![]() |
| |||||||
| Regisztráció | Oldaltérkép Spy | Tagok listája | Donate | Keres | Mai hozzászólások | Megjelöl Fórumok Olvas | Fórum Szabályok |
|
![]() |
| | Téma eszközök |
|
#1
| |||
| |||
| Szia Azt hiszem, azt is iexplore vírus és próbálta a sok különböző programok megszabadulni, de egyik sem dolgozik! Láttam, hogy a weboldal segít sok ppl így talán én is? Itt van ez a megrabol napló: Naplózás A Trend Micro HijackThis v2.0.2 Beolvasás mentett 1:01:32 véleményét 11/10/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Futó folyamatok: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ System32 \ Services.exe C: \ WINDOWS \ System32 \ Lsass.exe C: \ WINDOWS \ System32 \ Ati2evxx.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ System32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ System32 \ Spoolsv.exe C: \ WINDOWS \ System32 \ acs.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ Windows \ System \ hpsysdrv.exe C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe C: \ WINDOWS \ System32 \ Ctfmon.exe C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ WINDOWS \ System32 \ Taskmgr.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP + osv = 5,1 R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ int ernet Beállítások, ProxyOverride = *. helyi O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (fájl hiányzik) O2 - BHO: Rosszindulatú Scripts Scanner - (55EA1964-F5E4-4D6A-B9B2-125B37655FCB) - C: \ Documents and Settings \ All Users \ Application Data \ Prevx \ pxbho.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar1.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar1.dll O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / meddő / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [hpsysdrv] C: \ Windows \ System \ hpsysdrv.exe O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe"-nogui O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [EPSON Stylus CX3700 Series] C: \ WINDOWS \ System32 \ Spool \ Drivers \ W32x86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ TEMP \ E_SC4.tmp" / EF "HKLM" O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ System32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / Indítópult O4 - HKLM \ .. \ Run: [Flag tulajdonosa Live Grim] C: \ Documents and Settings \ All Users \ Application Data \ Software szabály zászló tulajdonosa \ Első obj.exe O4 - HKLM \ .. \ Run: [PrevxOne] "C: \ Program Files \ Prevx2 \ PXConsole.exe" O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe" O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ System32 \ Ctfmon.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'HÁLÓZATI SZOLGÁLTATÁS') O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe O8 - Extra context menu item: & Clean Traces - C: \ Program Files \ DAP \ Adatbiztonság csomag \ dapcleanerie.htm O8 - Extra context menu item: & Letöltés a & DAP - C: \ Program Files \ DAP \ dapextie.htm O8 - Extra context menu item: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Visszamenőleges Links - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Download & all with DAP - C: \ Program Files \ DAP \ dapextie2.htm O8 - Extra context menu item: E & xportálás Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ mikrók ~ 3 \ Office12 \ EXCEL.EXE/3000 O8 - Extra context menu item: Hasonló Pages - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra button: Kutatás - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ mikrók ~ 3 \ Office12 \ REFIEBAR.DLL O9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL O9 - Extra button: Kapcsolat Segítség - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HelpCtr \ forgalmazóinak \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra 'Tools' menuitem: Kapcsolat Segítség - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HelpCtr \ forgalmazóinak \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Fotó Feltöltő 5) -- http://upload.facebook.com/controls/...oUploader5.cab O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab O16 - DPF: (96EEC7FF-106a-47F3-90D6-B4BB754AA40E) (POLI Pay Online) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab O23 - Service: TP-LINK Konfiguráció Service (ACS) - Ismeretlen tulajdonos - C: \ WINDOWS \ System32 \ acs.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati Hotkey Poller - ATI Technologies Inc. - C: \ WINDOWS \ System32 \ Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Grisoft, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Grisoft, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: PREVXAgent - Prevx - C: \ Program Files \ Prevx2 \ PXAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe -- End of file - 10831 bytes |
|
#2
| |||
| |||
| Letöltés Lop S & D által Eric_71 és menthetjük az asztalra. Lop S & D majd csak a Windows XP és Windows Vista Letiltja a víruskereső és antimalware programokat, így nem zavarja a működését, Lop S & D. Ha meg szeretnénk nézni, hogyan lehet letiltani biztonsági programok látogatása a bemutató: Hogyan Ideiglenesen Megbénít Ön Anti-virus, tűzfal és anti-malware programok
