![]() |
| |||||||
| Registruotis | Svetainės spy | Narių sąrašas | Donate | Ieškoti | Šiandien Žinutės | Pažymėti forumus kaip skaitytus | Forumo taisyklės |
|
![]() |
| | Temos įrankiai |
|
#11
| |||
| |||
| ComboFix 08-09-15.02 - Tomas Stratman 2008-09-16 16:53:08.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.184 [GMT -5:00] Veikia nuo: C: \ Documents and Settings \ Tomas Stratman \ Desktop \ ComboFix.exe * Sukurtas naujas atkūrimo taškas ĮSPĖJIMAS-ši mašina neturi atkūrimo konsolę Installed!! . ((((((((((((((((((((((((((((((((((((((( Kiti deletions ))))))))) )))))))))))))))))))))))))))))))))))))))) . C: and Settings Tom Stratman \ Application \ FNTS ~ 1 C: \ Documents and Settings \ Tomas Stratman \ Application Data \ FNTS ~ 1 \ F? NBA \ C: \ Documents and Settings \ Tomas Stratman \ Application Data \ SSTEM ~ 1 C: \ Temp \ 1cb C: \ Temp \ 1cb \ syscheck.log C: \ Temp \ FSE C: \ Temp \ FSE \ tmpZTF.log C: \ test.txt C: \ WINDOWS \ system32 \ MSINET.oca C: \ WINDOWS \ SYSTEM32 \ rqtwa.bak1 C: \ WINDOWS \ SYSTEM32 \ rqtwa.bak2 C: \ WINDOWS \ SYSTEM32 \ rqtwa.ini C: \ WINDOWS \ system32 \ wnstsiit32.exe C: \ WINDOWS \ SYSTEM32 \ wyadd.bak1 C: \ WINDOWS \ SYSTEM32 \ wyadd.bak2 C: \ WINDOWS \ SYSTEM32 \ wyadd.ini C: \ WINDOWS \ SYSTEM32 \ wyadd.ini2 C: \ WINDOWS \ SYSTEM32 \ wyadd.tmp . ((((((((((((((((((((((((((((((((((((((( Drivers / Paslaugos )))))))) ))))))))))))))))))))))))))))))))))))))))) . ------- \ Legacy_DOMAINSERVICE ((((((((((((((((((((((((( Failus, sukurtus nuo 2008/08/16 iki 2008/09/16 ))))))))))) )))))))))))))))))))) . 2008-09-16 06:36. 2008-09-16 06:36 <DIR> d -------- C: \ Program Files \ Trend Micro 2008-09-15 21:25. 2008-09-15 21:27 <DIR> d -------- C: \ Program Files \ Malwarebytes 'Anti-Malware 2008-09-15 21:25. 2008-09-15 21:25 <DIR> d -------- C: \ Documents and Settings \ Tomas Stratman \ Application Data \ Malwarebytes 2008-09-15 21:25. 2008-09-15 21:25 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Malwarebytes 2008-09-15 21:25. 2008-09-10 00:04 38.528 - ------ C: \ WINDOWS \ system32 \ drivers \ mbamswissarmy.sys 2008-09-15 21:25. 2008-09-10 00:03 17.200 - ------ C: \ WINDOWS \ system32 \ drivers \ mbam.sys 2008-09-14 11:13. 2008-09-14 11:13 107.888 - ------ C: \ WINDOWS \ SYSTEM32 \ CmdLineExt.dll 2008-09-10 13:37. 2008-09-10 13:38 <DIR> d -------- C: \ Program Files \ iTunes 2008-09-10 13:37. 2008-09-10 13:38 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ (3276BE95_AF08_429F_A64F_CA64CB79BCF6) 2008-09-10 13:35. 2008-09-10 13:35 <DIR> d -------- C: \ Program Files \ Bonjour 2008-09-10 13:29. 2008-09-05 22:16 1.900.544 - ------ C: \ WINDOWS \ SYSTEM32 \ usbaaplrc.dll 2008-09-06 15:09. 2008-09-06 15:09 90.112 - ------ C: \ WINDOWS \ SYSTEM32 \ QuickTimeVR.qtx 2008-09-06 15:09. 2008-09-06 15:09 57.344 - ------ C: \ WINDOWS \ SYSTEM32 \ QuickTime.qts 2008-08-29 10:18. 2008-08-29 10:18 87.336 - ------ C: \ WINDOWS \ system32 \ dns-sd.exe 2008-08-29 09:53. 2008-08-29 09:53 61.440 - ------ C: \ WINDOWS \ SYSTEM32 \ dnssd.dll 2008-08-27 02:30. 2008-08-27 02:56 <DIR> d -------- C: \ WINDOWS \ SYSTEM32 \ CatRoot_bak 2008-08-25 19:08. 