mazāku kapitāla

Magazine
Go Back   Computer Sulas > Computer Software > Vīrusu, spiegprogrammatūru un drošība

Register


 Default 

Pastāvīgs Error message - M3PLUGIN.DLL




Reply
 
Thread Tools
  #1  
Old Novembris 19, 2008, 21:23
New Member Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

Čau

Ir kļūdas ziņojumu, kas ir bijis popping up i boot katru reizi manu PC jau kādu laiku. Lai gan tas nav īsti bothered me (i vienkārši spiediet 'OK' un tā pazūd), i domāju, ka tas ir iemesls, kāpēc es esmu, kam problēmas ar degšanas sīkumi uz DVD.

Es aprakstīt ziņu. Tas ir tikai nedaudz logs ekrāna centrā ar nosaukumu "RUNDLL". Faktiskais message says:

"Kļūda ielādējot: C: \ PROGRA ~ 1 \ bar \ 1.bin \ M3PLUGIN.DLL

Noteikti modulis netika atrasta. "

un tad tā vienkārši ļauj man noklikšķiniet uz 'OK'. Jebkura ideja kas tas ir un kā to salabot?

oh yeah, man ir Windows XP Home Edition versija 2.002 Service Pack 2.

Pateicība,
john
  #2  
Old Novembris 20, 2008, 00:31
Administrator Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

M3PLUGIN.DLL ir daļa no vīrusu un / vai spiegprogrammatūru, kas ir pa kreisi uz jūsu sistēmas.

Izpildiet šo guide un pēc log failiem, tad viens no malware komanda palīdzēs jums pilnībā sakopta.

http://www.computer-juice.com/forums...-posting-7476/

* Pārcelts pavedienu Virus / Spyware forumā.
__________________

Mana sistēma: Hybr! D

Processor (s):
AMD Turion 64 X2 TL-64 2.2GHz
Motherboard:
HP nForce 560
RAM Operatīvā atmiņa:
2GB DDR2 PC2-5300
Graphics Card (s):
Nvidia 7150M Onboard Integrētā
Sound Card:
5,1 Onboard Integrētā
Hard Drive (s):
250GB 5400RPM SATA300
Optical Drive (s):
18x CD / DVDRW DL ATA
Case / PSU:
Noliktavā HP
Dzesēšana:
Noliktavā HP
Tīkla / Internets:
10/100 NIC / 10MB Virgin Cable
Monitor (s):
17 "WXGA + HD BrightView Widescreen
Operating System (s):
Windows 7 Ultimate 32Bit
  #3  
Old Novembris 23, 2008, 18:39
New Member Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

čau

Es esam pabeiguši soļus 1-6 un kļūdas ziņojums par sākuma ir faktiski izzudusi. I'll post trīs žurnālus katram gadījumam.

Šeit ir programmas, es nebiju pārliecināts, ka ar "Add Remove Programs" list:

AC3 Filter
AmpliTube 1,1 LE
Ask rīkjoslu
Bonjour
Saderības pakotne Office 2007 sistēmas
Customer Experience Enhancement
DNS
Enhanced Multimedia Keyboard Solution
High Definition Audio Driver Package - KB888111
HP Boot optimizētājs
IncrediMail Xe
LADSPA_plugins-win-0.4.15
Microsoft. NET Framework 1.1
Microsoft. NET Framework 1.1 Hotfix (KB928366)
Microsoft. NET Framework 2.0 Service Pack 1
Microsoft Silverlight
Microsoft Visual C + + 2005 Redistributable (2 no šiem)
MobileMe Control Panel
MSXML 4,0 SP2 (KB925672)
MSXML 4,0 SP2 (KB927978)
MSXML 4,0 SP2 (KB936181)
MSXML 4,0 SP2 (KB954430)
PIF DIZAINERS
Prime95
PS2
Python 2,2 pywin32 paplašinājumi (Build 203)
Python 2.2.3
Safari
Windows Installer 3.1 (KB893803)

Šeit ir SUPERAntiSpyware žurnāls:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/22/2008 at 09:46

Application Version: 4.22.1014

Core Noteikumi Database Version: 3648
Trace Noteikumi Database Version: 1631

Scan type: Complete Scan
Kopā Scan Time: 02:30:48

Atmiņas vienības skenēts: 568
Memory draudiem detected: 0
Reģistra vienības skenēts: 7.140
Reģistrs draudiem detected: 79
File preces skenēts: 198.486
File draudiem detected: 1

BearShare File Sharing Client
[BearShare] C: \ Program Files \ BEARSHARE \ BEARSHARE.EXE
C: \ Program Files \ BEARSHARE \ BEARSHARE.EXE

