![]() |
|
#1
| |||
| |||
| Čau Ir kļūdas ziņojumu, kas ir bijis popping up i boot katru reizi manu PC jau kādu laiku. Lai gan tas nav īsti bothered me (i vienkārši spiediet 'OK' un tā pazūd), i domāju, ka tas ir iemesls, kāpēc es esmu, kam problēmas ar degšanas sīkumi uz DVD. Es aprakstīt ziņu. Tas ir tikai nedaudz logs ekrāna centrā ar nosaukumu "RUNDLL". Faktiskais message says: "Kļūda ielādējot: C: \ PROGRA ~ 1 \ bar \ 1.bin \ M3PLUGIN.DLL Noteikti modulis netika atrasta. " un tad tā vienkārši ļauj man noklikšķiniet uz 'OK'. Jebkura ideja kas tas ir un kā to salabot? oh yeah, man ir Windows XP Home Edition versija 2.002 Service Pack 2. Pateicība, john |
|
#2
| ||||||||||||
| ||||||||||||
| M3PLUGIN.DLL ir daļa no vīrusu un / vai spiegprogrammatūru, kas ir pa kreisi uz jūsu sistēmas.
__________________
Izpildiet šo guide un pēc log failiem, tad viens no malware komanda palīdzēs jums pilnībā sakopta. http://www.computer-juice.com/forums...-posting-7476/ * Pārcelts pavedienu Virus / Spyware forumā. Mana sistēma: Hybr! D
|
|
#3
| |||
| |||
| čau Es esam pabeiguši soļus 1-6 un kļūdas ziņojums par sākuma ir faktiski izzudusi. I'll post trīs žurnālus katram gadījumam. Šeit ir programmas, es nebiju pārliecināts, ka ar "Add Remove Programs" list: AC3 Filter AmpliTube 1,1 LE Ask rīkjoslu Bonjour Saderības pakotne Office 2007 sistēmas Customer Experience Enhancement DNS Enhanced Multimedia Keyboard Solution High Definition Audio Driver Package - KB888111 HP Boot optimizētājs IncrediMail Xe LADSPA_plugins-win-0.4.15 Microsoft. NET Framework 1.1 Microsoft. NET Framework 1.1 Hotfix (KB928366) Microsoft. NET Framework 2.0 Service Pack 1 Microsoft Silverlight Microsoft Visual C + + 2005 Redistributable (2 no šiem) MobileMe Control Panel MSXML 4,0 SP2 (KB925672) MSXML 4,0 SP2 (KB927978) MSXML 4,0 SP2 (KB936181) MSXML 4,0 SP2 (KB954430) PIF DIZAINERS Prime95 PS2 Python 2,2 pywin32 paplašinājumi (Build 203) Python 2.2.3 Safari Windows Installer 3.1 (KB893803) Šeit ir SUPERAntiSpyware žurnāls: SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 11/22/2008 at 09:46 Application Version: 4.22.1014 Core Noteikumi Database Version: 3648 Trace Noteikumi Database Version: 1631 Scan type: Complete Scan Kopā Scan Time: 02:30:48 Atmiņas vienības skenēts: 568 Memory draudiem detected: 0 Reģistra vienības skenēts: 7.140 Reģistrs draudiem detected: 79 File preces skenēts: 198.486 File draudiem detected: 1 BearShare File Sharing Client [BearShare] C: \ Program Files \ BEARSHARE \ BEARSHARE.EXE C: \ Program Files \ BEARSHARE \ BEARSHARE.EXE Adware.Vundo Variant HKLM \ Software \ Classes \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ InprocServer32 HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ InprocServer32 # ThreadingModel HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ ProgId HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ Programmable HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ TypeLib HKCR \ CLSID \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) \ VersionIndependentProgID HKCR \ adzgalore.optimizer.1 HKCR \ adzgalore.optimizer.1 \ CLSID HKCR \ adzgalore.optimizer HKCR \ adzgalore.optimizer \ CLSID HKCR \ adzgalore.optimizer \ CurVer HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1,0 HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ 0 HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ 0 \ Win32 HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ KAROGI HKCR \ TypeLib \ (49BCC77A-79EB-4D50-A6DB-04E8202921C4) \ 1.0 \ HELPDIR HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Exp lorer \ Browser Helper Objects \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (994B5FB4-0103-44A6-B6B3-C73572B362BC) HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (BCA95E31-1FBF-4F84-8F23-1BA653007A1E) HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ ProxyStubClsid HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ ProxyStubClsid32 HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ TypeLib HKCR \ Interface \ (BD219B90-626B-40F4-BFDD-420240DFCA2C) \ TypeLib # Version Adware.MyWebSearch HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (00A6FAF1-072E-44CF-8.957-5838F569A31D) HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ statistika \ (07B18EA9-A523-4961-B6BB-170DE4475CCA) Adware.MyWebSearch / FunWebProducts HKU \ S-1-5-21-2034642920-3615235737-3946141644-1008 \ SOFTWARE \ FunWebProducts HKCR \ CLSID \ (9AFB8248-617F-460d-9.366-D71CDEDA3179) HKCR \ CLSID \ (9AFB8248-617F-460d-9.366-D71CDEDA3179) \ TreatAs HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1,0 HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ 0 HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ 0 \ Win32 HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ KAROGI HKCR \ TypeLib \ (D518921A-4A03-425E-9873-B9A71756821E) \ 1.0 \ HELPDIR HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ ProxyStubClsid HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ ProxyStubClsid32 HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ TypeLib HKCR \ Interface \ (CF54BE1C-9359-4395-8533-1657CF209CFE) \ TypeLib # Version HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE # NextInstance HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # Service HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # Legacy HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # ConfigFlags HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # Class HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # ClassGUID HKLM \ SYSTEM \ CurrentControlSet \ Enum \ root \ LEGACY_MYW EBSEARCHSERVICE \ 0.000 # DeviceDesc HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # Type HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # sākumu HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # ErrorControl HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # ImagePath HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # DisplayName HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service # ObjectName HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Security HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Security # Security HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum # 0 HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum # Count HKLM \ SYSTEM \ CurrentControlSet \ Services \ MyWebSearch Service \ Enum # NextInstance HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run # MyWebSearch Plugin [rundll32 C: \ PROGRA ~ 1 \ MYWEBS ~ 1 \ bar \ 1.bin \ M3PLUGIN.DLL, UPF] Trojan.Unclassified / MSFox HKLM \ SOFTWARE \ Mozilla \ MSFox HKLM \ SOFTWARE \ Mozilla \ MSFox # Str4 HKLM \ SOFTWARE \ Mozilla \ MSFox # Str5 HKLM \ SOFTWARE \ Mozilla \ MSFox # Str9 HKLM \ SOFTWARE \ Mozilla \ MSFox # Str6 HKLM \ SOFTWARE \ Mozilla \ MSFox # STR7 HKLM \ SOFTWARE \ Mozilla \ MSFox # Str8 HKLM \ SOFTWARE \ Mozilla \ MSFox # Str1 HKLM \ SOFTWARE \ Mozilla \ MSFox # Str0 HKLM \ SOFTWARE \ Mozilla \ MSFox # Int2 HKLM \ SOFTWARE \ Mozilla \ MSFox # Int3 un šeit ir Malwarebyte Krāpšanas Maware žurnāls: Malwarebytes "Anti-Malware 1,30 Database version: 1417 Windows 5.1.2600 Service Pack 2 23/11/2008 3:41:52 mbam-log-2008-11-23 (15-41-52). txt Scan type: Quick Scan Objekti skenēts: 55.759 Pagājušo laiku: 7 minūte (s), 57 second (s) Memory Processes Inficētie: 0 Memory Modules Inficētie: 3 Registry Keys Inficētie: 43 Reģistra vērtības Inficētie: 3 Registry Data Items Infected: 0 Mapes Inficētie: 0 Faili Inficētie: 5 Atmiņas procesi Inficētie: (No ļaunprātīgs preces konstatētas) Memory Modules Inficētie: C: \ Program Files \ AskSBar \ bar \ 1.bin \ ASKSBAR.DLL (Adware.AskSBAR) -> Delete par reboot. C: \ Program Files \ Mozilla Firefox \ plugins \ NPAskSBr.dll (Trojan.Agent) -> Delete par reboot. C: \ Program Files \ AskSBar \ bar \ 1.bin \ A2PLUGIN.DLL (Adware.MyWebSearch) -> Delete par reboot. Registry Keys Inficētie: HKEY_CLASSES_ROOT \ TypeLib \ (f0d4b230-da4b-4daf-81e4, dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Interface \ (f0d4b23a-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Interface \ (f0d4b23c-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ CLSID \ (b15fd82e-85bc-430d-90cb-65db1b030510) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ CLSID \ (f0d4b231-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (f0d4b231-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (f0d4b231-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ CLSID \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ CLSID \ (f0d4b23b-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (f0d4b23b-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ xml.xml (Trojan.FakeAlert) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ xml.xml.1 (Trojan.FakeAlert) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Interface \ (1601d447-7.424-4.866-8dcc-acf98a2a41e1) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Interface \ (1e404d48-670a-4085-a6a0-d195793ddd33) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Interface \ (9f593aac-ca4c-4a41-a7ff-a00812192d61) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Interface \ (ceb9c60d-f0ad-4b73-a3ab-4fc822e38d66) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ CLSID \ (1e404d48-670a-4085-a6a0-d195793ddd33) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Typelib \ (749ec66f-a838-4b38-b8e5-e65d905fff74) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Typelib \ (c3c0ec2c-2c1c-495c-9ad0-1f0ef833d7b5) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CLASSES_ROOT \ Typelib \ (9233c3c0-1.472-4.091-a505-5580a23bb4ac) (Trojan.FakeAlert) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (055fd26d-3a88-4e15-963d-dc8493744b1d) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (9506910a-0f94-4ea1-b567-7070428b8b2b) (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (07b18eab-a523-4961-b6bb-170de4475cca) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (25560540-9571-4d7b-9.389-0f166788785a) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (3dc201fb-e9c9-499c-a11f-23c360d7c3f8) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (63d0ed2c-b45b-4.458-8b3b-60c69bbbd83c) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (9ff05104-b030-46fc-94b8-81276e4e27df) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ statistika \ (1d4db7d2-6ec9-47a3-bd87-1e41684e07bb) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (25560540-9571-4d7b-9.389-0f166788785a) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (3dc201fb-e9c9-499c-a11f-23c360d7c3f8) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (63d0ed2c-b45b-4.458-8b3b-60c69bbbd83c) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (98d9753d-d73b-42d5-8c85-4469cda897ab) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Ext \ PreApproved \ (9ff05104-b030-46fc-94b8-81276e4e27df) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (59c7fc09-1c83-4648-b3e6-003d2bbc7481) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (68af847f-6e91-45dd-9b68-d6a12c30e5d7) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (9170b96c-28d4-4.626-8.358-27e6caeef907) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (d1a71fa0-ff48-48dd-9b6d-7a13a3e42127) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (ddb1968e-ead6-40fd-8dae-ff14757f60c7) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ ElevationPolicy \ (f138d901-86f0-4.383-99b6-9cdd406036da) (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ adzgalore (Adware.Agent) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Low Rights \ RunDll32Policy \ f3ScrCtr.dll (Adware.MyWay) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Multimedia \ W MPlayer \ Schemes \ f3pss (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. Reģistra vērtības Inficētie: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \ WebBrowser \ (f0d4b239-da4b-4daf-81e4-dfee4931a4aa) (Adware.AskSBAR) -> Karantīnā ievietotie un svītrots veiksmīgi. HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run \ MyWebSearch Email Plugin (Adware.MyWebSearch) -> Karantīnā ievietotie un svītrots veiksmīgi. Registry Data Items Infected: (No ļaunprātīgs preces konstatētas) Mapes Inficētie: (No ļaunprātīgs preces konstatētas) Faili Inficētie: C: \ Program Files \ AskSBar \ bar \ 1.bin \ ASKSBAR.DLL (Adware.AskSBAR) -> Delete par reboot. C: \ Program Files \ Mozilla Firefox \ plugins \ NPAskSBr.dll (Trojan.Agent) -> Delete par reboot. C: \ Program Files \ AskSBar \ bar \ 1.bin \ A2PLUGIN.DLL (Adware.MyWebSearch) -> Delete par reboot. C: \ WINDOWS \ system32 \ WhoisCL.exe (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. C: \ WINDOWS \ system32 \ mysidesearch_sidebar_uninstall. Exe (Adware.BHO) -> Karantīnā ievietotie un svītrots veiksmīgi. daudz problēmu, es redzu ... Paldies par turpmāku palīdzību |
|
#4
| |||
| |||
| Es neesmu pārliecināts, ja vēlaties saglabāt šo vai nē. Ja tas ir kaut kas ko jūs neizmantojat es atinstalēt. Nav nepieciešams, kam tā aizņem vietu, ja tā nav izmantota. AmpliTube 1,1 LE -- http://www.sonomawireworks.com/guide...LE_for_Windows Atinstalēšana: Ask rīkjoslu <- Tas ir adware, ir noņemts ar skeneri, bet pārliecinieties. IncrediMail Xe <- Ietver Adware, atinstalēt, ja jūs neizmantojat IncrediMail. ---------- Sekojiet atjaunināšana Java instrukcijas un tad post HijackThis log lai mēs varētu turpināt. |
|
#5
| |||
| |||