2008-08-25 19:08 <DIR> d -------- C: \ Program Files \ AviSynth 2.5 2008-08-25 19:07. 2008-08-25 19:07 <DIR> d -------- C: \ Program Files \ Red Kawa . (((((((((((((((((((((((((((((((((((((((( Find3M Pranešimas )))))))) )))))))))))))))))))))))))))))))))))))))))))) . 2008-09-16 21:40 --------- d ----- w C: \ Documents and Settings \ Tomas Stratman \ Application Data \ uTorrent 2008-09-16 06:42 --------- d ----- w C: \ Documents and Settings \ All Users \ Application Data \ Google Updater 2008-09-15 20:53 --------- D - h - w C: \ Program Files \ InstallShield įrengimas Informacija 2008-09-15 20:53 --------- d ----- w C: \ Program Files \ Electronic Arts 2008-09-10 18:38 --------- d ----- w C: \ Program Files \ iPod 2008-09-10 18:34 --------- d ----- w C: \ Program Files \ QuickTime 2008-09-10 18:33 --------- d ----- w C: \ Program Files \ Common Files \ Apple 2008-09-06 03:16 36.864 ---- AW C: \ WINDOWS \ system32 \ drivers \ usbaapl.sys 2008-08-21 21:36 --------- d ----- w C: \ Program Files \ Apple Software Update 2008-08-11 21:22 --------- d ----- w C: \ Program Files \ Microsoft Silverlight 2008-08-07 16:37 --------- d ----- w C: \ Program Files \ Google 2008-03-01 20:28 75.496-c - AW C: \ Documents and Settings \ Tomas Stratman \ Application Data \ GDIPFONTCACHEV1.DAT 2007-09-26 01:26 45.422-c - AW C: \ Documents and Settings \ Tomas Stratman \ Application Data \ wklnhst.dat 2007-06-28 21:37 7.248-c - AW C: \ Documents and Settings \ All Users \ Application Data \ ypinfo.bin 2007-04-15 04:54 32-C - ar C: \ Documents and Settings \ All Users \ hash.dat . ((((((((((((((((((((((((((((((((((((( Reg Kraunasi Taškai )))))))))) )))))))))))))))))))))))))))))))))))))))) . . * Pastaba: * tuščių įrašų ir teisėtu default įrašai nerodoma REGEDIT4 [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run] "DellSupport" = "C: \ Program Files \ DellSupport \ DSAgnt.exe" [2007-03-15 460784] "LDM" = "C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe [2007-02-23 67128] "MSMSGS" = "C: \ Program Files \ Messenger \ msmsgs.exe" [2004-10-13 1694208] "DellSupportCenter" = "C: \ Program Files \ Dell Support Center \ bin \ sprtcmd.exe" [2007-11-15 202544] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run] "PCMService" = "C: \ Program Files \ dell \ Žiniasklaida Patirtis \ PCMService.exe" [2004-04-11 290816] "DVDLauncher" = "C: \ Program Files \ CyberLink \ PowerDVD \ DVDLauncher.exe" [2004-08-23 57344] "dla" = "C: \ WINDOWS \ system32 \ dla \ tfswctrl.exe" [2004-08-13 122939] "igfxtray" = "C: \ WINDOWS \ system32 \ igfxtray.exe" [2005-09-20 94208] "igfxhkcmd" = "C: \ WINDOWS \ system32 \ hkcmd.exe" [2005-09-20 77824] "igfxpers" = "C: \ WINDOWS \ system32 \ igfxpers.exe" [2005-09-20 114688] "CanonMyPrinter" = "C: \ Program Files \ Canon \ MyPrinter \ BJMyPrt.exe" [2006-03-21 1191936] "SSBkgdUpdate" = "C: \ Program Files \ Common Files \ ScanSoft Shared \ SSBkgdUpdate \ SSBkgdupdate.exe" [2003-09-30 155648] "OpwareSE4" = "C: \ Program Files \ ScanSoft \ OmniPageSE4.0 \ OpwareSE4.exe" [2006-03-21 69632] "IMJPMIG8.1" = "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.E