prosze o sprawdzenie loga :)

**Posty:** 33 · przez **R0bson** 08 Sty 2006, 02:23

Miałem problem mulił mi komputer, uzyłem programow:
-Ad-Aware
-Spy Sweeper
-Spy Emergency
i wydaje sie wszystko OK ( czasami jak wyłączam komputer to sam sie spowrotem włancza) ale jeszcze dodatkowo chciałbym sie pozbyc automatycznego włączania sie programow zaraz po włączeniu komputera:
-Winamp
-Skype
-GG
oraz własnie tych programow co wymieniłem wyzej.

Kod: Zaznacz wszystko: StartupList report, 2006-01-08, 00:20:33 StartupList version: 1.52.2 Started from : D:\Programy\Do Czyszczenia\Do usuwania szkodnikow\HijackThis.EXE Detected: Windows XP Dodatek SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180) * Using default options ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\MMTray.exe C:\WINDOWS\system32\MMTray2k.exe C:\WINDOWS\system32\MMTrayLSI.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Internet Explorer\iexplore.exe D:\Programy\Do Czyszczenia\Do usuwania szkodnikow\HijackThis.exe -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\userinit.exe, -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run MMTray = MMTray.exe MMTray2K = MMTray2k.exe MMTrayLSI = MMTrayLSI.exe avast! = C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup nwiz = nwiz.exe /install NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit Resume copy = copyfstq.exe /startup NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe SoundMan = SOUNDMAN.EXE SpySweeper = "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray -------------------------------------------------- Shell & screensaver key from C:\WINDOWS\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=Explorer.exe SCRNSAVE.EXE=*Registry value not found* drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry key not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Enumerating Browser Helper Objects: (no name) - c:\program files\google\googletoolbar2.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7} {92E1B3F7-0546-421E-9835-904D25B7BA66} - C:\WINDOWS\system32\winvbie.dll - {C4F147D7-BF25-488E-A12B-EFD43E7029BF} -------------------------------------------------- Enumerating Download Program Files: [Shockwave ActiveX Control] InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab [{1D6711C8-7154-40BB-8380-3DEA45B69CBF}] [Shockwave Flash Object] InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab -------------------------------------------------- Enumerating Winsock LSP files: Protocol #1: PrxerDrv.dll (file MISSING) Protocol #7: PrxerDrv.dll (file MISSING) -------------------------------------------------- Enumerating Windows NT logon/logoff scripts: *No scripts set to run* Windows NT checkdisk command: BootExecute = autocheck autochk * Windows NT 'Wininit.ini': PendingFileRenameOperations: C:\DOCUME~1\xxzx\USTAWI~1\Temp\spyemergency|||W -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: PostBootReminder: C:\WINDOWS\system32\SHELL32.dll CDBurn: C:\WINDOWS\system32\SHELL32.dll WebCheck: C:\WINDOWS\system32\webcheck.dll SysTray: C:\WINDOWS\system32\stobject.dll -------------------------------------------------- End of report, 4 969 bytes Report generated in 0,031 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

**Posty:** 4043 · przez **prog** 08 Sty 2006, 10:16

grrr
z jakiej wersji dajesz loga :!:

teraz obowiazuje wersja 1.99.1

temat przyklejony - czytaj

przez **jeff** 08 Sty 2006, 10:31

R0bson

poczytaj

http://forum.programosy.pl/hijackthis-gtobsuga-i-umieszczanie-loga-vt9452.html

**Posty:** 7838 · przez **Lukesh** 08 Sty 2006, 10:52

R0bson napisał(a):chciałbym sie pozbyc automatycznego włączania sie programow zaraz po włączeniu komputera:
-Winamp
-Skype
-GG
oraz własnie tych programow co wymieniłem wyzej.

START>uruchom>msconfig>zakladka"uruchamianie" i odznaczasz:
-Winamp
-Skype
-GG
-Ad-Aware
-Spy Sweeper
-Spy Emergency

(nie wiem jakie one tam nazwy nosza ale w "polecenie" jest napisane zrodlo plliku wiec na pewno po tym dojdziesz...

