FileMon

Vai arī apskaties Process Explorer, kas tev tur par procesiem, vai nav kāds aizdomīgs. Vari arī ielikt bildi no tās otrās programmas.

Process PID CPU Description Company Name
System Idle Process 0 99.23
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
 smss.exe 512 Windows NT Session Manager Microsoft Corporation
  csrss.exe 568 Client Server Runtime Process Microsoft Corporation
  winlogon.exe 592 Windows NT Logon Application Microsoft Corporation
   services.exe 636 0.77 Services and Controller app Microsoft Corporation
    ati2evxx.exe 816 ATI External Event Utility EXE Module ATI Technologies Inc.
    svchost.exe 832 Generic Host Process for Win32 Services Microsoft Corporation
     CTXFISPI.EXE 1804 SPI Creative Technology Ltd
     mim.exe 1376 mim Musicmatch, Inc.
     NotiMan.exe 2072 Notification Manager Creative Technology Ltd.
    svchost.exe 892 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 960 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 1032 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 1088 Generic Host Process for Win32 Services Microsoft Corporation
    spoolsv.exe 1272 Spooler SubSystem App Microsoft Corporation
    avp.exe 2516 Kaspersky Anti-Virus Kaspersky Lab
    CTSVCCDA.EXE 2540 Creative Service for CDROM Access Creative Technology Ltd
    alg.exe 3388 Application Layer Gateway Service Microsoft Corporation
   lsass.exe 648 LSA Shell (Export Version) Microsoft Corporation
   ati2evxx.exe 1512 ATI External Event Utility EXE Module ATI Technologies Inc.
explorer.exe 1600 Windows Explorer Microsoft Corporation
CTDVDDET.exe 1664 CTDVDDET Creative Technology Ltd
DLLML.exe 1672 DLL Module Loader Creative Technology Ltd.
 EAXLoadr.exe 1960 Creative Entertainment Center EAX module loader Creative Technology Ltd
VolPanlu.exe 1688 VolPanlu.exe Creative Technology Ltd
CTHELPER.EXE 1696 CtHelper Application Creative Technology Ltd
CTXFIHLP.EXE 1704 CTXfiHlp MFC Application Creative Technology Ltd
CLI.exe 1740 CLI Application (Command Line Interface) ATI Technologies Inc.
 CLI.exe 1080 CLI Application (Command Line Interface) ATI Technologies Inc.
avp.exe 1756 Kaspersky Anti-Virus Kaspersky Lab
MDICTION.EXE 1812 Tildes Datorvardnica Sabiedriba Tilde
Pianists.exe 1820 Keyboard Pianist SIA Tilde
ctfmon.exe 1860 CTF Loader Microsoft Corporation
IDMan.exe 1868 Internet Download Manager Application (IDM) Internet Download Manager Corp., Tonec Inc.
Skype.exe 1908 Skype. Take a deep breath Skype Technologies S.A.
 skypePM.exe 2156 Skype Extras Manager Skype Technologies
daemon.exe 1936 DAEMON Tools Lite DT Soft Ltd
CLI.exe 152 CLI Application (Command Line Interface) ATI Technologies Inc.
Steam.exe 2996 Steam Valve Corporation
procexp.exe 2484 Sysinternals Process Explorer Sysinternals - www.sysinternals.com
MMDiag.exe 1832 Logging and tracing manager Musicmatch, Inc.

===========================================

HijackThis v1.99.1

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\PROGRA~1\TILDES~1\MDICTION.EXE
C:\PROGRA~1\TILDES~1\Pianists.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Entertainment Center\EAXLoadr.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Steam\Steam.exe
F:\Instal\Progas23\Internet security\Pc healt\hijackthis\HijackThis.exe

nebuus kaskerskis pie vainas kas fonaa skanee tavu HDD ?

nu neiepatikās man vārds "share", :) bet tas, ka ik pa laikam griežas disks, nav nekas nenormāls, man, piemēram, to dara Diskeeper auto režīmā.

Procusu rarakstā neko baigi aizdomīgu nemanu. Kāds tev windows, nav gadījumā vista? Vista diezgan bieži no HDD kautko nolasa ja RAM ir maz, zem 2 GB.

Stat1CX rakstīja:

Procusu rarakstā neko baigi aizdomīgu nemanu. Kāds tev windows, nav gadījumā vista? Vista diezgan bieži no HDD kautko nolasa ja RAM ir maz, zem 2 GB.

Lietoju XP/SP2, problema paradijs paris dienas atpakalj pec paris pagrides lapu apmeklejumiem un crack palaishanas.Lidztam nebiju manijis ka kautkas tads notiktu ar manu HDD, maby pie visa ir vainigs cietnis,meginaju defragmentet chekoju uz erroriem neka.Any other idea?

Interesants fakts! Ieejot safe mode ar networkingu pilnigi taspats bez networkinga cietnis strada normali. Par ko tas varetu liecinat?

Tadjau būsi tiktiešām saķēris kādu drazu. System restore mēgināji uz to brīdi kad vēl viss bīja kārtībā?

ja rootkits, tad var arī neuzrādīties procesu listē. diez hijackthis procesus skatās pa taisno vai caur sistēmas api?..

Atradu vienu aizdomigu failu -> Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe

http://www.greatis.com/appdata/d/a/appdrvrem01.exe.htm

Vispār jau Windows čeko SATA iekārtas (aptuveni reizi sekundē), lai pārbaudītu vai tās nav atvienotas (eSATA!). Daži čipseti šo pārbaudi reģistrē kā diska aktivitāti un tāpēc tā lampiņa mirgo. :D Man pašam vienam kompim tā ir.

Skat arī http://club.cdfreaks.com/f7/ide-led-blink-problem-127518/ vai goole - "sata led blinking"

:D

Paldies visiem par atsaucibu!
Ar problemu tiku puslidz veiksmigi gala izdzeshot Trojani: appdrvrem01.exe

Prieka!