XE" [2004-08-04 208952] "MSPY2002" = "C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScI nst.exe" [2004-08-04 59392] "PHIME2002ASync" = "C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE" [2004-08-04 455168] "PHIME2002A" = "C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TIN TSETP.EXE" [2004-08-04 455168] "SoundMAXPnP" = "C: \ Program Files \ Analog Devices \ Core \ smax4pnp.exe" [2004-10-14 1404928] "Adobe Reader Speed Launcher" = "C: \ Program Files \ Adobe \ Reader 8.0 \ Reader \ Reader_sl.exe" [2008-01-11 39792] "dscactivate" = "C: \ Program Files \ Dell Support Center \ gs_agent \ Custom \ dsca.exe" [2007-11-15 16384] "DellSupportCenter" = "C: \ Program Files \ Dell Support Center \ bin \ sprtcmd.exe" [2007-11-15 202544] "QuickTime Task" = "C: \ Program Files \ QuickTime \ QTTask.exe" [2008-09-06 413696] "AppleSyncNotifier" = "C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe" [2008-09-03 111936] "iTunesHelper" = "C: \ Program Files \ iTunes \ iTunesHelper.exe" [2008-09-08 289576] "Logitech" abstraktųjį aparatūros "=" KHALMNPR.EXE "[2008/02/29 C: \ WINDOWS \ KHALMNPR.Exe] "Kernel and Hardware abstraction Layer" = "KHALMNPR.EXE" [2008/02/29 C: \ WINDOWS \ KHALMNPR.Exe] [HKEY_USERS \. DEFAULT \ Software \ Microsoft \ Windows \ Cur rentVersion \ Run] "DWQueuedReporting" = "C: \ PROGRA ~ 1 \ COMMON ~ 1 \ Micros ~ 1 \ DW \ dwtrig20.exe" [2007-03-13 39264] C: \ Documents and Settings \ Tomas Stratman \ Start Menu \ Programs \ Startup \ SpywareGuard.lnk - C: \ Program Files \ SpywareGuard \ sgmain.exe [2003-08-29 360448] C: \ Documents and Settings \ All Users \ Start Menu \ Programs \ Startup \ Logitech Desktop Messenger.lnk - C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe [2007-02-23 67128] Logitech SetPoint.lnk - C: \ Program Files \ Logitech \ valdikliai \ SetPoint.exe [2008-08-09 805392] Microsoft Office.lnk - C: \ Program Files \ Microsoft Office \ Office10 \ Osa.exe [2001-02-13 83360] WinZip Quick Pick.lnk - C: \ Program Files \ WinZip \ WZQKPICK.EXE [2005-02-11 118784] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ Notify \ LBTWlgn] 2008-05-02 02:42 72208 C: \ Program Files \ Common Files \ Logitech \ "Bluetooth \ LBTWLgn.dll [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ contro l \ safeboot \ Minimal \ WdfLoadGroup] @ = "" [HKLM \ ~ \ Services \ SharedAccess \ Parameters \ firewallpo licy \ standardprofile \ AuthorizedApplications \ List] "% windir% \ \ System32 \ \ sessmgr.exe" = "C: \ Program Files \ Windows Media Player \ \ Wmplayer.exe" = "C: \ Program Files \ Common Files \ \ AOL \ \ krautuvas \ \ aolload.exe" = "C: \ Program Files \ \ PopCap Games \ \ Bookworm Deluxe \ \ BookWorm.exe" = "C: \ Program Files \ Skype \ \ aim.exe" = "C: \ Program Files \ \ AIM6 \ \ aim6.exe" = "C: \ Program Files \ Logitech \ \ Desktop Messenger \ \ 8876480 \ Program \ \ LogitechDesktopMessen ger.exe" = "C: \ Program Files \ uTorrent \ \ uTorrent.exe" = "C: \ Program Files \ Bonjour \ \ mDNSResponder.exe" = "C: \ Program Files \ iTunes \ \ iTunes.exe" = [HKLM \ ~ \ Services \ SharedAccess \ Parameters \ firewallpo licy \ standardprofile \ GloballyOpenPorts \ List] "17.770 TCP" = 17.770: TCP: BitComet 17.770 TCP "17.770: UDP" = 17.770: UDP: BitComet 17.770 UDP R1 aswSP; Avast! Savigynai, C: \ WINDOWS \ system32 \ drivers \ aswSP.sys [2008-07-19 78416] R2 aswFsBlk; aswFsBlk, C: \ WINDOWS \ system32 \ drivers \ aswF sBlk.sys [2008-07-19 20560] R2 npkcmsvc; npkcmsvc, C: \ Nexon \ Mabinogi \ npkcmsvc.exe [2007-08-02 80528] R2 Požiūris Manager paslaugos; Požiūris Vadybininkas Paslaugos, C: \ Program Files \ Požiūris \ Common \ ViewpointService.exe [2007-01-04 24652] S2 DP1112, DP1112, C: \ WINDOWS \ system32 \ drivers \ DP.sys [] S3 FTD2XX; Outlaw Audio Driver Model 990, C: \ WINDOWS \ system32 \ drivers \ FTD2XX.sys [2003-01-24 24197] S3 XDva020; XDva020, C: \ WINDOWS \ system32 \ XDva020.sys [] . Turinys "Scheduled Tasks" katalogą . - - - - Orphans nuimti - - - -- HKCU-run-updateMgr - C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ AdobeUpdateManager.exe HKCU-run-Aim6 - (no file) . ------- Papildomos Scan ------- . Firefox -: Profilis - C: \ Documents and Settings \ Tomas Stratman \ Application Data \ Mozilla \ Firefox \ Profiles \ e41ez35c.default \ Firefox -: prefs.js - STARTUP.HOMEPAGE - hxxp: / / dsl.sbc.yahoo.com / . ************************************************** ************************ catchme 0.3.1361 W2K/XP/Vista - rootkit / Stealth kenkėjiškų detektorius pagal Gmer, http://www.gmer.net Rootkit scan 2008-09-16 17:01:58 Windows 5.1.2600 Service Pack 2 NTFS skenavimo paslėptus procesus ... skenavimo paslėptas autostart entries ... skenavimo paslėptus failus ... skenavimas baigtas sėkmingai paslėptus failus: 0 ************************************************** ************************ . ------------------------ Kitos aktyvūs procesai ----------------------- -- . C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe C: \ Program Files \ Dell Support Center \ bin \ sprtsvc.exe C: \ PROGRA ~ 1 \ WinZip \ WZQKPICK.EXE C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ Program Files \ Common Files \ Logishrd \ KHAL2 \ KHALMNPR.exe C: \ Program Files \ iPod \ bin \ iPodService.exe . ************************************************** ************************ . Atlikimo laikas: 2008-09-16 17:13:41 - mašina buvo paleistas ComboFix-karantine-files.txt 2008-09-16 22:13:22 Pre-Rida: 263.151.616 bytes nemokamai Post-Rida: 674.275.328 bytes nemokamai 180 --- EOF --- 2008-09-16 11:27:11 ============= END COMBO FOX ================================== Logfile Trend Micro HijackThis v2.0.2 Skaitymo išsaugotas 5:26:48 dėl 9/16/2008 Platforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Veikia procesus: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe C: \ Nexon \ Mabinogi \ npkcmsvc.exe C: \ Program Files \ dell \ Žiniasklaida Patirtis \ PCMService.exe C: \ Program Files \ CyberLink \ PowerDVD \ DVDLauncher.exe C: \ WINDOWS \ system32 \ dla \ tfswctrl.exe C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ system32 \ igfxpers.exe C: \ Program Files \ Canon \ MyPrinter \ BJMyPrt.exe C: \ Program Files \ ScanSoft \ OmniPageSE4.0 \ OpwareSE4.exe C: \ Program Files \ Dell Support Center \ bin \ sprtsvc.