Od pre neki dan windows me nonstop izbacuje error poruke i kompjuter mi se cesto sam restartuje, da li bi neko mogao da mi pogleda hijack log


Logfile of HijackThis v1. 99. 1
Scan saved at 11:30:18 PM, on 5/10/2008
Platform: Windows XP SP2 (WinNT 5. 01. 2600)
MSIE: Internet Explorer v6. 00 SP2 (6. 00. 2900. 2180)

Running processes:
C:\WINDOWS\System32\smss. exe
C:\WINDOWS\system32\winlogon. exe
C:\WINDOWS\system32\services. exe
C:\WINDOWS\system32\lsass. exe
C:\WINDOWS\system32\Ati2evxx. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\System32\svchost. exe
C:\WINDOWS\system32\Ati2evxx. exe
C:\WINDOWS\Explorer. EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice. exe
C:\WINDOWS\system32\spoolsv. exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService. exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7. 0\avp. exe
C:\Program Files\Bonjour\mDNSResponder. exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc. exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer. exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService. exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE. exe
C:\WINDOWS\system32\UAService7. exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched. exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray. exe
C:\Program Files\CyberLink\PowerCinema\PCMService. exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx. exe
C:\Program Files\Winamp\winampa. exe
C:\WINDOWS\sm56hlpr. exe
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr. exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr. exe
C:\Program Files\Java\jre1. 5. 0\bin\jusched. exe
D:\Torrent\tune\iTunesHelper. exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7. 0\avp. exe
C:\WINDOWS\system32\ctfmon. exe
C:\Program Files\Messenger\msmsgs. exe
C:\WINDOWS\System32\svchost. exe
C:\Program Files\DNA\btdna. exe
C:\Program Files\DAEMON Tools Pro\DTProAgent. exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer. exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF. exe
C:\Program Files\iPod\bin\iPodService. exe
C:\Program Files\Opera\Opera. exe
C:\Program Files\HijackThis\HijackThis. exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *. local
R3 - URLSearchHook: free-downloads. net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads. net\tbfree. dll
F3 - REG:win. ini: load=C:\WINDOWS\twain_32\Vivid\FLATBED. EXE
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5. 0\Reader\ActiveX\AcroIEHelper. ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper. dll
O2 - BHO: free-downloads. net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads. net\tbfree. dll
O3 - Toolbar: free-downloads. net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads. net\tbfree. dll
O4 - HKLM\. . \Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray. exe"
O4 - HKLM\. . \Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService. exe"
O4 - HKLM\. . \Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx. exe"
O4 - HKLM\. . \Run: [WinampAgent] C:\Program Files\Winamp\winampa. exe
O4 - HKLM\. . \Run: [SMSERIAL] sm56hlpr. exe
O4 - HKLM\. . \Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr. exe"
O4 - HKLM\. . \Run: [WINCINEMAMGR] "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr. exe"
O4 - HKLM\. . \Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck. exe
O4 - HKLM\. . \Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1. 5. 0\bin\jusched. exe
O4 - HKLM\. . \Run: [ASocksrv] SocksA. exe
O4 - HKLM\. . \Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask. exe" -atboottime
O4 - HKLM\. . \Run: [iTunesHelper] "D:\Torrent\tune\iTunesHelper. exe"
O4 - HKLM\. . \Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7. 0\avp. exe"
O4 - HKCU\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\ctfmon. exe
O4 - HKCU\. . \Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs. exe" /background
O4 - HKCU\. . \Run: [BSserver] FileKan. exe
O4 - HKCU\. . \Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna. exe"
O4 - HKCU\. . \Run: [e©ùýùüûï×óÎÍøøÁøôÇÊýáñûëÞó] C:\Program Files\XP Antivirus\xpa. exe
O4 - HKCU\. . \Run: [60623449435549394899355403710873] C:\DOCUME~1\Iren\LOCALS~1\Temp\xpa. exe
O4 - HKCU\. . \Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd. exe" /automount
O4 - HKCU\. . \Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent. exe" -autorun
O4 - HKCU\. . \Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer. exe
O4 - Global Startup: Adobe Gamma Loader. lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader. exe
O4 - Global Startup: Kaspersky Anti-Hacker. lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF. exe
O4 - Global Startup: Microsoft Office. lnk = C:\Program Files\Microsoft Office\Office\OSA9. EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1. 5. 0\bin\npjpi150. dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1. 5. 0\bin\npjpi150. dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7. 0\SCIEPlgn. dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR. DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper. dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper. dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs. exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs. exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp. dll
O12 - Plugin for . pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32. dll
O12 - Plugin for . spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox. dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon. dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice. exe
O23 - Service: Apple Mobile Device - Apple, Inc.  - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService. exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc.  - C:\WINDOWS\system32\Ati2evxx. exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag. exe
O23 - Service: Kaspersky Anti-Virus 7. 0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7. 0\avp. exe" -r (file missing)
O23 - Service: Bonjour Service - Apple Inc.  - C:\Program Files\Bonjour\mDNSResponder. exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc. exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched. exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer. exe
O23 - Service: iPod Service - Apple Inc.  - C:\Program Files\iPod\bin\iPodService. exe
O23 - Service: MySql - Unknown owner - D:/Skola/3 godina/Predmet Baze podataka - Asistent Igor Franc/fpi/mysql/bin/mysqld-nt. exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE. exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG.  - C:\WINDOWS\system32\UAService7. exe

Koje poruke?

O4 - HKCU\. . \Run: [e©ùýùüûï×óÎÍøøÁøôÇÊýáñûëÞó] C:\Program Files\XP Antivirus\xpa. exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp. dll

Iz Safe Mode-a, i skeniraj racunar sa Spybot Searh & Destroy-om.

http://www.lancelhoff.com/2008/02/22/how-to-remove-xp-antivirus-protection/

Warning: XP Antivirus Protection is a Virus
XP Antivirus Protection AKA: XPAntivirus is fake antivirus software program.

 

Fixovao vao sam sve sto ste rekli, ali zaboravio sam da napisem da mi se to desava samo kada pokrenem Hatachi. . .  Skinuo sam vise verzija i kod svake se desi isti problem.  Sta da radim?

Hvala unapred  :help:

I ovo fiksuj:
O4 - HKLM\. . \Run: [ASocksrv] SocksA. exe
O4 - HKCU\. . \Run: [60623449435549394899355403710873] C:\DOCUME~1\Iren\LOCALS~1\Temp\xpa. exe
O23 - Service: Kaspersky Anti-Virus 7. 0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7. 0\avp. exe" -r (file missing)


btw. Šta je Hatachi? 

Na Hamachi je mislio...  To mi je ortak. 
Imamo istu verziju hamachi-a meni radi savrseno,radila je i njemu u pocetku dok nije pocelo da baguje... Prvo izbaci neki error tipa cannot connect to library sta vec, pa blue screen of death na sekundu ni ne stigne da procita i odma ga restartuje...

Hvala ljudi za fixove, ali i dalje imam problem sa Hamachi P2P programom. Kako ga instaliram i pokrenem, comp mi se sam restaruje, potom svaki put kad udjem u windows on se restartuje. Moram iz safe moda da uninstaliram Hamachija i onda kad udjem normalno u windows sve je ok, jedino sto izbaci poruku: The system has recovered from a serious error, A log of this error has been created. Molim vas pomozite mi ili mi ne gine reinstalacija windows-a

Ja bih uradio Update Windowsa...

Ali zaboravio sam da kazem da mi je Hamachi radio jedno vreme dobro