|
|
#3
| |||
| |||
| Itt a következő eredmények lenyes S & D keresés: -------------------- \ \ Lop S & D 4.2.4-5 XP / Vista Microsoft Windows XP Home Edition (v5.1.2600) Service Pack 3 X86-alapú PC (Uniprocessor Szabadnapos: AMD Sempron (tm) Processor 3200 +) BIOS: Phoenix - Award BIOS v6.00PG USER: Compaq_Owner (Administrator) BOOT: Normál indítás Antivirus: AVG 7.5.524 7.5.524 (nem aktív) Tűzfal: ZoneAlarm tűzfal 7.0.483.000 (nem aktív) C: \ (Helyi lemez) - NTFS - Összesen: 68 Tovább Szabad: 10 Tovább D: \ (Helyi lemez) - FAT32 - Összesen: 5 Go Szabadnapos: 1 Go E: \ (CD vagy DVD) F: \ (CD vagy DVD) G: \ (USB) H: \ (USB) I: \ (USB) J: \ (USB) "C: \ Lop SD (MAJ: 02/10/2008 | 23:42) Opció: [1] (szombat 11/10/2008 | 18:11) -------------------- \ \ Listing mappák applic ~ 1 [11/10/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Adobe [03/10/2007 | 01:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Apple [12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Apple Computer [28/08/2007 | 04:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Autodesk [03/09/2008 | 10:46] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Avg7 [10/06/2008 | 12:37] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Avg8 [02/07/2006 | 01:52] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> DVD Shrink [15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> EnterNHelp [27/03/2007 | 10:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Google [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ Grisoft <DIR> [23/10/2007 | 12:15] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Installations [12/09/2005 | 09:21] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> InstallShield [11/10/2008 | 12:29] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> MailFrontier [18/08/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Microsoft [10/09/2008 | 07:07] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Microsoft Help [10/09/2007 | 04:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Nero [11/10/2008 | 03:51] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> NOS [21/05/2008 | 12:55] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ Drivers <DIR> PC Központ [12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> QuickTime [24/11/2007 | 02:56] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Real [12/09/2005 | 09:04] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> SBSI [02/02/2008 | 05:17] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Seagate [09/10/2008 | 11:53] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ Software <DIR> szabály zászló tulajdonosa [01/11/2006 | 01:13] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Sophos [14/09/2008 | 02:08] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Spybot - Search & Destroy [19/05/2008 | 07:41] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Symantec [11/10/2008 | 06:00] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ TEMP <DIR> [15/02/2006 | 01:11] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> UDL [15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Ultima_T15 [08/04/2006 | 02:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> Windows Genuine Advantage [22/06/2008 | 11:01] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ <DIR> WLInstaller [17/03/2008 | 09:32] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Adobe [11/10/2008 | 03:55] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> AdobeUM [13/09/2007 | 05:26] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Ahead [13/06/2008 | 07:29] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Apple Computer [02/10/2007 | 12:55] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Arcsoft [18/06/2006 | 11:34] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Atari [21/05/2007 | 07:47] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Autodesk [11/10/2008 | 11:11] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> AVG7 [19/05/2008 | 02:40] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> AVGTOOLBAR [08/10/2008 | 01:29] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> BitTorrent [21/05/2007 | 12:09] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Command & Conquer 3 Tiberium Wars [01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Datalayer [28/05/2007 | 02:25] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> dvdcss [13/08/2007 | 03:00] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> EPSON [03/05/2007 | 02:12] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Google [07/09/2006 | 02:08] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Segítség [26/06/2008 | 12:16] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> HPQ [16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Identities [19/02/2006 | 05:44] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> InterVideo [23/04/2008 | 11:49] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> iWin [03/05/2008 | 03:20] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Joost [28/01/2006 | 