praegune kellaaeg 04.11.2025 04:27:27 
 |  
 
| 
Hinnavaatlus
:: Foorum
:: Uudised
:: Ärifoorumid
:: HV F1 ennustusvõistlus
:: Pangalink
:: Telekavad
:: HV toote otsing
 |  
 |  
| autor | 
 |  
deusexum 
HV kasutaja 
 
liitunud: 14.11.2002 
 
 
 
 
  | 
 
10.02.2009 23:42:24
Arvuti taaskäivitub iseenesest (Hijack this logi lisatud) | 
    
 | 
 
  | 
 
Tere.
 
 
Selline jama, et arvuti teeb iseenesest restarte. Viskab Win32-ga seotud mingi error akna ette ja siis tuleb pisike ruudukujuline aken, mis teatab, et 1 minuti pärast on restart. Spybot Search and Destroy leidis mingisugused registrimuudatused üles, aga ma ise ei julgenud nendega midagi ette võtta. Hijack this logi on selline:
 
 
Logfile of HijackThis v1.99.1
 
Scan saved at 23:32:12, on 10.02.2009
 
Platform: Windows XP SP3 (WinNT 5.01.2600)
 
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
 
 
Running processes:
 
C:\WINDOWS\System32\smss.exe
 
C:\WINDOWS\system32\winlogon.exe
 
C:\WINDOWS\system32\services.exe
 
C:\WINDOWS\system32\lsass.exe
 
C:\WINDOWS\system32\ibmpmsvc.exe
 
C:\WINDOWS\System32\Ati2evxx.exe
 
C:\WINDOWS\system32\svchost.exe
 
C:\WINDOWS\System32\svchost.exe
 
C:\WINDOWS\system32\Ati2evxx.exe
 
C:\WINDOWS\Explorer.EXE
 
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
 
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
 
D:\Program Files\Alwil Software\Avast4\ashServ.exe
 
C:\WINDOWS\system32\spoolsv.exe
 
D:\Program Files\a-squared Free\a2service.exe
 
C:\WINDOWS\System32\Drivers\bwcsrv.exe
 
D:\Program Files\BUFFALO\Client Manager3\bwsvc\bwsvc.exe
 
D:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
 
C:\WINDOWS\System32\svchost.exe
 
C:\Program Files\Java\jre6\bin\jqs.exe
 
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
 
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
 
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
 
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
 
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
 
C:\WINDOWS\system32\rundll32.exe
 
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
 
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
 
C:\Program Files\Google\Google Talk\googletalk.exe
 
C:\Program Files\Java\jre6\bin\jusched.exe
 
D:\Program Files\D-Tools\daemon.exe
 
D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
 
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
 
C:\WINDOWS\system32\ctfmon.exe
 
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
 
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
 
C:\Program Files\Windows Media Player\WMPNSCFG.exe
 
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 
D:\Program Files\BUFFALO\Client Manager3\cm3_tray.exe
 
D:\Program Files\aMSN\bin\wish.exe
 
D:\Program Files\Mozilla Firefox\firefox.exe
 
D:\Program Files\Hijackthis\HijackThis.exe
 
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
 
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=33568
 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache.ut.ee:3128
 
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
 
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\FlashGet\jccatch.dll
 
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
 
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
 
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
 
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
 
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
 
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\FlashGet\getflash.dll
 
O2 - BHO: Adblock Pro - {F385C231-605B-4d8f-ACA9-DBFF765BBE17} - D:\Program Files\Adblock Pro\AdblockPro.dll
 
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
 
O4 - HKLM\..\Run: [BMMLREF] D:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
 
O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe D:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor
 
O4 - HKLM\..\Run: [BLOG] rundll32.exe D:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
 
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
 
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
 
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
 
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
 
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe"  -lang 1033
 
O4 - HKLM\..\Run: [CloneCDTray] "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
 
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
 
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
 
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
 
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
 
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
 
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
 
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 
O4 - Global Startup: ClientManager3.lnk = D:\Program Files\BUFFALO\Client Manager3\cm3_tray.exe
 
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
 
O8 - Extra context menu item: &Block This Image (ABP) - D:\Program Files\Adblock Pro\blockimg.html
 
O8 - Extra context menu item: &Download All with FlashGet - D:\Program Files\FlashGet\jc_all.htm
 
O8 - Extra context menu item: &Download with FlashGet - D:\Program Files\FlashGet\jc_link.htm
 
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
 
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
 
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet\FlashGet.exe
 
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet\FlashGet.exe
 
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
 
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
 
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
 
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
 
O9 - Extra button: Adblock Pro Preferences - {E7FD3540-AB30-40f1-91E7-101F733C1FD5} - D:\Program Files\Adblock Pro\AdblockPro.dll
 
O9 - Extra 'Tools' menuitem: Adblock Pro Preferences - {E7FD3540-AB30-40f1-91E7-101F733C1FD5} - D:\Program Files\Adblock Pro\AdblockPro.dll
 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
 
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
 
O11 - Options group: [INTERNATIONAL] International*
 
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/tartu/support/plugins/ebraryRdr.cab
 
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1220943333867
 
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
 
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
 
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
 
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
 
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
 
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - D:\Program Files\a-squared Free\a2service.exe
 
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
 
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
 
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
 
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
 
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
 
O23 - Service: BUFFALO Wireless Configuration Service (bwcsrv) - Unknown owner - C:\WINDOWS\System32\Drivers\bwcsrv.exe
 
O23 - Service: Bwsvc - BUFFALO INC. - D:\Program Files\BUFFALO\Client Manager3\bwsvc\bwsvc.exe
 
O23 - Service: Diskeeper - Diskeeper Corporation - D:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
 
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
 
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
 
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
 
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
 
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
 | 
 
  | 
 
	
		
			
			
				| Kommentaarid: 7 loe/lisa | 
				Kasutajad arvavad: | 
				    | 
				 :: | 
				  0 :: | 
				  0 :: | 
				  7 | 
			 
			 
		 | 
	 
| tagasi üles | 
 | 
 
  | 
 
Lord Ami 
HV veteran 
 
  
liitunud: 13.01.2006 
 
 
 
  
  | 
 
11.02.2009 06:55:16
 | 
    
 | 
 
  | 
 
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
 
Fixi see. Muu paistab OK.
 
Sellest automatic shutdownist saad lahti võimalik et nii:
 
Start - Run kirjuta:
 
 
Ehk saad tõmmata selle:
 
http://www.arvutikaitse.ee/?p=1275
 
Uuenda programm ära ning tee quick scan ja eemalda leitud objektid.
 | 
 
  | 
 
	
		
			
			
				| Kommentaarid: 57 loe/lisa | 
				Kasutajad arvavad: | 
				    | 
				 :: | 
				  0 :: | 
				  0 :: | 
				  52 | 
			 
			 
		 | 
	 
| tagasi üles | 
 | 
 
  | 
 
 | 
 
 
|  lisa lemmikuks | 
 | 
 
    | 
sa ei või postitada uusi teemasid siia foorumisse sa ei või vastata selle foorumi teemadele sa ei või muuta oma postitusi selles foorumis sa ei või kustutada oma postitusi selles foorumis sa ei või vastata küsitlustele selles foorumis sa ei saa lisada manuseid selles foorumis sa võid manuseid alla laadida selles foorumis
  |  
 
 | 
 
 
 
  
Hinnavaatlus ei vastuta foorumis tehtud postituste eest. 
 |