wyskakuje okienko ze system sie zamknie za 1 min

**Posty:** 17 · przez **BOLO1990** 18 Kwi 2006, 23:11

wyskakuje mi takie okienko jak na zalaczonym obrazku
http://img473.imageshack.us/my.php?image=blad9ga.jpg
i po 1 min uruchamia mi sie ponownie komp. robi sie tak co jakies 30 min i nie wiem co mam zrobic bo jeszcze mam problem z svchost.exe i to mi uniemozliwia zeskanowanie komputera

**Posty:** 7838 · przez **Lukesh** 18 Kwi 2006, 23:14

Blaster

to jest chyba to, zainstaluj: http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=pl

przez **jeff** 18 Kwi 2006, 23:17

jeszcze mam problem z svchost.exe i to mi uniemozliwia zeskanowanie komputera

daj log w tagach

http://forum.programosy.pl/hijackthis-gtobsuga-i-umieszczanie-loga-vt9452.html

**Posty:** 17 · przez **BOLO1990** 18 Kwi 2006, 23:19

oto log

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 22:01:29, on 2006-04-18 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\Ati2evxx.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\htpatch.exe C:\WINDOWS\System32\RunDll32.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\AntiVirenKit 2006\AVKTray\AVKTray.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe C:\Program Files\G DATA\AntiVirenKit InternetSecurity\Firewall\kavpf.exe C:\Program Files\G DATA\AntiVirenKit InternetSecurity\Webfilter\WebFilter.exe C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\AntiVirenKit 2006\AVKService.exe C:\Program Files\AntiVirenKit 2006\AVKWCtl.exe C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\PROGRA~1\G DATA\AntiVirenKit InternetSecurity\Webfilter\AdsCleaner.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\cmd.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\BOLO\Pulpit\cenzura!\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: Shell=explorer.exe O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\system32\SiKernel.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SIPAKBHO Class - {40FB69E1-9B7B-453F-B238-37D8E9528929} - C:\Program Files\G DATA\AntiVirenKit InternetSecurity\Webfilter\PAKIEPlugins.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Offliner AdFilter Helper - {DC9377A2-2E8D-44A1-99DB-F8A821DF254D} - C:\WINDOWS\system32\SiPlugins.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Pasek Webfilter - {75CD0BC5-E317-449C-9FF6-4986B3D48F64} - C:\PROGRA~1\G DATA\AntiVirenKit InternetSecurity\Webfilter\PAKIEGUI.dll O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [ioloDelayModule] C:\Program Files\iolo\System Mechanic Professional 6\delay.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVKTray] "C:\Program Files\AntiVirenKit 2006\AVKTray\AVKTray.exe" O4 - HKLM\..\Run: [Spik] C:\Program Files\Spik\Spik.exe -autostart O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe" O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: Firewall.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Add selected links to Link Container - C:\PROGRA~1\G DATA\AntiVirenKit InternetSecurity\Webfilter\System\Scripts\off_collector_sel.htm O8 - Extra context menu item: Show domain links - C:\PROGRA~1\G DATA\AntiVirenKit InternetSecurity\Webfilter\System\Scripts\off_domain_links.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{638F38FA-2834-4D62-975F-91C84E92A6F9}: NameServer = 213.77.75.2,213.77.75.100 O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - C:\Program Files\Spik\url_wpmsg.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVKProxy - G DATA Software AG - C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit 2006\AVKService.exe O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit 2006\AVKWCtl.exe O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: EMBDTKKAEMI - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BOLO\USTAWI~1\Temp\EMBDTKKAEMI.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: TJNLOOHAVNM - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BOLO\USTAWI~1\Temp\TJNLOOHAVNM.exe O23 - Service: XSFJEX - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BOLO\USTAWI~1\Temp\XSFJEX.exe

**Posty:** 7838 · przez **Lukesh** 18 Kwi 2006, 23:20

daj log w tagach

wystarczy zainstalowac dodatek do WIN XP, ale nie jestem pewien czy to ten ktory podalem (jest juz zawarty w SP)

[ Dodano: Dzisiaj o 21:21 ]
http://www.microsoft.com/poland/security/virus/blaster.mspx

**Posty:** 17 · przez **BOLO1990** 18 Kwi 2006, 23:30

dzieki zainstalowalem i zobaczymy co to bedzie dalej

**Posty:** 7838 · przez **Lukesh** 18 Kwi 2006, 23:32

Jesli podalem odpowiednia latke to powinno pomoc :wink:

przez **jeff** 18 Kwi 2006, 23:41

co do loga to wejdź w tryb awaryjny i skasuj poniższe wpisy

O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\system32\SiKernel.dll
F2 - REG:system.ini: Shell=explorer.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

dodatkowo plik pogrubiony kasujesz recznie z dysku

O23 - Service: EMBDTKKAEMI - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BOLO\USTAWI~1\Temp\EMBDTKKAEMI.exe
O23 - Service: TJNLOOHAVNM - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BOLO\USTAWI~1\Temp\TJNLOOHAVNM.exe
O23 - Service: XSFJEX - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BOLO\USTAWI~1\Temp\XSFJEX.exe

Start >>> Uruchom >>> services.msc >>> zatrzymaj i wyłącz EMBDTKKAEM,TJNLOOHAVNM, XSFJEX i opróżnij folder TEMP

C:\DOCUME~1\BOLO\USTAWI~1\Temp\

wyskakuje okienko ze system sie zamknie za 1 min

wyskakuje okienko ze system sie zamknie za 1 min

Kto jest na forum