**Posty:** 33 · przez **R0bson** 08 Sty 2006, 13:13

No to ja zrobilem tak:
Wybrałem " Do a system scan and save a logfile"

Potem : Wybrałem opcie " Config"

Potem:Nastepnie "Misc tools" potem "Generate StartupList log" i na koncu wybrałem "TAK"

no i mam taki log:

Kod: Zaznacz wszystko: StartupList report, 2006-01-08, 11:05:15 StartupList version: 1.52.2 Started from : D:\Programy\Do Czyszczenia\HijackThis.EXE Detected: Windows XP Dodatek SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180) * Using default options ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\MMTray.exe C:\WINDOWS\system32\MMTray2k.exe C:\WINDOWS\system32\MMTrayLSI.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe D:\Programy\Do Czyszczenia\HijackThis.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\svchost.exe -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\userinit.exe, -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run MMTray = MMTray.exe MMTray2K = MMTray2k.exe MMTrayLSI = MMTrayLSI.exe avast! = C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup nwiz = nwiz.exe /install NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit Resume copy = copyfstq.exe /startup NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe SoundMan = SOUNDMAN.EXE SpySweeper = "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray -------------------------------------------------- Shell & screensaver key from C:\WINDOWS\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=Explorer.exe SCRNSAVE.EXE=*Registry value not found* drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry key not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Enumerating Browser Helper Objects: (no name) - c:\program files\google\googletoolbar2.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7} {92E1B3F7-0546-421E-9835-904D25B7BA66} - C:\WINDOWS\system32\winvbie.dll - {C4F147D7-BF25-488E-A12B-EFD43E7029BF} -------------------------------------------------- Enumerating Download Program Files: [Shockwave ActiveX Control] InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab [{1D6711C8-7154-40BB-8380-3DEA45B69CBF}] [Shockwave Flash Object] InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab -------------------------------------------------- Enumerating Winsock LSP files: Protocol #1: PrxerDrv.dll (file MISSING) Protocol #7: PrxerDrv.dll (file MISSING) -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: PostBootReminder: C:\WINDOWS\system32\SHELL32.dll CDBurn: C:\WINDOWS\system32\SHELL32.dll WebCheck: C:\WINDOWS\system32\webcheck.dll SysTray: C:\WINDOWS\system32\stobject.dll -------------------------------------------------- End of report, 4 737 bytes Report generated in 0,031 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

Niewiem moze cos zle robie ;/

**Posty:** 8694 · przez **Red** 08 Sty 2006, 13:16

R0bson napisał(a):Wybrałem " Do a system scan and save a logfile"

i no jak ci sie wygeneruje to wlasnie to wysyłasz ,dalej juz nic nie rob w programie hijack this ....

**Posty:** 33 · przez **R0bson** 08 Sty 2006, 13:18

Aha wiec to macie ten pkil hijackthis.txt

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 11:17:09, on 2006-01-08 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\MMTray.exe C:\WINDOWS\system32\MMTray2k.exe C:\WINDOWS\system32\MMTrayLSI.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\svchost.exe D:\Programy\Do Czyszczenia\HijackThis.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O10 - Broken Internet access because of LSP provider 'prxerdrv.dll' missing O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} - O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

EDIT:
Juz zmienilem w pliku msconfig i juz po uruchamiani mi sie nie włanczaja programy

**Posty:** 8694 · przez **Red** 08 Sty 2006, 13:20

log wyglada na obciety,wklej cały log ktory masz zapisany

**Posty:** 33 · przez **R0bson** 08 Sty 2006, 13:22

To jest cały

**Posty:** 8694 · przez **Red** 08 Sty 2006, 13:26

ok

usuwasz z wylaczonym przywracaniem systemu w xp

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

usun go hijackiem i bedzie ok

**Posty:** 33 · przez **R0bson** 24 Lut 2006, 23:28

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 21:18:26, on 2006-02-24 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\MMTray.exe C:\WINDOWS\system32\MMTray2k.exe C:\WINDOWS\system32\MMTrayLSI.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\svchost.exe D:\Programy\Do Czyszczenia\HijackThis\HijackThis.exe O10 - Broken Internet access because of LSP provider 'prxerdrv.dll' missing O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

Znow mam problem ale nie z predkoscia kompa a internetu HELP

Poprostu jak gram w Counter Strike to mam duzy ping

Z góry THX

prosze o sprawdzenie loga :)

Prosze o sprawdzenie loga :)

Kto jest na forum