Startup predugo traje

Pozdrav,
kad mi se ucita win moram cekati oko 2-3 min. da mogu poceti rad na racunaru,
a startup-u imam samo kaspersky, windows security alert(crveni stit zbog automatic update), i lan karticu
preko koje idem na net i sad ne znam od to troje sta je problem, Kaspersky nije 100%.
Molim pomoc.
Pozz

Skinite program HijackThis.
Kada ga preuzmete, preimenujte fajl u bilo sta, npr. “destruct0.exe”. Pokrenite ga i kliknite “Do a system scan and save a logfile”. Taj log iskopirajte ovde.
U logu cemo videti sta se sve pali pri startup-u.

Ma kaspersky je sigurno. Ove nove verzije se uvuku svuda i nesto odradjuju na pocetku. Dok ne odradi sta hoce racunar skoro da "stoji". Pronadji Bootvis i pogledaj sta se desava prilokom dizanja i koliko traje

---

Kasperski skenira nešto pri pokretanju, valjda memoriju, startup objekte ... zar je 2-3 minuta neki problem? Ja retko uključujem komp (pošto ga jelte skoro nikad i ne isključujem) ali kad to radim, obično završim neki važniji poslić i kada se vratim, sve je spremno.

Puno je 2 a kamoli 3 minute. Izuzetak ako je to neka stara trojka sa malo memorije.
Imaju i drugi Kaspersky ali ne cekaju toliko. Nesto drugo "koci" po mom misljenju...
A vinyl se ne javlja...

Evo mene, s malim zakasnjenjem. Nije do mene nego do mog provajdera.
Inace racunar mi je 1.8 MHz, 384 RAM, 64 MB graficke, Win XP SP2
*****************************************************

Logfile of HijackThis v1.99.1
Scan saved at 23:55:39, on 28.6.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Kibsa\Desktop\2323.exe

O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - Global Startup: Server4PC.lnk = C:\Program Files\TechniSat DVB\bin\Server4PC.exe
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{00C204F4-5F28-45E0-A267-AF37C2A98F95}: NameServer = 87.250.97.250 87.250.98.250
O17 - HKLM\System\CS1\Services\Tcpip\..\{00C204F4-5F28-45E0-A267-AF37C2A98F95}: NameServer = 87.250.97.250 87.250.98.250
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: Kaspersky Internet Security (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

Prema log fajlu na desktopu korisnika Kibsa se nalazi izvrsni fajl pod nazivom 2323.exe.

Google upucuje na ovo:
http://www.prevx.com/filenames...5707481161340-X1/2323.EXE.html

Sto se tice ostalih stavki iz log fajla, izgledaju uredno....

2323.exe je sigurno HijackThis. ;)
Nema nista sumnjivo. Da nije mozda u Kasperskom ukljucen automatski Quick Scan pri ukljucivanju racunara?

Da ne otvaram novu temu!

Moze li mi neko objasniti koju funkciju ima ova stavka u startapu i moze li se odcekirati da se ne aktivira prilikom podizanja sistema:

C:\Windows\ehome\ehTray.exe

---

http://www.file.net/process/ehtray.exe.html
Pa ti sam odluci hoces li je iskljuciti ili ne... Ako ne mozes da odlucis pitaj opet :)

Ok video sam i skontao, a ako vam nije tesko recite mi iz prilozene slike da li treba da budu ukljuceni svi ovi procesi ili moze neki da se iskljuci i olaksa dizanje sistema

---

Druze Djuro,ja sam imao slicni problem,pa vidi mozda ce ti ovo pomoci:Idite na Network Connections kliknite dva puta na local Area Connection pa na Properties,dupli klik na Internet Protocol(TCP/IP) stavite tackicu na sledece Use the following IP address i unesite brojeve za IP address i Subnet mask(njih mozete videti u prethodno otvorenom prozoru Network Connections u doljneg levog ugla gde pise Details) kliknite na OK neki dva puta resetirajte PC i vidite dali ima nesto korisno od ovog,ja sam tako resio moj problem(nakon visemesecne muke :-) )

@slobo klajic: U čemu je tvoj problem?
Istu stvar si već pitao ovde na forumu više puta i svaki put si dobio i konkretan odgovor, tako da ne razumem baš o čemu se radi?!?

