|
| |||||||
| Inregistrare | Site-ul Spy | Lista de stat | Doneaza | Căuta | Posturi de azi | Marchează forumurile citite | Forum Regulamentul |
 |
 |
| | Thread Tools |
|
#1
15 mai 2009, 21:29
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD A fost pe linia writting un e-mail o avut acest lucru. Am uitat ce vrea mici nota carte merge de la colţ de colt cu un pic de albastru pătrat în colţul din stânga sus şi o linie albastră, care trece prin ele. Toate pictogramele dispărut, tastatura şi mouse-ul nu va funcţiona. Singurul mod de am putut scoate a fost pentru a opri putere. Când am ajuns acasă de la locul de muncă şi a pornit din nou pe computer toate M-am este un ecran negru. Aşa că am încercat toate caracteristicile următoare. În primul rând îndepărtat de cablu, pentru a monitoriza şi de a lua testul lumina de pe monitor. verificat-o cu vechiul PC şi este de lucru bine. Apoi a trebuit să scoateţi cpu ventilator (de-o pe aceasta ca pe un PC este de săpun mai mult de un fan.) Am obişnuit, pentru a vedea dacă am putut auzi de procesor evantai de lucru. Este lucru bine. Apoi am fost, vom încerca, un Memtest, dar nu a putut obţine nimic pe moniter deci nu ştiu dacă a fost sau nu să fie difuzate. Ştearsă toate puterea de a PC-ul şi bateria pentru aceasta ar face bip. am nici un bip când puterea a fost culcat inapoi. Si de asemenea, am observat că, atunci când toate cablurile sunt cuplat şi putere este transformat de pe tastatură şi mouse-ul nu funcţionează .. După ce am virus software descărcat în vechiul PC voi verifica pentru a vedea dacă hard-disk încă funcţionează. În ceea ce priveşte hijacks fişier am fugit o chiar înainte de acest lucru sa întâmplat, dar a fost cu WinPatrol si a fost salvat fişierul. Dacă aş putea ajunge pe hard disc pentru a lucra în acest computerul vechi voi posta-o. |
|
#2
16 mai 2009, 14:38
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Fără buştenii nu ne putem face o determinare în cazul în care este malware sau nu.
__________________  |
|
#3
17 mai 2009, 14:29
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Va funcţiona pe obtinerea de fişier de log. Hard-disk doza de lucru în computerul vechi. |
|
#4
17 mai 2009, 15:05
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Aici este de jurnal, care a fost dat, chiar înainte de accident. Jurnal creat de WinPatrol PLUS versiune 16.0.2009.2:16.0.2009.2 Scan salvate la 11:57:58, pe 5.13.2009 Platforma: Windows XP SP3 Service Pack 3 (Build 2600) MSIE: Internet Explorer (8.00.6001.18372) Boot mode: Normal Rularea procese: C: \ Windows \ system32 \ smss.exe C: \ Windows \ system32 \ winlogon.exe C: \ Windows \ system32 \ services.exe C: \ Windows \ system32 \ lsass.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ COMODO \ COMODO Internet Security \ cmdagent.exe C: \ Windows \ system32 \ Spoolsv.exe C: \ Program Files \ Common Files \ AOL \ ACS \ AOLacsd.exe C: \ Program Files \ Common Files \ AOL \ TopSpeed \ 2.0 \ aoltsmon.exe C: \ WINDOWS \ ARSERVICE.EXE C: \ WINDOWS \ explorer.exe C: \ Windows \ system32 \ bgsvcgen.exe C: \ WINDOWS \ ehome \ ehrecvr.exe C: \ WINDOWS \ ehome \ ehSched.exe C: \ Program Files \ SPOTMAU WINCARES 2007 \ FOLDERPROTECTSERVICE.EXE C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ MALWAREBYTES "ANTI-malware \ MBAMSERVICE.EXE C: \ Windows \ system32 \ nvsvc32.exe C: \ Program Files \ Common Files \ NOU graniţa \ PrismXL \ PRISMXL.SYS C: \ Windows \ system32 \ atwtusb.exe C: \ WINDOWS \ ehome \ ehtray.exe C: \ Program Files \ Digital Media Reader \ READERICON45G.EXE C: \ WINDOWS \ RTHDCPL.exe C: \ WINDOWS \ arpwrmsg.exe C: \ Program Files \ LEXMARK 5200 SERIILE \ lxbtbmgr.exe C: \ WINDOWS \ ehome \ ehmsas.exe C: \ Windows \ system32 \ rundll32.exe C: \ Program Files \ QuickTime \ qttask.exe C: \ Program Files \ LEXMARK 5200 SERIILE \ lxbtbmon.exe C: \ Program Files \ Common Files \ AOL \ 1229613011 \ EE \ AOLSOFTWARE.EXE C: \ Program Files \ COMODO \ SafeSurf \ cssurf.exe C: \ Program Files \ COMODO \ COMODO Internet Security \ cfp.exe C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe C: \ Windows \ system32 \ WTMKM.exe C: \ Program Files \ Common Files \ Ulead SISTEME \ AUTODETECTOR \ Monitor.exe C: \ Program Files \ BILLP Studios \ WINPATROL \ WINPATROL.EXE C: \ Program Files \ Messenger \ msmsgs.exe C: \ Windows \ system32 \ Ctfmon.exe C: \ Windows \ system32 \ SEARCHINDEXER.EXE C: \ Program Files \ FILEHIPPO.COM \ UPDATECHECKER.EXE C: \ Program Files \ FINEPIXVIEWER \ QUICKDCF2.EXE C: \ Program Files \ Windows Desktop Search \ WINDOWSSEARCH.EXE C: \ Windows \ system32 \ dllhost.exe C: \ Program Files \ America Online 9.0 \ waol.exe C: \ Program Files \ America Online 9.0 \ shellmon.exe C: \ Program Files \ BILLP Studios \ WINPATROL \ WINPATROLEX.EXE R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comodo.com/search/ R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Link Helper - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll O2 - BHO: VIPTToolbarManager Class - (1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D) - C: \ Program Files \ Visual IP Trace 2008 \ VisualIPTraceIE.dll O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - C: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O2 - BHO: EntDownloadHelper Class - (2956DD50-4F3E-4C20-81D1-FF36435FF288) - C: \ Program Files \ Enterra \ Download Manager \ edm.dll O2 - BHO: AOL Toolbar Loader - (7C554162-8CB7-45A4-B8F4-8EA1C75885F9) - C: \ Program Files \ AOL Toolbar \ aoltb.dll O2 - BHO: URLHooker2 Class - (93935F7F-9C88-42F8-8445-95251D27FABC) - C: \ Program Files \ Flash Video Downloader \ URLHooker.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 2.1.1119.1736 \ s wg.dll O2 - BHO: CBrowserHelperObject Object - (CA6319C0-31B7-401E-A518-A07C3DB8F777) - c: \ windows \ system32 \ BAE.dll O2 - BHO: Java (tm) Plug-in 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl Class - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ implica \ jqs \ ie \ jqs_plugin.dll O3 - Toolbar: & Google - (2318C2B1-4965-11d4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar2.dll O3 - Toolbar: Enterra Download Manager - (B5147546-9359-4D9B-8B36-F54C54555799) - C: \ Program Files \ Enterra \ Download Manager \ edm.dll O3 - Toolbar: Visual IP Trace - (E70C26AE-DFF1-40A8-8D37-19180F56F0AA) - C: \ Program Files \ Visual IP Trace 2008 \ VisualIPTraceIE.dll O3 - Toolbar: AOL Toolbar - (DE9C389F-3316-41A7-809B-AA305ED9D922) - C: \ Program Files \ AOL Toolbar \ aoltb.dll O3 - Toolbar: Pune Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - C: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ ehome \ ehtray.exe O4 - HKLM \ .. \ Run: [readericon] C: \ Program Files \ Digital Media Reader \ readericon45G.exe O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] C: \ Windows \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [AlwaysReady Power Mesaj APP] ARPWRMSG.EXE O4 - HKLM \ .. \ Run: [Lexmark 5200 serie] C: \ Program Files \ Lexmark 5200 serii \ lxbtbmgr.exe O4 - HKLM \ .. \ Run: [LXBTCATS] rundll32 C: \ Windows \ system32 \ bobina \ DRIVERS \ W32X86 \ 3 \ LXBTtim e.dll, _RunDLLEntry @ 16 O4 - HKLM \ .. \ Run: [QuickTime Task] C: \ Program Files \ QuickTime \ qttask.exe-atboottime O4 - HKLM \ .. \ Run: [NvMediaCenter] C: \ Windows \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [HostManager] C: \ Program Files \ Common Files \ AOL \ 1229613011 \ EE \ AOLSoftware.exe O4 - HKLM \ .. \ Run: [AOLDialer] C: \ Program Files \ Common Files \ AOL \ ACS \ AOLDial.exe O4 - HKLM \ .. \ Run: [Pure Networks Port Magic] C: \ PROGRA ~ 1 \ PURENE ~ 1 \ PORTMA ~ 1 \ PortAOL.exe-Run O4 - HKLM \ .. \ Run: [REGSHAVE] C: \ Program Files \ REGSHAVE \ REGSHAVE.EXE / AutoRun O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [Windows Defender] C: \ Program Files \ Windows Defender \ MSASCui.exe-a ascunde O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe O4 - HKLM \ .. \ Run: [Malwarebytes' Anti-Malware] C: \ Program Files \ Malwarebytes' Anti-Malware \ mbamgui.exe / starttray O4 - HKLM \ .. \ Run: [COMODO SafeSurf] C: \ Program Files \ COMODO \ SafeSurf \ cssurf.exe-s O4 - HKLM \ .. \ Run: [COMODO Internet Security] C: \ Program Files \ COMODO \ COMODO Internet Security \ cfp.exe-h O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe O4 - HKLM \ .. \ Run: [MacrokeyManager] WTMKM.exe O4 - HKLM \ .. \ Run: [Ulead AutoDetector v2] C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ Monitor.exe O4 - HKLM \ .. \ Run: [WinPatrol PLUS] C: \ Program Files \ BillP Studios \ WinPatrol \ winpatrol.exe-expressboot O4 - HKLM \ .. \ RunOnce: [NSSInstallation] C: \ Windows \ system32 \ Adobe \ Shockwave 11 \ nssstub.exe / RunOnce O4 - HKCU \ .. \ Run: [MSMSGS] C: \ Program Files \ Messenger \ msmsgs.exe / fundal O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [filehippo.com] C: \ Program Files \ filehippo.com \ UpdateChecker.exe / fundal O4 - Global Startup: ExifLauncher2.lnk = C: \ Program Files \ FinePixViewer \ QuickDCF2.exe O4 - Global Startup: Windows Search.lnk = C: \ Program Files \ Windows Desktop Search \ WindowsSearch.exe O8 - Extra context menu item: & AOL Toolbar Search - C: \ Documents and Settings \ All Users \ Application Data \ AOL \ ieToolbar \ resurse \ en-US \ local \ search.html O8 - Extra context menu item: & Download de Enterra Download Manager - res: / / C: \ Program Files \ Enterra \ Download Manager \ edm.dll/3000 O9 - Extra buton: Enterra Download Manager - (1AB6CC97-17C1-4207-BC51-5C9D435A338E) - res: / / C: \ Program Files \ Enterra \ Download Manager \ edm.dll/3002 O9 - Extra button: (no name) - (85d1f590-48f4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe O9 - Extra 'Tools' MENUITEM: Uninstall BitDefender Online Scanner V8 - (85d1f590-48f4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra button: FWI Fraudă Scut - (44E50755-EAC0-49ea-B52D-37372157D100) - C: \ Program Files \ FWI \ FraudShield \ FWIFraudShield.exe (HKCU) O9 - Extra buton: Flash Video Downloader - (df7831dd-a048-4336-8cc8-266a03f00d63) - C: \ Program Files \ Flash Video Downloader \ FlashRunner.exe (HKCU) O11 - Options group: [Java (Sun)] Java (Sun) - C: \ Program Files \ Java \ jre6 \ bin O11 - Options group: [] -- O14 - IERESET.INF: START_PAGE_URL = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome O14 - IERESET.INF: SEARCH_PAGE_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch O14 - IERESET.INF: HKCU, Start Page =% START_PAGE_URL% O14 - IERESET.INF: HKLM, Default_Page_URL =% START_PAGE_URL% O14 - IERESET.INF: HKLM, Default_Search_URL =% SEARCH_PAGE_URL% O14 - IERESET.INF: HKLM, Search Page =% SEARCH_PAGE_URL% O14 - IERESET.INF: HKCU, Search Page =% SEARCH_PAGE_URL% O15 - Trusted Zone: aol.com O16 - DPF: (5ED80217-570B-4DA9-BF44-BE107C0EC166) (Centrul de Securitate Windows Live Base Module) -- http://cdn.scan.onecare.live.com/res...scbase5036.cab O16 - DPF: (8AD9C840-044E-11D1-B3E9-00805F499D93) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (A90A5822-F108-45AD-8482-9BC8B12DD539) (vitală cpcScan) -- http://www.crucial.com/controls/cpcScanner.cab O16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses Class) -- http://www.superadblocker.com/activex/sabspx.cab O16 - DPF: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) (a-pătratului Scanner) -- http://ax.emsisoft.com/asquared.cab O16 - DPF: (CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA) (Java Plug-in 1.5.0_02) -- http://java.sun.com/update/1.5.