|
| |||||||
| Registrovať | Site Spy | Zoznam členov | Darovanie | Hľadať | Dnešné príspevky | Označiť témy ako prečítané | Pravidlá fóra |
 |
 |
| | Thread Tools |
|
#1
19 január 2008, 09:02
| |||
| |||
| IEXPLORE.EXE vírus problém Ahoj, Všimol som si, mal som problém, keď som počul hrať hudbu tajomne. Overil som si a videl veľa IEXPLORE.EXE procesy bežia. Bežal som NAV, Ad-Aware, Defender a potom nasleduje pokyny ste nám poskytli. Vďaka vopred za pomoc. Tu sú logy: SuperAntiSpyware Scan Prihlásenie http://www.superantispyware.com Generated 01.19.2008 v 08:53 Verzia aplikácie: 3.9.1008 Pravidlá databázy Core Version: 3384 Stopový Pravidlá databázy Version: 1378 Vyhľadávať typ: Kompletná Scan Celkom Scan Time: 01:01:52 Memory položiek skenovaná: 576 Memory ohrozenia odhalené: 0 Položky databázy Registry skenovaná: 7837 Registre ohrozenia odhalené: 0 Súbor položiek skenovaná: 66011 Súbor zistených ohrozenia: 60 Adware.Tracking Cookie C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ advertpro [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ revsci [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ cgi-bin [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@richmedia.yahoo [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ eyewonder [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ hc [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@sales.liveperson [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ @ sundeep html [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@www.burstnet [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@www.crackpassword [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@umkxup22.unitedme dia [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@click.mgg01 [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ adcentriconline [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@ad1.soundpedia [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ adbrite [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@iacas.adbureau [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ indiads [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@microsoftwga.112. 2o7 [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@ads.cnn [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@ads.monster [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@server.iad.livepe rson [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@ads3.blastro [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@mailtrack.rnm [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@track.bestbuy [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ atwola [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ 85084061 [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@server.lon.livepe rson [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ partypoker [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep@ads.as4x.tmcs [2]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ xiti [1]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ tribalfusion [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@ad.yieldman AGER [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@ad.yieldman AGER [3]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ adbrite [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ adecn [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@ads.128b [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@adserver.ea syad [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ apmebf [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ atdmt [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ banner [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ clicksor [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ DoubleClick [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ zvýši [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ euros4click [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ fastclick [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ findwhat [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ partypoker [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ pre-trh [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ statcounter [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@stats.adbri te [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ toseeka [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@tracker.aff istats [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.findit-quick [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.goaltra ffic [2]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.goaltra ffic [3]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.goodcli cKZ [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system@www.kikclic K [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system @ Zedo [1]. Txt C: \ Documents and Settings \ NetworkService \ Cookies \ system Zedo @ [3]. Txt C: \ Documents and Settings \ sundeep \ Cookies \ sundeep @ burstnet [2]. Txt # Version = 4 # OnlineScanner.ocx = 1.0.0.56 # OnlineScannerDLLA.dll = 1, 0, 0, 51 # OnlineScannerDLLW.dll = 1, 0, 0, 51 # OnlineScannerUninstaller.exe = 1, 0, 0, 49 # Vers_standard_module = 2806 (20080118) # Vers_arch_module = 1.063 (20080117) # Vers_adv_heur_module = 1.060 (20070601) # EOSSerial = 5ac60436be4e8c4d8b34206de1ddeb01 # = Koniec hotové # Remove_checked = true # Unwanted_checked = true # Utc_time = 2008-01-19 03:34:06 # Local_time = 2008-01-19 10:34:06 (-0500, "Eastern Standard Time) # Country = "Spojené štáty" # OSVer = NT 5.1.2600 Service Pack 2 # Skenovaná = 394948 # Nájdeno = 14 # Scan_time = 2493 C: \ MSInfnd.exe pravdepodobne variant Win32/Hupigon Trojan (schopný čistej - zrušený) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc viac infiltrations (zrušený) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc »ZIP» BlackBox.class variant Java / ClassLoader Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objektu - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc »ZIP» VerifierBug.class JS / IEStart.G Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objekt - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-34ef6dbc »ZIP» Dummy.class Java / NoCheat.B Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objekt - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-3f7c5e12 variantom Java / ClassLoader Trojan (zrušený) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-3f7c5e12 »ZIP» BlackBox.class variant Java / ClassLoader Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objektu - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d viac infiltrations (zrušený) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d »ZIP» BlackBox.class variant Java / ClassLoader Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objektu - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d »ZIP» VerifierBug.class JS / IEStart.G Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objekt - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Documents and Settings \ NetworkService \ Data aplikací \ nedeľu \ Java \ Nasadenie \ cache \ 6.0 \ 58 \ 7589253a-7685bc3d »ZIP» Dummy.class Java / NoCheat.B Trojan (chybu pri čistení - prevádzka dispozícii pre tento typ objekt - Chyba pri mazaní - prevádzku dispozícii pre tento typ objektu - bol súčasťou smazané objektu) 00000000000000000000000000000000 C: \ Program Files \ Common Files \ Microsoft Shared \ MSInfo \ MSInfnd.exe pravdepodobne variant Win32/Hupigon Trojan (schopný čistej - zrušený) 00000000000000000000000000000000 C: \ WINDOWS \ system32 \ _MSInfnd.exe pravdepodobne variant Win32/Hupigon Trojan (schopný čistej - zrušený) 00000000000000000000000000000000 D: \ MSInfnd.exe pravdepodobne variant Win32/Hupigon Trojan (schopný čistej - zrušený) 00000000000000000000000000000000 Logfile Trend Micro HijackThis v2.0.2 Scan uložené v 10:55:08 dňa 01.19.2008 Platforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Zavádzacia mód: Normálny Bežiace procesy: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ WINDOWS \ Explorer.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe C: \ WINDOWS \ system32 \ Cisvc.exe C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe C: \ Program Files \ Yahoo! \ NAV \ IWP \ NPFMntor.exe C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ fxssvc.exe C: \ WINDOWS \ stsystra.exe C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe C: \ Program Files \ Dell \ živý plot \ quickset.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Intel \ Wireless \ Bin \ Dot1XCfg.exe C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ system32 \ igfxpers.exe C: \ WINDOWS \ system32 \ igfxsrvc.exe C: \ Program Files \ PhatNoise Hudba Manager \ PNAgent.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Docu ~ 1 \ sundeep \ locals ~ 1 \ Temp \ clclean.0001 C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe C: \ Program Files \ SuperAntiSpyware \ SUPERAntiSpyware.exe C: \ Program Files \ WIDCOMM \ Bluetooth Software \ BTTray.exe C: \ Program Files \ Hamachi \ hamachi.exe C: \ Program Files \ Common Files \ Symantec Shared \ bezpečnostné Console \ NSCSRVCE.EXE C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ WINDOWS \ system32 \ msiexec.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.ca/ R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Nastavenia, ProxyOverride = *. miestnej O1 - Hosts: 66.98.148.65 auto.search.msn.com O1 - Hosts: 66.98.148.65 auto.search.msn.es O2 - BHO: SSVHelper triedy - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O2 - BHO: (bez názvu) - (7E853D72-626a-48EC-A868-BA8D5E23E045) - (ne obrázok) O2 - BHO: NAV Helper - (A8F38D8D-E480-4D52-B7A2-731BB6995FDD) - C: \ Program Files \ Yahoo! \ NAV \ NavShExt.dll O4 - HKLM \ .. \ Run: [SigmatelSysTrayApp] stsystra.exe O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe O4 - HKLM \ .. \ Run: [IntelZeroConfig] "C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe" O4 - HKLM \ .. \ Run: [IntelWireless] "C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe" / tf Intel PROSet / Wireless O4 - HKLM \ .. \ Run: [Dell živý plot] C: \ Program Files \ Dell \ živý plot \ quickset.exe O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [Google Desktop Search] "C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe" / štarte O4 - HKLM \ .. \ Run: [CTSysVol] C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe / r O4 - HKLM \ .. \ Run: [MBMon] rundll32 CTMBHA.DLL, MBMon O4 - HKLM \ .. \ Run: [UpdReg] C: \ WINDOWS \ UpdReg.EXE O4 - HKLM \ .. \ Run: [IgfxTray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [Perzistencia] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [jadra a Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM \ .. \ Run: [PNAgent] "C: \ Program Files \ PhatNoise Hudba Manager \ PNAgent.exe" O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe" O4 - HKLM \ .. \ RunServices: [DJSNetCN] C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O4 - HKCU \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [SetDefaultMIDI] MIDIDef.exe O4 - HKCU \ .. \ Run: [WeatherEye] C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe O4 - HKCU \ .. \ Run: [SuperAntiSpyware] C: \ Program Files \ SuperAntiSpyware \ SUPERAntiSpyware.