Adware.Vundo Variant
HKLM \ Software \ Classes \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC)
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC)
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC)
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ InprocServer32
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ InprocServer32 # ThreadingModel
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ ProgId
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ Programmable
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ TypeLib
HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ VersionIndependentProgID
HKCR \ adzgalore.optimizer.1
HKCR \ adzgalore.optimizer.1 \ CLSID
HKCR \ adzgalore.optimizer
HKCR \ adzgalore.optimizer \ CLSID
HKCR \ adzgalore.optimizer \ CurVer
HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4)
HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1,0
HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ 0
HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ 0 \ Win32
HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ KAROGI
HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ HELPDIR
HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Exp lorer \ Browser Helper Objects \ (994B5FB4-0103-44A6-B6B3-C73572B362BC)
HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (994B5FB4-0103-44A6-B6B3-C73572B362BC)
HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (BCA95E31-1FBF-4F84-8F23-1BA653007A1E)
HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C)
HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ ProxyStubClsid
HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ ProxyStubClsid32
HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ TypeLib
HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ TypeLib # Version

Adware.MyWebSearch
HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (00A6FAF1-072E-44CF-8.957-5838F569A31D)
HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (07B18EA9-A523-4961-B6BB-170DE4475CCA)

Adware.MyWebSearch / FunWebProducts
HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ SOFTWARE \ FunWebProducts
HKCR \ CLSID \ (9AFB8248-617F-460d-9.366-D71CDEDA3179)
HKCR \ CLSID \ (9AFB8248-617F-460d-9.366-D71CDEDA3179) \ TreatAs
HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E)
HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1,0
HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ 0
HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ 0 \ Win32
HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ KAROGI
HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ HELPDIR
HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE)
HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ ProxyStubClsid
HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ ProxyStubClsid32
HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ TypeLib
HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ TypeLib # Version
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE # NextInstance
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # Service
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # Legacy
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # ConfigFlags
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # Class
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # ClassGUID
HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # DeviceDesc
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # Type
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # sākumu
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # ErrorControl
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # ImagePath
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # DisplayName
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # ObjectName
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Security
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Security # Security
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum # 0
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum # Count
HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum # NextInstance
HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run # MyWebSearch Plugin [rundll32 C: \ PROGRA ~ 1 \ MYWEBS ~ 1 \ bar \ 1.bin \ M3PLUGIN.DLL, UPF]

Trojan.Unclassified / MSFox
HKLM \ SOFTWARE \ Mozilla \ MSFox
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str4
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str5
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str9
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str6
HKLM \ SOFTWARE \ Mozilla \ MSFox # STR7
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str8
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str1
HKLM \ SOFTWARE \ Mozilla \ MSFox # Str0
HKLM \ SOFTWARE \ Mozilla \ MSFox # Int2
HKLM \ SOFTWARE \ Mozilla \ MSFox # Int3

un šeit ir Malwarebyte Krāpšanas Maware žurnāls:

Malwarebytes "Anti-Malware 1,30
Database version: 1417
Windows 5.1.2600 Service Pack 2

23/11/2008 3:41:52
mbam-log-2008-11-23 (15-41-52). txt

Scan type: Quick Scan
Objekti skenēts: 55.759
Pagājušo laiku: 7 minūte (s), 57 second (s)

Memory Processes Inficētie: 0
Memory Modules Inficētie: 3
Registry Keys Inficētie: 43
Reģistra vērtības Inficētie: 3
Registry Data Items Infected: 0
Mapes Inficētie: 0
Faili Inficētie: 5

Atmiņas procesi Inficētie:
(No ļaunprātīgs preces konstatētas)

Memory Modules Inficētie:
C: \ Program Files \ AskSBar \ bar \ 1.bin \ ASKSBAR.DLL (Adware.AskSBAR) -> Delete par reboot.
C: \ Program Files \ Mozilla Firefox \ plugins \ NPAskSBr.dll (Trojan.Agent) -> Delete par reboot.
C: \ Program Files \ AskSBar \ bar \ 1.bin \ A2PLUGIN.DLL (Adware.MyWebSearch) -> Delete par reboot.