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA) (Java Plug-in 1.6.0_05) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA) (Java Plug-in 1.6.0_07) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (E8F628B5-259A-4734-97EE-BA914D7BE941) (Driver Agent ActiveX Control) -- http://plugin.driveragent.com/files/driveragent.cab O21 - WPDShServiceObj - WPDShServiceObj Class - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ Windows \ system32 \ WPDShServiceObj.dll O23 - Service: AOL Connectivity Service - AOL LLC - C: \ Program Files \ Common Files \ AOL \ ACS \ AOLacsd.exe O23 - Service: AOL TopSpeed Monitorul - America Online, Inc - C: \ Program Files \ Common Files \ AOL \ TopSpeed \ 2.0 \ aoltsmon.exe O23 - Service: B's Recorder GOLD Library General Service - BHA Corporation - C: \ Windows \ system32 \ bgsvcgen.exe O23 - Service: COMODO Internet Security Helper Service - - C: \ Program Files \ COMODO \ COMODO Internet Security \ cmdagent.exe O23 - Service: FolderProtectService - - C: \ Program Files \ Spotmau WinCares 2007 \ FolderProtectService.exe O23 - Service: Google Updater Service - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: Java rapida pentru începători - - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe-service-config C: \ Program Files \ Java \ jre6 \ lib \ implica \ jqs \ jqs.conf O23 - Service: lxbt_device - - C: \ Windows \ system32 \ lxbtcoms.exe-service O23 - Service: MBAMService - Malwarebytes Corporation - C: \ Program Files \ Malwarebytes' Anti-Malware \ mbamservice.exe O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C: \ Windows \ system32 \ nvsvc32.exe O23 - Service: WTService - - C: \ Windows \ system32 \ atwtusb.exe-s --- Suplimentare WinPatrol Info --- Browser implicit: Windows ® Internet Explorer - Internet Explorer, versiunea 8.00.6001.18372 MSIE: Internet Explorer (8.00.6001.18372) 25 IE Cookies în folder: C: \ Documents and Settings \ Owner.YOUR-DC0C6E8137 \ Cookies \ WP00 - HKLM \ CS1: BootExecute = Automată Autochk * WP00 - HKLM \ CCS: BootExecute = Automată Autochk * WP00 - HKLM \ CS2: BootExecute = Automată Autochk * WP00 - HKLM \ CS3: BootExecute = Automată Autochk * WP02 - HKLM \ CCS: Command = C: \ Windows \ system32 \ cmd.exe WP03 - automate Windows Update = 4: Descărcarea automată recomandă actualizări pentru computer şi le instala. WP08 - HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ URL \ DefaultPrefix: Default = http:// WP08 - HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ URL \ prefixele: www = http:// WP31 - Activităţi programate: [Uniblue SpeedUpMyPC.job] C: \ Program Files \ Uniblue \ SpeedUpMyPC 3 \ SpeedUpMyPC.exe Niciodată WP31 - Activităţi programate: [Uniblue SpeedUpMyPC Nag.job] C: \ Program Files \ Uniblue \ SpeedUpMyPC 3 \ SpeedUpMyPC.exe Niciodată WP31 - Activităţi programate: [NSSstub.job] C: \ Windows \ system32 \ Adobe \ Shockwave 11 \ nssstub.exe 05.13.2009 11:30 WP31 - Activităţi programate: [Driver Robot.job] C: \ Program Files \ Driver Robot \ DriverRobot.exe Niciodată WP31 - Activităţi programate: [bază curată-up.job] C: \ Program Files \ Panda Security \ Panda Global Protecţia 2009 \ PlaTasks.exe Niciodată WP31 - Activităţi programate: [User_Feed_Synchronization-(FD03A801-5427-4516-93CD-BC74874B5889). Loc