Usporen računar

• 1Ovo se svidja korisniku: Wizzard
  
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Zdravo, već nekoliko dana imam problema s računarom. Izvesno vreme se vrlo bučno čuje pri paljenju, moram nekoliko puta da ga uključim i isključim da bi se nakon četvrtog, petog puta, uključio bez brujanja. Desilo se do sad nekoliko puta da, i nakon što se uključi i radi normalno nekoliko sati, u toku rada sam od sebe počne ponovo da bruji i onda moram opet da ga isključim. Pretpostavljam da treba da se zameni napajanje ili tako nešto, i to nije ni problem, problem je što se računar pri radu koči, pa sam samo htela ovde da proverim da li je to kočenje povezano sa ovim brujanjem, ili je nešto do softvera. Naime, relativno skoro sam reinstalirala Windows, sve je besprekorno radilo. Nekoliko zadnjih dana se vrlo sporo isključuje, treba mu jedno minut i po da se isključi, crvena sijaličica na kućištu gotovo bez prestanka svetli a CPU je normalan, ide do 8% najviše kad ne radim ništa na računaru. Pritom, za otvaranje programa, pogotovo za otvaranje googla, treba mu mnogo vremena, sigurno po tridesetak sekundi. Inače koristim telekomov adsl, brzine 4mb. Takođe, ako pokrenem google, i dok čekam da se otvori pokrenem npr i winamp, sve se ukoči i piše "Windows explorer has stopped working", ekran se zamrzne, i posle nekoliko sekundi piše "win explorer is restarting", i onda se odmrzne i sve počne da radi. Inače, surfovanje netom nije otežano, samo je otežano otvaranje interneta, kao i programa. Dešava se da se iz čista mira, u toku rada ukoči nekoliko sekundi, bez prestanka svetli sijalica na kućištu a pored kursora se vrti onaj plavi kružić kao da bez prestanka učitava nešto u pozadini. Skenirala sam ga anivirusom, ništa nije našao. Ne razumem se baš mnogo, pa bih volela da mi ovde neko pomogne, da vidim mogu li ovde da rešim problem ako ga ima ili da ga nosim u servis i reinstaliram windows ponovo.
Evo, nadam se da sam sve potrebno oko prikačivanja fajlova dobro uradila. Pozdrav, Marija