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'miestnych') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Network Service') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'systém') O4 - HKUS \. DEFAULT \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Predvolené užívateľ') O4 - spustenie: Hamachi.lnk = C: \ Program Files \ Hamachi \ hamachi.exe O4 - Global spustení: Bluetooth.lnk =? O8 - Extra kontextového menu položku: E & xportovať do programu Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O8 - Extra kontextového menu položku: Send to & Bluetooth zariadenia ... - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie_ctx.htm O9 - Extra tlačidlá: (bez názvu) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra tlačidlá: Výskum - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra tlačidlá: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker \ RunApp.exe (súbor chýba) O9 - Extra 'Tools' MENUITEM: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker \ RunApp.exe (súbor chýba) O9 - Extra tlačidlá: @ btrez.dll, -4015 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm O9 - Extra 'Tools' MENUITEM: @ btrez.dll, -12650 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm O10 - Broken Internet access kvôli LSP provider 'c: \ Program Files \ Bonjour \ mdnsnsp.dll' chýba O16 - DPF: (05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8) (Office Genuine Advantage validáciu Tool) -- http://go.microsoft.com/fwlink/?linkid=58813 O16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Agent 6.6) -- http://housecall65.trendmicro.com/ho...vex/hcImpl.cab O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932319484 O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932290562 O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 1 \ GOEC62 ~ 1.DLL O20 - Winlogon Upozornenie:! SASWinLogon - C: \ Program Files \ SuperAntiSpyware \ SASWINLO.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe O23 - Service: Plánovač automatické LiveUpdate - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: Creative Labs Licensing Service - Creative Labs - C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe O23 - Service: Diskeeper - Diskeeper Corporation - C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe O23 - Service: Symantec Licencovanie Detekovať Internet Connection (DJSNETCN) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O23 - Service: Intel (R) PROSet / Wireless udalostí (EvtEng) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Nakladateľ \ FNPLicensingService.exe O23 - Service: InstallDriver Tabuľka Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: LVCOMSer - Logitech Inc - C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc - C: \ Program Files \ Common Files \ LogiShrd \ LVMVFM \ LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc - C: \ Program Files \ Common Files \ LogiShrd \ SrvLnch \ SrvLnch.exe O23 - Service: MSInfo Framework Service (MSInfoFrv) - Neznámy vlastník - C: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ MSInfnd.exe (súbor chýba) O23 - Service: Norton AntiVirus Auto-Neuchovávajte Service (navapsvc) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ IWP \ NPFMntor.exe O23 - Service: Norton Ochrana Center Service (NSCService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ bezpečnostné Console \ NSCSRVCE.EXE O23 - Service: Intel (R) PROSet / Wireless Registry Service (RegSrvc) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe O23 - Service: Cyberlink RichVideo Service (CRVS) (RichVideo) - Neznámy vlastník - C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe O23 - Service: Intel (R) PROSet / Wireless Service (S24EventMonitor) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ SAVScan.exe O23 - Service: Symantec sieť Ovládače Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: SPBBCSvc - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: Intel (R) PROSet / Wireless SSO Service (WLANKEEPER) - Intel (R) Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe -- Koniec súboru - 11743 bytes |
|
#2
19 január 2008, 09:39
| |||
| |||
| IEXPLORE.EXE vírus problém Vitajte na TCF. Otvorené hjt a vyberte Do systému kontrolovať len potom umiestniť zatržítko vedľa: O1 - Hosts: 66.98.148.65 auto.search.msn.com O1 - Hosts: 66.98.148.65 auto.search.msn.es O2 - BHO: (bez názvu) - (7E853D72-626a-48EC-A868-BA8D5E23E045) - (ne obrázok) O9 - Extra tlačidlá: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker \ RunApp.exe (súbor chýba) O9 - Extra 'Tools' MENUITEM: PartyPoker.com - (B7FE5D70-9AA2-40F1-9C6B-12A255F085E1) - C: \ Program Files \ PartyGaming \ PartyPoker \ RunApp.exe (súbor chýba) Zatvorte všetky okná okrem hjt a kliknite Fix kontrolované. ----------
---------- Spustiť nový scan s hjt a po prihlásení po Spybot ukončil.
