1. Este site usa cookies. Ao continuar a usar este site está a concordar com o nosso uso de cookies. Saber Mais.

Processos

Discussão em 'Dúvidas e Suporte Técnico PC' iniciada por Haro_man, 11 de Março de 2007. (Respostas: 8; Visualizações: 960)

  1. Haro_man

    Haro_man Power Member

    Boas tardes pessoal!

    É o seguinte, o meu windows anda constantemente a gerar processos com o nome de IEXPLORE.exe e eu nem sequer tenho o internet explorer aberto.. Chega mesmo a estar uns 4 ou 5 processos destes activos o que me está a gastar recursos... Há alguma maneira de bloquiar isto?
     
  2. jotenko

    jotenko Banido

    mete aí um log do hijackthis!
     
  3. Scarecrow

    Scarecrow Power Member

    O mais provável é ser uma virose que está a fingir que é o internet explorer..corre spybot e afins para tentar limpar isso..até porque normalmente o processo do internet explorer aparece em letras mínusculas (iexplore.exe)

    Cumps
     
  4. Haro_man

    Haro_man Power Member

    Na verdade já corri spybot, ad-ware e kaspersky e mesmo assim continua. O kaspersky apanhou me varios trojans no pc, e apartir daí o PC ja ficou melhor . Agora e mesmo so isso dos processos :014:
     
  5. Haro_man

    Haro_man Power Member

    Acabei de fazer um scan no Hijackthis .
    Aqui vai...

    Logfile of HijackThis v1.99.1
    Scan saved at 11:58:03, on 12-03-2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\Programas\Ficheiros comuns\Microsoft Shared\VS7DEBUG\mdm.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\sstray.exe
    C:\Programas\Alcatel\SpeedTouch USB\Dragdiag.exe
    C:\Programas\Java\jre1.5.0_11\bin\jusched.exe
    C:\Programas\DAEMON Tools\daemon.exe
    C:\Programas\Ficheiros comuns\InstallShield\UpdateService\issch.exe
    C:\WINDOWS\system32\RunDLL32.exe
    C:\Programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Programas\MSN Messenger\MsnMsgr.Exe
    C:\Programas\CursorXP\CursorXP.exe
    C:\Programas\Internet Explorer\iexplore.exe
    C:\Programas\Messenger\msmsgs.exe
    C:\WINDOWS\system32\wscntfy.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Programas\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
    C:\Programas\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\Programas\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
    C:\Programas\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
    C:\Programas\MSN Messenger\usnsvc.exe
    C:\Programas\Internet Explorer\iexplore.exe
    C:\Programas\Ficheiros comuns\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Documents and Settings\Haro_man\Application Data\Firefox\firefox.exe
    C:\Programas\Windows Media Player\wmplayer.exe
    C:\DOCUME~1\Haro_man\DEFINI~1\Temp\Rar$EX00.750\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com.br/0SEPTBR/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com.br/0SEPTBR/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com.br/0SEPTBR/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programas\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programas\Ficheiros comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Programas\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programas\Java\jre1.5.0_11\bin\jusched.exe"
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programas\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Programas\Ficheiros comuns\InstallShield\UpdateService\isuspm.exe" -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programas\Ficheiros comuns\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [third peak 01 deaf] C:\Documents and Settings\All Users\Application Data\Skipwaitthirdpeak\Poll each.exe
    O4 - HKLM\..\Run: [kav] "C:\Programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [CursorXP] C:\Programas\CursorXP\CursorXP.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Programas\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [WhenUSave] "C:\Programas\Save\Save.exe"
    O4 - HKCU\..\Run: [Steam] C:\Programas\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [Coal Shim] C:\DOCUME~1\Haro_man\APPLIC~1\SHOWPA~1\ThatGrey.exe
    O4 - HKCU\..\Run: [Azureus Installer] "C:\Programas\Azureus Installer\Azureus-Installer.exe"
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programas\Ficheiros comuns\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
    O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0456EA8F-8AD4-4055-A6E6-97B2606610E8}: NameServer = 85.255.114.84,85.255.112.198
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0F9C2D17-7ECB-4A4A-A722-DBE906E9EC5B}: NameServer = 85.255.114.84 85.255.112.198
    O17 - HKLM\System\CCS\Services\Tcpip\..\{AD6F30E4-BAD1-43E8-BEF2-5716EA0635D5}: NameServer = 85.255.114.84,85.255.112.198
    O17 - HKLM\System\CCS\Services\Tcpip\..\{DCC5D80C-C8B5-47C0-BB49-F825561F7040}: NameServer = 85.255.114.84,85.255.112.198
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.84 85.255.112.198
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0456EA8F-8AD4-4055-A6E6-97B2606610E8}: NameServer = 85.255.114.84,85.255.112.198
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.84 85.255.112.198
    O17 - HKLM\System\CS2\Services\Tcpip\..\{0456EA8F-8AD4-4055-A6E6-97B2606610E8}: NameServer = 85.255.114.84,85.255.112.198
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.84 85.255.112.198
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
     
  6. Haro_man

    Haro_man Power Member

    Entao pessoal ? Niguem sabe? :(
     
  7. DekkeR

    DekkeR Power Member

    Faz Copy Paste disso para este site, faz Analyse e apaga as entradas que tiverem «?» e «X»
     
  8. Haro_man

    Haro_man Power Member

    Pois e . Apaguei alguns, mas nao fiz nenhum ponto de restauro :( esqueci-me. Agora o meu browser so esta a abrir algumas paginas de internet dos marcadores. O resto nao abre nada :( terá isto a ver com alguma coisa com os processos? Há alguma maneira de voltar atras?
     
  9. luikki

    luikki Power Member

    desactiva o restauro de sistema e volta a correr o spybot...
     

Partilhar esta Página