|
|
#1
Septembris 20, 2008, 14:18
| |||
| |||
 Iexplore.exe vīruss .... Please help! Čau. Es esmu vērojama lēna interneta ātrumu un ir vairāki procesi nosaukti iexplore.exe in Task Manager ... izmantot daudz atmiņas ... pat ja es neesmu, izmantojot Internet Explorer. Izmantojot pētniecību es uzzināju, ka tas ir vīruss, bet nevaru atrast risinājumu. Anti vīrusu programmatūras man nenosaka un kad mēģinu instalēt AVG, man kļūdas. Šī ir mana augsts jack šis žurnāls: Logfile of Trend Micro HijackThis v2.0.2 Scan saglabāts 5:01:45 gada 9/20/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Running procesiem: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ csrss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ Windows \ Explorer.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ Program Files \ Verizon \ McciTrayApp.exe C: \ Program Files \ Verizon \ VSP \ VerizonServicepoint.exe C: \ Program Files \ QuickTime \ QTTask.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ WINDOWS \ system32 \ cisvc.exe C: \ Program Files \ PrevxCSI \ prevxcsi.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ AIM6 \ aim6.exe C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe C: \ Program Files \ PrevxCSI \ prevxcsi.exe C: \ Program Files \ CA \ PPRT \ bin \ ITMRTSVC.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Webroot \ Spy Sweeper \ WRSSSDK.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ WINDOWS \ system32 \ wdfmgr.exe C: \ Program Files \ Viewpoint \ Common \ ViewpointService.exe C: \ WINDOWS \ system32 \ wscntfy.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ WINDOWS \ System32 \ alg.exe C: \ Program Files \ AIM6 \ aolsoftware.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Viewpoint \ Viewpoint Manager \ ViewMgr.exe C: \ Program Files \ iTunes \ iTunes.exe C: \ WINDOWS \ system32 \ NOTEPAD.EXE C: \ WINDOWS \ system32 \ cidaemon.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ WINDOWS \ regedit.exe C: \ Program Files \ Common Files \ Authentium \ AntiVirus \ dvpapi.exe C: \ Documents and Settings \ Zach \ Desktop \ HiJackThis.exe C: \ WINDOWS \ system32 \ wbem \ wmiprvse.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://wapp.verizon.net/bookmarks/bm...TBD&bm=wl_home R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://google.com/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7,0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file missing) O2 - BHO: Spybot-S & D IE Protection - (53.707.962-6F74-2D53-2.644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.5.0_11 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: HpWebHelper - (AAAE832A-5FFF-4.661-9C8F-369692D1DCB9) - C: \ WINDOWS \ pchealth \ helpctr \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ plugin \ webhelper . dll O4 - HKLM \ .. \ Run: [Verizon_McciTrayApp] C: \ Program Files \ Verizon \ McciTrayApp.exe O4 - HKLM \ .. \ Run: [VerizonServicepoint.exe] "C: \ Program Files \ Verizon \ VSP \ VerizonServicepoint.exe" / Autorun O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [SpySweeper] "C: \ Program Files \ Webroot \ Spy Sweeper \ SpySweeper.exe" / startintray O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [Aim6] "C: \ Program Files \ AIM6 \ aim6.exe" / d locale = en-US EE: / / AOL / imApp / HIDEBL O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 -. Noklusējuma lietotāja Startup: Pin.lnk = C: \ HP \ bin \ CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ reader_sl.exe Ø8 - ārpus konteksta menu item: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html Ø8 - ārpus konteksta menu item: & Translate angļu Word - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmwordtrans.html Ø8 - ārpus konteksta izvēlnes vienums: Atpakaļsaites - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html Ø8 - ārpus konteksta izvēlnes vienums: Cached Snapshot Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html Ø8 - ārpus konteksta menu item: E & ksportēt uz Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ EXCEL.EXE/3000 Ø8 - ārpus konteksta izvēlnes vienums: Līdzīgas lapas - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html