Czeste zawieszanie kompa i za duzo procesów zżera

Dla specjalistów Bezpieczeństwo
#1

Witam!!mam dwa poważniejsze problemy

1)strasznie zwiesza mi sie od pewnego czasu komp… sprawdzałam i nie mam wirusów… pomaga jedynie wył i wł procesu"explorer.exe" ale tak codziennie po kilka razu robienie tej samej czynności nie jest fajne

2)zżera mi dużo procesów nawet do 800MB a nie mam wł dużo programów… także żadne gry nie chodzą… jedynie CS:P hehe

Prosiłabym o pomoc i sprawdzenie HijackThis

Posiadam:32-bitowy Windows Vista Home Basic,1GB Ram,procesor Intel Core Duo T2250; 1,73 GHz)

  1. Logfile of Trend Micro HijackThis v2.0.2

  2. Scan saved at 13:49:00, on 2008-02-04

  3. Platform: Windows Vista (WinNT 6.00.1904)

  4. MSIE: Internet Explorer v7.00 (7.00.6000.16575)

  5. Boot mode: Normal

  7. Running processes:

  8. C:\Windows\system32\Dwm.exe

  9. C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

  10. C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

  11. C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

  12. C:\Windows\System32\hkcmd.exe

  13. C:\Windows\System32\igfxpers.exe

  14. C:\Windows\System32\rundll32.exe

  15. C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe

  16. C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

  17. C:\Program Files\iTunes\iTunesHelper.exe

  18. C:\Program Files\Windows Sidebar\sidebar.exe

  19. C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

  20. C:\Program Files\Windows Media Player\wmpnscfg.exe

  21. C:\Program Files\Synaptics\SynTP\SynToshiba.exe

  22. C:\Program Files\Gadu-Gadu\gg.exe

  23. C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

  24. C:\Windows\system32\wbem\unsecapp.exe

  25. C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe

  26. c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

  27. c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

  28. c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

  29. c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe

  30. c:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe

  31. C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe

  32. C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

  33. C:\Windows\system32\conime.exe

  34. C:\Program Files\Winamp\winamp.exe

  35. C:\Windows\system32\NOTEPAD.EXE

  36. C:\Windows\system32\taskeng.exe

  37. C:\Windows\explorer.exe

  38. C:\Windows\system32\SearchFilterHost.exe

  39. C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  41. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

  42. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb

  43. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb

  44. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75

  45. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  46. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  47. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  48. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  49. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  50. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  51. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  52. R3 - Default URLSearchHook is missing

  53. O1 - Hosts: ::1 localhost

  54. O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

  55. O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

  56. O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

  57. O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  58. O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  59. O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll

  60. O4 - HKLM…\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

  61. O4 - HKLM…\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  62. O4 - HKLM…\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  63. O4 - HKLM…\Run: [smoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  64. O4 - HKLM…\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  65. O4 - HKLM…\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

  66. O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

  67. O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

  68. O4 - HKLM…\Run: [RtHDVCpl] RtHDVCpl.exe

  69. O4 - HKLM…\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

  70. O4 - HKLM…\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

  71. O4 - HKLM…\Run: [Persistence] C:\Windows\system32\igfxpers.exe

  72. O4 - HKLM…\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe

  73. O4 - HKLM…\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup

  74. O4 - HKLM…\Run: [NDSTray.exe] NDSTray.exe

  75. O4 - HKLM…\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

  76. O4 - HKLM…\Run: [symantec PIF AlertEng] “C:\Program Files\Common Files\Symantec Shared\PIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe” /a /m “C:\Program Files\Common Files\Symantec Shared\PIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll”

  77. O4 - HKLM…\Run: [osCheck] “C:\Program Files\Norton Internet Security\osCheck.exe”

  78. O4 - HKLM…\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  79. O4 - HKLM…\Run: [MSConfig] “C:\Windows\system32\msconfig.exe” /auto

  80. O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\QTTask.exe” -atboottime

  81. O4 - HKLM…\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe”

  82. O4 - HKLM…\Run: [WinampAgent] “C:\Program Files\Winamp\winampa.exe”

  83. O4 - HKCU…\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

  84. O4 - HKCU…\Run: [toscdspd] TOSCDSPD.EXE

  85. O4 - HKCU…\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

  86. O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray

  87. O4 - HKCU…\Run: [msnmsgr] “C:\Program Files\MSN Messenger\msnmsgr.exe” /background

  88. O4 - HKUS\S-1-5-19…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA LOKALNA’)

  89. O4 - HKUS\S-1-5-19…\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘USŁUGA LOKALNA’)

  90. O4 - HKUS\S-1-5-20…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA SIECIOWA’)

  91. O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

  92. O4 - Global Startup: Bluetooth Manager.lnk = ?

  93. O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

  94. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

  95. O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

  96. O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  97. O13 - Gopher Prefix:

  98. O17 - HKLM\System\CCS\Services\Tcpip…{002D451B-8007-4761-9E61-64EC363A0208}: NameServer = 192.168.1.1

  99. O17 - HKLM\System\CS1\Services\Tcpip…{002D451B-8007-4761-9E61-64EC363A0208}: NameServer = 192.168.1.1

  100. O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

  101. O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

  102. O23 - Service: Urządzenie mobilne Apple (Apple Mobile Device) - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

  103. O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  104. O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  105. O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  106. O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  107. O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

  108. O23 - Service: Harmonogram automatycznej usługi LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

  109. O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

  110. O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

  111. O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe

  112. O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

  113. O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  114. O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

  115. O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

  116. O23 - Service: STI Simulator - Unknown owner - C:\Windows\System32\PAStiSvc.exe

  117. O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

  118. O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

  119. O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  120. O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

  121. O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  122. O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  124. –

  125. End of file - 10209 bytes

#2

Zastosuj się do tego Tematu i zmień tytuł tematu na konkretny inaczej KOSZ

Pozdrawiam Gutek2222

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=213350

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Bluetooth Manager.lnk = ?

zbędniki w autostarcie

#3

i cio to powinnam wszystko usunąć?:stuck_out_tongue:

#4

wpisy

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA')

usuń HijackThisem >> Fix checked a do tych co Gutek podał dorzuciłbym jeszcze

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

Optymalizacja Autostartu http://www.bezpieczenstwosystemow.pl/index.php?topic=116.0

:slight_smile: