Znikanie internetu w przegladarce


(Darek640) #1

Od kilku dni znika mi dostęp do sieci ale dotyczy to tylko przegladarek internetowych (Opera,FireFox,IE),w innych programach ciagle jest dostęp do internetu. Jeśli włącze proxy to wszystko dzała, ale niemoge na proxy caly czas jechać (proxy musi dzialac na innym porcie ni 80).Firewalla juz odinstalowalem.

Spotkał się ktoś już z takim problemem ??


(boczi) #2

Czy może używasz Outposta, on czasem robi takie problemy.

Dowiedz się u operatora (Dialog), czy nic nie kombinują, nie modernizują, poradź się coś, że masz problemy z http.

Wklej logi: Hijackthis i Silentrunners. http://www.hijackthis.prv.pl


(Darek640) #3

SilientRuners

"Silent Runners.vbs", revision 45, http://www.silentrunners.org/

Operating System: Windows XP SP2

Output limited to non-default values, except where indicated by "{++}"



Startup items buried in registry:

---------------------------------


HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}

"Alacer" = "C:\Program Files\Alacer\alacer.exe" ["VSD Software"]

"Skype" = ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]

"Hide IP Platinum" = "C:\Program Files\Hide IP Platinum\hideippla.exe" [file not found]


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}

"SunJavaUpdateSched" = "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" ["Sun Microsystems, Inc."]

"cFosSpeed" = "C:\Program Files\cFosSpeed\cFosSpeed.exe" ["cFos Software GmbH"]

"EasyTuneV" = "C:\Program Files\Gigabyte\ET5\GUI.exe" [empty string]

"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]

"avast!" = "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [null data]

"RemoteControl" = ""C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"" ["Cyberlink Corp."]

"pdfFactory Pro Dispatcher v2" = ""C:\WINXP\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe" /source=HKLM" ["FinePrint Software, LLC"]

"iKeyWorks" = "C:\PROGRA~1\A4Tech\Keyboard\Ikeymain.exe" ["A4Tech Co.,Ltd."]

"ATIPTA" = ""C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"" ["ATI Technologies, Inc."]


HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{31FF080D-12A3-439A-A2EF-4BA95A3148E8}\(Default) = (no title provided)

  -> {HKLM...CLSID} = "bho2gr Class"

                   \InProcServer32\(Default) = "C:\Program Files\GetRight\xx2gr.dll" ["Headlight Software, Inc."]

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)

  -> {HKLM...CLSID} = "SSVHelper Class"

                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]


HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"

  -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"

                   \InProcServer32\(Default) = "*n" (unwritable string) [file not found]

"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"

  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"

                   \InProcServer32\(Default) = "C:\WINXP\system32\hticons.dll" ["Hilgraeve, Inc."]

"{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band"

  -> {HKLM...CLSID} = "Shell Search Band"

                   \InProcServer32\(Default) = "C:\WINXP\system32\browseui.dll" [MS]

"{32020A01-506E-484D-A2A8-BE3CF17601C3}" = "AlcoholShellEx"

  -> {HKLM...CLSID} = "AlcoholShellEx"

                   \InProcServer32\(Default) = "C:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXShlEx.dll" ["Alcohol Soft Development Team"]

"{72013A26-A94C-11d6-8540-A5E62932711D}" = "shlext (1.0.6.6) - context menu support for Miranda v0.3.0.0+"

  -> {HKLM...CLSID} = "miranda.shlext"

                   \InProcServer32\(Default) = "*n" (unwritable string) [file not found]

"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"

  -> {HKLM...CLSID} = "Portable Media Devices"

                   \InProcServer32\(Default) = "C:\WINXP\system32\Audiodev.dll" [MS]

"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"

  -> {HKLM...CLSID} = "Portable Media Devices Menu"

                   \InProcServer32\(Default) = "C:\WINXP\system32\Audiodev.dll" [MS]

"{e82a2d71-5b2f-43a0-97b8-81be15854de8}" = "ShellLink for Application References"

  -> {HKLM...CLSID} = "ShellLink for Application References"

                   \InProcServer32\(Default) = "C:\WINXP\system32\dfshim.dll" [MS]

"{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}" = "Shell Icon Handler for Application References"

