|
| |||||||
| Rekisteröidy | Sivustokartta Spy | Käyttäjälista | Lahjoita | Haku | Today's Posts | Mark Forums Read | Foorumin säännöt |
 |
 |
| | Thread Tools |
|
#1
19 tammikuu 2008, 09:02
| |||
| |||
| IEXPLORE.EXE virus ongelma Moi, Huomasin Minulla oli ongelma, kun olen kuullut musiikkia salaperäisesti pelaamista. Tarkistin ja näki joukko IEXPLORE.EXE prosesseja käynnissä. Juoksin NAV, Ad-Aware, Defender ja sitten seuraa ohjeita sinulle tarjotaan. Kiitos jo etukäteen avulla. Tässä ovat logs: SUPERAntiSpyware Scan Log http://www.superantispyware.com Muodostettu 01.19.2008 klo 08:53 Application Version: 3.9.1008 Core Rules Database Version: 3384 Trace Rules Database Version: 1378 Scan type: Complete Scan Total Scan Time: 01:01:52 Muisti erät skannattu: 576 Muisti uhkia havaittu: 0 Rekisterin kohteita skannattavan: 7837 Rekisterin uhkia havaittu: 0 Tiedoston kohteita skannattavan: 66011 Tiedoston uhkia havaittu: 60 Adware.Tracking Cookie C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ advertpro [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ revsci [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ cgi-bin [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@richmedia.yahoo [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ eyewonder [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ hc [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@sales.liveperson [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ html [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@www.burstnet [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@www.crackpassword [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@umkxup22.unitedme dia [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@click.mgg01 [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ adcentriconline [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@ad1.soundpedia [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ adbrite [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@iacas.adbureau [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ indiads [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@microsoftwga.112. 2o7 [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@ads.cnn [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@ads.monster [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@server.iad.livepe rson [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@ads3.blastro [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@mailtrack.rnm [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@track.bestbuy [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ atwola [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ 85084061 [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@server.lon.livepe rson [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ Partypoker [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ sundeep@ads.as4x.tmcs [2]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ xiti [1]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ tribalfusion [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@ad.yieldman ager [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@ad.yieldman ager [3]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ adbrite [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ adecn [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@ads.128b [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@adserver.ea syad [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ apmebf [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ atdmt [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ banner [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ clicksor [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ DoubleClickin [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ parantaa [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ euros4click [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ fastclick [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ FindWhat [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ Partypoker [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ pro-market [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ statcounter [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@stats.adbri te [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ toseeka [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@tracker.aff istats [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.findit-quick [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.goaltra ffic [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.goaltra ffic [3]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.goodcli cKZ [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.kikclic k [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ Zedo [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ Zedo [3]. Txt C: \ Documents and Settings \ Sundeep \ Cookies \ Sundeep @ burstnet [2]. Txt # Version = 4 # OnlineScanner.ocx = 1.0.0.56 # OnlineScannerDLLA.dll = 1, 0, 0, 51 # OnlineScannerDLLW.dll = 1, 0, 0, 51 # OnlineScannerUninstaller.exe = 1, 0, 0, 49 # Vers_standard_module = 2806 (20080118) # Vers_arch_module = 1,063 (20080117) # Vers_adv_heur_module = 1,060 (20070601) # EOSSerial = 5ac60436be4e8c4d8b34206de1ddeb01 # END = päättynyt # Remove_checked = true # Unwanted_checked = true # Utc_time = 2008-01-19 03:34:06 # Local_time = 2008-01-19 10:34:06 (-0500, Eastern Standard Time) # Country = "Yhdysvallat" # OSVer = 5.1.2600 NT Service Pack 2 # Skannattavan = 394948 # Löytynyt = 14 # Scan_time = 2493 C: \ MSInfnd.exe luultavasti muunnelma