Registry Keys Inficētie:
HKEY_CLASSES_ROOT \ TypeLib \ (f0d4b230-da4b-4daf-81e4, dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Interface \ (f0d4b23a-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Interface \ (f0d4b23c-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ CLSID \ (b15fd82e-85bc-430d-90cb-65db1b030510) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ CLSID \ (f0d4b231-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (f0d4b231-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (f0d4b231-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ CLSID \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ CLSID \ (f0d4b23b-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (f0d4b23b-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ xml.xml (Trojan.FakeAlert) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ xml.xml.1 (Trojan.FakeAlert) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Interface \ (1601d447-7.424-4.866-8dcc-acf98a2a41e1) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Interface \ (1e404d48-670a-4085-a6a0-d195793ddd33) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Interface \ (9f593aac-ca4c-4a41-a7ff-a00812192d61) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Interface \ (ceb9c60d-f0ad-4b73-a3ab-4fc822e38d66) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ CLSID \ (1e404d48-670a-4085-a6a0-d195793ddd33) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Typelib \ (749ec66f-a838-4b38-b8e5-e65d905fff74) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Typelib \ (c3c0ec2c-2c1c-495c-9ad0-1f0ef833d7b5) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CLASSES_ROOT \ Typelib \ (9233c3c0-1.472-4.091-a505-5580a23bb4ac) (Trojan.FakeAlert) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (055fd26d-3a88-4e15-963d-dc8493744b1d) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (9506910a-0f94-4ea1-b567-7070428b8b2b) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (07b18eab-a523-4961-b6bb-170de4475cca) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (25560540-9571-4d7b-9.389-0f166788785a) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (3dc201fb-e9c9-499c-a11f-23c360d7c3f8) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (63d0ed2c-b45b-4.458-8b3b-60c69bbbd83c) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (9ff05104-b030-46fc-94b8-81276e4e27df) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (1d4db7d2-6ec9-47a3-bd87-1e41684e07bb) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (25560540-9571-4d7b-9.389-0f166788785a) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (3dc201fb-e9c9-499c-a11f-23c360d7c3f8) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (63d0ed2c-b45b-4.458-8b3b-60c69bbbd83c) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (98d9753d-d73b-42d5-8c85-4469cda897ab) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (9ff05104-b030-46fc-94b8-81276e4e27df) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (59c7fc09-1c83-4648-b3e6-003d2bbc7481) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (68af847f-6e91-45dd-9b68-d6a12c30e5d7) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (9170b96c-28d4-4.626-8.358-27e6caeef907) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (d1a71fa0-ff48-48dd-9b6d-7a13a3e42127) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (ddb1968e-ead6-40fd-8dae-ff14757f60c7) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (f138d901-86f0-4.383-99b6-9cdd406036da) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ adzgalore (Adware.Agent) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ RunDll32Policy \ f3ScrCtr.dll (Adware.MyWay) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Multimedia \ W MPlayer \ Schemes \ f3pss (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.

Reģistra vērtības Inficētie:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \ WebBrowser \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run \ MyWebSearch Email Plugin (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi.

Registry Data Items Infected:
(No ļaunprātīgs preces konstatētas)

Mapes Inficētie:
(No ļaunprātīgs preces konstatētas)

Faili Inficētie:
C: \ Program Files \ AskSBar \ bar \ 1.bin \ ASKSBAR.DLL (Adware.AskSBAR) -> Delete par reboot.
C: \ Program Files \ Mozilla Firefox \ plugins \ NPAskSBr.dll (Trojan.Agent) -> Delete par reboot.
C: \ Program Files \ AskSBar \ bar \ 1.bin \ A2PLUGIN.DLL (Adware.MyWebSearch) -> Delete par reboot.
C: \ WINDOWS \ system32 \ WhoisCL.exe (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.
C: \ WINDOWS \ system32 \ mysidesearch_sidebar_uninstall. Exe (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi.


daudz problēmu, es redzu ...

Paldies par turpmāku palīdzību
  #4  
Old Novembris 23, 2008, 20:09
Moderator Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

Es neesmu pārliecināts, ja vēlaties saglabāt šo vai nē. Ja tas ir kaut kas ko jūs neizmantojat es atinstalēt. Nav nepieciešams, kam tā aizņem vietu, ja tā nav izmantota. AmpliTube 1,1 LE -- http://www.sonomawireworks.com/guide...LE_for_Windows

Atinstalēšana:
Ask rīkjoslu <- Tas ir adware, ir noņemts ar skeneri, bet pārliecinieties.
IncrediMail Xe <- Ietver Adware, atinstalēt, ja jūs neizmantojat IncrediMail.

----------

Sekojiet atjaunināšana Java instrukcijas un tad post HijackThis log lai mēs varētu turpināt.
__________________

  #5  
Old Novembris 23, 2008, 21:19
New Member Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

Labi, vaļā no AmpliTube, bet bija problēmas ar diviem citiem.

Kad es nospiediet 'Change / Remove "ar" Ask Toolbar ", ziņojumu ar nosaukumu" RUNDLL "saka:

"Kļūda ielādējot C: \ PROGRA ~ 1 \ AskSBar \ bar \ 1.bin \ AskSBar.dll

Noteikti modulis netika atrasta. "

Un kad es nospiediet Change / Remove "ar" IncrediMail Xe ", ziņojumu ar nosaukumu" Wise Uninstall "saka:

"Nevar atvērt INSTALL.LOG dokumentiem."

Šeit ir nolaupīt Šis žurnāls:

Logfile of Trend Micro HijackThis v2.0.2
Scan saglabāts 3:02:36 gada 24/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running procesiem:
C: \ WINDOWS \ System32 \ Smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Windows Defender \ MsMpEng.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Windows \ Explorer.exe
C: \ WINDOWS \ system32 \ Spoolsv.exe
C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch.exe
C: \ WINDOWS \ system32 \ RUNDLL32.EXE
C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe
C: \ HP \ KBD \ KBD.EXE
C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe
C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe
C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe
C: \ Program Files \ Windows Defender \ MSASCui.exe
C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe
C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe
C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe
C: \ Program Files \ Canon \ CAL \ CALMAIN.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe
C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe
C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFCommander.exe
C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFPlatformCOMSvr.exe
C: \ WINDOWS \ system32 \ wuauclt.exe
C: \ WINDOWS \ ALCXMNTR.EXE
c: \ Windows \ System \ hpsysdrv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device

Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL =

http://ie.redirect.hp.com/svs/rdr?

