Rozłączanie Neostrady i wolny komp

bodi_77 · 27 Listopad 2007 14:06

Witam

Bardzo często rozłącza mi się NEO i wolno działa komp.

Bardzo proszę o sprawdzenie Loga:

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:55:38, on 2007-11-27 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\Program Files\Winamp\winampa.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\NEOSTR~1\NeostradaTP.exe C:\PROGRA~1\NEOSTR~1\ComComp.exe C:\PROGRA~1\NEOSTR~1\Watch.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file) O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM…\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM…\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM…\Run: [AVP] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe” O4 - HKCU…\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’) O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll O9 - Extra button: Wyslij SMS’a - {215940F1-E7E0-4801-BEE3-44D045534106} - C:\Program Files\Common Files\moje.js O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing) O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} (SignActivX Control) - https://www.bph.pl/pi/components/SignActivX.cab O17 - HKLM\System\CCS\Services\Tcpip…{92601139-809D-462B-AFDD-80EE658E41B2}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe – End of file - 4896 bytes

Z góry dzięki za pomoc

Pozdrawiam

Gutek · 27 Listopad 2007 23:56

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file) O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)

usuń wpisy HJT

Daj log z ComboFix

sebos_krk · 28 Listopad 2007 09:33

Nie używasz przypadkiem aplikacji dostępowej neostrady? Ona bardzo często jest przyczyną rozłączania

bodi_77 · 29 Listopad 2007 09:03

Oto log z ComboFix:

ComboFix 07-11-19.4C - Admin 2007-11-29 9:46:03.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.221 [GMT 1:00] Running from: D:\download\firefox\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\myglobalsearch . ((((((((((((((((((((((((( Files Created from 2007-10-28 to 2007-11-29 ))))))))))))))))))))))))))))))) . 2007-11-27 15:47 2007-11-27 15:46 2007-11-27 14:55 2007-11-27 14:10 46,892 --a------ C:\WINDOWS\system32\adadix16.dll 2007-11-27 14:10 8,208 --a------ C:\WINDOWS\system32\drivers\adildr.cat 2007-11-27 14:10 23 --a------ C:\WINDOWS\system32\drivers\adidsl.cfg 2007-11-27 14:09 2007-11-27 14:09 261,948 -r------- C:\WINDOWS\system32\drivers\RTBLDEI3.BNM 2007-11-27 14:09 261,946 -r------- C:\WINDOWS\system32\drivers\RTBLDEI1.BNM 2007-11-27 14:09 261,920 -r------- C:\WINDOWS\system32\drivers\RTBLDEI2.BNM 2007-11-27 14:09 261,912 -r------- C:\WINDOWS\system32\drivers\RTBLDEP0.BNM 2007-11-27 14:09 261,912 -r------- C:\WINDOWS\system32\drivers\RTBLDEI0.BNM 2007-11-27 14:09 261,910 -r------- C:\WINDOWS\system32\drivers\RTBLDEP3.BNM 2007-11-27 14:09 261,906 -r------- C:\WINDOWS\system32\drivers\RTBLDEP2.BNM 2007-11-27 14:09 261,902 -r------- C:\WINDOWS\system32\drivers\RTBLDEP1.BNM 2007-11-27 14:09 79,334 -r------- C:\WINDOWS\system32\drivers\RTBLDEP4.BNM 2007-11-27 14:09 72,072 -r------- C:\WINDOWS\system32\drivers\RTBLDEI4.BNM 2007-11-27 13:54 2007-11-27 13:54 2007-11-27 13:53 2007-11-16 08:24 2007-11-12 13:33 2007-11-12 13:32 2007-11-06 22:52 2007-11-06 22:51 2007-11-02 22:25 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-29 08:56 2,689,824 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat 2007-11-29 08:55 37,664 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat 2007-11-29 08:41 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2007-11-29 08:30 --------- d-----w C:\Program Files\Neostrada TP 2007-11-29 08:29 5,408 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx 2007-11-29 08:29 40,436 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2007-11-28 12:30 --------- d-----w C:\Program Files\eMule 2007-11-28 09:22 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\Skype 2007-11-27 18:20 --------- d-----w C:\Program Files\Paltalk Messenger 2007-11-27 18:20 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\Paltalk 2007-11-27 14:47 --------- d-----w C:\Program Files\Lavasoft 2007-11-27 13:22 82,061 ----a-w C:\WINDOWS\system32\drivers\klick.dat 2007-11-27 13:22 81,549 ----a-w C:\WINDOWS\system32\drivers\klin.dat 2007-11-27 13:09 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-11-18 13:22 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll 2007-11-06 21:52 --------- d-----w C:\Program Files\inSpeak 2007-10-03 16:05 --------- d—a-w C:\Program Files\BearShare applications 2007-07-17 15:41 766 ----a-w C:\Program Files\Common Files\sms.ico 2007-07-17 15:41 70 ----a-w C:\Program Files\Common Files\moje.js . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-03 23:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-05-19 10:39] “WooCnxMon”=“C:\PROGRA~1\NEOSTR~1\CnxMon.exe” [2003-10-16 19:07] “WOOWATCH”=“C:\PROGRA~1\NEOSTR~1\Watch.exe” [2003-10-16 19:07] “WOOTASKBARICON”=“C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe” [2003-10-16 19:07] “AVP”=“C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe” [2007-06-28 12:51] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\CTFMON.EXE” [2004-08-03 23:44] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-11-27 14:10:05] PalStart.lnk - C:\Program Files\Paltalk Messenger\palstart.exe [2007-05-25 19:55:33] PalTalk.lnk - C:\Program Files\Paltalk Messenger\paltalk.exe [2007-05-25 20:06:05] C:\WINDOWS\system32\klogon.dll 2007-06-28 12:51 206088 C:\WINDOWS\system32\klogon.dll R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys S3 LVPrcMon;Logitech LVPrcMon Driver;??\C:\WINDOWS\system32\drivers\LVPrcMon.sys *Newly Created Service* - CATCHME . ************************************************************************** catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-29 09:56:37 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-29 9:58:10 . — E O F —

Jeśli chodzi o program dostępowy Neostrady to tak … korzystam z niego. Jeśli mogę prosić o podpowiedź jak z niego nie korzystać będę wdzięczny…

sebos_krk · 29 Listopad 2007 09:38

Proszę http://forum.dobreprogramy.pl/viewtopic.php?t=91864

Gutek · 29 Listopad 2007 22:46

Powinno być ok