Npr.

ovde 10.06.2008

ovde 03.08.2009

ovde 22.08.2009

---

da ne bih otvarao drugu temu,napisacu problem ovde: isti slucaj kao i sa postavljacem teme,s tim sto meni treba oko 5 min da se podigne sistem. OS je original windows vista,dobio sam je uz laptop i od prvog dana je tako spora,dok recimo kod druga koji na laptopu ima nelegalnu vistu startup traje normalno [ne znam tacno u minutima,ali dosta brze od moje]

evo hijackthis loga,pa ako neko moze da pogleda..


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:27:58, on 4.1.2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18349)
Boot mode: Normal

Running processes:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\MPK\MPK.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
E:\Program Files\PowerISO\PWRISOVM.EXE
E:\Program Files\Winamp\winampa.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\PROGRA~1\mcafee\msc\mcuimgr.exe
C:\Windows\system32\conime.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
E:\Program Files\SpeedFan\speedfan.exe
E:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Windows\system32\wuauclt.exe
E:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
E:\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,C:\Windows\system32\MPK\MPK.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [cfFncEnabler.exe] cfFncEnabler.exe
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe IE PA
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [jswtrayutil] "C:\Program Files\Jumpstart\jswtrayutil.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] E:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [WinampAgent] "E:\Program Files\Winamp\winampa.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Global Startup: McAfee Security Scan.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: eBay.co.uk - Buy It Sell It Love It - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/710-44557-9400-3/4 (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/o...hibaukbholink-21&site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\Jumpstart\jswpsapi.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 10425 bytes

Koliko vidim zakacio si trojanca i keylogger.Nadam se da su samo oni, mada mala verovatnoca.Za pocetak fixuj ovo:




Btw jel koristis neku toshibin uredjaj koji kacis na komp?Nakon sto fixujes ovo skeniraj sistem sa malwarebytes anti-malware i okaci log ovde.

---

@slobo klajic: U čemu je tvoj problem?
Istu stvar si već pitao ovde na forumu više puta i svaki put si dobio i konkretan odgovor, tako da ne razumem baš o čemu se radi?!?

Npr.

ovde 10.06.2008

ovde 03.08.2009

ovde 22.08.2009

:D[/quote][quote]Catch 22: 

Mozda nisam dobro objasnio sta sam hteo, hteo sam konkretnije da vidim na odgovoru koji si mi dao u postu od 03.08.2009. precrtao si acronis, tj opciju da ga odcekiram kako se nebi startovao sa sistemom, a nejasno mi je ako to uradim oce li imati funkciju f11 tj. aktiviranja prilikom podizanja sistema kako bi recimo zlu ne trebalo mogai da pri startovanju sistema odem u Acronis security zonu i odatle vratim sistemsku particiju.

Zato sam pitao opet racunajuci da ce vam biti lakse da mi kazete odcekiraj to i to jer ne je nepotrebno nego da razglabam ali sta je sad tu je-------

---

^ A što premeštaš one "quote" tagove u porukama i to pogrešno?

Da li ti je taj "F11 Acronis Recovery" potreban baš svaki dan, kod svakog dizanja sistema?

---

Pa ne svaki dan ali koja mu je funkcija ako nece da se digne sistem kako da onda aktiviram acronis

nista nisam premestao sam sam zadao opciju citiraj poruku kao i uvek pre ovoga a nakon tog citata napisao tekst, a sto je pomesao mozak NEZNAM

---

^ Ono što citiraš treba da bude između tagova "quote" i "/quote", a tvoj komentar izvan toga (nov red pa iza, ili ispred pa nov red, pa citat)


A jel tebi "sistem pada" baš tako često?

Postoji i butabilni Acronis Rescue CD, pa čak ne moraš ni da imaš instaliran Acronis na računaru, al' to je neka druga priča koja nema veze sa temom. Ono što ima veze je da svašta nepotrebnog podižeš sa sistemom!

Sa tvoje slike bih ostavio ovako (čak i Windows Defender nije nužan), ali ti sam odluči šta ti je od svog tog đubreta zaista potrebno

---

Take 5 svaka tebi cast kad imas zivaca

---