Pomóźcie!!!
Wczoraj zalozylem sobie neostrade i jak dotad takich problemow nie mialem. Wczesniej mialem modem i obylem sie bez SP1 i SP2. Wystarczal mi norton antyvirus 2002. Po 2 godzinach uzytkowania wyskoczyly mi takie wirusy takie jak sasser download.trojan spynot korgo i wiele innych. Z wirusami sobie poradze ale chcialbym sie zabezpieczyc na przyszlosc a nie chce mi sie robic formata probuje zainstalowac service packa 1 a on w polowie instalacji pisze ze plik atapi.sys znajdujacy sie w windows/system32/drivers jest uzywany mimo ze wszystko co mozliwe wywalilem z menedzera zadan z procesow??? Co jest??? Mam jeszcze drugi problem nie moge pozbyc sie wyskakujacych okienej typu "serch of poker" pojawiaja sie mniej wiecej co 5 min ale nie chce zeby zablokowac je tylko zeby unieszkodliwic. Jak to zrobic? Z gory dziekuje za pomoc.
Odpowiedzi: 7
Z reguly mam wylaczone przywracanie systemu mam koniecznie go wlaczyc? Jak macie neo to powiedzcie mi czy mieliscie tak ze chodzi normalnie przez 15 min czasami wiecej a pozniej tak spada ze nic nie chce sie wlaczyc ale pokazuje ze jest polaczony. I co z tym SP2 warto czy nie. I jeszcze komunikator tlen dlaczego sie wylacza?
Bobi_robert:
Log z HJT zapodaj– robaki – Ad–Aware + HiJackThis
Czy oby napewno :wink:
Tak to jest jak sie pisze i mysli o czyms innym :oops: :)
Sory a powtorke :roll: . Jeszcze wkurza mnie ze nie moge odpalic tlen.pl wlaczam go a on sie po minucie sam wylacza. Co jest??? :shock:
Wylacz przywracanie systemu
Zakoncz proces:
msjp32.exe
Wywal z HDD:
msjp32.exe
winhmr32.exe
FIX:
Po wszyskim wlacz przywracanie
Zakoncz proces:
msjp32.exe
Wywal z HDD:
msjp32.exe
winhmr32.exe
FIX:
O2 – BHO: (no name) – {28CAEFF3–0F18–4036–B504–51D73BD81ABC} – (no file)
O4 – HKLM..Run: [Sys29] C:windowssystem32winhmr32.exe
O4 – HKLM..Run: [Microsoft WinJPG] msjp32.exe
O4 – HKLM..RunServices: [Microsoft WinJPG] msjp32.exe
Po wszyskim wlacz przywracanie
Logfile of HijackThis v1.97.7
Scan saved at 14:20:39, on 2004–11–23
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesVirtual CD v4Systemvcdsecs.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:WINDOWSSystem32msiexec.exe
C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
C:Program FilesJavaj2re1.4.2_02injusched.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSSystem32msjp32.exe
C:Program FilesNeostrada TPNeostradaTP.exe
C:Program FilesNeostrada TPComComp.exe
C:Program FilesNeostrada TPWatch.exe
C:Program FilesInternet Exploreriexplore.exe
C:PROGRA~1DAPDAP.EXE
C:Documents and SettingsPiotrekPulpitHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.wp.pl/
O2 – BHO: (no name) – {28CAEFF3–0F18–4036–B504–51D73BD81ABC} – (no file)
O4 – HKLM..Run: [VCDPlayer] C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
O4 – HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_02injusched.exe
O4 – HKLM..Run: [SpeedTouch USB Diagnostics] "C:Program FilesThomsonSpeedTouch USBDragdiag.exe" /icon
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [Sys29] C:windowssystem32winhmr32.exe
O4 – HKLM..Run: [Microsoft WinJPG] msjp32.exe
O4 – HKLM..RunServices: [Microsoft WinJPG] msjp32.exe
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O8 – Extra context menu item: &Download with &DAP – C:PROGRA~1DAPdapextie.htm
O8 – Extra context menu item: Download &all with DAP – C:PROGRA~1DAPdapextie2.htm
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Run DAP (HKLM)
O16 – DPF: {9A9307A0–7DA4–4DAF–B042–5009F29E09E1} (ActiveScan Installer Class) – http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O17 – HKLMSystemCCSServicesTcpip..{C356F096–1858–4CCF–A03E–F1AAF3FDBDA7}: NameServer = 194.204.152.34 217.98.63.164
Jeszcze mam problem z wirusem "download.trojan" nie moge sie go pozbyc. Jakies sugestie? I jeszcze powidzcie mi bo SP1 udalo sie zainstalowac ale czy oplaca sie SP2 bo slyszalem ze wiecej psuje niz pomaga.