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by Vucic family at 18:29:14 on 2011-09-28
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.1791.842 [GMT 2:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\nvvsvc.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\WUDFHost.exe
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\Explorer.EXE
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vucic family\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [POP Peeper] "c:\program files\pop peeper\POPPeeper.exe" -min
uRun: [Microsoft Security Client User Interface] c:\program files\microsoft security client\msseces.exe
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{553EEE89-4B34-4439-9383-7F99C9430C1A} : DhcpNameServer = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-8-3 232512]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 165648]
R1 MpKslc205c1e8;MpKslc205c1e8;c:\programdata\microsoft\microsoft antimalware\definition updates\{a29ce621-2fd9-4cee-95af-2c8ee98c6910}\MpKslc205c1e8.sys [2011-9-28 28752]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2011-7-8 1052480]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2011-4-27 65024]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\antimalware\NisSrv.exe [2011-4-27 208944]
R3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2011-8-3 1399680]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SwOffScheduler;Airytec Switch Off - Task Scheduler;c:\program files\airytec\switch off\swoff.exe -service --> c:\program files\airytec\switch off\swoff.exe -service [?]
S2 SwOffWeb;Airytec Switch Off - Web Interface;c:\program files\airytec\switch off\swoff.exe -service --> c:\program files\airytec\switch off\swoff.exe -service [?]
S3 AMBFilt;AMBFilt;c:\windows\system32\drivers\Ambfilt.sys [2011-8-3 1656960]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2011-4-18 43392]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-8-4 52224]
.
=============== Created Last 30 ================
.
2011-09-28 09:35:36 28752 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a29ce621-2fd9-4cee-95af-2c8ee98c6910}\MpKslc205c1e8.sys
2011-09-28 09:35:31 56200 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a29ce621-2fd9-4cee-95af-2c8ee98c6910}\offreg.dll
2011-09-27 23:07:48 7269712 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a29ce621-2fd9-4cee-95af-2c8ee98c6910}\mpengine.dll
2011-09-22 13:37:23 16384 ----a-w- c:\windows\system32\drivers\AdfuUd.sys
2011-09-22 13:37:21 -------- d-----w- c:\program files\Philips
2011-09-22 13:37:01 -------- d-----w- C:\temp
2011-09-14 18:01:51 -------- d-----w- c:\users\vucic family\appdata\roaming\GetRightToGo
2011-09-09 19:47:34 -------- d-----w- c:\users\vucic family\appdata\local\Oblivion
2011-09-09 11:37:38 753664 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iKernel.dll
2011-09-09 11:37:38 69714 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\ctor.dll
2011-09-09 11:37:38 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\DotNetInstaller.exe
2011-09-09 11:37:38 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iscript.dll
2011-09-09 11:37:38 184320 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iuser.dll
2011-09-09 11:37:37 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\setup.dll
2011-09-09 11:37:37 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iGdi.dll
2011-09-08 21:21:18 640888 ----a-w- c:\program files\uTorrent.exe
2011-09-08 18:06:24 108144 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-09-08 07:07:26 439632 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{c729b9fd-6dc7-4a2a-b50f-75e75596e9cf}\gapaengine.dll
2011-09-06 07:12:08 737072 ----a-w- c:\programdata\microsoft\ehome\packages\sportsv2\sportstemplatecore\Microsoft.MediaCenter.Sports.UI.dll
2011-09-06 07:11:49 4283672 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\updateablemarkup\markup.dll
2011-09-06 07:11:22 42776 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\dsm\StartResources.dll
2011-09-06 07:11:17 539968 ----a-w- c:\programdata\microsoft\ehome\packages\mcespotlight\mcespotlight\SpotlightResources.dll
2011-09-06 06:45:41 -------- d-----w- c:\users\vucic family\appdata\roaming\Bassic Technologies
2011-09-02 17:09:53 89599 ----a-w- c:\programdata\microsoft\microsoft antimalware\localcopy\{7ECCED26-7AD8-4011-B1BA-1D1586BDBCC8}-unyk.pif
.
==================== Find3M ====================
.
2011-08-04 02:21:26 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-08-03 19:02:16 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-08-03 14:30:09 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-22 02:54:43 1797632 ----a-w- c:\windows\system32\jscript9.dll
2011-07-22 02:48:26 1126912 ----a-w- c:\windows\system32\wininet.dll
2011-07-22 02:44:36 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-07-16 04:27:30 290816 ----a-w- c:\windows\system32\KernelBase.dll
2011-07-16 02:17:19 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:17:19 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:17:19 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:17:19 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-09 04:29:46 2048 ----a-w- c:\windows\system32\tzres.dll
2011-07-09 02:30:00 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-07-08 11:20:22 30528 ----a-w- c:\windows\system32\TURegOpt.exe
2011-07-08 11:15:06 21312 ----a-w- c:\windows\system32\authuitu.dll
2011-07-08 11:14:56 30016 ----a-w- c:\windows\system32\uxtuneup.dll
.
============= FINISH: 18:29:28,45 ===============

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

• 1Ovo se svidja korisniku: ThePhilosopher
  
  Registruj se da bi pohvalio/la poruku!

Pozdrav...



U sistemu nisu prisutni tragovi aktivne infekcije. S obzirom da u Ambulanti riješavamo isključivo probleme uzrokovane malware-om, isprati savjete u ovoj temi.
Ako ti ti savjeti u toj temi ne pomognu, otvori temu u Windows forumu i tamo iznesi svoj problem.





U izvještajima se vidi da je instaliran MCShield, no nije pokrenut. Preporučujem ti da ga držiš stalno uključenim.
Ako nije instaliran, preporučujem ti da ga instaliraš.
MCShield Home Page. Nema nikakve veze sa antivirus-om tj. neće ometati njegov rad, a pokazao se kao jedan od najboljih vida zaštite od malware-a koji se prenosi putem USB mem. uređaja.

Skineš, instaliraš, ubodeš USB mem. uređaj, izvrši se skeniranje nakon čega dobiješ obavještenje da je uređaj čist (ukoliko je stvarno tako); ili dobiješ log u kome vidiš informacije o malware-u koji je nađen i obrisan.

Više o MCShield-u možeš saznati u ovoj temi: http://www.mycity.rs/Antispyware-programi/MCShield.html




Sass Drake, MyCity AMF tim