__________________  |
|
#3
19 január 2008, 15:11
| |||
| |||
| IEXPLORE.EXE vírus problém Ok, tu je nový log: Logfile Trend Micro HijackThis v2.0.2 Scan uložené v 5:09:34 PM na 01.19.2008 Platforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Zavádzacia mód: Normálny Bežiace procesy: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ WINDOWS \ Explorer.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe C: \ WINDOWS \ system32 \ Cisvc.exe C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe C: \ Program Files \ Yahoo! \ NAV \ IWP \ NPFMntor.exe C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ fxssvc.exe C: \ WINDOWS \ stsystra.exe C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe C: \ Program Files \ Dell \ živý plot \ quickset.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe C: \ Program Files \ Intel \ Wireless \ Bin \ Dot1XCfg.exe C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ system32 \ igfxsrvc.exe C: \ WINDOWS \ system32 \ igfxpers.exe C: \ Program Files \ PhatNoise Hudba Manager \ PNAgent.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe C: \ Docu ~ 1 \ sundeep \ locals ~ 1 \ Temp \ clclean.0001 C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe C: \ Program Files \ WIDCOMM \ Bluetooth Software \ BTTray.exe C: \ Program Files \ Hamachi \ hamachi.exe C: \ Program Files \ Common Files \ Symantec Shared \ bezpečnostné Console \ NSCSRVCE.EXE C: \ WINDOWS \ system32 \ cidaemon.exe C: \ WINDOWS \ system32 \ cidaemon.exe C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.ca/ R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Nastavenia, ProxyOverride = *. miestnej O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O2 - BHO: SSVHelper triedy - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O2 - BHO: NAV Helper - (A8F38D8D-E480-4D52-B7A2-731BB6995FDD) - C: \ Program Files \ Yahoo! \ NAV \ NavShExt.dll O4 - HKLM \ .. \ Run: [SigmatelSysTrayApp] stsystra.exe O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe O4 - HKLM \ .. \ Run: [IntelZeroConfig] "C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe" O4 - HKLM \ .. \ Run: [IntelWireless] "C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe" / tf Intel PROSet / Wireless O4 - HKLM \ .. \ Run: [Dell živý plot] C: \ Program Files \ Dell \ živý plot \ quickset.exe O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [Google Desktop Search] "C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe" / štarte O4 - HKLM \ .. \ Run: [CTSysVol] C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe / r O4 - HKLM \ .. \ Run: [MBMon] rundll32 CTMBHA.DLL, MBMon O4 - HKLM \ .. \ Run: [UpdReg] C: \ WINDOWS \ UpdReg.EXE O4 - HKLM \ .. \ Run: [IgfxTray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [Perzistencia] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [jadra a Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM \ .. \ Run: [PNAgent] "C: \ Program Files \ PhatNoise Hudba Manager \ PNAgent.exe" O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe" O4 - HKLM \ .. \ RunServices: [DJSNetCN] C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O4 - HKCU \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [SetDefaultMIDI] MIDIDef.exe O4 - HKCU \ .. \ Run: [WeatherEye] C: \ Program Files \ TheWeatherNetwork \ WeatherEye \ WeatherEye.