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Analog Devices \ Core \ smax4pnp.exe C: \ Program Files \ Požiūris \ Common \ ViewpointService.exe C: \ Program Files \ Dell Support Center \ bin \ sprtcmd.exe C: \ Program Files \ QuickTime \ QTTask.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ DellSupport \ DSAgnt.exe C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe C: \ Program Files \ Messenger \ msmsgs.exe C: \ Program Files \ Logitech \ valdikliai \ SetPoint.exe C: \ Program Files \ WinZip \ WZQKPICK.EXE C: \ Program Files \ SpywareGuard \ sgmain.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ Program Files \ Common Files \ Logishrd \ KHAL2 \ KHALMNPR.EXE C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ WINDOWS \ explorer.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://dsl.sbc.yahoo.com/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.dell4me.com/mywaybiz R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Žiniasklaida ernet Nustatymai, ProxyServer = 0.0.0.0 R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Žiniasklaida ernet Nustatymai, ProxyOverride = *. vietos R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - (no file) O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 2.1.1119.1736 \ s wg.dll O3 - Toolbar: (no name) - (BA52B914-B692-46c4-B683-905236F6F655) - (no file) O3 - Toolbar: (no name) - (E0E899AB-F487-11d5-8D29-0050BA6940E3) - (no file) O4 - HKLM \ .. \ Run: [PCMService] "C: \ Program Files \ dell \ Žiniasklaida Patirtis \ PCMService.exe" O4 - HKLM \ .. \ Run: [DVDLauncher] "C: \ Program Files \ CyberLink \ PowerDVD \ DVDLauncher.exe" O4 - HKLM \ .. \ Run: [dla] C: \ WINDOWS \ system32 \ dla \ tfswctrl.exe O4 - HKLM \ .. \ Run: [igfxtray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [igfxhkcmd] C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [igfxpers] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [CanonMyPrinter] C: \ Program Files \ Canon \ MyPrinter \ BJMyPrt.exe / logon O4 - HKLM \ .. \ Run: [SSBkgdUpdate] "C: \ Program Files \ Common Files \ ScanSoft Shared \ SSBkgdUpdate \ SSBkgdupdate.exe"-embedding-boot O4 - HKLM \ .. \ Run: [OpwareSE4] "C: \ Program Files \ ScanSoft \ OmniPageSE4.0 \ OpwareSE4.exe" O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / Sync O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / Sync O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [SoundMAXPnP] C: \ Program Files \ Analog Devices \ Core \ smax4pnp.exe O4 - HKLM \ .. \ Run: [Logitech "Hardware abstraction Layer] KHALMNPR.EXE O4 - HKLM \ .. \ Run: [Kernel and Hardware abstraction Layer] KHALMNPR.EXE O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8.0 \ Reader \ Reader_sl.exe" O4 - HKLM \ .. \ Run: [dscactivate] "C: \ Program Files \ Dell Support Center \ gs_agent \ Custom \ dsca.exe" O4 - HKLM \ .. \ Run: [DellSupportCenter] "C: \ Program Files \ Dell Support Center \ bin \ sprtcmd.exe" / P DellSupportCenter O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKCU \ .. \ Run: [DellSupport] "C: \ Program Files \ DellSupport \ DSAgnt.exe" / startup O4 - HKCU \ .. \ Run: [LDM] C: \ Program Files \ Logitech \ Desktop Messenger \ 8.876.480 \ Program \ LogitechDesktopMessenger. Exe O4 - HKCU \ .. \ Run: [MSMSGS] "C: \ Program Files \ Messenger \ msmsgs.exe" / background O4 - HKCU \ .. \ Run: [DellSupportCenter] "C: \ Program Files \ Dell Support Center \ bin \ sprtcmd.exe" / P DellSupportCenter O4 - HKUS \ S-1-5-18 \ .. \ Run: [DWQueuedReporting] "C: \ PROGRA ~ 1 \ COMMON ~ 1 \ Micros ~ 1 \ DW \ dwtrig20.exe"-t (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [DWQueuedReporting] "C: \ PROGRA ~ 1 \ COMMON ~ 1 \ Micros ~ 1 \ DW \ dwtrig20.exe"-t (User 'Default user') O4 - Startup: SpywareGuard.lnk = C: \ Program Files \ SpywareGuard \ sgmain.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C: \ Program Files \ Logitech \ Desktop Messenger \ 8.876.480 \ Program \ LogitechDesktopMessenger. Exe O4 - Global Startup: Logitech SetPoint.lnk = C: \ Program Files \ Logitech \ valdikliai \ SetPoint.exe O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ Osa.exe O4 - Global Startup: WinZip Quick Pick.lnk = C: \ Program Files \ WinZip \ WZQKPICK.EXE O6 - HKCU \ Software \ Policies \ Microsoft \ Internet Explorer \ Control Panel dabar O8 - Extra kontekstinio meniu punktą: & ICQ Search - res: / / C: \ Program Files \ ICQ Toolbar \ AIMBar.dll / aimsearch.htm O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv.dll (file missing) O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv.dll (file missing) O9 - Extra button: Skype - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program Files \ Skype \ aim.exe O9 - Extra button: Musicmatch MX Web leistuve - (d81ca86b-ef63-42af-bee3-4502d9a03c2d) -- http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing) O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (149E45D8-163E-4189-86FC-45022AB2B6C9) (SpinTop DRM Control) - file: / / C: \ Program Files \ Scrabble \ Images \ stg_drm.ocx O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: (288C5F13-7E52-4ADA-A32E-F5BF9D125F98) (CR64Loader Object) -- http://miniclip.com/platypus/miniclipGameLoader.dll O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll O16 - DPF: (406B5949-7190-4245-91A9-30A17DE16AD0) (Snapfish Activia) -- http://photo.walgreens.com/WalgreensActivia.cab O16 - DPF: (48884C41-EFAC-433D-958A-9FADAC41408E) (EGamesPlugin klasė) -- https: / / www.e-games.com.my/com/EGamesPlugin.cab O16 - DPF: (5F5F9FB8-878E-4455-95E0-F64B2314288A) -- http://gamedownload.ijjimax.com/game...lugin11USA.cab O16 - DPF: (5F8469B4-49DD-B055-83F7-62B522420ECC) (Facebook Nuotraukų Uploader Control) -- http://upload.facebook.com/controls/...toUploader.cab O16 - DPF: (CC450D71-CC90-424C-8638-1F2DBAC87A54) (ArmHelper Control) - file: / / C: \ Program Files \ Scrabble \ Images \ armhelper.ocx O16 - DPF: (CD995117-98E5-4169-9920-6C12D4C0B548) -- http://gamedownload.ijjimax.com/game...Plugin9USA.cab O18 - Protocol: bwfile-8876480 - (9462A756-7B47-47BC-8C80-C34B9B80B32B) - C: \ Program Files \ Logitech \ Desktop Messenger \ 8.876.480 \ Program \ GAPlugProtocol-8876480.dll O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 kontrolės tarnybos (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: DSBrokerService - Unknown owner - C: \ Program Files \ DellSupport \ brkrsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: InstallDriver lentelė Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - "Logitech, Inc - C: \ Program Files \ Common Files \ Logitech \" Bluetooth \ LBTServ.