[SPL]

Ni SuperAntiSpyware ili Malwarebites su pickinng ovaj gore. Prema onome što sam vidio iz Googlea ovog programa je prilično loše. Postoji li način da se brine o ovom bez reformatizovati sustav?

Evidencije:

SUPERAntiSpyware Scan Prijava
http://www.superantispyware.com
Generated 03/04/2009 at 01:37 Application Version: 4.25.1014 Core Pravila Database Version: 3.784 Trace Pravila Database Version: 1741 Scan type: Quick Scan Scan Total Time: 00:20:20 Memory predmeta skenirane: 388 Memorija prijetnje detected: 0 Registar skeniranih predmeta: 397 Matični prijetnje otkrivena: 0 items skenirane datoteke: 14.817 File prijetnje otkrivena: 4 Adware.Tracking Keks C: \ Documents and Settings \ Administrator \ Cookies \ administrator @ atdmt [2]. txt C: \ Documents and Settings \ Administrator \ Cookies \ administrator @ tribalfusion [2]. txt C: \ Documents and Settings \ Administrator \ Cookies \ administrator @ dvaput [1]. txt C: \ Documents and Settings \ Administrator \ Cookies \ administrator@ad.yieldmanager [2]. txt

-------------

Malwarebytes 'Anti-Malware 1,34 Database version: 1817 Windows 5.1.2600 Service Pack 3 3/4/2009 2:12:49 mbam-log-2009-03-04 (14-12-49). Txt Scan type: Quick Scan Objekti skenirane: 58.816 Vrijeme proteklo: 5 minuta (e), 34 second (s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 slika Zaražene: 0 Memory Processes Infected: (Nema stavki otkrije zlonamjerne) Memory Modules Infected: (Nema stavki otkrije zlonamjerne) Registry Keys Infected: (Nema stavki otkrije zlonamjerne) Registry Values Infected: (Nema stavki otkrije zlonamjerne) Registry Data Items Infected: (Nema zloban stavke otkriti) Folders Infected: (Nema stavki otkrije zlonamjerne) Files Infected: (Nema stavki otkrije zlonamjerne)

-----

Logfile of Trend Micro HijackThis v2.0.2 Scan spremljena u 2:14:26, on 3/4/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ WINDOWS \ explorer.exe C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ tt \ updater \ wcmdmgr.exe C: \ Program Files \ Java \ jre6 \ bin \ jusched. exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe C: \ Program Files \ Common Files \ Ahead \ Lib \ NMBgMonitor.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware. exe C: \ Program Files \ Airlink101 \ AWLL3028 \ RtWLan.exe C: \ Program Files \ WinZip \ WZQKPICK.EXE C: \ Program Files \ Common Files \ Ahead \ Lib \ NMIndexStoreSvr.exe C: \ Program Files \ Common Files \ Ahead \ Lib \ NMIndexingService.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = www.google.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
 http://www.update.microsoft.com/wind...?1186278166578
Ø20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 -- Usluga: Java Brzo početno (JavaQuickStarterService) - Sun Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: NMIndexingService - Nero AG - C: \ Program Files \ Common Files \ Ahead \ Lib \ NMIndexingService.exe - End of file - 5139 bytes

I've BgMonitor onemogućeno korištenje ccleaners Start Up funkcija (ne siguran ako ovaj htijenje obaviti izigrati)
Screenshot:

[Hybr! D]

Nije štetnih sadržaja. To je dio Nero Scout, deinstalirajte ga.