03:15] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Leadertech [13/09/2008 | 08:45] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> LimeWire [14/02/2006 | 05:22] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Macromedia [24/11/2007 | 03:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Media Player Classic [19/05/2008 | 06:44] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Microsoft [09/04/2008 | 06:13] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Mozilla [15/07/2006 | 12:31] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Nikon [01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Nokia [01/09/2006 | 08:54] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Nokia Multimedia Player [01/09/2006 | 08:41] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> PC Suite [19/05/2008 | 07:32] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Real [12/09/2005 | 09:30] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> SampleView [21/05/2007 | 12:07] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> SecuROM [09/10/2008 | 11:54] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Szappanok hazugság szerelem [28/01/2006 | 03:16] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Sonic [23/04/2008 | 11:45] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> SpinTop [14/09/2008 | 06:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Spore [15/04/2008 | 05:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Spybot - Search & Destroy [14/02/2006 | 05:49] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> vasárnap [12/09/2005 | 09:41] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> Symantec [16/04/2008 | 06:42] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> U3 [26/05/2008 | 11:14] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> uTorrent [27/05/2006 | 09:46] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> vlc [20/05/2008 | 10:26] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ <DIR> WinBatch [12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ applic ~ 1 \ <DIR> Apple Computer [16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ applic ~ 1 \ <DIR> Identities [12/09/2005 | 09:51] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ applic ~ 1 \ <DIR> Microsoft [12/09/2005 | 09:21] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ applic ~ 1 \ <DIR> Real [12/09/2005 | 09:30] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ applic ~ 1 \ <DIR> SampleView [12/09/2005 | 09:41] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ applic ~ 1 \ <DIR> Symantec [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ LOCALS ~ 1 \ applic ~ 1 \ <DIR> AVG7 [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ LOCALS ~ 1 \ applic ~ 1 \ <DIR> Microsoft [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ NETWOR ~ 1 \ applic ~ 1 \ <DIR> Microsoft -------------------- \ \ Ütemezett feladatok található C: \ WINDOWS \ Feladatok [11/10/2008 06:00] [- ah -----] C: \ WINDOWS \ feladatok \ A396018B9185B27B.job [11/10/2008 06:11] [- a ------] C: \ WINDOWS \ feladatok \ Symantec NetDetect.job [11/10/2008 05:00] [- a ------] C: \ WINDOWS \ feladatok \ RegCure Program Check.job [28/08/2008 04:00 AM] [- a ------] C: \ WINDOWS \ feladatok \ RegCure.job [11/10/2008 04:07] [- ah -----] C: \ WINDOWS \ feladatok \ SA.DAT [05/08/2004 05:00] [-Rah -----] C: \ WINDOWS \ feladatok \ Desktop.ini (A396018B9185B27B.job) = (c: \ DOCUME ~ 1 \ compaq ~ 1 \ applic ~ 1 \ soapli ~ 1 \ Axisgreatex tra.exe) -------------------- \ \ Listing mappát: C: \ Program Files [27/07/2008 | 05:02] C: \ Program Files \ <DIR> Activision [11/10/2008 | 04:05] C: \ Program Files \ Adobe <DIR> [15/06/2008 | 12:20] C: \ Program Files \ Ahead <DIR> [20/05/2007 | 11:20] C: \ Program Files \ Alcohol Soft <DIR> [03/06/2008 | 09:01] C: \ Program Files \ Apple Software Update <DIR> [15/07/2006 | 12:27] C: \ Program Files \ <DIR> Arcsoft [12/09/2005 | 09:13] C: \ Program Files \ ATI Technologies <DIR> [21/05/2007 | 07:36] C: \ Program Files \ Autodesk <DIR> [27/05/2008 | 04:42] C: \ Program Files \ AVG <DIR> [20/06/2008 | 04:54] C: \ Program Files \ BitTorrent <DIR> [11/10/2008 | 04:05] C: \ Program Files \ Common Files <DIR> [24/11/2004 | 01:06] C: \ Program Files \ <DIR> ComPlus Alkalmazások [21/05/2008 | 12:51] C: \ Program Files \ DAP <DIR> [08/11/2006 | 02:07] C: \ Program Files \ DivX <DIR> [30/09/2008 | 09:12] C: \ Program Files \ <DIR> DominateGame [21/05/2007 | 10:35] C: \ Program Files \ <DIR> Drug Lord 2 [18/08/2008 | 03:56] C: \ Program Files \ D-Tools <DIR> [08/11/2006 | 12:56] C: \ Program Files \ <DIR> DVD Shrink [19/05/2008 | 07:12] C: \ Program Files \ <DIR> Easy Internet signup [14/09/2008 | 06:02] C: \ Program Files \ <DIR> Electronic Arts [15/02/2006 | 01:11] C: \ Program Files \ <DIR> Epson [26/05/2008 | 11:15] C: \ Program Files \ <DIR> eToro [30/09/2008 | 09:12] C: \ Program Files \ <DIR> EV Nova [13/11/2006 | 09:39] C: \ Program Files \ <DIR> FLVPlayer [26/06/2008 | 12:13] C: \ Program Files \ <DIR> GameSpy Arcade [12/09/2005 | 09:37] C: \ Program Files \ Google <DIR> [27/11/2006 | 10:19] C: \ Program Files \ <DIR> Grafikon [08/11/2007 | 06:44] C: \ Program Files \ <DIR> Griffin Technology [18/08/2008 | 07:44] C: \ Program Files \ Grisoft <DIR> [27/03/2006 | 09:17] C: \ Program Files \ <DIR> GustoSoft [29/09/2008 | 04:41] C: \ Program Files \ <DIR> Hp [05/12/2007 | 01:09] C: \ Program Files \ <DIR> Infogrames Interactive [14/09/2008 | 06:03] C: \ Program Files \ <DIR> InstallShield Installation Information [17/08/2008 | 09:45] C: \ Program Files \ Internet Explorer <DIR> [12/09/2005 | 09:23] C: \ Program Files \ InterVideo <DIR> [03/06/2008 | 09:04] C: \ Program Files \ iPod <DIR> [14/02/2006 | 05:20] C: \ Program Files \ <DIR> iPrimus [03/06/2008 | 09:05] C: \ Program Files \ iTunes <DIR> [30/09/2008 | 08:51] C: \ Program Files \ Java <DIR> [14/09/2008 | 05:43] C: \ Program Files \ <DIR> John Deere American Farmer Deluxe [09/04/2008 | 06:13] C: \ Program Files \ <DIR> Joost [24/11/2007 | 02:56] C: \ Program Files \ <DIR> K-Lite Codec Pack [20/03/2008 | 05:13] C: \ Program Files \ LimeWire <DIR> [31/08/2008 | 05:28] C: \ Program Files \ Maxis <DIR> [18/08/2008 | 02:14] C: \ Program Files \ Messenger <DIR> [15/05/2007 | 11:48] C: \ Program Files \ Microsoft <DIR> CAPICOM 2.1.0.2 [12/09/2005 | 09:19] C: \ Program Files \ Microsoft Encarta <DIR> [16/12/2004 | 04:23] C: \ Program Files \ Microsoft FrontPage <DIR> [26/06/2008 | 12:17] C: \ Program Files \ Microsoft Games <DIR> [12/09/2005 | 09:25] C: \ Program Files \ Microsoft Money 2005 <DIR> [29/06/2008 | 10:10] C: \ Program Files \ Microsoft Office <DIR> [15/02/2006 | 12:29] C: \ Program Files \ Microsoft Visual Studio <DIR> [03/06/2008 | 03:51] C: \ Program Files \ Microsoft Works <DIR> [14/02/2008 | 10:22] C: \ Program Files \ Microsoft.NET <DIR> [14/03/2008 | 09:22] C: \ Program Files \ <DIR> MindArk [18/08/2008 | 02:11] C: \ Program Files \ <DIR> Movie Maker [11/10/2008 | 11:09] C: \ Program Files \ Mozilla Firefox <DIR> [16/12/2004 | 04:23] C: \ Program Files \ MSN <DIR> [16/12/2004 | 04:23] C: \ Program Files \ <DIR> MSN Gaming Zone [18/10/2006 | 01:19] C: \ Program Files \ MSXML 4.0 <DIR> [02/02/2008 | 05:16] C: \ Program Files \ MSXML 6.0 <DIR> [10/09/2007 | 04:25] C: \ Program Files \ Nero <DIR> [18/08/2008 | 02:10] C: \ Program Files \ NetMeeting <DIR> [15/07/2006 | 12:30] C: \ Program Files \ Nikon <DIR> [11/10/2008 | 03:51] C: \ Program Files \ <DIR> NOS [15/02/2006 | 12:42] C: \ Program Files \ OfficeUpdate11 <DIR> [14/09/2008 | 02:59] C: \ Program Files \ Online Services <DIR> [18/08/2008 | 02:10] C: \ Program Files \ Outlook Express <DIR> [26/06/2007 | 09:29] C: \ Program Files \ PartyGaming <DIR> [12/09/2005 | 09:34] C: \ Program Files \ <DIR> PC-Doctor for DOS [17/06/2007 | 08:43] C: \ Program Files \ <DIR> PokerRoom.com [31/05/2007 | 01:55] C: \ Program Files \ PokerStars <DIR> [03/06/2008 | 09:04] C: \ Program Files \ QuickTime <DIR> [21/04/2008 | 08:30] C: \ Program Files \ <DIR> RegCure [02/02/2008 | 05:17] C: \ Program Files \ <DIR> Seagate [23/04/2008 | 01:20] C: \ Program Files \ <DIR> Sean O'Connor Windows Games [24/07/2008 | 06:08] C: \ Program Files \ SEGA <DIR> [18/08/2008 | 03:56] C: \ Program Files \ Sierra Entertainment <DIR> [08/02/2007 | 11:24] C: \ Program Files \ <DIR> SLD Codec Pack [09/10/2008 | 11:53] C: \ Program Files \ <DIR> Szappanok hazugság szerelem [14/03/2008 | 06:16] C: \ Program Files \ Sophos <DIR> [15/04/2008 | 09:22] C: \ Program Files \ <DIR> Spybot - Search & Destroy [24/11/2007 | 02:59] C: \ Program Files \ <DIR> StrongDC + + [19/05/2008 | 07:41] C: \ Program Files \ Symantec <DIR> [13/09/2008 | 10:03] C: \ Program Files \ <DIR> TeaTimer (Spybot - Search & Destroy) [14/02/2006 | 05:39] C: \ Program Files \ <DIR> Telstra [19/06/2007 | 09:45] C: \ Program Files \ <DIR> TexasCalculatem [30/05/2008 | 01:43] C: \ Program Files \ <DIR> Theorica Divx ;-) Codecs [29/02/2008 | 06:25] C: \ Program Files \ <DIR> TP-LINK [11/10/2008 | 12:33] C: \ Program Files \ Trend Micro <DIR> [03/04/2008 | 12:17] C: \ Program Files \ <DIR> Trymedia [24/11/2004 | 01:07] C: \ Program Files \ Uninstall Information <DIR> [27/05/2006 | 08:19] C: \ Program Files \ <DIR> VideoLAN [10/09/2008 | 01:44] C: \ Program Files \ <DIR> VUGames [11/10/2008 | 05:57] C: \ Program Files \ Warcraft III <DIR> [05/06/2008 | 01:07] C: \ Program Files \ <DIR> Weatherzone Tracker [13/09/2006 | 12:25] C: \ Program Files \ <DIR> WinAVI VideoConverter [14/03/2008 | 06:35] C: \ Program Files \ Windows Live <DIR> [10/10/2007 | 11:18] C: \ Program Files \ Windows Media Connect <DIR> 2 [25/08/2008 | 06:37] C: \ Program Files \ Windows Media Player <DIR> [14/09/2008 | 02:59] C: \ Program Files \ Windows NT <DIR> [03/10/2007 | 03:00] C: \ Program Files \ Windows XP <DIR> Fun Pack [24/11/2004 | 01:07] C: \ Program Files \ WindowsUpdate <DIR> [14/09/2008 | 05:41] C: \ Program Files \ WinRAR <DIR> [16/12/2004 | 04:24] C: \ Program Files \ <DIR> Xerox [11/10/2008 | 12:29] C: \ Program Files \ Zone Labs <DIR> [11/10/2008 | 12:31] C: \ Program Files \ <DIR> ZoneAlarmSB -------------------- \ \ Listing mappát: C: \ Program Files \ Common Files [11/10/2008 | 04:05] C: \ Program Files \ Common Files \ Adobe <DIR> [11/10/2008 | 04:05] C: \ Program Files \ Common Files \ Adobe AIR <DIR> [10/09/2007 | 04:28] C: \ Program Files \ Common Files \ Ahead <DIR> [03/10/2007 | 01:28] C: \ Program Files \ Common Files \ Apple <DIR> [28/08/2007 | 04:28] C: \ Program Files \ Common Files \ Autodesk Shared <DIR> [03/06/2008 | 03:50] C: \ Program Files \ Common Files \ <DIR> DESIGNER [12/09/2005 | 09:27] C: \ Program Files \ Common Files \ InstallShield <DIR> [12/09/2005 | 09:06] C: \ Program Files \ Common Files \ Java <DIR> [19/05/2008 | 07:25] C: \ Program Files \ Common Files \ Microsoft Shared <DIR> [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> MSSoap [15/07/2006 | 12:30] C: \ Program Files \ Common Files \ muvee Technologies <DIR> [15/07/2006 | 12:31] C: \ Program Files \ Common Files \ <DIR> Nikon [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ ODBC <DIR> [19/05/2008 | 07:32] C: \ Program Files \ Common Files \ Real <DIR> [20/05/2008 | 11:24] C: \ Program Files \ Common Files \ <DIR> Services [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> SpeechEngines [19/05/2008 | 07:41] C: \ Program Files \ Common Files \ Symantec Shared <DIR> [18/08/2008 | 02:10] C: \ Program Files \ Common Files \ System <DIR> [11/03/2007 | 11:10] C: \ Program Files \ Common Files \ <DIR> Thraex Software [14/03/2008 | 06:34] C: \ Program Files \ Common Files \ <DIR> WindowsLiveInstaller -------------------- \ \ Process (41 Processes) IEXPLORE.EXE ~ [PID: 2612] IEXPLORE.EXE ~ [PID: 2640] iexplore.exe ~ [PID: 3160] IEXPLORE.EXE ~ [PID: 2940] -------------------- \ \ Keresésben S_Lop C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp \ bis9A.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ tengely nagy extra.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ ilouimpk.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ jvuyskje.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ lfbsabiw.ex e -------------------- \ \ Keresése Lop Files - Mappák C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ Software szabály zászló tulajdonosa C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ Software szabály zászló tulajdonosa \ Első obj.exe C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ applic ~ 1 \ Software szabály zászló tulajdonosa \ Ugrás proc.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ soapli ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ soapli ~ 1 \ ATOM DASH.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ soapli ~ 1 \ tengely nagy extra.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ soapli ~ 1 \ ilouimpk.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ soapli ~ 1 \ jvuyskje.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ soapli ~ 1 \ lfbsabiw.ex e C: \ Program Files \ soapli ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp \ TorrentSpeeder. zip C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ adultfri endfinder [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ advertis nek [2]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ ero-reklám [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner@adopt.eu roclick [2]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ partypok er [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ 888 [2]. Txt C: \ WINDOWS \ feladatok \ A396018B9185B27B.job -------------------- \ \ Keresés a Registry [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Uninstall \ Hold wma ref] "DisplayName" = "Cid Help" "UninstallString" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ applic ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe-uninstall" [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run] "Módban igazi" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ applic ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe" "Módban igazi" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ applic ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe" [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run] "Flag tulajdonosa Live Grim" = "C: \ \ Documents and Settings \ \ All Users \ \ Application Data \ \ Software szabály zászló tulajdonosa \ \ Először obj.exe" -------------------- \ \ Hosts fájlok ellenőrzése Hosts fájl CLEAN -------------------- \ \ Keresés rejtett fájlok CatchMe CatchMe 0.3.1353 W2K/XP/Vista - Rootkit / stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-11 18:12:47 5/1/2600 Windows Service Pack 3 NTFS szkennelés rejtett folyamatok ... scanning hidden files ... scan sikeresen befejeződött Rejtett folyamatok: 0 hidden files: 0 -------------------- \ \ Keresése más fertőzések -------------------- \ \ Pattint & Keygens .. C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ rld-spor.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ SporeApp.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Friss \ Spore.GENERIC_KEYGEN-FFF.lnk [F: 343] [D: 29] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp [F: 200] [D: 0] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies [F: 18285] [D: 24] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ TEMPOR ~ 1 \ Content.IE5 1 - "C: \ Lop SD \ LopR_1.txt" - Szo 11/10/2008 | 18:07 - lehetőség: [1] 2 - "C: \ Lop SD \ LopR_2.txt" - Szo 11/10/2008 | 18:14 - lehetőség: [1] -------------------- \ \ Scan fejezni 18:14:22 |