Ø8 - ārpus konteksta izvēlnes vienums: Tulkot lapu angļu valodā - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html Ø9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.5.0_11 \ bin \ ssv.dll Ø9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.5.0_11 \ bin \ ssv.dll Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ REFIEBAR.DLL Ø9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll Ø9 - Extra 'Tools' MENUITEM: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll Ø9 - Extra button: Internet Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm (file missing) Ø9 - Extra 'Tools' MENUITEM: Internet Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = ASV \ IEButton \ support.htm (file missing) Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra button: Surround - (6A166C8C-66D5-41B5-88CE-ACE7AF5F79DA) -- http://wapp.verizon.net/bookmarks/bm...bm=wl_surround (file missing) (HKCU) Ø16 - DPF: (01.113.300-3E00-11D2-8.470-0060089874ED) (Support.com Configuration klase) -- https: / / activatemydsl.verizon.net/sd...0Installer.cab Ø16 - DPF: (30.528.230-99f7-4bb4-88d8-fa1d4f56a2ab) (INSTALLATION SUPPORT) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll Ø16 - DPF: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) (kvadrāta Scanner) -- http://ax.emsisoft.com/asquared.cab O18 - Protocol: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll (file missing) O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati Hotkey Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: CSIScanner - Prevx - C: \ Program Files \ PrevxCSI \ prevxcsi.exe O23 - Service: DvpApi (dvpapi) - Authentium, Inc - C: \ Program Files \ Common Files \ Authentium \ AntiVirus \ dvpapi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1.050 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: CA Pest Patrol reālā aizsardzības dienests (ITMRTSVC) - CA, Inc - C: \ Program Files \ CA \ PPRT \ bin \ ITMRTSVC.exe O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: Radialpoint Unicorn Update Service (RPSUpdaterR) - Radialpoint Inc - C: \ Program Files \ Verizon \ PC Security Tehniskā apskate \ rpsupdaterR.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc - C: \ Program Files \ Webroot \ Spy Sweeper \ WRSSSDK.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C: \ Program Files \ Viewpoint \ Common \ ViewpointService.exe -- End of failu - 9.914 bytes Please help! Pateicība! |
|
#2
Septembris 20, 2008, 15:21
| |||
| |||
| Iexplore.exe vīruss .... Please help! Welcome to CH. Jūs esat pārāk daudz drošības programmas darbības, tāpēc jūs nevarat saņemt AVG instalēt. Iet uz Pievienot vai noņemt programmas un atinstalēt:
Disable Spybot's TeaTimer Kaut TeaTimer ir lielisks līdzeklis, lai novērstu spiegprogrammatūras, tā var arī ietekmēt ar HijackThis fixes. Lūdzu atslēgt TeaTimer tagad, kamēr ir tīrs. 1. Right click Spybot in System Tray (izskatās kalendārs ar piekaramo atslēgu simbols). Izvēlēties Iziet Spybot S & D Resident 2. Skriet Spybot S & D 3. Iet uz Mode menuUn pārliecinieties, Advanced Mode ir izvēlēts. 4. Uz kreisajā pusē, izvēlieties Rīki > Resident neatķeksējiet Resident TeaTimer un OK jebkurš ātru un Restart datoru. Piezīme: Ja TeaTimer dod jums brīdinājums tam, ka dažas izmaiņas tika veiktas, lai šajā vietā bloķējot to. Ja TeaTimer nevarēs izslēgt, tad atinstalēt Spybot, līdz mēs veikta tīrīšana. ---------- Disable SpySweeper Jūs varat atkārtoti iespējot pēc tam, kad jūs esat tīri. Atslēgt SpySweeper: Atvērt Spysweeper noklikšķiniet> Options pa to pa kreisi, tad> Program Options > Neatķeksējiet "slodze logi Startup" Vairāk nekā uz kreiso klikšķi "vairogi" un Neatķeksējiet viss tur. Neatķeksējiet "mājas lapa vairoga" Neatķeksējiet "automātiski atjaunot noklusējuma bez paziņojuma" ---------- Open HijackThis un izvēlieties Vai sistēmas skenēšanu tikai. Vieta atzīme blakus šādiem ierakstiem: (ja ir)
Iziet HijackThis. ---------- Download Norton Removal Tool (SymNRT) uz Jūsu rakstāmgalda. Tiklīdz tie lejupielādēti lūdzu, aizveriet visus atvērtos pārlūkprogrammas, arī saglabāt jebkuru darbu, jo tas var prasīt restart.