Win32/Hupigon troijalaisen (unable to clean - Poistetaan) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc useita infiltraatioista (poistettu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc »ZIP» BlackBox.class muunnos Java / ClassLoader troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objektin - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc »ZIP» VerifierBug.class JS / IEStart.G troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objekti - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc »ZIP» Dummy.class Java / NoCheat.B troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objekti - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-3f7c5e12 muunnos Java / ClassLoader troijalaisen (poistettu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-3f7c5e12 »ZIP» BlackBox.class muunnos Java / ClassLoader troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objektin - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d useita infiltraatioista (poistettu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d »ZIP» BlackBox.class muunnos Java / ClassLoader troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objektin - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d »ZIP» VerifierBug.class JS / IEStart.G troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objekti - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Application Data \ Sun \ Java \ Deployment \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d »ZIP» Dummy.class Java / NoCheat.B troijalaisen (virhe siivous - toiminta ei ole käytettävissä tämän tyyppiseen objekti - virhe poistamalla - toiminta ole käytössä tällaista esinettä - oli osa poistetun esineen) 00000000000000000000000000000000 C: \ Program Files \ Common Files \ Microsoft Shared \ MSInfo \ MSInfnd.exe luultavasti muunnelma Win32/Hupigon troijalaisen (unable to clean - Poistetaan) 00000000000000000000000000000000 C: \ WINDOWS \ system32 \ _MSInfnd.exe luultavasti muunnelma Win32/Hupigon troijalaisen (unable to clean - Poistetaan) 00000000000000000000000000000000 D: \ MSInfnd.exe luultavasti muunnelma Win32/Hupigon troijalaisen (unable to clean - Poistetaan) 00000000000000000000000000000000 Logfile ja Trend Micro HijackThis v2.0.2 Scan tallennettu klo 10:55:08, on 01.19.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Käynnissä olevista prosesseista: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ Lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ WINDOWS \ Explorer.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Symantec \ LiveUpdaten \ ALUSchedulerSvc.exe C: \ Program Files \ Widcomm \ Bluetooth Software \ bin \ btwdins.exe C: \ WINDOWS \ system32 \ cisvc.exe C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe C: \ Program Files \ Yahoo! \ NAV \ iwp \ NPFMntor.exe C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ WINDOWS \ system32 \ fxssvc.exe C: \ WINDOWS \ stsystra.exe C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe C: \ Program Files \ Dell \ QuickSet \ quickset.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ Program Files \ Google \ Google Desktop \ GoogleDesktop.exe C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Intel \ Wireless \ Bin \ Dot1XCfg.exe C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ system32 \ igfxpers.exe C: \ WINDOWS \ system32 \ igfxsrvc.exe C: \ Program Files \ PhatNoise Music Manager \ PNAgent.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ DOCUME ~ 1 \ Sundeep \ locals ~ 1 \ Temp \ clclean.0001 C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe C: \ Program Files \ Google \ Google Desktop \ GoogleDesktop.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ Program Files \ Widcomm \ Bluetooth Software \ BTTray.exe C: \ Program Files \ Hamachi \ hamachi.exe C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ WINDOWS \ system32 \ Msiexec.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.ca/ R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Asetukset, ProxyOverride = *. paikallisten O1 - Hosts: 66.98.148.65 auto.search.msn.com O1 - Hosts: 66.98.148.65 auto.search.msn.es O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: NAV Helper - (A8F38D8D-E480-4D52-B7A2-731BB6995FDD) - C: \ Program Files \ Yahoo! \ NAV \ NavShExt.dll O4 - HKLM \ .. \ Run: [SigmatelSysTrayApp] stsystra.exe O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe O4 - HKLM \ .. \ Run: [IntelZeroConfig] "C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe" O4 - HKLM \ .. \ Run: [IntelWireless] "C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe" / tf Intel PROSet / Wireless O4 - HKLM \ .. \ Run: [Dell QuickSet] C: \ Program Files \ Dell \ QuickSet \ quickset.exe O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [Google Desktop Search] "C: \ Program Files \ Google \ Google Desktop \ GoogleDesktop.exe" / käynnistys O4 - HKLM \ .. \ Run: [CTSysVol] C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe / r O4 - HKLM \ .. \ Run: [MBMon] rundll32 CTMBHA.DLL, MBMon O4 - HKLM \ .. \ Run: [UpdReg] C: \ WINDOWS \ UpdReg.EXE O4 - HKLM \ .. \ Run: [IgfxTray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [Persistence] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [Kernel ja Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM \ .. \ Run: [PNAgent] "C: \ Program Files \ PhatNoise Music Manager \ PNAgent.exe" O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-piilota O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe" O4 - HKLM \ .. \ RunServices: [DJSNetCN] C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [SetDefaultMIDI] MIDIDef.exe O4 - HKCU \ .. \ Run: [WeatherEye] C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Default user') O4 - Startup: Hamachi.lnk = C: \ Program Files \ Hamachi \ hamachi.exe O4 - Global Startup: Bluetooth.lnk =? O8 - Extra yhteydessä valikkotoimintoa: E & Vie Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ mikros ~ 2 \ Office11 \ EXCEL.EXE/3000 O8 - Extra yhteydessä valikkotoimintoa: Lähetä & Bluetooth Device ... - C: \ Program Files \ Widcomm \ Bluetooth Software \ btsendto_ie_ctx.htm O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ mikros ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra button: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker.comin \ RunApp.exe (file missing) O9 - Extra 'Tools' menuitem: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker.comin \ RunApp.exe (file missing) O9 - Extra button: @ btrez.dll, -4015 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ Widcomm \ Bluetooth Software \ btsendto_ie.htm O9 - Extra 'Tools' menuitem: @ btrez.dll, -12650 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ Widcomm \ Bluetooth Software \ btsendto_ie.htm O10 - Broken Internet vuoksi LSP tarjoaja "C: \ Program Files \ Bonjour \ mdnsnsp.dll" puuttuu O16 - DPF: (05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8) (Office Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=58813 O16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Agent 6.6) -- http://housecall65.trendmicro.com/ho...vex/hcImpl.cab O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932319484 O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932290562 O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 1 \ GOEC62 ~ 1.DLL O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe O23 - Service: Automaattinen LiveUpdaten Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdaten \ ALUSchedulerSvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C: \ Program Files \ Widcomm \ Bluetooth Software \ bin \ btwdins.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: Creative Labs Licensing Service - Creative Labs - C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe O23 - Service: Diskeeper - Diskeeper Corporation - C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe O23 - Service: Symantec Licensing Jäljitä Internet-yhteyden (DJSNETCN) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O23 - Service: Intel (R) PROSet / Wireless Event Log (EvtEng) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: LiveUpdaten - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: LVCOMSer - Logitech Inc. - C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C: \ Program Files \ Common Files \ LogiShrd \ LVMVFM \ LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C: \ Program Files \ Common Files \ LogiShrd \ SrvLnch \ SrvLnch.exe O23 - Service: MSInfo Framework Service (MSInfoFrv) - Unknown owner - C: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ MSInfnd.exe (file missing) O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ iwp \ NPFMntor.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE O23 - Service: Intel (R) PROSet / Wireless Registry Service (RegSrvc) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe O23 - Service: Cyberlink RichVideo Service (CRVS) (RichVideo) - Unknown owner - C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe O23 - Service: Intel (R) PROSet / Wireless Service (S24EventMonitor) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: SPBBCSvc - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: Intel (R) PROSet / Wireless SSO Service (WLANKEEPER) - Intel (R) Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe -- End of file - 11743 bytes |
|
#2
19 tammikuu 2008, 09:39
| |||
| |||
| IEXPLORE.EXE virus ongelma Tervetuloa TCF. Avaa HJT ja valitse Tee järjestelmän tarkistus vain sitten valintamerkki vieressä: O1 - Hosts: 66.98.148.65 auto.search.msn.com O1 - Hosts: 66.98.148.65 auto.search.msn.es O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O9 - Extra button: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker.comin \ RunApp.exe (file missing) O9 - Extra 'Tools' menuitem: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker.comin \ RunApp.exe (file missing) Sulje kaikki ikkunat lukuun ottamatta HJT ja napsauta Korjaa tarkastetaan. ----------
---------- Suorita uusi scan kanssa HJT ja post lokin jälkeen Spybot on valmis.
__________________  |
|
#3
19 tammikuu 2008, 15:11
| |||
| |||
| IEXPLORE.EXE virus ongelma Ok, tässä on uusi log: Logfile ja Trend Micro HijackThis v2.0.2 Scan tallennettu klo 5:09:34 PM, on 01.19.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Käynnissä olevista prosesseista: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ Lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ WINDOWS \ Explorer.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Symantec \ LiveUpdaten \ ALUSchedulerSvc.exe C: \ Program Files \ Widcomm \ Bluetooth Software \ bin \ btwdins.exe C: \ WINDOWS \ system32 \ cisvc.exe C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe C: \ Program Files \ Yahoo! \ NAV \ iwp \ NPFMntor.exe C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ WINDOWS \ system32 \ fxssvc.exe C: \ WINDOWS \ stsystra.exe C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe C: \ Program Files \ Dell \ QuickSet \ quickset.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ Program Files \ Google \ Google Desktop \ GoogleDesktop.exe C: \ Program Files \ Intel \ Wireless \ Bin \ Dot1XCfg.exe C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ system32 \ igfxsrvc.exe C: \ WINDOWS \ system32 \ igfxpers.exe C: \ Program Files \ PhatNoise Music Manager \ PNAgent.