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'miestnych') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Network Service') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'systém') O4 - HKUS \. DEFAULT \ .. \ Run: [Cttfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Predvolené užívateľ') O4 - spustenie: Hamachi.lnk = C: \ Program Files \ Hamachi \ hamachi.exe O4 - Global spustení: Bluetooth.lnk =? O8 - Extra kontextového menu položku: E & xportovať do programu Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O8 - Extra kontextového menu položku: Send to & Bluetooth zariadenia ... - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie_ctx.htm O9 - Extra tlačidlá: (bez názvu) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O9 - Extra tlačidlá: Výskum - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra tlačidlá: @ btrez.dll, -4015 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm O9 - Extra 'Tools' MENUITEM: @ btrez.dll, -12650 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm O9 - Extra tlačidlá: (bez názvu) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Konfigurácia - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O10 - Broken Internet access kvôli LSP provider 'c: \ Program Files \ Bonjour \ mdnsnsp.dll' chýba O16 - DPF: (05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8) (Office Genuine Advantage validáciu Tool) -- http://go.microsoft.com/fwlink/?linkid=58813 O16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Agent 6.6) -- http://housecall65.trendmicro.com/ho...vex/hcImpl.cab O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932319484 O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1192932290562 O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 1 \ GOEC62 ~ 1.DLL O20 - Winlogon Upozornenie:! SASWinLogon - C: \ Program Files \ SuperAntiSpyware \ SASWINLO.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe O23 - Service: Plánovač automatické LiveUpdate - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: Creative Labs Licensing Service - Creative Labs - C: \ Program Files \ Common Files \ Creative Labs Shared \ Service \ CreativeLicensing.exe O23 - Service: Diskeeper - Diskeeper Corporation - C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe O23 - Service: Symantec Licencovanie Detekovať Internet Connection (DJSNETCN) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ DJSNETCN.exe O23 - Service: Intel (R) PROSet / Wireless udalostí (EvtEng) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Nakladateľ \ FNPLicensingService.exe O23 - Service: InstallDriver Tabuľka Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: LVCOMSer - Logitech Inc - C: \ Program Files \ Common Files \ LogiShrd \ LVCOMSER \ LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc - C: \ Program Files \ Common Files \ LogiShrd \ LVMVFM \ LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc - C: \ Program Files \ Common Files \ LogiShrd \ SrvLnch \ SrvLnch.exe O23 - Service: MSInfo Framework Service (MSInfoFrv) - Neznámy vlastník - C: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ MSInfnd.exe (súbor chýba) O23 - Service: Norton AntiVirus Auto-Neuchovávajte Service (navapsvc) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ IWP \ NPFMntor.exe O23 - Service: Norton Ochrana Center Service (NSCService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ bezpečnostné Console \ NSCSRVCE.EXE O23 - Service: Intel (R) PROSet / Wireless Registry Service (RegSrvc) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe O23 - Service: Cyberlink RichVideo Service (CRVS) (RichVideo) - Neznámy vlastník - C: \ Program Files \ Cyberlink \ Shared files \ RichVideo.exe O23 - Service: Intel (R) PROSet / Wireless Service (S24EventMonitor) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C: \ Program Files \ Yahoo! \ NAV \ SAVScan.exe O23 - Service: Symantec sieť Ovládače Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: SPBBCSvc - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: Intel (R) PROSet / Wireless SSO Service (WLANKEEPER) - Intel (R) Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ WLKeeper.exe -- Koniec súboru - 11469 bytes |
|
#4
19 január 2008, 15:24
| |||
| |||
| IEXPLORE.EXE vírus problém I neusporiadaný časť návodu z dřívějška. Log vyzerá v poriadku aj keď, ako je PC teraz?