Type = 3 & TP = iehome & locale = EN_AU & c = Q106 & bd = PRESARIO & P f = desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL =

http://ie.redirect.hp.com/svs/rdr?

Type = 3 & TP = iesearch & locale = EN_AU & c = Q106 & bd = PRESARIO & pf = desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, SearchAssistant =

http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar =

http://ie.redirect.hp.com/svs/rdr?

Type = 3 & TP = iesearch & locale = EN_AU & c = Q106 & bd = PRESARIO & pf = desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet

Uzstàdïjumus, ProxyOverride = *. vietējo
R3 - URLSearchHook: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no

fails)
R3 - URLSearchHook: (no name) - (0579B4B6-0.293-4d73-B02D-5EBB0BA0F0A2) --

C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL
R3 - URLSearchHook: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no

fails)
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) --

C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll
O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) --

C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll
O2 - BHO: Jautājiet Search Assistant BHO - (0579B4B1-0.293-4d73-B02D-5EBB0BA0F0A2) --

C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D -

784B7D6BE0B3) - C: \ Program Files \ Common

Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll (file missing)
O2 - BHO: StumbleUpon Launcher - (145B29F4-A56B-4b90-BBAC-45784EBEBBB7) --

C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O2 - BHO: RealPlayer Download and Record Plugin Internet Explorer --

(3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Program

Files \ Real \ RealPlayer \ rpbrowserrecordplugin.dll
O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43)

- C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6)

- C: \ Program Files \ Common Files \ Microsoft Shared \ Windows

Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8.333-CF10577473F7) --

c: \ Program Files \ Google \ googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4.638-B6FA-CE66B5AD205D)

- C: \ Program Files \ Google \ GoogleToolbarNotifier \ 4.1.805.4472 \ sw g.dll
O2 - BHO: TSToolbarBHO - (C1656CCA-D2EA-4A32-94AE-AE0B180E6449) - C: \ Program

Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74 -

9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) --

C: \ Program Files \ Java \ jre6 \ lib \ izvietot \ jqs \ ti \ jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - (E99421FB-68DD-40F0-B4AC-B7027CAE2F1A) --

C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll
O2 - BHO: XBTP02634 Class - (F97DA966-F09D-4cab-BF29-75A0026986EA) --

C: \ PROGRA ~ 1 \ BEARSH ~ 2 \ BEARSH ~ 2 \ MediaBar.dll (file missing)
O3 - Toolbar: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file)
O3 - Toolbar: EPSON Web-To-Page - (EE5D279F-081B-4.404-994D-C6B60AAEBA6D) --

C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll
O3 - Toolbar: StumbleUpon Toolbar - (5093EB4C-3E93-40AB-9.266-B607BA87BDC8) --

C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O3 - Toolbar: Transaction Protector - (E7620C98-FCCC-40E5-92EC-C7685D2E1E40) --

C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll
O3 - Toolbar: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file)
O3 - Toolbar: & Google - (2318C2B1-4.965-11d4-9B18-009027A5CD4F) - C: \ Program

Files \ Google \ googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) --

C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll
O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil

/ RemAdvDef / Migration32
O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe

/ SYNC
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32

\ IME \ TINTLGNT \ TINTSETP.EXE / SYNC
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE

/ IMEName
O4 - HKLM \ .. \ Run: [HPBootOp] "C: \ Program Files \ Hewlett-Packard \ HP Boot

Optimizētājs \ HPBootOp.exe "/ palaist
O4 - HKLM \ .. \ Run: [ISUSPM Startup] C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1

\ ISUSPM.exe-starta
O4 - HKLM \ .. \ Run: [ISUSScheduler] "C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1

\ issch.exe "-sākums
O4 - HKLM \ .. \ Run: [SSBkgdUpdate] C: \ Program Files \ Common Files \ ScanSoft

Shared \ SSBkgdUpdate \ SSBkgdupdate.exe-Embedding-boot
O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32

\ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [AudioCommander] C: \ Program Files \ Andrea

Elektronika \ AudioCommander \ AudioCommander.exe / paplāte
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE
O4 - HKLM \ .. \ Run: [BearFlix] "C: \ Program Files \ BEARFLIX \ BEARFLIX.EXE" / pauze
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6

\ bin \ jusched.exe "
O4 - HKLM \ .. \ Run: [googletalk] C: \ Program Files \ Google \ Google

Talk \ googletalk.exe / palaišana
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ HP \ HP Software

Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [UfSeAgnt.exe] "C: \ Program Files \ Trend Micro \ Internet

Security \ UfSeAgnt.exe "
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32

\ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows

Defender \ MSASCui.exe "-hide
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common

Files \ Real \ Update_OB \ realsched.exe "-osboot
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe" --

atboottime
O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common

Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader

8,0 \ Reader \ Reader_sl.exe "
O4 - HKCU \ .. \ Run: [μTorrent] "C: \ Program Files \ uTorrent \ UTORRENT.EXE"
O4 - HKCU \ .. \ Run: [InternodeUsage] C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Windows

Live \ Messenger \ MsnMsgr.Exe "/ background
O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search &

Iznīcināt \ TeaTimer.exe
O4 - HKCU \ .. \ Run: [Messenger (Yahoo!)] "C: \ Program Files \ Yahoo!