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe C: \ DOCUME ~ 1 \ Sundeep \ locals ~ 1 \ Temp \ clclean.0001 C: \ Program Files \ Google \ Google Desktop \ GoogleDesktop.exe C: \ Program Files \ Widcomm \ Bluetooth Software \ BTTray.exe C: \ Program Files \ Hamachi \ hamachi.exe C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE C: \ WINDOWS \ system32 \ cidaemon.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.ca/ R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Asetukset, ProxyOverride = *. paikallisten O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O2 - BHO: NAV Helper - (A8F38D8D-E480-4D52-B7A2-731BB6995FDD) - C: \ Program Files \ Yahoo! \ NAV \ NavShExt.dll O4 - HKLM \ .. \ Run: [SigmatelSysTrayApp] stsystra.exe O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe O4 - HKLM \ .. \ Run: [IntelZeroConfig] "C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe" O4 - HKLM \ .. \ Run: [IntelWireless] "C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe" / tf Intel PROSet / Wireless O4 - HKLM \ .. \ Run: [Dell QuickSet] C: \ Program Files \ Dell \ QuickSet \ quickset.exe O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [Google Desktop Search] "C: \ Program Files \ Google \ Google Desktop \ GoogleDesktop.exe" / käynnistys O4 - HKLM \ .. \ Run: [CTSysVol] C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe / r O4 - HKLM \ .. \ Run: [MBMon] rundll32 CTMBHA.DLL, MBMon O4 - HKLM \ .. \ Run: [UpdReg] C: \ WINDOWS \ UpdReg.EXE O4 - HKLM \ .. \ Run: [IgfxTray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [Persistence] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [Kernel ja Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM \ .. \ Run: [PNAgent] "C: \ Program Files \ PhatNoise Music Manager \ PNAgent.exe" O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-piilota O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe" O4 - HKLM \ .. \ RunServices: [DJSNetCN] C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [SetDefaultMIDI] MIDIDef.exe O4 - HKCU \ .. \ Run: [WeatherEye] C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Default user') O4 - Startup: Hamachi.lnk = C: \ Program Files \ Hamachi \ hamachi.exe O4 - Global Startup: Bluetooth.lnk =? O8 - Extra yhteydessä valikkotoimintoa: E & Vie Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ mikros ~ 2 \ Office11 \ EXCEL.EXE/3000 O8 - Extra yhteydessä valikkotoimintoa: Lähetä & Bluetooth Device ... - C: \ Program Files \ Widcomm \ Bluetooth Software \ btsendto_ie_ctx.htm O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ mikros ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra button: @ btrez.dll, -4015 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ Widcomm \ Bluetooth Software \ btsendto_ie.htm O9 - Extra 'Tools' menuitem: @ btrez.dll, -12650 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ Widcomm \ Bluetooth Software \ btsendto_ie.htm O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O10 - Broken Internet vuoksi LSP tarjoaja "C: \ Program Files \ Bonjour \ mdnsnsp.dll" puuttuu O16 - DPF: (05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8) (Office Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=58813 O16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Agent 6.6) -- http://housecall65.trendmicro.com/ho...vex/hcImpl.cab O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932319484 O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932290562 O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 1 \ GOEC62 ~ 1.DLL O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe O23 - Service: Automaattinen LiveUpdaten Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdaten \ ALUSchedulerSvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C: \ Program Files \ Widcomm \ Bluetooth Software \ bin \ btwdins.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: Creative Labs Licensing Service - Creative Labs - C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe O23 - Service: Diskeeper - Diskeeper Corporation - C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe O23 - Service: Symantec Licensing Jäljitä Internet-yhteyden (DJSNETCN) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O23 - Service: Intel (R) PROSet / Wireless Event Log (EvtEng) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: LiveUpdaten - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: LVCOMSer - Logitech Inc. - C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C: \ Program Files \ Common Files \ LogiShrd \ LVMVFM \ LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C: \ Program Files \ Common Files \ LogiShrd \ SrvLnch \ SrvLnch.exe O23 - Service: MSInfo Framework Service (MSInfoFrv) - Unknown owner - C: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ MSInfnd.exe (file missing) O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ iwp \ NPFMntor.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE O23 - Service: Intel (R) PROSet / Wireless Registry Service (RegSrvc) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe O23 - Service: Cyberlink RichVideo Service (CRVS) (RichVideo) - Unknown owner - C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe O23 - Service: Intel (R) PROSet / Wireless Service (S24EventMonitor) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: SPBBCSvc - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: Intel (R) PROSet / Wireless SSO Service (WLANKEEPER) - Intel (R) Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe -- End of file - 11469 bytes |
|
#4
19 tammikuu 2008, 15:24
| |||
| |||
| IEXPLORE.EXE virus ongelma Olen sekaisin kuuluu suuntaan aikaisemmin. Loki näyttää sakon vaikka, miten tietokoneen nyt?