de muncă] C: \ Windows \ system32 \ msfeedssync.exe 05.13.2009 11:42 WP16 - ActiveX: (00EF2092-6AC5-47C0-BD25-CF2D5D657FEB) [Google Script Object] C: \ Program Files \ Google \ GOOGLETOOLBAR2.DLL 4, 0, 1601, 4978 WP16 - ActiveX: (17492023-C23A-453E-A040-C7C580BBF700) [Windows Genuine Advantage Validation Unealtă] C: \ Windows \ system32 \ LEGITCHECKCONTROL.DLL 1.7.0069.2 WP16 - ActiveX: (19916E01-B44E-94A4-4E31-4696DF46157B) [InformationCardSigninHelper clasa] C: \ Windows \ system32 \ icardie.dll 8.00.6001.18372 WP16 - ActiveX: (25336920-03F9-11CF-8FD0-00AA00686F13) [HTML Document] C: \ Windows \ system32 \ Mshtml.dll 8.00.6001.18372 WP16 - ActiveX: (2933BF90-7B36-11D2-B20E-00C04F983E60) [DOM XML Document] C: \ Windows \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (2D360201-FFF5-11D1-8D03-00A0C959BC0A) [DHTML Editare control sigur pentru script pentru IE5] C: \ Program Files \ Common Files \ Microsoft Shared \ Triedit \ dhtmled.ocx 6.01.9234 WP16 - ActiveX: (48123BC4-99D9-11D1-A6B3-00C04FD91555) [XML Document] C: \ Windows \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (4E430174-1673-4FF3-BF28-A3B37F6573E7) [Windows Desktop Search Combo Control] C: \ Program Files \ Windows Desktop Search \ wdsShell.dll 7.0.6001.16503 WP16 - ActiveX: (4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2) [Microsoft Terminal Services Client Control (redist)] C: \ Windows \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (4EDCB26C-D24C-4e72-AF07-B576699AC0DE) [Microsoft Terminal Services Client Control (redist)] C: \ Windows \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (63610B21-6B0D-46C5-909D-3BD000B9A5A9) [ToolbarParams clasa] C: \ Program Files \ AOL TOOLBAR \ aoltb.dll 5.13.4.1 WP16 - ActiveX: (6414512B-B978-451D-A0D8-FCFDF33E833C) [WUWebControl clasa] C: \ Windows \ system32 \ wuweb.dll 7.2.6001.788 WP16 - ActiveX: (6BF52A52-394A-11D3-B153-00C04F79FAA6) [Windows Media Player] C: \ Windows \ system32 \ wmp.dll 11.0.5721.5260 WP16 - ActiveX: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) [MUWebControl clasa] C: \ Windows \ system32 \ muweb.dll 7.2.6001.788 WP16 - ActiveX: (72267F6A-A6F9-11D0-BC94-00C04FB67863) [Active Desktop motor] C: \ Windows \ system32 \ shell32.dll 6.00.2900.5622 WP16 - ActiveX: (7390f3d8-0439-4c05-91e3-cf5cb290c3d0) [Microsoft Terminal Services Client Control (redist)] C: \ Windows \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (75565ED2-4F15-1560-B841-20358DE6A0D1) [ImageControl clasa] C: \ Windows \ system32 \ mfimgvwr.ocx 2.0.0.1 WP16 - ActiveX: (7584c670-2274-4efb-b00b-d6aaba6d3850) [Microsoft Terminal Services Client Control (redist)] C: \ Windows \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (8856F961-340A-11D0-A96B-00C04FD705A2) [Web Microsoft Browser] C: \ Windows \ system32 \ ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (88D969C0-F192-11D4-A65F-0040963251E5) [DOM XML Document 4,0] C: \ Windows \ system32 \ msxml4.dll 4.20.9870.0 WP16 - ActiveX: (88D969C5-F192-11D4-A65F-0040963251E5) [XML HTTP 4,0] C: \ Windows \ system32 \ msxml4.dll 4.20.9870.0 WP16 - ActiveX: (88D969EA-F192-11D4-A65F-0040963251E5) [XML HTTP 5.0] C: \ Program Files \ Common Files \ Microsoft Shared \ OFFICE11 \ msxml5.dll 5.20.1087.0 WP16 - ActiveX: (8AD9C840-044E-11D1-B3E9-00805F499D93) [Java Plug-in 1.6.0_13] C: \ Program Files \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (9059f30f-4eb1-4bd2-9fdc-36f43a218f4a) [Microsoft Terminal Services Client Control (redist)] C: \ Windows \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) [SABScanProcesses clasa] C: \ WINDOWS \ Downloaded Program Files \ sabspx.dll 1.0.0.1 WP16 - ActiveX: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) [un-pătrat Scanner] C: \ WINDOWS \ Downloaded Program Files \ asquared.ocx 4.0.0.0 WP16 - ActiveX: (CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA) [Java Plug-in 1.6.0_05] C: \ Program Files \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA) [Java Plug-in 1.6.0_07] C: \ Program Files \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (CFBFAE00-17A6-11D0-99CB-00C04FD64497) [Microsoft Url Cautare Hook] C: \ Windows \ system32 \ ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (D27CDB6E-AE6D-11CF-96B8-444553540000) [Shockwave Flash Object] C: \ Windows \ system32 \ Macromed \ Flash \ Flash10b.ocx 10,0,22,87 WP16 - ActiveX: (DFEAF541-F3E1-4C24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Program Files \ MICROSOFT Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (E8F628B5-259A-4734-97EE-BA914D7BE941) [Driver Agent ActiveX Control] C: \ WINDOWS \ Downloaded Program Files \ DRIVERAGENT.OCX 1.0.0.0 WP16 - ActiveX: (EA756889-43DB-2338-8F07-D1CA6FB9C90D) [IAOLTBSearch clasa] C: \ Program Files \ AOL TOOLBAR \ aoltb.dll 5.13.4.1 WP16 - ActiveX: (ED8C108E-4349-11D2-91A4-00C04F7969E8) [XML HTTP Cerere] C: \ Windows \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F5078F32-C551-11D3-89B9-0000F81FE221) [DOM XML Document 3.0] C: \ Windows \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F6D90F11-9C73-11D3-B32E-00C04F990BB4) [DOM XML Document] C: \ Windows \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F6D90F16-9C73-11D3-B32E-00C04F990BB4) [XML HTTP] C: \ Windows \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (DFEAF541-F3E1-4c24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Program Files \ MICROSOFT Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: DFEAF541-F3E1-4c24-ACAC-99C30715084A [Microsoft Silverlight] C: \ Program Files \ MICROSOFT Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (05589fa1-c356-11ce-bf01-00aa0055595a) [ActiveMovieControl Obiectul] C: \ Windows \ system32 \ wmpdxm.dll 11.0.5721.5145 WP16 - ActiveX: (0713E8A2-850A-101B-AFC0-4210102A8DA7) [Microsoft TreeView control, versiunea 5.0 (SP2)] C: \ Windows \ system32 \ COMCTL32.OCX 5.01.4319 WP16 - ActiveX: (0713E8D2-850A-101B-AFC0-4210102A8DA7) [Microsoft ProgressBar control, versiunea 5.0 (SP2)] C: \ Windows \ system32 \ COMCTL32.OCX 5.01.4319 WP16 - ActiveX: (233C1507-6A77-9443-46A4-F871F945D258) [Shockwave ActiveX Control] C: \ Windows \ system32 \ Adobe \ director \ SwDir.dll 11.5 WP16 - ActiveX: (17492023-C23A-453E-A040-C7C580BBF700) [Windows Genuine Advantage Validation Unealtă] C: \ Windows \ system32 \ LEGITCHECKCONTROL.DLL 1.7.0069.2 WP16 - ActiveX: (1D2B4F40-1F10-11D1-9E88-00C04FDCAB92) [ThumbCtl clasa] C: \ Windows \ system32 \ webvw.dll 6.00.2900.5512 WP16 - ActiveX: (DFEAF541-F3E1-4c24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Program Files \ MICROSOFT Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (52A2AAAE-085D-4187-97EA-8C30DB990436) [HHCtrl Obiectul] C: \ Windows \ system32 \ hhctrl.ocx 5.2.3790.4110 WP16 - ActiveX: (58DA8D8A-9D6A-101B-AFC0-4210102A8DA7) [Microsoft ListView control, versiunea 5.0 (SP2)] C: \ Windows \ system32 \ COMCTL32.OCX 5.01.4319 WP16 - ActiveX: (58DA8D8F-9D6A-101B-AFC0-4210102A8DA7) [Microsoft Imagelist control, versiunea 5.0 (SP2)] C: \ Windows \ system32 \ COMCTL32.OCX 5.01.4319 WP16 - ActiveX: (6B7E638F-850A-101B-AFC0-4210102A8DA7) [Microsoft StatusBar control, versiunea 5.0 (SP2)] C: \ Windows \ system32 \ COMCTL32.OCX 5.01.4319 WP16 - ActiveX: (8856F961-340A-11D0-A96B-00C04FD705A2) [Web Microsoft Browser] C: \ Windows \ system32 \ ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (8BD21D50-EC42-11CE-9E0D-00AA006002F3) [Microsoft