\ Messenger \ YahooMessenger.exe "-kluss
O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User

'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User

'NETWORK SERVICE')
Ø8 - ārpus konteksta menu item: & Search -? P = ZKxdm021YYAU
Ø8 - ārpus konteksta izvēlnes vienums: Pievienot Google Photos Screensa & ver --

res: / / C: \ WINDOWS \ system32 \ GPhotos.scr/200
Ø8 - ārpus konteksta menu item: E & ksportēt uz Microsoft Excel - res: / / C: \ PROGRA ~ 1

\ Micros ~ 4 \ Office11 \ EXCEL.EXE/3000
Ø8 - ārpus konteksta izvēlnes vienums: StumbleUpon Photoblog It! --

res: / / StumbleUponIEBar.dll / blogimage
Ø9 - Extra button: StumbleUpon - (75C9223A-409A-4795-A3CA-08DE6B075B4B) --

C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) --

C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ REFIEBAR.DLL
Ø9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) --

c: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL
Ø9 - Extra button: Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) --

C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett -

Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
Ø9 - Extra 'Tools' MENUITEM: Connection Help - (E2D4D26B-0.180-43a4-B05F -

462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett -

Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
Ø9 - Extra button: (no name) - (e2e2dd38-d088-4.134-82b7-f2ba38496583) --

C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20.001 - (e2e2dd38-d088-4.134-82b7 -

f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) --

C: \ Program Files \ Messenger \ msmsgs.exe
Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E -

00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø15 - Trusted Zona: *. stumbleupon.com
Ø16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan

Aģents 6.6) --

http://housecall65.trendmicro.com/ho...86/win32/activ

EX / hcImpl.cab
Ø16 - DPF: (30.528.230-99f7-4bb4-88d8-fa1d4f56a2ab) (INSTALLATION SUPPORT) --

C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll
Ø16 - DPF: (F6676623-8BBD-479C-A51B-05868728708C) (DigitalDM) --

http://www.digitaldm.com/Plug-in/myebk/c/DIGITALDM2.cab
Ø20 - Winlogon Paziņot:! SASWinLogon - C: \ Program

Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common

Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program

Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc --

C: \ Program Files \ Canon \ CAL \ CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd --

C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet

Publisher \ FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program

Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1.050 \ Intel

32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program

Files \ iPod \ bin \ iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun

Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
O23 - Service: LightScribeService Direct Disc Marķēšanas Service

(LightScribeService) - Hewlett-Packard Company - C: \ Program Files \ Common

Files \ LightScribe \ LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation --

C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro

Inc - C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe
O23 - Service: Trend Micro Neatļauta pārmaiņu novēršanas dienests (TMBMServer)

- Trend Micro Inc - C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc --

C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc --

C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe

--
End of failu - 13.563 bytes
  #6  
Old Novembris 23, 2008, 22:43
Moderator Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

Labi, mēs galā ar divām programmām, ka jūs nevar atinstalēt, bet vispirms man ir nepieciešams palaist jaunu HijackThis skenēšanu. Tikai šoreiz pēc log pārādās, pirms kopēšanas tas, kas aug Notepad noklikšķiniet uz Formatēt un pēc tam noklikšķiniet uz Word wrap. Tad nokopējiet un ielīmējiet rezultātus.
__________________

  #7  
Old Novembris 23, 2008, 22:52
New Member Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

Ceru, ka šī ir tiesības:

Logfile of Trend Micro HijackThis v2.0.2
Scan saglabāts 4:51:04 gada 24/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running procesiem:
C: \ WINDOWS \ System32 \ Smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Windows Defender \ MsMpEng.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Windows \ Explorer.exe
C: \ WINDOWS \ system32 \ Spoolsv.exe
C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch.exe
C: \ WINDOWS \ system32 \ RUNDLL32.EXE
C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe
C: \ HP \ KBD \ KBD.EXE
C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe
C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe
C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe
C: \ Program Files \ Windows Defender \ MSASCui.exe
C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe
C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe
C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe
C: \ Program Files \ Canon \ CAL \ CALMAIN.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe
C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe
C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFCommander.exe
C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFPlatformCOMSvr.exe
C: \ WINDOWS \ system32 \ wuauclt.exe
C: \ WINDOWS \ ALCXMNTR.EXE
c: \ Windows \ System \ hpsysdrv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ PROGRA ~ 1 \ INCRED ~ 1 \ UNWISE.EXE
C: \ Program Files \ Real \ RealPlayer \ RealPlay.exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet iestatījumi ProxyOverride = *. vietējo
R3 - URLSearchHook: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file)
R3 - URLSearchHook: (no name) - (0579B4B6-0.293-4d73-B02D-5EBB0BA0F0A2) - C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL
R3 - URLSearchHook: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll
O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll
O2 - BHO: Jautājiet Search Assistant BHO - (0579B4B1-0.293-4d73-B02D-5EBB0BA0F0A2) - C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll (file missing)
O2 - BHO: StumbleUpon Launcher - (145B29F4-A56B-4b90-BBAC-45784EBEBBB7) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O2 - BHO: RealPlayer Download and Record Plugin Internet Explorer - (3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Program Files \ Real \ RealPlayer \ rpbrowserrecordplugin.dll
O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8.333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4.638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 4.1.805.4472 \ sw g.dll
O2 - BHO: TSToolbarBHO - (C1656CCA-D2EA-4A32-94AE-AE0B180E6449) - C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ izvietot \ jqs \ ti \ jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - (E99421FB-68DD-40F0-B4AC-B7027CAE2F1A) - C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll
O2 - BHO: XBTP02634 Class - (F97DA966-F09D-4cab-BF29-75A0026986EA) - C: \ PROGRA ~ 1 \ BEARSH ~ 2 \ BEARSH ~ 2 \ MediaBar.dll (file missing)
O3 - Toolbar: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file)
O3 - Toolbar: EPSON Web-To-Page - (EE5D279F-081B-4.404-994D-C6B60AAEBA6D) - C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll
O3 - Toolbar: StumbleUpon Toolbar - (5093EB4C-3E93-40AB-9.266-B607BA87BDC8) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O3 - Toolbar: Transaction Protector - (E7620C98-FCCC-40E5-92EC-C7685D2E1E40) - C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll
O3 - Toolbar: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file)
O3 - Toolbar: & Google - (2318C2B1-4.965-11d4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll
O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32
O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [HPBootOp] "C: \ Program Files \ Hewlett-Packard \ HP Boot Optimizer \ HPBootOp.exe" / palaist
O4 - HKLM \ .. \ Run: [ISUSPM Startup] C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ ISUSPM.exe-starta
O4 - HKLM \ .. \ Run: [ISUSScheduler] "C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch. Exe"-sākums
O4 - HKLM \ .. \ Run: [SSBkgdUpdate] C: \ Program Files \ Common Files \ ScanSoft Shared \ SSBkgdUpdate \ SSBkgdupdate.exe-Embedding-boot
O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [AudioCommander] C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe / paplāte
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE
O4 - HKLM \ .. \ Run: [BearFlix] "C: \ Program Files \ BEARFLIX \ BEARFLIX.EXE" / pauze
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [googletalk] C: \ Program Files \ Google \ Google Talk \ googletalk.exe / palaišana
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [UfSeAgnt.exe] "C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe"
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
O4 - HKCU \ .. \ Run: [μTorrent] "C: \ Program Files \ uTorrent \ UTORRENT.EXE"
O4 - HKCU \ .. \ Run: [InternodeUsage] C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe" / background
O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
O4 - HKCU \ .. \ Run: [Messenger (Yahoo!)] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-kluss
O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'NETWORK SERVICE')
Ø8 - ārpus konteksta menu item: & Search -? P = ZKxdm021YYAU
Ø8 - ārpus konteksta izvēlnes vienums: Pievienot Google Photos Screensa & ver - res: / / C: \ WINDOWS \ system32 \ GPhotos.scr/200
Ø8 - ārpus konteksta menu item: E & ksportēt uz Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ EXCEL.EXE/3000
Ø8 - ārpus konteksta izvēlnes vienums: StumbleUpon Photoblog It! - Res: / / StumbleUponIEBar.dll / blogimage
Ø9 - Extra button: StumbleUpon - (75C9223A-409A-4795-A3CA-08DE6B075B4B) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ REFIEBAR.DLL
Ø9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL
Ø9 - Extra button: Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
Ø9 - Extra 'Tools' MENUITEM: Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = ASV \ IEButton \ support.htm
Ø9 - Extra button: (no name) - (e2e2dd38-d088-4.134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20.001 - (e2e2dd38-d088-4.134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø15 - Trusted Zona: *. stumbleupon.com
Ø16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Agent 6.6) -- http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
Ø16 - DPF: (30.528.230-99f7-4bb4-88d8-fa1d4f56a2ab) (INSTALLATION SUPPORT) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll
Ø16 - DPF: (F6676623-8BBD-479C-A51B-05868728708C) (DigitalDM) -- http://www.digitaldm.com/Plug-in/myebk/c/DIGITALDM2.cab
Ø20 - Winlogon Paziņot:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc - C: \ Program Files \ Canon \ CAL \ CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1.050 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
O23 - Service: LightScribeService Direct Disc Marķēšanas dienests (LightScribeService) - Hewlett-Packard Company - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe
O23 - Service: Trend Micro Neatļauta pārmaiņu novēršanas dienests (TMBMServer) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc - C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe

--
End of failu - 13.643 bytes
  #8  
Old Novembris 23, 2008, 23:23
Moderator Group
 
Default Pastāvīgs Error message - M3PLUGIN.DLL

Tas ir sava veida garš saraksts, bet tas ir tikai dažas lietas, kas tiešām, un tas ir nepieciešams. Jūsu dators tiks thank you.

Disable Spybot's TeaTimer


Kaut TeaTimer ir lielisks līdzeklis, lai novērstu spiegprogrammatūras, tā var arī ietekmēt ar HijackThis fixes. Lūdzu atslēgt TeaTimer tagad, kamēr ir tīrs.

1. Right click Spybot in System Tray (izskatās kalendārs ar piekaramo atslēgu simbols). Izvēlēties Iziet Spybot S & D Resident
2. Skriet Spybot S & D
3. Iet uz Mode menuUn pārliecinieties, Advanced Mode ir izvēlēts.
4. Uz kreisajā pusē, izvēlieties Rīki > Resident
neatķeksējiet Resident TeaTimer un OK jebkurš ātru un Restart datoru.

Piezīme:
Ja TeaTimer dod jums brīdinājums tam, ka dažas izmaiņas tika veiktas, lai šajā vietā bloķējot to.

Ja TeaTimer nevarēs izslēgt, tad atinstalēt Spybot, līdz mēs veikta tīrīšana.

Atstāt TeaTimer līdz brīdim, kad mums ir pilnībā veikta tīrīšana.

----------

Disable Windows Defender

Mums ir nepieciešams, lai izslēgtu Windows Defender reāllaika aizsardzību, jo tas var traucēt nosaka, ka mums ir nepieciešams veikt.
  • Atvērt Windows Defender
  • Noklikšķiniet uz Rīki, General Settings
  • Ritiniet uz leju un noņemiet atzīmi Ieslēgt reāllaika aizsardzību (ieteicams)
  • Kad esat noņemiet atzīmi, noklikšķiniet uz Glābt pogu un aizveriet Windows Defender.
Pēc tam, kad visi labojumi ir pilnīgi tas ir ļoti svarīgi, lai Jūs varētu reāllaika aizsardzību vēlreiz.

----------

Uninstall spyware

Lūdzu atinstalēt, kamēr mēs tīrīšana. Ja jūs izvēlaties to atlikt atpakaļ, kad mēs esam darījuši, ir atkarīgs no jums, bet tas tikai rada problēmas tagad.

Lūdzu, dodieties uz Add / Remove Programs un atinstalēt: (ja ir)
  • BearFlix
  • BearShare vai BearShare MediaBar
----------

Lielākā daļa no tā ir adware / spyware, bet daži ir tikai nevajadzīga jaunizveidotiem uzņēmumiem. Programmas netiks veikts jums vienkārši nepieciešams, lai sāktu to manuāli, ja vēlaties tos izmantot. Jūsu dators darbosies labāk bez tiem darbojas visu laiku arī.

Open HijackThis un izvēlieties Vai sistēmas skenēšanu tikai.

Vieta atzīme blakus šādiem ierakstiem: (ja ir)
  • R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
  • R3 - URLSearchHook: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file)
  • R3 - URLSearchHook: (no name) - (0579B4B6-0.293-4d73-B02D-5EBB0BA0F0A2) - C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL
  • R3 - URLSearchHook: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file)
  • O2 - BHO: Jautājiet Search Assistant BHO - (0579B4B1-0.293-4d73-B02D-5EBB0BA0F0A2) - C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL
  • O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
  • O2 - BHO: XBTP02634 Class - (F97DA966-F09D-4cab-BF29-75A0026986EA) - C: \ PROGRA ~ 1 \ BEARSH ~ 2 \ BEARSH ~ 2 \ MediaBar.dll (file missing)
  • O3 - Toolbar: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file)
  • O3 - Toolbar: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file)
  • O4 - HKLM \ .. \ Run: [ISUSPM Startup] C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ ISUSPM.exe-starta
  • O4 - HKLM \ .. \ Run: [ISUSScheduler] "C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch. Exe"-sākums
  • O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot
  • O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
  • O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe
  • O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
  • O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
  • Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
  • Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
  • Ø15 - Trusted Zona: *. stumbleupon.com <- Tas nav nepieciešams Trusted Zone.
Svarīgi: Aizveriet visus logus, izņemot HijackThis un pēc tam noklikšķiniet uz Fix pārbaudīja.

Iziet HijackThis.