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel (R) Corporation - C: \ Program Files \ Intel \ PROSetWired \ NCS \ Sinchronizacija \ NetSvc.exe O23 - Service: npkcmsvc - INCA Interneto Co Ltd - C: \ Nexon \ Mabinogi \ npkcmsvc.exe O23 - Service: SupportSoft Žvaigždutės tarnybos (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc - C: \ Program Files \ Dell Support Center \ bin \ sprtsvc.exe O23 - Service: Požiūris vadybininkas Paslaugos - Požiūris Corporation - C: \ Program Files \ Požiūris \ Common \ ViewpointService.exe -- End of file - 10.675 baitų |
|
#12
| |||
| |||
![]()
---------- Atsisiųsti ViewpointKiller.zip
---------- Java yra pasenusi. Senesnės versijos turi silpnąsias vietas, kad kenkėjiškų svetainių galima naudoti užkrėsti savo sistemą. Pirmiausia įdiekite naują Sun Java Runtime Environment Būtinai uždaryti visus naršyklės langus, prieš pradedant diegti. Pašalinti seną versiją (-ai)
---------- Atsisiųsti ATF Cleaner pagal Atribune darbalaukyje. Pakaitinis parsisiuntimo nuorodą Pastaba Vista vartotojai turi naudoti Vykdyti kaip administratorius
Atkreipkite dėmesį, kad jūsų sistema veiks lėčiau, dėl sistemos perkrovimo ar dvi po to, kai ši priemonė naudojama taip nesijaudinkite. Svarbu: Perkraukite kompiuterį, prieš tęsiant. ---------- Pradėti šios internetinės skenavimas. Reikia Internet Explorer Naudokite ESET NOD32 Skaitytuvas online 1. Pažymėkite langelį Taip, aš sutinku su Naudojimosi sąlygomis. 2. Spauskite Pradžia 3. Paklaustas, leisti ActiveX įdiegti 4. Spauskite Pradžia 5. Įsitikinkite, kad galimybė Pašalinti nustatyta grėsmė ir galimybe Skaitymo nepageidaujamas programas yra patikrinti pažymėti. 6. Spauskite Scan 7. Palaukite skenavimas apdaila 8. Naudoti Notepad atidarykite LOGFILE adresu C: \ Program Files \ EsetOnlineScanner \ log.txt 9. Pridėti C: \ Program Files \ EsetOnlineScanner \ log.txt prisijunkite prie savo "Kitas atsakymas |
|
#13
| |||
| |||
| # Version = 4 # OnlineScanner.ocx = 1.0.0.635 # OnlineScannerDLLA.dll = 1, 0, 0, 79 # OnlineScannerDLLW.dll = 1, 0, 0, 78 # OnlineScannerUninstaller.exe = 1, 0, 0, 49 # vers_standard_module = 3447 (20080916) # vers_arch_module = 1,064 (20080214) # vers_adv_heur_module = 1,064 (20070717) # EOSSerial = 8983b3a42701b342bf8e75ec7f82c98f # end = baigė # remove_checked = true # unwanted_checked = true # utc_time = 2008-09-17 05:39:16 # local_time = 2008-09-17 12:39:16 (-0600, Centrinis Daylight Time) # country = "United States" # OSVer = 5.1.2600 NT Service Pack 2 # nuskaityta = 226.155 rasti = 0 # # scan_time = 4.934 |
|
#14
| |||
| |||
| Nustatyti Nauja atkūrimo tašką, norint išvengti galimo pakartotinio užsikrėtimo nuo seno Sukurti naują atkūrimo tašką, po valymo sistemos leis kompiuterį konstrukcijų Atgal į švarią darbinę būseną, jei reikia.
