MyCity » Ambulanta -> Arhiva Ambulante » Malo, malo pa mi nešto blokira mašinu

Malo, malo pa mi nešto blokira mašinu

Napisano na dan: 9.4.2009

Malo, malo pa mi nešto blokira mašinu
Sledeća strana Pagination

Idi na vrh

Poslao: 09 Apr 2009 13:25
Idi na vrh
offline
  • Pridružio: 03 Avg 2005
  • Poruke: 13

Pre desetak dana sam postavio log fajl i ispoštovao proceduru koja mi je u velikoj meri ubrzala rad računara. Sada se dešava nešto što me brine. Malo, malo pa se čuje nešto kao "CAK", upali se lampica od HD-a i računar blokira. Posle ovoga moguće je samo restartovati računar.

Evo log fajla za sadašnje stanje.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:56:42, on 9.4.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\xampp\apache\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\xampp\mysql\bin\mysqld.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\xampp\apache\bin\apache.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Program Files\Adobe\Adobe Dreamweaver CS4\Dreamweaver.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutorunsDisabled
O4 - Global Startup: hp psc 1000 series.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{1C894D62-DB6F-4730-89E6-4DB00F056FA3}: NameServer = 212.200.191.166,212.200.190.166
O17 - HKLM\System\CS5\Services\Tcpip\..\{1C894D62-DB6F-4730-89E6-4DB00F056FA3}: NameServer = 212.200.191.166,212.200.190.166
O17 - HKLM\System\CS7\Services\Tcpip\..\{1C894D62-DB6F-4730-89E6-4DB00F056FA3}: NameServer = 212.200.191.166,212.200.190.166
O17 - HKLM\System\CS8\Services\Tcpip\..\{1C894D62-DB6F-4730-89E6-4DB00F056FA3}: NameServer = 212.200.191.166,212.200.190.166
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Apache2.2 - Apache Software Foundation - C:\xampp\apache\bin\apache.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O24 - Desktop Component 0: (no name) - (no file)

--
End of file - 7080 bytes



Poslao: 09 Apr 2009 14:33
Idi na vrh
offline
  • DEMIAN  Male
  • Legendarni građanin
  • IT Manager
  • Pridružio: 25 Mar 2005
  • Poruke: 3706
  • Gde živiš: The darkest place on earth..

Pozdrav,

Pre 6 dana si postavio temu u Ambulanti. Kolega (Dr Bora) ti je detaljno proverio sistem i konstantovao da je čist. To je bilo 7. aprila. Od tada do danas se ništa nije promenilo u tom smislu. I ovaj log koji si postavio ne pokazuje tragove aktivnog malware-a.

Problem na koji se ti sada žališ ti je verovatno vezan za neispravnost hard diska. Otvori temu u hardware delu foruma.



MyCity » Ambulanta -> Arhiva Ambulante » Malo, malo pa mi nešto blokira mašinu

Ko je trenutno na forumu
 

Ukupno su 1979 korisnika na forumu :: 187 registrovanih, 13 sakrivenih i 1779 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 015, 100jan, _stipa_, ajo baba, Aleksandar1991, Aleksandar_038, aleksmajstor, aleph_one, AMX72, antonije64, Apok, Aristotle2002, Armadillo, ArmFPGA, asdfjklc, Aska, Automaticar, B61, babaroga, Banovo Brdo, Barista, BasCelik, Batko.VD.65, BB, Ben Roj, bigfoot, blatruc82, bobo85, Bobrock1, bojankrstc, Bojcca, bojcistv, bokisha253, Boris BM, boromir, BtR-45, Bubimir, BWG, cakija, ceman, d.arsenal321, darionis, Darko8, darkojbn, Darth Malak, Dekanovic, dekiz, delboy, desmeki, Djota1, djukapfc, draganca, draganche.rs, draganl, Dragon Order, dule10savic, Džekson, Electron, Feller, gale48, Georgius, ghoost, Giskard, GUARIN, Imperator_Aleksandr_lll, In_hero, ivan1973, ivan979, Ivica1102, Jakonjveliki, jalos, jodzula, Jovan1983, Još malo pa deda, Kajzer Soze, Kamov, Kapetan Hadok, king111, kmnmada, Kobrim, komsija1, kori, kovalski, kreker, Kubovac, lacko, ljuba.b, LostInSpaceandTime, Lotus, Lucije Kvint, madun123, Mae, Magistar78, Makarid, MarsRed, mat, Mcdado, mercedesamg, metallac777, Mig 29, Miki 84, mikrimaus, milenko crazy north, milijarder, mir, MiroslavD, Mis uz pusku, mist-mist, mnn2, moldway, mux, Naturelo, Natuzzi, naunwzbn, Ne doznajem se u oružje, nebidrag, Nebojsa81, neko iz mase, Nemanja Opalić, Nemanja.M, Niki2024, nisamBot, paladin71, Pancevac, Panta1992, Papadubi, Pavel Medved, pceklic, Permaldar, Pero Petković, Perudin_92, Pewac21, Piicoki, Pilence, pisac12, Plavi Jadran, procesor, proka89, raso76, rebro1974, RJ, Roksi, s putnik, sale76, Samo gledam, SamoGledam, sasovsky, Scarecrow994, sevenino, shaja1, Sharpshooter, Sin Boskic, siwoti, skvara, sluga, Sone0883, sportyesorno, ssekir75, sspp, stokssone, Teodor60, Timočka Divizija, Tribal, troki1971, Underwood, Uros Cuore Sportivo, v0idmp3, vathra, vensla, vidra1, Vlada78, Vojkan Petrovic, Vojvoda81, Welky, yufighter, zemljanin, Zerajic, ZetaMan, zivojin32, Zjmc, Zrcalo, zrno, zubri, zxstole, zzapNDjuric99, 787, 800077