| Labi, vaļā no AmpliTube, bet bija problēmas ar diviem citiem. Kad es nospiediet 'Change / Remove "ar" Ask Toolbar ", ziņojumu ar nosaukumu" RUNDLL "saka: "Kļūda ielādējot C: \ PROGRA ~ 1 \ AskSBar \ bar \ 1.bin \ AskSBar.dll Noteikti modulis netika atrasta. " Un kad es nospiediet Change / Remove "ar" IncrediMail Xe ", ziņojumu ar nosaukumu" Wise Uninstall "saka: "Nevar atvērt INSTALL.LOG dokumentiem." Šeit ir nolaupīt Šis žurnāls: Logfile of Trend Micro HijackThis v2.0.2 Scan saglabāts 3:02:36 gada 24/11/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running procesiem: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Windows \ Explorer.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch.exe C: \ WINDOWS \ system32 \ RUNDLL32.EXE C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe C: \ Program Files \ Canon \ CAL \ CALMAIN.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFCommander.exe C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFPlatformCOMSvr.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ WINDOWS \ ALCXMNTR.EXE c: \ Windows \ System \ hpsysdrv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? Type = 3 & TP = iehome & locale = EN_AU & c = Q106 & bd = PRESARIO & P f = desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr? Type = 3 & TP = iesearch & locale = EN_AU & c = Q106 & bd = PRESARIO & pf = desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr? Type = 3 & TP = iesearch & locale = EN_AU & c = Q106 & bd = PRESARIO & pf = desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Uzstàdïjumus, ProxyOverride = *. vietējo R3 - URLSearchHook: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no fails) R3 - URLSearchHook: (no name) - (0579B4B6-0.293-4d73-B02D-5EBB0BA0F0A2) -- C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL R3 - URLSearchHook: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no fails) R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) -- C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) -- C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll O2 - BHO: Jautājiet Search Assistant BHO - (0579B4B1-0.293-4d73-B02D-5EBB0BA0F0A2) -- C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D - 784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll (file missing) O2 - BHO: StumbleUpon Launcher - (145B29F4-A56B-4b90-BBAC-45784EBEBBB7) -- C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll O2 - BHO: RealPlayer Download and Record Plugin Internet Explorer -- (3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Program Files \ Real \ RealPlayer \ rpbrowserrecordplugin.dll O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8.333-CF10577473F7) -- c: \ Program Files \ Google \ googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4.638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 4.1.805.4472 \ sw g.dll O2 - BHO: TSToolbarBHO - (C1656CCA-D2EA-4A32-94AE-AE0B180E6449) - C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74 - 9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) -- C: \ Program Files \ Java \ jre6 \ lib \ izvietot \ jqs \ ti \ jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - (E99421FB-68DD-40F0-B4AC-B7027CAE2F1A) -- C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll O2 - BHO: XBTP02634 Class - (F97DA966-F09D-4cab-BF29-75A0026986EA) -- C: \ PROGRA ~ 1 \ BEARSH ~ 2 \ BEARSH ~ 2 \ MediaBar.dll (file missing) O3 - Toolbar: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file) O3 - Toolbar: EPSON Web-To-Page - (EE5D279F-081B-4.404-994D-C6B60AAEBA6D) -- C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll O3 - Toolbar: StumbleUpon Toolbar - (5093EB4C-3E93-40AB-9.266-B607BA87BDC8) -- C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll O3 - Toolbar: Transaction Protector - (E7620C98-FCCC-40E5-92EC-C7685D2E1E40) -- C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll O3 - Toolbar: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file) O3 - Toolbar: & Google - (2318C2B1-4.965-11d4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) -- C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [HPBootOp] "C: \ Program Files \ Hewlett-Packard \ HP Boot Optimizētājs \ HPBootOp.exe "/ palaist O4 - HKLM \ .. \ Run: [ISUSPM Startup] C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ ISUSPM.exe-starta O4 - HKLM \ .. \ Run: [ISUSScheduler] "C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch.exe "-sākums O4 - HKLM \ .. \ Run: [SSBkgdUpdate] C: \ Program Files \ Common Files \ ScanSoft Shared \ SSBkgdUpdate \ SSBkgdupdate.exe-Embedding-boot O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [AudioCommander] C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe / paplāte O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [BearFlix] "C: \ Program Files \ BEARFLIX \ BEARFLIX.EXE" / pauze