Formulare 2.0 OptionButton] C: \ Windows \ system32 \ FM20.DLL 11.0.6550 WP16 - ActiveX: (AE24FDAE-03C6-11D1-8B76-0080C744F389) [Microsoft Scriptlet Componenta] C: \ Windows \ system32 \ Mshtml.dll 8.00.6001.18372 WP16 - ActiveX: (CA8A9780-280D-11CF-A24D-444553540000) [Adobe PDF Reader] C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroPDF.dll WP16 - ActiveX: (CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA) [RealPlayer G2 Control] C: \ Windows \ system32 \ rmoc3260.dll 6.0.8.1266 WP16 - ActiveX: (D27CDB6E-AE6D-11CF-96B8-444553540000) [Shockwave Flash Object] C: \ Windows \ system32 \ Macromed \ Flash \ Flash10b.ocx 10,0,22,87 WP16 - ActiveX: (E5DF9D10-3B52-11D1-83E8-00A0C90DC849) [WebViewFolderIcon clasa] C: \ Windows \ system32 \ webvw.dll 6.00.2900.5512 WP32 - fişier ascuns: C: \ boot.ini WP32 - fişier ascuns: C: \ IO.SYS WP32 - fişier ascuns: C: \ Msdos.sys WP32 - fişier ascuns: C: \ NTDETECT.COM WP32 - fişier ascuns: C: \ ntldr WP32 - fişier ascuns: C: \ pagefile.sys WP32 - fişier ascuns: C: \ UTILIZATOR WP32 - Hidden File: C: \ WINDOWS \ WindowsShell.Manifest WP32 - Hidden File: C: \ WINDOWS \ winnt.bmp WP32 - Hidden File: C: \ WINDOWS \ winnt256.bmp WP32 - fişier ascuns: C: \ Windows \ system32 \ cdplayer.exe.manifest WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ default.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ default.tmp.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ SAM.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ SAM.tmp.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ SECURITY.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ SECURITY.tmp.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ software.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ software.tmp.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ system.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ system.tmp.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ TempKey.LOG WP32 - Hidden File: C: \ WINDOWS \ system32 \ config \ userdiff.LOG WP32 - Hidden File: C: \ Windows \ system32 \ drivers \ hosts WP32 - fişier ascuns: C: \ Windows \ system32 \ logonui.exe.manifest WP32 - fişier ascuns: C: \ Windows \ system32 \ ncpa.cpl.manifest WP32 - fişier ascuns: C: \ Windows \ system32 \ nwc.cpl.manifest WP32 - fişier ascuns: C: \ Windows \ system32 \ Restore \ filelist.xml WP32 - fişier ascuns: C: \ Windows \ system32 \ sapi.cpl.manifest WP32 - fişier ascuns: C: \ Windows \ system32 \ WindowsLogon.manifest WP32 - fişier ascuns: C: \ Windows \ system32 \ wuaucpl.cpl.manifest WP32 - Hidden File: C: \ Program Files \ Common Files \ Services \ Thumbs.db WP32 - fişier ascuns: C: \ boot.ini WP32 - fişier ascuns: C: \ IO.SYS WP32 - fişier ascuns: C: \ Msdos.sys WP32 - fişier ascuns: C: \ NTDETECT.COM WP32 - fişier ascuns: C: \ ntldr WP32 - fişier ascuns: C: \ pagefile.sys WP32 - fişier ascuns: C: \ UTILIZATOR WP33 - tip de fişier. CAT: [Securitate Catalog] rundll32.exe cryptext.dll, CryptExtOpenCAT% 1 WP33 - tip de fişier. CHM: [Compilat HTML Ajutor fişier] C: \ WINDOWS \ hh.exe% 1 WP33 - fişiere de tip. Com: [MS-DOS Application]% 1% * WP33 - tip de fişier. CMD: [Windows NT Command Script]% 1% * WP33 - tip de fişier. Eml: [Internet mesaj e-mail] C: \ Program Files \ Outlook Express \ msimn.exe / eml:% 1 WP33 - tip de fişier. EXE: [Cerere]% 1% * WP33 - tip de fişier. INF: [Setup Informaţii] C: \ Windows \ system32 \ NOTEPAD.EXE% 1 WP33 - tip de fişier. JS: [JScript Fişier script] C: \ Windows \ system32 \ wscript.exe% 1% * WP33 - tip de fişier. LOG: [Text Document] C: \ Windows \ system32 \ NOTEPAD.EXE% 1 WP33 - tip de fişier. MSI: [Windows Installer