Lejupielādēt CCleaner Slim un saglabājiet to savā datorā. Kad fails ir saglabāts, dodieties uz Desktop un veiciet dubultklikšķi uz ccsetupxxx_slim.exe Sekojiet norādēm, lai instalētu programmu. Pabeigtu uzstādīšanu, tad:
Lejupielādēt Malwarebytes "Anti-Malware (MBAM)
---------- Tagad sākas jauna HijackThis skenēšanas un pēc jaunā žurnāla kopā ar MBAM žurnālā. ---------- EDIT: Post uninstall sarakstu arī. Izveidot Uninstall List
__________________  |
|
#3
Septembris 21, 2008, 03:21
| |||
| |||
| Iexplore.exe vīruss .... Please help! Labi. Atvainojiet par jāgaida. Man bija problēma ar manu pieslēgumu. HijackThis: Logfile of Trend Micro HijackThis v2.0.2 Scan saglabāts 6:20:34 gada 9/21/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Running procesiem: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ WINDOWS \ system32 \ cisvc.exe C: \ Program Files \ Common Files \ Authentium \ AntiVirus \ dvpapi.exe C: \ Program Files \ CA \ PPRT \ bin \ ITMRTSVC.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Webroot \ Spy Sweeper \ WRSSSDK.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ Windows \ Explorer.exe C: \ Program Files \ Verizon \ McciTrayApp.exe C: \ Program Files \ Verizon \ VSP \ VerizonServicepoint.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ AIM6 \ aim6.exe C: \ Program Files \ AIM6 \ aolsoftware.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ wscntfy.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Documents and Settings \ Zachary Merrick \ Desktop \ HiJackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://wapp.verizon.net/bookmarks/bm...TBD&bm=wl_home R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://google.com/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7,0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Spybot-S & D IE Protection - (53.707.962-6F74-2D53-2.644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.5.0_11 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: HpWebHelper - (AAAE832A-5FFF-4.661-9C8F-369692D1DCB9) - C: \ WINDOWS \ pchealth \ helpctr \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ plugin \ webhelper . dll O4 - HKLM \ .. \ Run: [Verizon_McciTrayApp] C: \ Program Files \ Verizon \ McciTrayApp.exe O4 - HKLM \ .. \ Run: [VerizonServicepoint.exe] "C: \ Program Files \ Verizon \ VSP \ VerizonServicepoint.exe" / Autorun O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [Aim6] "C: \ Program Files \ AIM6 \ aim6.exe" / d locale = en-US EE: / / AOL / imApp / HIDEBL O4 -. Noklusējuma lietotāja Startup: Pin.lnk = C: \ HP \ bin \ CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ reader_sl.exe Ø8 - ārpus konteksta menu item: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html Ø8 - ārpus konteksta menu item: & Translate angļu Word - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmwordtrans.html Ø8 - ārpus konteksta izvēlnes vienums: Atpakaļsaites - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html Ø8 - ārpus konteksta izvēlnes vienums: Cached Snapshot Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html Ø8 - ārpus konteksta menu item: E & ksportēt uz Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ EXCEL.EXE/3000 Ø8 - ārpus konteksta izvēlnes vienums: Līdzīgas lapas - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html Ø8 - ārpus konteksta izvēlnes vienums: Tulkot lapu angļu valodā - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html Ø9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.5.0_11 \ bin \ ssv.dll Ø9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.5.0_11 \ bin \ ssv.dll Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ REFIEBAR.DLL Ø9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll Ø9 - Extra 'Tools' MENUITEM: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll Ø9 - Extra button: Internet Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm (file missing) Ø9 - Extra 'Tools' MENUITEM: Internet Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = ASV \ IEButton \ support.htm (file missing) Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra button: Surround - (6A166C8C-66D5-41B5-88CE-ACE7AF5F79DA) -- http://wapp.verizon.net/bookmarks/bm...bm=wl_surround (file missing) (HKCU) Ø16 - DPF: (01.113.300-3E00-11D2-8.470-0060089874ED) (Support.com Configuration klase) -- https: / / activatemydsl.verizon.net/sd...0Installer.cab Ø16 - DPF: (30.528.230-99f7-4bb4-88d8-fa1d4f56a2ab) (INSTALLATION SUPPORT) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati Hotkey Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: DvpApi (dvpapi) - Authentium, Inc - C: \ Program Files \ Common Files \ Authentium \ AntiVirus \ dvpapi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1.050 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: CA Pest Patrol reālā aizsardzības dienests (ITMRTSVC) - CA, Inc - C: \ Program Files \ CA \ PPRT \ bin \ ITMRTSVC.exe O23 - Service: Radialpoint Unicorn Update Service (RPSUpdaterR) - Radialpoint Inc - C: \ Program Files \ Verizon \ PC Security Tehniskā apskate \ rpsupdaterR.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc - C: \ Program Files \ Webroot \ Spy Sweeper \ WRSSSDK.exe -- End of failu - 8.080 bytes MBAM žurnāls: Malwarebytes "Anti-Malware 1,28 Database version: 1182 Windows 5.1.2600 Service Pack 2 9/20/2008 7:36:15 mbam-log-2008-09-20 (19-36-11). txt Scan type: Quick Scan Objekti skenēts: 56.703 Pagājušo laiku: 38 minūte (s), 26 second (s) Memory Processes Inficētie: 0 Memory Modules Inficētie: 0 Registry Keys Inficētie: 1 Reģistra vērtības Inficētie: 0 Registry Data Items Infected: 0 Mapes Inficētie: 0 Faili Inficētie: 1 Atmiņas procesi Inficētie: (No ļaunprātīgs preces konstatētas) Memory Modules Inficētie: (No ļaunprātīgs preces konstatētas) Registry Keys Inficētie: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Multimedia \ W MPlayer \ Schemes \ f3pss (Adware.MyWebSearch) -> No pasākumus. Reģistra vērtības Inficētie: (No ļaunprātīgs preces konstatētas) Registry Data Items Infected: (No ļaunprātīgs preces konstatētas) Mapes Inficētie: (No ļaunprātīgs preces konstatētas) Faili Inficētie: C: \ WINDOWS \ system32 \ taskmon.exe (Trojan.Agent) -> No pasākumus. Thanks again. Es vēl arvien iexplore.exe. |
|
#4
Septembris 21, 2008, 03:25
| |||
| |||
| Iexplore.exe vīruss .... Please help! Viena cita lieta. Mans DSL modems saka, ka es esmu saistīts, bet es nevarēju iegūt internetā ar FireFox. Internet Explorer darbi though. Tas varētu būt, vīruss mēģina mani izmantot Internet Explorer? |
|
#5
Septembris 21, 2008, 09:23
| |||
| |||
| Iexplore.exe vīruss .... Please help! MBAM log saka Nē pasākumus. Re-palaist to un to "noteikt, ko tā uzskata. ----- Izveidot Uninstall List
__________________ |
|
#6
Septembris 21, 2008, 13:21
| |||
| |||
| Iexplore.exe vīruss .... Please help! Adobe Flash Player 9 ActiveX Adobe Flash Player ActiveX Adobe Reader 7.0.9 Agere Systems PCI-SV92PP Soft Modem AIM 6 Ancient Sudoku AOL atinstalētājs (Izvēlieties kuras Produkti, atcelt) Apple Mobile Device Support Apple Software Update ATI Control Panel ATI Display Driver Authentium AntiVirus SDK - 2 Bejeweled 2 Deluxe Blasterball 2 Remix Blasterball 2 Revolution Bonjour Grāmatu tārps Deluxe Lielība Symphony Browser Protection Volume CA Pest Patrol reālā Protection CCleaner (noņemt tikai) Chuzzle Deluxe CommView par WiFi Compaq Connections (noņemt tikai) Compaq organizēšana Customer Experience Enhancement Diner Dash DivX Codec DivX Converter DivX Player DivX Web Player Easy WiFi Radar 1.0.5 Fejas Ģimenes naids NOSACĪTĪBAS Flip Words GiPo @ FileUtilities 3,2 High Definition Audio Driver Package - KB888111 HijackThis 2.0.2 Labojumfailu Windows Internet Explorer 7 (KB947864) Labojumfailu