Windows XP zbyt długo się zamyka

Cinek_33 · 19 Grudzień 2005 10:39

Witam.

Mam zainstalowanego Widows XP. Po jakimś czasie użytkowania system bardzo długo zamyka się.Na ekranie widać napis “Trwa zamykanie systemu” i trwa i w końcu muszę go zrestartować.Wklejam loga.

Logfile of HijackThis v1.99.1 Scan saved at 10:16:19, on 2005-12-19 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\RunDll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Neostrada TP\NeostradaTP.exe C:\Program Files\Neostrada TP\ComComp.exe C:\Program Files\Neostrada TP\Watch.exe C:\Documents and Settings\Anetka\Pulpit\hajdzek stise\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O1 - Hosts: 64.191.90.85 http://www.halifax-online.co.uk O1 - Hosts: 64.191.90.85 ibank.barclays.co.uk O1 - Hosts: 64.191.90.85 online.lloydstsb.co.uk O1 - Hosts: 64.191.90.85 online-business.lloydstsb.co.uk O1 - Hosts: 64.191.90.85 http://www.ukpersonal.hsbc.co.uk O1 - Hosts: 64.191.90.85 http://www.nwolb.com O1 - Hosts: 64.191.90.85 banesnet.banesto.es O1 - Hosts: 64.191.90.85 extranet.banesto.es O1 - Hosts: 64.191.90.85 ebanking.bccbrescia.it O1 - Hosts: 64.191.90.85 http://www.bankofscotlandhalifax-online.co.uk O1 - Hosts: 64.191.90.85 http://www.rbsdigital.com O1 - Hosts: 64.191.90.85 oi.cajamadrid.es O1 - Hosts: 64.191.90.85 bancae.caixapenedes.com O1 - Hosts: 64.191.90.85 banking.postbank.de O1 - Hosts: 64.191.90.85 meine.deutsche-bank.de O1 - Hosts: 64.191.90.85 myonlineaccounts2.abbeynational.co.uk O1 - Hosts: 64.191.90.85 ibank.cahoot.com O1 - Hosts: 64.191.90.85 webbank.openplan.co.uk O1 - Hosts: 64.191.90.85 bancopostaonline.poste.it O1 - Hosts: 64.191.90.85 http://www.rasbank.it O1 - Hosts: 64.191.90.85 http://www.credem.it O1 - Hosts: 64.191.90.85 mybank.bybank.it O1 - Hosts: 64.191.90.85 http://www.bancagenerali.it O1 - Hosts: 64.191.90.85 http://www.bancaintesa.it O1 - Hosts: 64.191.90.85 http://www.creval.it O1 - Hosts: 64.191.90.85 ibank.internationalbanking.barclays.com O1 - Hosts: 64.191.90.85 http://www.abbeyinternational.com O1 - Hosts: 64.191.90.85 http://www.bbvanet.com O1 - Hosts: 64.191.90.85 http://www.fineco.it O1 - Hosts: 64.191.90.85 http://www.cajamar.es O1 - Hosts: 64.191.90.85 welcome7.co-operativebank.co.uk O1 - Hosts: 64.191.90.85 welcome11.co-operativebankonline.co.uk O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx O4 - HKLM…\Run: [Cmaudio] RunDll32 C:\WINDOWS\system\cmicnfg.cpl,CMICtrlWnd O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot O4 - HKLM…\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM…\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM…\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar … /cabsa.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan … asinst.cab O17 - HKLM\System\CCS\Services\Tcpip…{8A207569-CAC1-406F-9901-1E6E6B48978F}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Kerio Personal Firewall 4 (KPF4) - Unknown owner - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe (file missing) O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

====================================

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Proponuje poczytać TEN temat i zobacz jaka jest prośba do userów wklejających loga.

Pozdrawiam kuz5

lazikar · 19 Grudzień 2005 10:44

A co to ma do sprawdzonych porad. :o :o :o

lysysz · 19 Grudzień 2005 11:29

Nainstalowałeś pewnie jakiegoś badziewia i progsów to teraz czekaj aż ci sie to wszystko pozamyka.