Package] C: \ WINDOWS \ System32 \ Msiexec.exe / i% 1% * WP33 - tip de fişier. MID: [MIDI Secvenţa] C: \ Program Files \ Windows Media Player \ wmplayer.exe / Open L% WP33 - tip de fişier. MP3: [format MP3 Sound] C: \ Program Files \ Windows Media Player \ wmplayer.exe / prefetch: 6 / Open L% WP33 - tip de fişier. PIF: [Scurtătură pentru MS-DOS Programul]% 1% * WP33 - tip de fişier. RAM: [RealPlayer File] C: \ Program Files \ Real \ RealPlayer \ RealPlay.exe / m audio / x-pn-RealAudio% 1 WP33 - tip de fişier. REG: [inregistrare Entries] regedit.exe% 1 WP33 - tip de fişier. RTF: [Rich Text Document] C: \ Program Files \ Windows NT \ Accesorii \ WORDPAD.EXE% 1 WP33 - tip de fişier. SCR: [Screen Saver]% 1 / S WP33 - tip de fişier. TXT: [Text Document] C: \ Windows \ system32 \ NOTEPAD.EXE% 1 WP33 - tip de fişier. URL: [Internet Scurtătură] rundll32.exe ieframe.dll, OpenURL% l WP33 - tip de fişier. VBS: [Fişier script VBScript] C: \ Windows \ system32 \ wscript.exe% 1% * WP33 - tip de fişier. Vbe: [Fişier script codificat VBScript] C: \ Windows \ system32 \ wscript.exe% 1% * WP33 - tip de fişier. WSF: [Fişier script Windows] C: \ Windows \ system32 \ wscript.exe% 1% * WP33 - tip de fişier. WSH: [Windows Script Host Settings File] C: \ Windows \ system32 \ wscript.exe% 1% * De memorie, în prezent, în utilizare: 18% Memorie fizică Libera: 2,097,151 KB Fişier de paginare Libera: 4,194,303 KB Memorie virtuală Libera: 2,048,264 KB -- Sfârşit de fişier |
|
#5
17 mai 2009, 15:21
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Eu nu văd nimic care ar fi cauza problemelor pe care îl au. Sunteţi sigur că drive-ul nu merge rău?
__________________ |
|
#6
17 mai 2009, 16:26
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD La acest punct, orice este posibil. Când spui unitate vrei sa spui de HD pentru care se execută bine de pe computerul vechi? |
|
#7
17 mai 2009, 16:39
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Yea de HD. Poti face o scanare completă a virusului pe ea? Asta ar fi mai de încredere, atunci o scanare HJT.
__________________ |
|
#8
27 mai 2009, 08:53
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Îmi pare rău că a durat atât de mult să mă întorc EF. Am avut o problema cu computerul vechi. Ce ai vrea să curgă de la acest punct, am să încerc ceva, dar comboFix. |
|
#9
27 mai 2009, 09:18
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD Descărca DrWeb CureIt Şi salvaţi-l pe desktop. Scanare cu DrWeb-CureIt, după cum urmează:
* După repornire, Clic-dreapta Dr.Web jurnal de pe desktop şi alegeţi Deschidere cu> Notepad * Copiaţi şi lipiţi acest jurnal în următoarea replică
__________________ |
|
#10
27 mai 2009, 20:00
| |||
| |||
| Nu sunt sigur dacă acesta este un virus sau BOSD O voi face. nu sunt sigur cat timp va dura pentru mine să mă întorc la tine, cu un raport. Vechiul calculator nu este permiţând mine pentru a vedea froum. ceva în neregulă cu ie7 dar va ocoli faptul că, pentru moment. |
|
| |
| Marcaje |
Similar Threads | ||||
| Fir | Thread Starter | Forum | Răspunsurile | Ultimul mesaj |
| Nume Întrebare - Poate cineva sa-mi spui dacă am putea avea un virus | billozz | Nume, Spyware & Securitate | 1 | 2 aprilie 2009 13:58 |
| Prietenii mei MAC are un virus ... Umm ... da ... un virus ... | cheesepuff | Nume, Spyware & Securitate | 3 | 29 octombrie 2008 12:58 |
| Nume de ajutor | jam90 | Nume, Spyware & Securitate | 1 | 28 iulie 2008 07:26 |
| Nume | lolli_pop | Nume, Spyware & Securitate | 13 | 17 noiembrie 2007 09:42 |
| Nume? | carpious | Nume, Spyware & Securitate | 12 | 6 mai 2007 09:49 |
| Thread Tools | |
| |
Început de scanare butonul din dreapta şi de scanare va începe.
