PROCES EXPLORER.EXE SIE SAM WYLACZA CO JAKIS CZAS

Prosze pomozcie mi bo juz nie trawie tego co jakis czas gdy nawet nic nie robie nagle wszystko sie wylacza co jest zwiazane z explorer.exe min flash get i moj komputer nie wylacza sie tylko inernetexplorer i gadu gadu co jest jakby co daje loga z hijack this moze czegos brakuje albo czegos za duzo:
Logfile of HijackThis v1.99.1
Scan saved at 08:57:20, on 2005–10–06
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cmdtel.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\windows\system32\mdms.exe
C:\WINDOWS\System32\susystem.exe
C:\WINDOWS\System32\isasse.exe
C:\WINDOWS\System32\ctfmon.exe
D:\Programy\Gadu–Gadu\gg.exe
D:\Spybot – Search & Destroy\TeaTimer.exe
C:\Program Files\22M WLAN Adapter\WLANMON.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Downloads\HijackThis.exe

R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F2 – REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
O2 – BHO: BHObj Class – {00000010–6F7D–442C–93E3–4A4827C2E4C8} – C:\WINDOWS\nem220.dll
O2 – BHO: (no name) – {53707962–6F74–2D53–2644–206D7942484F} – D:\Spybot – Search & Destroy\SDHelper.dll
O2 – BHO: IeCatch2 Class – {A5366673–E8CA–11D3–9CD9–0090271D075B} – D:\PROGRAMY\FLASHGET\jccatch.dll
O2 – BHO: Google Toolbar Helper – {AA58ED58–01DD–4d91–8333–CF10577473F7} – c:\program files\google\googletoolbar2.dll
O3 – Toolbar: FlashGet Bar – {E0E899AB–F487–11D5–8D29–0050BA6940E3} – D:\PROGRAMY\FLASHGET\fgiebar.dll
O3 – Toolbar: &Google – {2318C2B1–4965–11d4–9B18–009027A5CD4F} – c:\program files\google\googletoolbar2.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [nwiz] nwiz.exe /install
O4 – HKLM\..\Run: [SysMemory manager] c:\windows\system32\mdms.exe
O4 – HKLM\..\Run: [MSControl31] susystem.exe
O4 – HKLM\..\Run: [MSControl3d1] isasse.exe
O4 – HKLM\..\RunServices: [MSControl28] crsss.exe
O4 – HKLM\..\RunServices: [MSControl3d1] isasse.exe
O4 – HKLM\..\RunServices: [MSControl31] susystem.exe
O4 – HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 – HKCU\..\Run: [Gadu–Gadu] "D:\Programy\Gadu–Gadu\gg.exe" /tray
O4 – HKCU\..\Run: [SpybotSD TeaTimer] D:\Spybot – Search & Destroy\TeaTimer.exe
O4 – Global Startup: 22M WLAN Adapter.lnk = ?
O8 – Extra context menu item: &Google Search – res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 – Extra context menu item: &Translate English Word – res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 – Extra context menu item: Backward Links – res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 – Extra context menu item: Cached Snapshot of Page – res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 – Extra context menu item: Download All by FlashGet – D:\Programy\FlashGet\jc_all.htm
O8 – Extra context menu item: Download using FlashGet – D:\Programy\FlashGet\jc_link.htm
O8 – Extra context menu item: Similar Pages – res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 – Extra context menu item: Translate Page into English – res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 – Extra button: Related – {c95fe080–8f5d–11d2–a20b–00aa003c157a} – C:\WINDOWS\web\related.htm
O9 – Extra 'Tools' menuitem: Show &Related Links – {c95fe080–8f5d–11d2–a20b–00aa003c157a} – C:\WINDOWS\web\related.htm
O9 – Extra button: FlashGet – {D6E814A0–E0C5–11d4–8D29–0050BA6940E3} – D:\PROGRAMY\FLASHGET\flashget.exe
O9 – Extra 'Tools' menuitem: &FlashGet – {D6E814A0–E0C5–11d4–8D29–0050BA6940E3} – D:\PROGRAMY\FLASHGET\flashget.exe
O17 – HKLM\System\CCS\Services\Tcpip\..\{73BE776E–4B11–40A0–B8E2–78FB86FA7910}: NameServer = 80.51.253.150,194.204.152.34
O17 – HKLM\System\CS1\Services\Tcpip\..\{73BE776E–4B11–40A0–B8E2–78FB86FA7910}: NameServer = 80.51.253.150,194.204.152.34
O17 – HKLM\System\CS2\Services\Tcpip\..\{73BE776E–4B11–40A0–B8E2–78FB86FA7910}: NameServer = 80.51.253.150,194.204.152.34
O23 – Service: Loading Outpost Connections (KDE) – Unknown owner – C:\WINDOWS\System32\cmdtel.exe
O23 – Service: NVIDIA Driver Helper Service (NVSvc) – NVIDIA Corporation – C:\WINDOWS\System32\nvsvc32.exe

Odpowiedzi: 1

W dziale Bezpieczeństwo jest przyklejony temat z instrukcją co naleźy zrobić z logiem HijackThis. Zajrzyj do niego i pousuwaj sobie śmieci – a masz ich trochę.
Żółty
Dodano
06.10.2005 13:37:16
gazorex
Dodano:
06.10.2005 10:57:49
Komentarzy:
1
Strona 1 / 1