__________________ |
|
#5
20 január 2008, 07:40
| |||
| |||
| IEXPLORE.EXE vírus problém Jeho preč! Díky moc za vašu pomoc! |
|
#6
20 január 2008, 09:48
| |||
| |||
| IEXPLORE.EXE vírus problém Znie to dobre. Nechal som sa na odkaz na stiahnutie z post # 2 pre Spybot. Chcel by som navrhnúť zriadenie a prevádzkovanie skenovanie s ním. Stiahnuť Spybot-S & D Pomocou pokynov príspevok # 2, aby postavil ho správne. To je dobrý čas na vašu nakazených jasné body obnovenia systému a vytvoriť nový bod obnovenia čistá:
Pozrite sa tento post pre bezplatné nástroje a tipy, aby sa na PC a sami bezpečné v budúcnosti. Tento príspevok je free software a poradenstva, aby sa na PC beží hladké v budúcnosti.
__________________ |
|
#7
21 január 2008, 04:57
| |||
| |||
| IEXPLORE.EXE vírus problém Tie boli infikované potkan (Remote Administration Tool). Chtěl bych urobiť vyhľadávanie na klog .* súbor a zmazať, by mali byť spravidla v jednej zložke system32 alebo okien. RAT sú naozaj obľúbili skript kiddies a používanie cryptors, aby sa zabránilo AV detekcie a pojivá, takže môžu viazať na trójske apps. Keď som zistila, mám hacknut a RAT, stiahnutím warez, musel som si program sám a mal kecy veľa funkcií keylog, webcam divák, heslo cache. Takže šance, keď ste počuli hrať hudbu, bol niekto ručne prehľadávať vaše súbory a ich sprístupnenie. Ak narazíte na rovnaké činnosti, ako je prehrávanie hudby, zmenil heslo, alebo dokonca aj váš webcam zapnutð potom namiesto inštalácie banda k ničomu AV programov a odstránenie Malware svinstvo. Pozrite sa do svojej Installed Components v registri. HKEY_LOCAL_MACHINE> SOFTWARE> Microsoft> Active Setup> Installed Components a kliknite na každej zo zložiek, a pozrite sa na záznam, ktorý len má STUBPATH smerovali k. exe v system32 alebo zložky systému Windows. Ak chcete zistiť, či je to. Exe v aktívnom štarte, prejdite na ňu a spustite ho. Ak to hovorí, že je používaný iným programom, a meno súboru. Exe isnt zobrazené v zozname procesu potom sa vpustí do ďalšieho procesu, ako je vaša defualt broswer (IE). Potom môžete použiť hjt zmazať súbor, ktorý na počítač a samozrejme odstrániť položku registra. RAT sú rovnaké ako IRCBOT ale RAT len má GUI, já bych odporučiť nejaký firewall, teda v prípade, že program chce náhodne pripojiť sa k internetu môžete poprieť, že aj naďalej používať program. Vzhľadom k tomu, že je trójsky kôň binded na inštalačný súbor, v trójske výťažky a popravených keď idete na inštaláciu a pokúsi sa urobiť exteernal pripojenie, a ak budete blokovať potom máte Trojan, ale arnt infikovaných, pretože to bude len sedieť v adresári dělá nič. Omlouvám se, že na blabber, dúfam, že tento vám dal širší horizont na nebezpečenstvo na potkanoch a IRCbots. Brad |
|
#8
21 január 2008, 08:49
| |||
| |||
| IEXPLORE.EXE vírus problém Brad Ahoj, vďaka za info. Urobil som čo ste povedal, a na všetky. Exe odkazovať na stubpaths, že som klikol dvojitej neboli používa iný program. Takže ... nemá znamenať, že som v poriadku? Ďakujeme za vašu pomoc. |
|
#9
21 január 2008, 09:52
| |||
| |||
| IEXPLORE.EXE vírus problém Místní_hostitel by ste myseľ dať mi nejaké referencie, tak na vaše malware odobratie pozadia? Na čo si fórum zvyčajne pomáhajú pri odstraňovaní malware.
__________________ |
|
#10
21 január 2008, 10:57
| |||
| |||
| IEXPLORE.EXE vírus problém Citácia:
|