Oj :shock:

Niecierpliwy jesteś…

Gutek · 19 Grudzień 2005 14:30

O1 - Hosts: 64.191.90.85 http://www.halifax-online.co.uk O1 - Hosts: 64.191.90.85 ibank.barclays.co.uk O1 - Hosts: 64.191.90.85 online.lloydstsb.co.uk O1 - Hosts: 64.191.90.85 online-business.lloydstsb.co.uk O1 - Hosts: 64.191.90.85 http://www.ukpersonal.hsbc.co.uk O1 - Hosts: 64.191.90.85 http://www.nwolb.com O1 - Hosts: 64.191.90.85 banesnet.banesto.es O1 - Hosts: 64.191.90.85 extranet.banesto.es O1 - Hosts: 64.191.90.85 ebanking.bccbrescia.it O1 - Hosts: 64.191.90.85 http://www.bankofscotlandhalifax-online.co.uk O1 - Hosts: 64.191.90.85 http://www.rbsdigital.com O1 - Hosts: 64.191.90.85 oi.cajamadrid.es O1 - Hosts: 64.191.90.85 bancae.caixapenedes.com O1 - Hosts: 64.191.90.85 banking.postbank.de O1 - Hosts: 64.191.90.85 meine.deutsche-bank.de O1 - Hosts: 64.191.90.85 myonlineaccounts2.abbeynational.co.uk O1 - Hosts: 64.191.90.85 ibank.cahoot.com O1 - Hosts: 64.191.90.85 webbank.openplan.co.uk O1 - Hosts: 64.191.90.85 bancopostaonline.poste.it O1 - Hosts: 64.191.90.85 http://www.rasbank.it O1 - Hosts: 64.191.90.85 http://www.credem.it O1 - Hosts: 64.191.90.85 mybank.bybank.it O1 - Hosts: 64.191.90.85 http://www.bancagenerali.it O1 - Hosts: 64.191.90.85 http://www.bancaintesa.it O1 - Hosts: 64.191.90.85 http://www.creval.it O1 - Hosts: 64.191.90.85 ibank.internationalbanking.barclays.com O1 - Hosts: 64.191.90.85 http://www.abbeyinternational.com O1 - Hosts: 64.191.90.85 http://www.bbvanet.com O1 - Hosts: 64.191.90.85 http://www.fineco.it O1 - Hosts: 64.191.90.85 http://www.cajamar.es O1 - Hosts: 64.191.90.85 welcome7.co-operativebank.co.uk O1 - Hosts: 64.191.90.85 welcome11.co-operativebankonline.co.uk

uusń wpisy hijackiem co do tricków z szybszym zmykaniem - http://www.searchengines.pl/phpbb203/in … topic=5989

Cinek_33 · 19 Grudzień 2005 18:29

Witam.

Usunołem logi ale jest chyba to samo.

Wklejam nowy log.

Logfile of HijackThis v1.99.1 Scan saved at 19:23:02, on 2005-12-19 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\RunDll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Neostrada TP\NeostradaTP.exe C:\Program Files\Neostrada TP\ComComp.exe C:\Program Files\Neostrada TP\Watch.exe D:\INSTALKI\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx O4 - HKLM…\Run: [Cmaudio] RunDll32 C:\WINDOWS\system\cmicnfg.cpl,CMICtrlWnd O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot O4 - HKLM…\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM…\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM…\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar … /cabsa.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan … asinst.cab O17 - HKLM\System\CCS\Services\Tcpip…{8A207569-CAC1-406F-9901-1E6E6B48978F}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

Gutek · 19 Grudzień 2005 19:02

Nawet się nie chce poczytać, a rozwiazanie w linku gotowe :evil:

więcej w linku wyżej i temacie: Szybsze zamykanie systemu

Cinek_33 · 20 Grudzień 2005 08:37

Witam.

Zrobiłem kolego Gutek2222 wszystko co napisałeś idalej jest to samo.

Gutek · 20 Grudzień 2005 12:52

Co zrobiłeś? Dokąłdnie - czytałeś jak coś nie tak siędzile w linku posta???

Cinek_33 · 21 Grudzień 2005 08:54

Witam. No zrobłem ten wpis do rejestru.

Gutek · 21 Grudzień 2005 13:45

A inne tam porady jak napisałem zastosowałeś w temacie: Szybsze zamykanie systemu - http://www.searchengines.pl/phpbb203/in … topic=5989

Cinek_33 · 22 Grudzień 2005 14:21

Witam.

Z tego tematu ściągłem i zrobiłem wpis do rejestru. Ale i to niewiele pomaga. W międzyczasie zainstalowałem sobie Servis Pack 2. Może to coś pomoże.A jeżeli chodzi o “Szybsze zamykanie systemu” to jest tam link do strony, ale wszystko tam jest po angielsku i nic nie rozumiem. Jak byś mógł to pomóż mi.

Gutek · 22 Grudzień 2005 15:44

Jak po angielsku? - w () są odpowiedniki polskie