Windows XP sistemos atkūrimo vadovas arba "Windows Vista" System Restore vadovas ---------- Naudokite Secunia Software Inspector patikrinti pasenusios programinės įrangos. Pasenusi programinė įranga turi saugumo spragų, kad programinė įranga gali išnaudoti.
Pereiti į Microsoft Windows Update ir gauti visus kritinius atnaujinimus. ---------- Štai keletas puikių nemokamai įrankius, kurie padeda saugoti nuo infekcijos kartą. Šios priemonės naudojimo mažai arba visai nėra išteklių, todėl ne sulėtinti jūsų kompiuterio. Susirūpinusi naršyklės saugumo? Apsvarstykite galimybę naudoti Mozilla Firefox 3.0. Užkirsti kelią nežinomas paraiškas yra įdiegta jūsų kompiuteryje įdiegti WinPatrol 2.008 * Naudojant Winpatrol apsaugoti kompiuterį nuo kenkėjiškos programinės įrangos Siūlyčiau naudoti SiteAdvisor. SiteAdvisor kursai svetainėse verslo praktikos ir šlamštas. Saugos vertinimų iš McAfee SiteAdvisor remiasi automatinių saugos bandymus svetainių. SpywareBlaster - Apsaugokite savo "Internet Explorer sunkiau šių ActiveX" programas paleisti kompiuterį. Pat sustabdyti tam slapukų buvo įtraukta į jūsų kompiuterį, kai veikia "Mozilla Firefox" naršyklės pagrindu, kaip. * Naudojant SpywareBlaster apsaugoti kompiuterį nuo šnipinėjimo programų ir kenkėjiškų programų * Jei jūs nežinote, kas yra ActiveX valdiklius, skaitykite čia Išvykimo Išlaikyti Yourself saugiam internete Patarimai ir nemokamus įrankius, norint išlaikyti saugų ateityje. Taip pat žiūrėkite Lėtas kompiuterio? Ji negali būti kenkėjiškų programų nemokamai valymo / priežiūros priemones, padedančias išsaugoti savo kompiuteryje, kuriame veikia sklandžiai. Naudokite tik patikimų saugumo įrangos, kaip programų, išvardytų šiame puslapyje. Patikimas saugumas Įrankiai ir ištekliai |
|
#15
| |||
| |||
| I can't thank you enough. Manau daug saugesnis apie mano kompiuteryje dabar ačiū jums. Esu nepaprastai sužavėtas ne žinių gausa šioje svetainėje ir toliau jį naudoti savo skaičiavimo poreikius. |
|
#16
| |||
| |||
| Džiaugiamės, kad jis dirbo. Saugus banglenčių ... |
![]() |
|
| Bookmarks |
Panašios Temos | ||||
| Siūlas | Thread Starter | Forumas | Atsakymai | Last Post |
| HARDDRIVE Klaida Bootup - "Klaida diske" "Paspauskite bet kurį klavišą, kad paleisti" | ashaiba | General Hardware Chat | 6 | Kovas 13, 2009 15:56 |
| Bus "Office 95" bendradarbiaus su "Windows XP"? | Raynhawk | Office Suites & Applications | 4 | 23 vasaris 2009 17:01 |
| Nepavyko įdėti "Enable" funkciją "įjungti" BIOS Nuoroda CD / DVD. | ashmehta | Nešiojamieji kompiuteriai, PDA ir mobiliuosius telefonus | 8 | Birželis 17, 2008 02:56 |
| Laptop ne pradedančioms "sintaksė" arba "disko klaida". | aechain | Windows "operacinės sistemos | 5 | 24 sausis 2008 15:45 |
| Lost "Send to Desktop" | ianhad | Windows "operacinės sistemos | 1 | 4 rugpjūtis 2007 10:02 |
| Temos įrankiai | |
| |