|
#4
| |||
| |||
| Letöltés NoLop az asztalra. NoLop.exe
Is működtet új HijackThis szkennelni és elküldeni a naplóban. |
|
#5
| |||
| |||
| Ok itt vannak a naplók: Nolop NoLop! Bejelentkezés a Skate_Punk_21 Fix fut: C: \ Documents and Settings \ Compaq_Owner \ Desktop [12/10/2008] [4:33:52] --- Fertőzés Files Found/Removed--- C: \ WINDOWS \ feladatok \ A396018B9185B27B.job Kezdet Költözési ... Újraindítás ... Removing Lop a maradék Files / Folders ... Editing nyilvántartó ... ** Fix Complete! ** --- Listing AppData sub directories --- C: \ Documents and Settings \ All Users \ Application Data \ Adobe C: \ Documents and Settings \ All Users \ Application Data \ Apple C: \ Documents and Settings \ All Users \ Application Data \ Apple Computer C: \ Documents and Settings \ All Users \ Application Data \ Autodesk C: \ Documents and Settings \ All Users \ Application Data \ Avg7 C: \ Documents and Settings \ All Users \ Application Data \ Avg8 - üres Directory C: \ Documents and Settings \ All Users \ Application Data \ Dvd Shrink C: \ Documents and Settings \ All Users \ Application Data \ Enternhelp C: \ Documents and Settings \ All Users \ Application Data \ Google C: \ Documents and Settings \ All Users \ Application Data \ Grisoft C: \ Documents and Settings \ All Users \ Application Data \ Installations C: \ Documents and Settings \ All Users \ Application Data \ InstallShield C: \ Documents and Settings \ All Users \ Application Data \ Mailfrontier - üres Directory C: \ Documents and Settings \ All Users \ Application Data \ Microsoft C: \ Documents and Settings \ All Users \ Application Data \ Microsoft Help C: \ Documents and Settings \ All Users \ Application Data \ Nero C: \ Documents and Settings \ All Users \ Application Data \ Nos C: \ Documents and Settings \ All Users \ Application Data \ Drivers Pc-központ C: \ Documents and Settings \ All Users \ Application Data \ Quicktime C: \ Documents and Settings \ All Users \ Application Data \ Real - üres könyvtár C: \ Documents and Settings \ All Users \ Application Data \ Sbsi C: \ Documents and Settings \ All Users \ Application Data \ Seagate C: \ Documents and Settings \ All Users \ Application Data \ Software Szabályzat Flag tulajdonosa C: \ Documents and Settings \ All Users \ Application Data \ Sophos C: \ Documents and Settings \ All Users \ Application Data \ Spybot - Search & Destroy C: \ Documents and Settings \ All Users \ Application Data \ Symantec C: \ Documents and Settings \ All Users \ Application Data \ Temp - üres Directory C: \ Documents and Settings \ All Users \ Application Data \ Udl C: \ Documents and Settings \ All Users \ Application Data \ Ultima_t15 C: \ Documents and Settings \ All Users \ Application Data \ Windows Genuine Advantage C: \ Documents and Settings \ All Users \ Application Data \ Wlinstaller C: \ Documents and Settings \ Compaq_owner \ Application Data \ Adobe C: \ Documents and Settings \ Compaq_owner \ Application Data \ Adobeum C: \ Documents and Settings \ Compaq_owner \ Application Data \ Ahead C: \ Documents and Settings \ Compaq_owner \ Application Data \ Apple Computer C: \ Documents and Settings \ Compaq_owner \ Application Data \ Arcsoft C: \ Documents and Settings \ Compaq_owner \ Application Data \ Atari C: \ Documents and Settings \ Compaq_owner \ Application Data \ Autodesk C: \ Documents and Settings \ Compaq_owner \ Application Data \ Avg7 C: \ Documents and Settings \ Compaq_owner \ Application Data \ Avgtoolbar C: \ Documents and Settings \ Compaq_owner \ Application Data \ Bittorrent C: \ Documents and Settings \ Compaq_owner \ Application Data \ Command & Conquer 3 Tiberium Wars C: \ Documents and Settings \ Compaq_owner \ Application Data \ Datalayer C: \ Documents and Settings \ Compaq_owner \ Application Data \ Dvdcss C: \ Documents and Settings \ Compaq_owner \ Application Data \ Epson C: \ Documents and Settings \ Compaq_owner \ Application Data \ Google C: \ Documents and Settings \ Compaq_owner \ Application Data \ Help - üres könyvtár C: \ Documents and Settings \ Compaq_owner \ Application Data \ Hpq C: \ Documents and Settings \ Compaq_owner \ Application Data \ Identities C: \ Documents and Settings \ Compaq_owner \ Application Data \ InterVideo C: \ Documents and Settings \ Compaq_owner \ Application Data \ Iwin C: \ Documents and Settings \ Compaq_owner \ Application Data \ Joost C: \ Documents and Settings \ Compaq_owner \ Application Data \ Leadertech C: \ Documents and Settings \ Compaq_owner \ Application Data \ Limewire C: \ Documents and Settings \ Compaq_owner \ Application Data \ Macromedia C: \ Documents and Settings \ Compaq_owner \ Application Data \ Media Player Classic