Kompai

[arcius78]

berazumijus rašė:
na ka esu mates tai tik is turgaus. bet tokiu dalyku yra. nueik i kokia kompiuterine firma ir paklausk. jei jau visos uzsilenke galiu as nueit paklaust. nepamirsk dar kad reiks ir garsa pajungt prie teliko. as irgi ilgai dusinaus kol nenusprendziau nusipirkt nesiojama kompa kad lovoj filmus ziuret.

............................
jai nesunku tai pazek to laido ir kokia kaina.o garso laida tai gausiu.isanksto aciu.

[AirMegejas]

Nezinau kur rasyt ar cia kur trumpi klausimai, bet visgi rasau cia.

Kas cia gali but, kai ijungiu kompa visada atsidaro firefoxas ir kazkoki tinklapi meta (kurio seniau nebuvau mates). Praskanavau kompa su Avira antivir, tai nieko nerado itartino. Kaip pagydyt sia problema?

[0butas0]

ivedi i run msconfig ir ant startup paziurek ar nera konors nereikalinga.

[berazumijus]

praskanuok dar su kokiu spybot s&d. nebutinai tai virusas. aisku pries tai suupdeitint reikia. o gal ir antivirusas 5 metu senumo.

[AirMegejas]

praskanavau su spybotu, nieko nerado. O startupe yra pora nezinomu, bet ar nesugadinsiu ko nors? imesiu screen

http://img25.imageshack.us/img25/9277/nezinaug.jpg

ten tas rthdcpl ir sekantis itartini man.

[zalias7]

AirMegejas rašė:
praskanavau su spybotu, nieko nerado. O startupe yra pora nezinomu, bet ar nesugadinsiu ko nors? imesiu screen

http://img25.imageshack.us/img25/9277/nezinaug.jpg

ten tas rthdcpl ir sekantis itartini man.

dauk nereikalingu, bet nieko itartino (nors neviskas matosi), as kaskiek laiko atgal aiskinau Fediai kaip susirast HiJackThis ir pateikt jo loga, ten daugiau informacijos nei msconfig

[AirMegejas]

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 19:49:46, on 2010.02.01
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAviraAntiVir Desktopsched.exe
C:Program FilesAviraAntiVir Desktopavguard.exe
C:WINDOWSExplorer.EXE
C:Program FilesSystem Control ManagerMSIService.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesSystem Control ManagerMGSysCtrl.exe
C:Program FilesWinampwinampa.exe
C:Program FilesAviraAntiVir Desktopavgnt.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSsystem32wbemunsecapp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesSkypePhoneSkype.exe
C:WINDOWSsystem32msiexec.exe
C:Program FilesTrendMicroHiJackThisHiJackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.www.daemon-search.com/default
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.msi.com.tw
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [ITSecMng] %ProgramFiles%TOSHIBABluetooth Toshiba StackItSecMng.exe /START
O4 - HKLM..Run: [MGSysCtrl] C:Program FilesSystem Control ManagerMGSysCtrl.exe
O4 - HKLM..Run: [WinampAgent] "C:Program FilesWinampwinampa.exe"
O4 - HKLM..Run: [avgnt] "C:Program FilesAviraAntiVir Desktopavgnt.exe" /min
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.msi.com.tw
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32rowseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32rowseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:Program FilesAviraAntiVir Desktopsched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:Program FilesAviraAntiVir Desktopavguard.exe
O23 - Service: Micro Star SCM - Unknown owner - C:Program FilesSystem Control ManagerMSIService.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe

--
End of file - 4483 bytes

atsiprasau jei prisiukslinau, bet gal kazkas cia su 022 ar 018?

[zalias7]

As tavo vietoi ismesciau:
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"

jei nenaudoju bliutufo
O4 - HKLM..Run: [ITSecMng] %ProgramFiles%TOSHIBABluetooth Toshiba StackItSecMng.exe /START
sitie irgi nereikalingi:
O4 - HKLM..Run: [MGSysCtrl] C:Program FilesSystem Control ManagerMGSysCtrl.exe
O4 - HKLM..Run: [WinampAgent] "C:Program FilesWinampwinampa.exe"

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32rowseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32rowseui.dll

O23 - Service: Micro Star SCM - Unknown owner - C:Program FilesSystem Control ManagerMSIService.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION -

sita irgi jei nenaudoji blitufo
C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe

P.S. bliutuf visad gali pasileist ranka

P.P.S. jokiu itartinu sh.. nematau, o tuos surasytus ismetus, kompo usikrovimas tik pagreites

P.P.P.S del firefox ismesk sita: O4 - Global Startup: Bluetooth Manager.lnk = ?

[berazumijus]

man ir sitie kelia itarima :
O14 - IERESET.INF: START_PAGE_URL=http://www.msi.com.tw
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32rowseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32rowseui.dll

[AirMegejas]

o ten tas hijackas neistrins situ dalyku is kompo, jei pamygsiu pazymejes fix ?

[zalias7]

pazymi ir fix, viska isvalo hijack

[berazumijus]

poto perkroves kompa dar praskanuok. jei vel tas pats atsiras vadinas turi kazkokia zaraza. nors nebutina ir perkraut - jei zaraza po keliu sekundziu vel tas pats buna ir neperkrovus.

[AirMegejas]

Istryniau (pasilikau bluetooth, jis anksciau problemu nekele), perkroviau, ir vel man ta svetaine ismeta . thenewspedia kazkoki suda.

[Genijus]

AirMegejas rašė:
Istryniau (pasilikau bluetooth, jis anksciau problemu nekele), perkroviau, ir vel man ta svetaine ismeta . thenewspedia kazkoki suda.

Per search kompe paieskok to thenewspedia. Arba su registry editor.

[AirMegejas]

Nieko neranda. kai valiau temp ir pan su CCleaner, tai avira sucype, istryniau 3 kazkokius worm. Bet perkrovus kompa vel meta tinklapi. Tiesa, tiklapis kaskart vis kitoks. Gal problema ir nedidele, bet nejauku kazkaip nepazistamu sveciu turet kompe.
Gal kas naudoja avira antivirusa? ten yra tokia funkcija, kad kai ijungi pc avira pasikrautu vienas pirmuju, bet neatsimenu kurioj vietoj tas dalykas... ?