|
| |||||||
| Inregistrare | Site-ul Spy | Lista de stat | Doneaza | Căuta | Posturi de azi | Marchează forumurile citite | Forum Regulamentul |
 |
 |
| | Thread Tools |
|
#1
4 noiembrie 2008, 16:07
| |||
| |||
| recent meu laptop a fi running lent şi este luarea vârstele să îşi înceapă activitatea. Nu numai că, ci whne de sunet am încercaţi să redaţi muzică a trecut într-adevăr ciudat, toate nervozitate şi, de asemenea, atunci când încerc să joace un DVD video este nervozitate. Am fişiere Activitate de la Hijack acest lucru, Malwarebytes şi SUPERAntiSpyware |
|
#2
4 noiembrie 2008, 16:13
| |||
| |||
| Post jurnalele vă rog.
__________________  |
|
#3
4 noiembrie 2008, 16:16
| |||
| |||
| Aici sunt fişierele mele de log pentru SUPERAntiSpyware, Malwarebytes şi hijack acest Malwarebytes' Anti-Malware 1.30 Baza de date versiune: 1306 Windows 5.1.2600 Service Pack 2 04/11/2008 21:30:01 mbam-log-2008-11-04 (21-30-01). txt Scan type: Quick Scan Obiecte scanate: 44156 Timpul scurs: 13 minute (s), 7 secunde (s), Memory Processes Infected: 0 Memory Modules Infected: 0 Chei de Registry Infected: 0 Registry Values Infected: 0 Registrul de date Elemente Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (Nici un rău elemente detectat) Memory Modules Infected: (Nici un rău elemente detectat) Chei de Registry Infected: (Nici un rău elemente detectat) Registry Values Infected: (Nici un rău elemente detectat) Registrul de date Elemente Infected: (Nici un rău elemente detectat) Folders Infected: (Nici un rău elemente detectat) Files Infected: (Nici un rău elemente detectat) Logfile de Trend Micro HijackThis v2.0.2 Scan saved at 22:40:44, la 04.11.2008 Platforma: Windows XP SP2 (WINNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Rularea procese: C: \ Windows \ system32 \ smss.exe C: \ Windows \ system32 \ winlogon.exe C: \ Windows \ system32 \ services.exe C: \ Windows \ system32 \ lsass.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ Intel \ Wireless \ bin \ EvtEng.exe C: \ Program Files \ Intel \ Wireless \ bin \ S24EvMon.exe C: \ Windows \ system32 \ LEXBCES.EXE C: \ WINDOWS \ Explorer.exe C: \ Windows \ system32 \ Spoolsv.exe C: \ Windows \ system32 \ LEXPPS.EXE C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ sched.exe C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ Intel \ Wireless \ bin \ RegSrvc.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ Sony \ VAIO Eveniment Service \ VESMgr.exe C: \ Program Files \ Apoint \ Apoint.exe C: \ Windows \ system32 \ hkcmd.exe C: \ Windows \ system32 \ igfxpers.exe C: \ Program Files \ Sony \ VAIO Power Management \ SPMgr.exe C: \ Program Files \ Sony \ VAIO Update 2 \ VAIOUpdt.exe C: \ Program Files \ Utimaco \ SafeGuard PrivateDisk \ pdservice.exe C: \ WINDOWS \ RTHDCPL.EXE C: \ Program Files \ Apoint \ Apntex.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Lexmark 1200 Series \ lxczbmgr.exe C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avgnt.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe C: \ Windows \ system32 \ Ctfmon.exe C: \ Program Files \ Lexmark 1200 Series \ lxczbmon.exe C: \ Program Files \ DNA \ btdna.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe C: \ Program Files \ Malwarebytes' Anti-Malware \ mbam.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/ R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: AcroIEHlprObj Class - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Java (tm) plug-in-ul SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll O2 - BHO: GoogleAFE - (CA6319C0-31B7-401E-A518-A07C3DB8F777) - C: \ Program ~ 1 \ GOOGLE ~ 1 \ GoogleAFE.dll O2 - BHO: Java (tm) Plug-in 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ implica \ jqs \ ie \ jqs_plugin.dll O4 - HKLM \ .. \ Run: [Apoint] C: \ Program Files \ Apoint \ Apoint.exe O4 - HKLM \ .. \ Run: [igfxtray] C: \ Windows \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [igfxhkcmd] C: \ Windows \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [igfxpers] C: \ Windows \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [SonyPowerCfg] C: \ Program Files \ Sony \ VAIO Power Management \ SPMgr.exe O4 - HKLM \ .. \ Run: [ISBMgr.exe] C: \ Program Files \ Sony \ ISB Utility \ ISBMgr.exe O4 - HKLM \ .. \ Run: [VAIO Update 2] "C: \ Program Files \ Sony \ VAIO Update 2 \ VAIOUpdt.exe" / staţionare O4 - HKLM \ .. \ Run: [PDService.exe] C: \ Program Files \ Utimaco \ SafeGuard PrivateDisk \ pdservice.exe O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [Alcmtr] ALCMTR.EXE O4 - HKLM \ .. \ Run: [AzMixerSel] C: \ Program Files \ Realtek \ InstallShield \ AzMixerSel.exe O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [Lexmark 1200 Series] "C: \ Program Files \ Lexmark 1200 Series \ lxczbmgr.exe" O4 - HKLM \ .. \ Run: [avgnt] "C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avgnt.exe" / min O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent DNA] "C: \ Program Files \ DNA \ btdna.exe" O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe (User 'Default user') O8 - Extra context menu item: E & xportaţi la Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ milionimi ~ 4 \ OFFICE11 \ EXCEL.EXE/3000 O9 - Extra button: Cercetare - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ milionimi ~ 4 \ OFFICE11 \ REFIEBAR.DLL O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O14 - IERESET.INF: START_PAGE_URL = http://www.club-vaio.com/en/ O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1225049667890 O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe O23 - Service: EvtEng - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ bin \ EvtEng.exe O23 - Service: Image Converter înregistrarea video monitor pentru VAIO Divertisment - Sony Corporation - C: \ Program Files \ Sony \ Image Converter 2 \ IcVzMon.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: Java rapida pentru începători (JavaQuickStarterService) - Sun Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc - C: \ Windows \ system32 \ LEXBCES.EXE O23 - Service: MSCSPTISRV - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ MSCSPTISRV.exe O23 - Service: PACSPTISVR - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ PACSPTISVR.exe O23 - Service: RegSrvc - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ bin \ RegSrvc.exe O23 - Service: Spectrum24 Eveniment Monitor (S24EventMonitor) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ bin \ S24EvMon.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ SPTISRV.exe O23 - Service: VAIO Eveniment Service - Sony Corporation - C: \ Program Files \ Sony \ VAIO Eveniment Service \ VESMgr.exe O23 - Service: VAIO Cooporated initialisation (VCI) - Sony Corporation - C: \ Program Files \ Sony \ VAIO cooperat initialisation \ VCI_SVC.exe -- End of file - 7628 bytes SUPERAntiSpyware Scan Log http://www.superantispyware.com AM Generated 11.04.2008 la 06:09 Application Version: 4.21.1004 Core Reguli Baza de date Versiune: 3622 Trace Reguli Baza de date Versiune: 1606 Scan type: Complete Scan Total Scan Ora: 06:14:50 Elemente de memorie scanate: 396 Memorie ameninţările detectate: 0 Elementele de registry scanate: 4699 Registrul ameninţările detectate: 0 Elemente Fişier scanate: 37598 File ameninţările detectate: 0 |
|
#4
4 noiembrie 2008, 16:22
| |||
| |||
| Foarte puţin probabil ca aceasta este o problemă de malware. Aţi putea încerca de a posta pe forum Windows. Exista cateva lucruri putem face aici. StartupLite
---------- Descărca Inchide / Remove Windows Messenger la Spaţiul de lucru pentru a îndepărta Windows Messenger. A nu se confunda Windows Messenger cu MSN Messenger pentru că nu sunt la fel. Windows Messenger este o cauza frecventa de pop-up. Dezarhivaţi fişierul pe Desktop. Deschide MessengerDisable.exe în partea de jos şi alegeţi caseta -- Dezinstalare Windows Messenger şi faceţi clic pe Aplica. Ieşiţi din MessengerDisable şterge apoi cele două fişiere care au fost puse pe desktop. Run CCleaner. A face un subiect nou în forum Windows.
__________________ |
|
#5
4 noiembrie 2008, 17:08
| ||||||||||||
| ||||||||||||
| Stick la un fir pentru moment, exclude malware-ului, apoi merge mai departe, în caz contrar acesta doar confundă lucrurile. Mulţumesc.
__________________
Sistemul meu: Hybr! D
|
|
#6
4 noiembrie 2008, 17:14
| |||
| |||
| Sunet, făcea la fel de recomandat. Adoptat chestii malware-ului, atunci cred că ce este atât de traseu urmatorul meu? |
|
#7
4 noiembrie 2008, 17:19
| |||
| |||
| Whoops, my bad, nu evilfantasy nu a realizat au răspuns, vă rugăm să continue să post în ferestre pe forum. |