Scan saved at 14:20:39, on 2004–11–23
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesVirtual CD v4Systemvcdsecs.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:WINDOWSSystem32msiexec.exe
C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
C:Program FilesJavaj2re1.4.2_02injusched.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSSystem32msjp32.exe
C:Program FilesNeostrada TPNeostradaTP.exe
C:Program FilesNeostrada TPComComp.exe
C:Program FilesNeostrada TPWatch.exe
C:Program FilesInternet Exploreriexplore.exe
C:PROGRA~1DAPDAP.EXE
C:Documents and SettingsPiotrekPulpitHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.wp.pl/
O2 – BHO: (no name) – {28CAEFF3–0F18–4036–B504–51D73BD81ABC} – (no file)
O4 – HKLM..Run: [VCDPlayer] C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
O4 – HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_02injusched.exe
O4 – HKLM..Run: [SpeedTouch USB Diagnostics] "C:Program FilesThomsonSpeedTouch USBDragdiag.exe" /icon
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [Sys29] C:windowssystem32winhmr32.exe
O4 – HKLM..Run: [Microsoft WinJPG] msjp32.exe
O4 – HKLM..RunServices: [Microsoft WinJPG] msjp32.exe
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O8 – Extra context menu item: &Download with &DAP – C:PROGRA~1DAPdapextie.htm
O8 – Extra context menu item: Download &all with DAP – C:PROGRA~1DAPdapextie2.htm
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Run DAP (HKLM)
O16 – DPF: {9A9307A0–7DA4–4DAF–B042–5009F29E09E1} (ActiveScan Installer Class) – http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O17 – HKLMSystemCCSServicesTcpip..{C356F096–1858–4CCF–A03E–F1AAF3FDBDA7}: NameServer = 194.204.152.34 217.98.63.164
Jeszcze mam problem z wirusem "download.trojan" nie moge sie go pozbyc. Jakies sugestie? I jeszcze powidzcie mi bo SP1 udalo sie zainstalowac ale czy oplaca sie SP2 bo slyszalem ze wiecej psuje niz pomaga.
Logfile of HijackThis v1.97.7
Scan saved at 14:20:39, on 2004–11–23
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesVirtual CD v4Systemvcdsecs.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:WINDOWSSystem32msiexec.exe
C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
C:Program FilesJavaj2re1.4.2_02injusched.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSSystem32msjp32.exe
C:Program FilesNeostrada TPNeostradaTP.exe
C:Program FilesNeostrada TPComComp.exe
C:Program FilesNeostrada TPWatch.exe
C:Program FilesInternet Exploreriexplore.exe
C:PROGRA~1DAPDAP.EXE
C:Documents and SettingsPiotrekPulpitHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.wp.pl/
O2 – BHO: (no name) – {28CAEFF3–0F18–4036–B504–51D73BD81ABC} – (no file)
O4 – HKLM..Run: [VCDPlayer] C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
O4 – HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_02injusched.exe
O4 – HKLM..Run: [SpeedTouch USB Diagnostics] "C:Program FilesThomsonSpeedTouch USBDragdiag.exe" /icon
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [Sys29] C:windowssystem32winhmr32.exe
O4 – HKLM..Run: [Microsoft WinJPG] msjp32.exe
O4 – HKLM..RunServices: [Microsoft WinJPG] msjp32.exe
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O8 – Extra context menu item: &Download with &DAP – C:PROGRA~1DAPdapextie.htm
O8 – Extra context menu item: Download &all with DAP – C:PROGRA~1DAPdapextie2.htm
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Run DAP (HKLM)
O16 – DPF: {9A9307A0–7DA4–4DAF–B042–5009F29E09E1} (ActiveScan Installer Class) – http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O17 – HKLMSystemCCSServicesTcpip..{C356F096–1858–4CCF–A03E–F1AAF3FDBDA7}: NameServer = 194.204.152.34 217.98.63.164
Jeszcze mam problem z wirusem "download.trojan" nie moge sie go pozbyc. Jakies sugestie? I jeszcze powidzcie mi bo SP1 udalo sie zainstalowac ale czy oplaca sie SP2 bo slyszalem ze wiecej psuje niz pomaga.
Scan saved at 14:20:39, on 2004–11–23
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesVirtual CD v4Systemvcdsecs.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:WINDOWSSystem32msiexec.exe
C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
C:Program FilesJavaj2re1.4.2_02injusched.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSSystem32msjp32.exe
C:Program FilesNeostrada TPNeostradaTP.exe
C:Program FilesNeostrada TPComComp.exe
C:Program FilesNeostrada TPWatch.exe
C:Program FilesInternet Exploreriexplore.exe
C:PROGRA~1DAPDAP.EXE
C:Documents and SettingsPiotrekPulpitHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.wp.pl/
O2 – BHO: (no name) – {28CAEFF3–0F18–4036–B504–51D73BD81ABC} – (no file)
O4 – HKLM..Run: [VCDPlayer] C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
O4 – HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_02injusched.exe
O4 – HKLM..Run: [SpeedTouch USB Diagnostics] "C:Program FilesThomsonSpeedTouch USBDragdiag.exe" /icon
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [Sys29] C:windowssystem32winhmr32.exe
O4 – HKLM..Run: [Microsoft WinJPG] msjp32.exe
O4 – HKLM..RunServices: [Microsoft WinJPG] msjp32.exe
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O8 – Extra context menu item: &Download with &DAP – C:PROGRA~1DAPdapextie.htm
O8 – Extra context menu item: Download &all with DAP – C:PROGRA~1DAPdapextie2.htm
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Run DAP (HKLM)
O16 – DPF: {9A9307A0–7DA4–4DAF–B042–5009F29E09E1} (ActiveScan Installer Class) – http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O17 – HKLMSystemCCSServicesTcpip..{C356F096–1858–4CCF–A03E–F1AAF3FDBDA7}: NameServer = 194.204.152.34 217.98.63.164
Jeszcze mam problem z wirusem "download.trojan" nie moge sie go pozbyc. Jakies sugestie? I jeszcze powidzcie mi bo SP1 udalo sie zainstalowac ale czy oplaca sie SP2 bo slyszalem ze wiecej psuje niz pomaga.
Log z HJT zapodaj
Czy oby napewno :wink:
– robaki – Ad–Aware + HiJackThis
Czy oby napewno :wink:
Strona 1 / 1