----------

Dzēst AskSBar mape

C: \ Program Files \AskSBar

----------

Piezīme: Instrukcijas turpmāk tika izveidota speciāli šim lietotājam. Ja Jums nav šī lietotāja, DO NOT ievērojiet šos norādījumus, jo tie varētu kaitēt jūsu sistēmas darbības principus

Doties uz Start> Run un tips notepad.exe noklikšķiniet uz OK

Nokopējiet un ielīmējiet tālāk vērā Notepad un saglabāt kā fixme.reg līdz Jūsu Desktop

Kods:
REGEDIT4 [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run] "ISUSPM Startup" =- "ISUSScheduler" =- "TkBellExe" =- "QuickTime Task" =- "AppleSyncNotifier" =- "iTunesHelper" =- "Adobe Reader Speed Launcher "=-
Atrodiet fixme.reg uz darbvirsmas un veiciet uz tā dubultklikšķi. Atbilde kad tiek piedāvāts apvienot ar reģistru.

Pārliecinieties, ka jūs man pateikt, ja saņemat panākumus ziņu par pieskaitot iepriekš, lai reģistrā. Ja Jums nav iegūt panākumus ziņu, tā nestrādāja.

Dzēst fixme.reg no darbvirsmas.

----------

Lejupielādēt Disable / Remove Windows Messenger uz Darbvirsma, lai novērstu Windows Messenger.

Nejauciet Windows Messenger ar MSN Messenger jo tie nav vienādi. Windows Messenger ir bieži cēlonis logus.

Atarhivējiet failu uz darbvirsmas. Open MessengerDisable.exe un izvēlies apakšējā kaste -- Atinstalēt Windows Messenger un noklikšķiniet uz Lietot.

Iziet no MessengerDisable tad izdzēst divus failus, kas tika likts uz darbvirsmas.

Run CCleaner un restartējiet datoru. <- Nozīmīgs solis.

----------

Download ComboFix © by subs no vienas no saitēm. Pārliecinieties top saglabājiet to Desktop.

Link # 1
Link # 2

** Piezīme: Ir svarīgi, ka tā ir saglabāta tieši jūsu Desktop

Aizveriet visas atvērtās interneta pārlūkprogrammas. (Firefox, Internet Explorer uc) pirms uzsākt ComboFix.

Laiku sakropļot jūsu antivīruss, Un jebkuru antispyware reāllaika aizsardzību pirms veic skenēšanu. Click šo saiti redzēt sarakstu drošības programmas, kas ir invalīdi un to, kā pārtraukt to darbību.

Piezīme: TrendMicro dažkārt ir grūti izslēgt. Ja tas tā ir gadījumā ieskriet ComboFix vienalga un atļaut jebkādus brīdinājumus TrendMicro dod palaist.

Dubultklikšķi combofix.exe un sekojiet norādījumiem.

Windows XP Systems instalēt Recovery Console:

- Ja lietojat Windows XP un nav jau Recovery Console uzstādītas, lūdzu, pārliecinieties, jūsu interneta savienojums ir aktīvs (ja iespējams) un noklikšķiniet uz .
- Ja kaut kādu iemeslu dēļ interneta nedarbojas klikšķi .
-- Ja nelietojat Windows XP, jums netiks piedāvāts.
- Kad mudināts piekrist EULA klikšķi OK.
- Pieņemt Microsoft EULA (Click ).
- Ja Jums ir teikts, ka RC ir uzstādīts pareizi klikšķi turpināt meklētu ļaunprātīgu programmatūru.

Kad pabeigts ComboFix ražos log for you.
Post ComboFix log un jaunu HijackThis log Jūsu nākamo atbildi.

Svarīgi: Nav mouseclick ComboFix loga kamēr tas darbojas. Tas var izraisīt to apstāsies.

Atcerieties, ka jauna aktivizētu jūsu antivīrusu un antispyware aizsardzību, ja ComboFix ir pabeigta.

----------

Arī ļaujiet man jāzina par jebkādām problēmām esat pamanījis ar datoru tagad.

Es, iespējams, nebūs atgriezties, lai šo darbību, līdz dažkārt rīt, tas kļūst vēls šeit. Neuztraucieties, mēs sāksim to gatavo un, cerams, ka Jūsu datoram būs darbināt, piemēram, jaunas!
__________________

Reply

Register

Bookmarks

Similar Threads
Pavediens Thread Starter Forums Replies Last Post
MSN Error Message 80040154 jwarrilow89 General Software Čats 5 6 oktobris 2009 15:52
Kļūda vai paziņojuma ziņojums Help! gmckinney39 Windows Operating Systems 3 12 maijs 2009 18:02
Error Message sashikumaran Windows Operating Systems 1 9 novembris 2008 13:34
Error Message megabaits Multimedia & Kodekus 6 8 marts 2008 18:14
Kļūdas ziņojums legweak General Software Čats 1 25 oktobris 2007 09:54
Thread Tools




Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright © 2006 - 2009 Computer Sulas.

Powered by vBulletin ® Copyright © 2000 - 2009 Jelsoft Enterprises Ltd SEO līdz 2009 vBSEO ©, Crawlability, Inc