Windows XP (KB893357) Labojumfailu Windows XP (KB906569) Labojumfailu Windows XP (KB915865) Labojumfailu Windows XP (KB935448) Labojumfailu Windows XP (KB952287) HP Boot Optimizer HP DVD Play 2,1 HP Game Console HP Imaging Device Funkcijas 7,0 HP Photosmart Premier Software 6,5 HP Support Overview HP Update HP Web Helper Insaniquarium Deluxe iTunes J2SE Runtime Environment 5,0 Update 11 J2SE Runtime Environment 5,0 Update 5 Jewel Quest Limewire 4.18.8 Malwarebytes "Anti-Malware Microsoft. NET Framework 1.1 Microsoft. NET Framework 1.1 Microsoft. NET Framework 1.1 Hotfix (KB928366) Microsoft Internationalized Domain Names mazināšanas APIs Microsoft National Language Support Downlevel APIs Microsoft Office Standard Edition 2003 Microsoft Visual C + + 2005 Redistributable Microsoft Works Mozilla Firefox (2.0.0.16) MSXML 4,0 SP2 (KB936181) Mystery Case Files PC-for Windows 5 Doctor PPSDKRedistributables Python 2,2 pywin32 paplašinājumi (Build 203) Python 2.2.3 QuickTime Realtek High Definition Audio Driver Ricochet Lost Worlds Drošības un aizsardzības centru atinstalētājs Drošības Messenger Drošības atjauninājums CAPICOM (KB931906) Drošības atjauninājums CAPICOM (KB931906) Drošības atjauninājums Soli pa solim Interactive Training (KB923723) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB905915) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Sonic Express Labeler Skaņas RecordNow Audio Skaņas RecordNow Kopēt Skaņas RecordNow Data Skaņas Update Manager Spy Sweeper Spybot - Search & Destroy Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB912945) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB951072-v2) Verizon Online Palīdzība un atbalsts Verizon PC Security Tehniskā apskate Verizon Servicepoint 1.5.12 Webcam Basic Windows Defender Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Internet Explorer 8 Beta 2 Windows Live Messenger Windows Media Format Runtime Windows Media Player 10 Windows Vista Sounds Pack Windows XP Hotfix - KB873339 Windows XP Hotfix - KB883667 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888239 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB892050 Windows XP Hotfix - KB893066 WLTB Custom Buttons Yahoo! Kurjers Thanks again. |
|
#7
Septembris 21, 2008, 13:25
| |||
| |||
| Iexplore.exe vīruss .... Please help! Varu izveidot savienojumu, izmantojot to FireFox vēlreiz. No tā, ko es varu redzēt, iexplore.exe tagad tikai darboties, kad Internet Explorer darbojas, kaut gan ir vēl vismaz divas, dažreiz 3 un tās lēnu datoru krasi. |
|
#8
Septembris 21, 2008, 14:59
| |||
| |||
| Iexplore.exe vīruss .... Please help! Vai kāds no šiem maksā versiju? CA Pest Patrol PC-for Windows 5 Doctor Spy Sweeper
__________________ |
|
#9
Septembris 21, 2008, 17:37
| |||
| |||
| Iexplore.exe vīruss .... Please help! Anti virus software? Nē. |
|
#10
Septembris 21, 2008, 17:41
| |||
| |||
| Iexplore.exe vīruss .... Please help! Atinstalēt visus 3 no tām. CA Pest Patrol PC-for Windows 5 Doctor Spy Sweeper ---------- Download ComboFix by subs no vienas no saitēm. Pārliecinieties top saglabājiet to Desktop. Link # 1 Link # 2 ** Piezīme: Ir svarīgi, ka tā ir saglabāta tieši jūsu Desktop Aizveriet visas atvērtās interneta pārlūkprogrammas. (Firefox, Internet Explorer uc) pirms uzsākt ComboFix. Laiku sakropļot jūsu antivīruss, Un jebkuru antispyware reāllaika aizsardzību pirms veic skenēšanu. Click šo saiti redzēt sarakstu drošības programmas, kas ir invalīdi un to, kā pārtraukt to darbību. Dubultklikšķi combofix.exe un sekojiet norādījumiem. Kad pabeigts ComboFix ražos log for you. Post ComboFix log un jaunu HijackThis log Jūsu nākamo atbildi. Svarīgi: Nav mouseclick ComboFix loga kamēr tas darbojas. Tas var izraisīt to apstāsies. Atcerieties, ka jauna aktivizētu jūsu antivīrusu un antispyware aizsardzību, ja ComboFix ir pabeigta.
__________________ |