C: \ Documents and Settings \ Compaq_owner \ Application Data \ Microsoft C: \ Documents and Settings \ Compaq_owner \ Application Data \ Mozilla C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nikon C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nokia C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nokia Multimedia Player C: \ Documents and Settings \ Compaq_owner \ Application Data \ PC Suite C: \ Documents and Settings \ Compaq_owner \ Application Data \ Real C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sampleview - üres Directory C: \ Documents and Settings \ Compaq_owner \ Application Data \ Securom C: \ Documents and Settings \ Compaq_owner \ Application Data \ Szappanok Lies Love C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sonic C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spintop C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spore C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spybot - Search & Destroy C: \ Documents and Settings \ Compaq_owner \ Application Data \ V. C: \ Documents and Settings \ Compaq_owner \ Application Data \ Symantec - EMPTY Directory C: \ Documents and Settings \ Compaq_owner \ Application Data \ U3 C: \ Documents and Settings \ Compaq_owner \ Application Data \ uTorrent C: \ Documents and Settings \ Compaq_owner \ Application Data \ vlc C: \ Documents and Settings \ Compaq_owner \ Application Data \ Winbatch C: \ Documents and Settings \ Default User \ Application Data \ Apple Computer C: \ Documents and Settings \ Default User \ Application Data \ Identities C: \ Documents and Settings \ Default User \ Application Data \ Microsoft C: \ Documents and Settings \ Default User \ Application Data \ Real C: \ Documents and Settings \ Default User \ Application Data \ Sampleview - üres Directory C: \ Documents and Settings \ Default User \ Application Data \ Symantec - EMPTY Directory C: \ Documents and Settings \ LocalService \ Application Data \ Avg7 - üres Directory C: \ Documents and Settings \ LocalService \ Application Data \ Microsoft C: \ Documents and Settings \ NetworkService \ Application Data \ Microsoft Hijackthis: Naplózás A Trend Micro HijackThis v2.0.2 Beolvasás mentett 4:44:14 véleményét 12/10/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Futó folyamatok: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ System32 \ Services.exe C: \ WINDOWS \ System32 \ Lsass.exe C: \ WINDOWS \ System32 \ Ati2evxx.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ System32 \ Ati2evxx.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ System32 \ Spoolsv.exe C: \ WINDOWS \ System32 \ acs.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ System32 \ wuauclt.exe C: \ Windows \ System \ hpsysdrv.exe C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ WINDOWS \ System32 \ Ctfmon.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP + osv = 5,1 O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (fájl hiányzik) O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar1.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar1.dll O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / meddő / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [hpsysdrv] C: \ Windows \ System \ hpsysdrv.exe O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe"-nogui O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [EPSON Stylus CX3700 Series] C: \ WINDOWS \ System32 \ Spool \ Drivers \ W32x86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ TEMP \ E_SC4.tmp" / EF "HKLM" O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ System32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / Indítópult O4 - HKLM \ .. \ Run: [Flag tulajdonosa Live Grim] C: \ Documents and Settings \ All Users \ Application Data \ Software szabály zászló tulajdonosa \ Első obj.exe O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe" O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe" O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ applic ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ System32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [updateMgr] "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ AdobeUpdateManager.exe" AcRdB7_1_0-reboot 1 O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'HÁLÓZATI SZOLGÁLTATÁS') O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user') O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe O8 - Extra context menu item: & Clean Traces - C: \ Program Files \ DAP \ Adatbiztonság csomag \ dapcleanerie.htm O8 - Extra context menu item: & Letöltés a & DAP - C: \ Program Files \ DAP \ dapextie.htm O8 - Extra context menu item: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Visszamenőleges Links - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Download & all with DAP - C: \ Program Files \ DAP \ dapextie2.htm O8 - Extra context menu item: E & xportálás Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ mikrók ~ 3 \ Office12 \ EXCEL.EXE/3000 O8 - Extra context menu item: Hasonló Pages - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra button: Kutatás - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ mikrók ~ 3 \ Office12 \ REFIEBAR.DLL O9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL O9 - Extra button: Kapcsolat Segítség - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HelpCtr \ forgalmazóinak \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra 'Tools' menuitem: Kapcsolat Segítség - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HelpCtr \ forgalmazóinak \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Fotó Feltöltő 5) -- http://upload.facebook.com/controls/...oUploader5.cab O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab O16 - DPF: (96EEC7FF-106a-47F3-90D6-B4BB754AA40E) (POLI Pay Online) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab O16 - DPF: (CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7) (get_atlcom osztály) -- http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab O23 - Service: TP-LINK Konfiguráció Service (ACS) - Ismeretlen tulajdonos - C: \ WINDOWS \ System32 \ acs.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati Hotkey Poller - ATI Technologies Inc. - C: \ WINDOWS \ System32 \ Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Grisoft, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Grisoft, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe O23 - Service: getPlus (R) Helper - NOS Microsystems Kft. - C: \ Program Files \ NOS \ bin \ getPlus_HelperSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe -- End of file - 10505 bytes |
|
#6
| |||
| |||
| Open HijackThis, és válasszuk Nem a rendszer csak scan. Tegyünk egy pipa mellett a következő bejegyzést: (ha van)
Kilépés HijackThis. ---------- Megjegyzés: Az alábbi utasításokat hoztak létre külön erre a felhasználót. Ha nem ez a felhasználó, NEM alábbi irányokba, mivel azok károsíthatják a működését a rendszer Menj a Start> Futtatás és típusa notepad.exe majd kattintson OK Másolja be az alábbi a Jegyzettömbbe, és mentse a fixme.reg az Ön Desktop Kód: REGEDIT4 [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] "AlcxMonitor" =- "Flag tulajdonosa Live Grim" =- [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] "MODE igazi =- Győződjön meg róla, hogy mondja meg, ha kap egy siker üzenet a fent a cégbíróságon. Ha nem lesz sikeres az üzenetet, hogy nem működik. Törölje a fixme.reg a Desktop. Indítsa újra a számítógépet ---------- Letöltés CCleaner Slim és menthetjük az asztalra. Amikor a fájl mentésre került, akkor az asztalra, és kattintson duplán a ccsetupxxx_slim.exe Kövesse az instrukciókat, hogy telepítse a programot. A telepítés akkor:
---------- Letöltés Malwarebytes' Anti-Malware (MBAM)
Extra Megjegyzés: Ha MBAM találkozás egy fájlt, amit nehéz eltávolítani, akkor be kell mutatni, 1 / 2 kéri, kattintson az OK gombra, és hagyja, hogy vagy MBAM folytathatja a fertőtlenítési folyamat, ha felkérik, hogy indítsa újra a számítógépet, kérjük, azonnal. |
|
#7
| |||
| |||
| Megkaptam az üzenetet a siker fixme.reg fájlt, és itt a MBAM napló: Malwarebytes' Anti-Malware 1,28 Adatbázis-verzió: 1259 5/1/2600 Windows Service Pack 3 12/10/2008 5:24:27 PM mbam-log-2008-10-12 (17-24-27). txt Beolvasás típusa: Quick Scan Beolvasott Objects: 45849 Eltelt idő: 2 perc (ek), 43 másodperc (ek) Memory Processes Infected: 0 Fertőzött memória modulok: 0 Fertőzött rendszerleíró kulcsok: 0 Fertőzött rendszerleíró értékek: 0 Registry adatokat Infected: 0 Fertőzött mappák: 0 Fertőzött fájlok: 0 Memory Processes Infected: (Nem észlelhető rosszindulatú elem) Fertőzött memória modulok: (Nem észlelhető rosszindulatú elem) Fertőzött rendszerleíró kulcsok: (Nem észlelhető rosszindulatú elem) Fertőzött rendszerleíró értékek: (Nem észlelhető rosszindulatú elem) Registry adatokat Infected: (Nem észlelhető rosszindulatú elem) Fertőzött mappák: (Nem észlelhető rosszindulatú elem) A fertőzött fájlok: (Nem észlelhető rosszindulatú elem) |
|
#8
| |||
| |||
| Hogyan mindent most? |
|
#9
| |||
| |||
| Gyorsabban fut, de a Feladatkezelőből iexplore.exe folyamatban van, és amikor csak célból jön vissza. Körülbelül 5 perc használt közel 99%-os CPU után egy darabig úgy esik le a 0, de mem usage marad körül 100.000 K. |
|
#10
| |||
| |||
| Letöltés ComboFix a köv az egyik a lenti linkeket. Győződjön meg róla, top menteni a Desktop. Link # 1 Link # 2 ** Megjegyzés: Fontos, hogy a telefon közvetlenül az asztalra Zárjon be minden megnyitott webböngészők. (Firefox, Internet Explorer, stb) ComboFix megkezdése előtt. Ideiglenesen kikapcsol öné antivirus, És minden AntiSpyware valós idejű védelem előtt elvégzi a vizsgálatot. Kattints ez a kapcsolat listájának megtekintéséhez biztonsági programokat kell, hogy a fogyatékkal élők és az, hogyan lehet letiltani őket. Kattintson duplán combofix.exe és kövesse az instrukciókat. Ha kész ComboFix fog log Önnek. A Post ComboFix napló és egy új HijackThis log a következő választ. Fontos: Ne mouseclick ComboFix az ablakon, miközben az fut. Ez okozhatja, hogy az istálló. Ne felejtsük el újra, hogy a víruskereső és AntiSpyware során ComboFix kész. |