  -> {HKLM...CLSID} = "Shell Icon Handler for Application References"

                   \InProcServer32\(Default) = "C:\WINXP\system32\dfshim.dll" [MS]

"{472083B0-C522-11CF-8763-00608CC02F24}" = "avast"

  -> {HKLM...CLSID} = "avast"

                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]

"{2B3453E4-49DF-11D3-8229-0080BE509050}" = "GMail Drive"

  -> {HKLM...CLSID} = "GMail Drive"

                   \InProcServer32\(Default) = "C:\WINXP\system32\ShellExt\GMailFS.dll" ["Bjarke Viksoe"]

"{2B3453E4-49DF-11D3-8229-0080BE509052}" = "GMailFS Property Sheet"

  -> {HKLM...CLSID} = "GMailFS Property Sheet"

                   \InProcServer32\(Default) = "C:\WINXP\system32\ShellExt\GMailFS.dll" ["Bjarke Viksoe"]

"{2B3453E4-49DF-11D3-8229-0080BE509054}" = "GMailFS Drop Handler"

  -> {HKLM...CLSID} = "GMailFS Drop Handler"

                   \InProcServer32\(Default) = "C:\WINXP\system32\ShellExt\GMailFS.dll" ["Bjarke Viksoe"]

"{2B3453E4-49DF-11D3-8229-0080BE509056}" = "GMailFS Context Menu"

  -> {HKLM...CLSID} = "GMailFS Context Menu"

                   \InProcServer32\(Default) = "C:\WINXP\system32\ShellExt\GMailFS.dll" ["Bjarke Viksoe"]


HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\

INFECTION WARNING! "AppInit_DLLs" = "CLKERN.DLL" ["William Blum"]


HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\

INFECTION WARNING! AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."]

INFECTION WARNING! winyzn32\DLLName = "winyzn32.dll" [file not found]


HKLM\Software\Classes\*\shellex\ContextMenuHandlers\

avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"

  -> {HKLM...CLSID} = "avast"

                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]

miranda.shlext\(Default) = "{72013A26-A94C-11d6-8540-A5E62932711D}"

  -> {HKLM...CLSID} = "miranda.shlext"

                   \InProcServer32\(Default) = "*n" (unwritable string) [file not found]


HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\

miranda.shlext\(Default) = "{72013A26-A94C-11d6-8540-A5E62932711D}"

  -> {HKLM...CLSID} = "miranda.shlext"

                   \InProcServer32\(Default) = "*f" (unwritable string) [file not found]


HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\

avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"

  -> {HKLM...CLSID} = "avast"

                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]



Active Desktop and Wallpaper:

-----------------------------


Active Desktop is disabled at this entry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState


HKCU\Control Panel\Desktop\

"Wallpaper" = "C:\Program Files\Opera\profile\Skin\133image3.bmp"



Startup items in "Szef" & "All Users" startup folders:

------------------------------------------------------


C:\Documents and Settings\All Users\Menu Start\Programy\Autostart

"GetRight - Tray Icon" -> shortcut to: "C:\Program Files\GetRight\getright.exe" ["Headlight Software, Inc."]

"Kalendarz XP" -> shortcut to: "C:\Program Files\Kalendarz XP\Kalendarz.exe" [null data]

"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]



Winsock2 Service Provider DLLs:

-------------------------------


Namespace Service Providers


HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}

000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]

000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

000000000004\LibraryPath = "%SystemRoot%\System32\nwprovau.dll" [MS]


Transport Service Providers


HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}

0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:

%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 22

%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05



Toolbars, Explorer Bars, Extensions:

------------------------------------


Extensions (Tools menu items, main toolbar menu buttons)


HKLM\Software\Microsoft\Internet Explorer\Extensions\

{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\

"MenuText" = "Sun Java Console"

"CLSIDExtension" = "{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}"

  -> {HKCU...CLSID} = "Java Plug-in"

                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]

  -> {HKLM...CLSID} = "Java Plug-in 1.5.0_06"

                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll" ["Sun Microsystems, Inc."]


{FB5F1910-F110-11D2-BB9E-00C04F795683}\

"ButtonText" = "Messenger"

"MenuText" = "Windows Messenger"

"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]



Running Services (Display Name, Service Name, Path {Service DLL}):

------------------------------------------------------------------


Ati HotKey Poller, Ati HotKey Poller, "C:\WINXP\system32\Ati2evxx.exe" ["ATI Technologies Inc."]

avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" [null data]

avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" [null data]

avast! Web Scanner, avast! Web Scanner, ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"]

BWMeter, BWMeter, "C:\Program Files\BWMeter\Service.exe" [null data]

CesarFTP FTP Server, CesarFTP, "C:\Program Files\CesarFTP\server.exe -S" [null data]

cFosSpeed System Service, cFosSpeedS, ""C:\Program Files\cFosSpeed\spd.exe" -service" ["cFos Software GmbH"]

Firebird Guardian - DefaultInstance, FirebirdGuardianDefaultInstance, "C:\Program Files\Firebird 1.5\bin\fbguard.exe -s" ["The Firebird Project"]

Firebird Server - DefaultInstance, FirebirdServerDefaultInstance, "C:\Program Files\Firebird 1.5\bin\fbserver.exe -s" ["The Firebird Project"]

O&O Defrag, OODefrag, "C:\WINXP\system32\oodag.exe" ["O&O Software GmbH"]

Registry Management Service, RegManServ, "C:\Program Files\Registry Defragmentation\RegManServ.exe" [null data]

Windows User Mode Driver Framework, UMWdf, "C:\WINXP\system32\wdfmgr.exe" [MS]



Print Monitors:

---------------


HKLM\System\CurrentControlSet\Control\Print\Monitors\

Canon BJ Language Monitor BJC-4400\Driver = "CNMLM1E.DLL" ["CANON INC."]

FPP2:\Driver = "fppmon2.dll" ["FinePrint Software, LLC"]

Monitor języka BJ\Driver = "CNBJMON.DLL" [MS]



----------

+ This report excludes default entries except where indicated.

+ To see *everywhere* the script checks and *everything* it finds,

  launch it from a command prompt or a shortcut with the -all parameter.

+ To search all directories of local fixed drives for DESKTOP.INI

  DLL launch points and all Registry CLSIDs for dormant Explorer Bars,

  use the -supp parameter or answer "No" at the first message box.

---------- (total run time: 33 seconds, including 4 seconds for message boxes)

O Outpost to wiem ale ja używałem Kerio Personal ale odinstalowalem wczoraj, mam sieć lokalna i tylko ja mam problem bo nikt mi nic niemówił.

Jak odpale linuxa z livecd to net normalnie chodzi.


(Juniorek) #4

cfosspeed - usun i powinno byc po sprawie ;}


(Darek640) #5

Dzieki :mrgreen: pomogło.


(Myszonus) #6

Działo się to przez cfosspeed tylko dlatego że prawdopodobnie usunąłeś dane kalibracji. I wszystkie "zapisy" programu zostały usunięte. Wywalenie cfosspeda jest ostatecznością :!: Program działa bardzo dobrze jednak trzeba uważać - w przypadku usunięcia tych danych powrót dawnej prędkości neta może potrwać nawet kilka dni.


(Darek640) #7

Zawczesnie sie pochwalilem :(.

Znow netu niemam w, juz niemam siły czy to może by przez karte graficzna bo w sobote nowa zainstalowalem ??


(El Presidento) #8

Usuwasz w HijackThis w Trybie Awaryjnym z Wyłączonym Przywracanie Systemowym :

Plik zaznaczony na czerwono usuwasz ręcznie z dysku.


(Bbieniol) #9

Przed usunięciem tego wpisu (i pliku):

Trzeba wyłączyć tę usługę, czyli Start --> uruchom --> services.msc --> zatrzymaj i wyłącz usługe Windows Log

Dopiero później robisz to co wskazał El Presidento :slight_smile:


(boczi) #10

Nie ma to zupełnie żadnego związku.

VooDoo proszę o używanie polskich znaków w swoich postach.

http://forum.dobreprogramy.pl/viewtopic.php?t=75810


(Darek640) #11

Chyba znalazłem w Avast w jest dostawca Osłona WWW wyłączyłem go i zobacze jak to bedzie się zachowywać.