканитанието с Autoruns става прекалено бавно,друг път става за 2 секунди а сега....

Java може да се спре и от услугите...

 

Start => run => serivces.msc => JavaQuickStarterService => Stop и от Startup type менюто я сложете на Disabled.

 

След това вижте и предишния ми коментар и деинсталирайте визуалния пакет и стартирайте bat файла и рестартирайте и после вижте как е положението...

Редактирано 10 март 201313 г. от terorDrEaM (преглед на промените)

Не, не инсталирайте тази програма и проблема ви опрделено не се дължи на зловреден софтуер. По-скоро яко омазан Windows...доста програми за оптимизация, фалшиви антивирусни, смяна на темите, кракнат софтуер и т.н.

 

За Autoruns наистина е странни и ако можете да ми снимате тези процеси, които се появяват след стартирането и ще е супер.

 

Ако ли не, щом всичко е наред да се ориентираме към приклюване.

Не, не инсталирайте тази програма и проблема ви опрделено не се дължи на зловреден софтуер. По-скоро яко омазан Windows...доста програми за оптимизация, фалшиви антивирусни, смяна на темите, кракнат софтуер и т.н.

 

За Autoruns наистина е странни и ако можете да ми снимате тези процеси, които се появяват след стартирането и ще е супер.

 

Ако ли не, щом всичко е наред да се ориентираме към приклюване.

 

Добре няма да я инсталирам

Малко сложно е да  ги снимам,компютъра става много бавен,но доколкото разбирам Windows-а си е за смяна.

Да,приключихме,само една малка молба,ако може,бихте ли ми препоръчал един добър релийз на WXP 32 bit?!

Благодаря Ви за помощта,жив,здрав и много успехи!

Редактирано 10 март 201313 г. от terorDrEaM (преглед на промените)

Ами всеки релийз на XP SP3 става, стига да е чисто копие, а не някаква самоделка...например MSDN.

 

Поздрави и хубав ден!

Ами всеки релийз на XP SP3 става, стига да е чисто копие, а не някаква самоделка...например MSDN.

 

Поздрави и хубав ден!

 

Благодаря за препоръката и пожеланията ,изтеглих и инсталирах този релийз на XP,оказа се обаче,че проблема с процесора отново започна,усъмних се,да не би драйвърите да ми правят някакви номера и се оказа,че последната версия на драйвъра на Nvidia(314.07-desktop-winxp-32bit-international-whql) ми прави тези номера с процесора,да отбележа само че драйвъра го бях изтеглил от официалният сайт на Nvidia!

Сложих по стара версия на драйвъра на Nvidia и всичко се оправи,вече всичко си върви както трябва,но все пак ми е любопитно и бих искал да разбера,защо последната версия на драйвъра на Nvidia е толкова бъгав(поне при мен)?!

Редактирано 11 март 201313 г. от terorDrEaM (преглед на промените)

Но аз нали казах да спрете драйвърите на nVidia още с Autoruns-a...Или през services.msc...Дефакто те нямат пряко взаимоотношение с действието на видеокартата и са излишни да стоят в бекграунд. Странното е обаче, ча при мен не правиха такива проблеми...дори в момента съм с бета версията 314.14...

Но при различните машини може да имат различно поведение...кой знае...Затова всички излишни third-party software драйвъри е добре да се спират и като цяло да се инсталира софтуер, който качва колкото се може по-малко kernel drivers.

 

Поздрави!

Но аз нали казах да спрете драйвърите на nVidia още с Autoruns-a...Или през services.msc...Дефакто те нямат пряко взаимоотношение с действието на видеокартата и са излишни да стоят в бекграунд. Странното е обаче, ча при мен не правиха такива проблеми...дори в момента съм с бета версията 314.14...

Но при различните машини може да имат различно поведение...кой знае...Затова всички излишни third-party software драйвъри е добре да се спират и като цяло да се инсталира софтуер, който качва колкото се може по-малко kernel drivers.

 

Поздрави!

 

Аз това го направих когато ми споменахте на стария Windows ,на новия Windows XP,който инсталирах,не го направих,но премахнах най-новия драйвър и сложих по старичкия (310...) и всичко се оправи.

 

Поздрави и от мен!

Редактирано 16 март 201313 г. от terorDrEaM (преглед на промените)