__________________ |
|
#5
20 tammikuu 2008, 07:40
| |||
| |||
| IEXPLORE.EXE virus ongelma Sen mennyt! Kiitos niin paljon apuanne! |
|
#6
20 tammikuu 2008, 09:48
| |||
| |||
| IEXPLORE.EXE virus ongelma Kuulostaa hyvältä. Jätin pois latauslinkkiä Viraltapano # 2 Spybot. Haluaisin ehdottaa, asentamisessa ja käytössä on scan kanssa. Ladata Spybot-S & D Käytä ohjeita post # 2 asettaa se oikein. Tämä on hyvä aika tyhjentää tartunnan järjestelmän palautuspisteet ja perustaa uusi puhdas palautuspistettä:
Check out tähän virkaan ilmaiseksi työkaluja ja vinkkejä, jotta PC ja itse turvassa tulevaisuudessa. Tämä viesti on ilmaisia työkaluja ja ohjeita pysytellä PC käynnissä sujuvaa myös tulevaisuudessa.
__________________ |
|
#7
21 tammikuu 2008, 04:57
| |||
| |||
| IEXPLORE.EXE virus ongelma Sinulla oli saanut tartunnan, jonka RAT (Remote Administration Tool). Haluan tehdä etsiä klog .* tiedosto ja poista se, olisi yleensä joko system32 tai Windows-kansioon. RAT on todella suosittu script kiddies ja käytön cryptors estää AV havaitseminen ja sitomisaineet, jotta he voivat sitovasti troijalaisen on apps. Kun sain selville, sain hakkeroitu on rotta, lataamalla Warez minulla oli tarkastella ohjelman itselleni ja se oli paska kuormitusten ominaisuudet keylog, webcam katsoja, salasana välimuisti. SO mahdollisuudet ovat, kun kuulin musiikki soi, oli joku manuaalisesti läpi tiedostot ja niiden avaamista. Jos olet törmännyt samaa toimintaa kuten musiikki soi, salasana muutettu tai jopa webbikamera päällä sitten sijasta asennuttamalla nippu hyödytön AV-ohjelmia ja Malware poistaminen crap. Tarkista Installed Components vuonna rekisteriin. HKEY_LOCAL_MACHINE> Ohjelmat> Microsoft> Active Setup> Installed Components ja klikkaa kunkin kansiot ja etsiä merkintää, joka juuri on StubPath , joka viittaa. exe vuonna system32 tai Windows-kansioon. Jos haluat nähdä, jos se on sitä. Exe on aktiivinen käynnistyslevy, siirry sen ja käyttää sitä. Jos sanotaan, että sitä käytetään toisen ohjelman ja sen nimi on. Exe isnt näkyä prosessi luettelosta sitten sitä ruiskutetaan toisen prosessin, kuten defualt broswer (IE). Sen jälkeen voit käyttää HJT poistaa kyseisen tiedoston heti uudelleen ja tietysti poistaa rekisterimerkinnän. RAT n ovat samat kuin IRCBOT mutta RAT vain on GUI, haluan suositella palomuurin, siis jos ohjelma haluaa satunnaisesti internet-yhteyden muodostamiseen voit kieltää sitä ja silti käyttää ohjelmaa. Koska troijalaisen on binded että asennustiedosto Troijan otteita ja toteuttaja, kun siirryt asentaa ja yritän tehdä exteernal yhteys ja jos estää se sitten olet Troijan mutta Arnt tartunnan, koska se vain istua hakemiston tekee ei mitään. Anteeksi lörpötellä päällä, toivomme, että tämä on antanut sinulle laajempaa horisonttia mahdollisesti vaaraominaisuuksiensa rotilla ja IRCbots. Brad |
|
#8
21 tammikuu 2008, 08:49
| |||
| |||
| IEXPLORE.EXE virus ongelma Hei, Brad, thanks for info. Tein mitä sanoitte, ja kaikki ne. Exe tarkasti huolta stubpaths että olen kaksinkertainen napsautit ei käytetty toisessa ohjelmassa. Joten ... Tarkoittaako se, että olen ok? Thanks for your help. |
|
#9
21 tammikuu 2008, 09:52
| |||
| |||
| IEXPLORE.EXE virus ongelma Localhost haluaisitte mielessä annoitte minulle joitakin viittauksia kuin teidän haittaohjelmien poistoon tausta? Missä foorumi teillä yleensä auttaa haittaohjelmien poistoon.
__________________ |
|
#10
21 tammikuu 2008, 10:57
| |||
| |||
| IEXPLORE.EXE virus ongelma Quote:
|