O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe " O4 - HKLM \ .. \ Run: [googletalk] C: \ Program Files \ Google \ Google Talk \ googletalk.exe / palaišana O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [UfSeAgnt.exe] "C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe " O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe "-hide O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe "-osboot O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe" -- atboottime O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe " O4 - HKCU \ .. \ Run: [μTorrent] "C: \ Program Files \ uTorrent \ UTORRENT.EXE" O4 - HKCU \ .. \ Run: [InternodeUsage] C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe "/ background O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Iznīcināt \ TeaTimer.exe O4 - HKCU \ .. \ Run: [Messenger (Yahoo!)] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe "-kluss O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'NETWORK SERVICE') Ø8 - ārpus konteksta menu item: & Search -? P = ZKxdm021YYAU Ø8 - ārpus konteksta izvēlnes vienums: Pievienot Google Photos Screensa & ver -- res: / / C: \ WINDOWS \ system32 \ GPhotos.scr/200 Ø8 - ārpus konteksta menu item: E & ksportēt uz Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ EXCEL.EXE/3000 Ø8 - ārpus konteksta izvēlnes vienums: StumbleUpon Photoblog It! -- res: / / StumbleUponIEBar.dll / blogimage Ø9 - Extra button: StumbleUpon - (75C9223A-409A-4795-A3CA-08DE6B075B4B) -- C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) -- C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ REFIEBAR.DLL Ø9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) -- c: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL Ø9 - Extra button: Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) -- C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett - Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm Ø9 - Extra 'Tools' MENUITEM: Connection Help - (E2D4D26B-0.180-43a4-B05F - 462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett - Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm Ø9 - Extra button: (no name) - (e2e2dd38-d088-4.134-82b7-f2ba38496583) -- C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20.001 - (e2e2dd38-d088-4.134-82b7 - f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) -- C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E - 00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø15 - Trusted Zona: *. stumbleupon.com Ø16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Aģents 6.6) -- http://housecall65.trendmicro.com/ho...86/win32/activ EX / hcImpl.cab Ø16 - DPF: (30.528.230-99f7-4bb4-88d8-fa1d4f56a2ab) (INSTALLATION SUPPORT) -- C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll Ø16 - DPF: (F6676623-8BBD-479C-A51B-05868728708C) (DigitalDM) -- http://www.digitaldm.com/Plug-in/myebk/c/DIGITALDM2.cab Ø20 - Winlogon Paziņot:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc -- C: \ Program Files \ Canon \ CAL \ CALMAIN.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd -- C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1.050 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: LightScribeService Direct Disc Marķēšanas Service (LightScribeService) - Hewlett-Packard Company - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -- C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe O23 - Service: Trend Micro Neatļauta pārmaiņu novēršanas dienests (TMBMServer) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc -- C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc -- C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe -- End of failu - 13.563 bytes |
|
#6
| |||
| |||
| Labi, mēs galā ar divām programmām, ka jūs nevar atinstalēt, bet vispirms man ir nepieciešams palaist jaunu HijackThis skenēšanu. Tikai šoreiz pēc log pārādās, pirms kopēšanas tas, kas aug Notepad noklikšķiniet uz Formatēt un pēc tam noklikšķiniet uz Word wrap. Tad nokopējiet un ielīmējiet rezultātus. |
|
#7
| |||
| |||
| Ceru, ka šī ir tiesības: Logfile of Trend Micro HijackThis v2.0.2 Scan saglabāts 4:51:04 gada 24/11/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running procesiem: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Windows \ Explorer.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch.exe C: \ WINDOWS \ system32 \ RUNDLL32.EXE C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe C: \ Program Files \ Canon \ CAL \ CALMAIN.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFCommander.exe C: \ Program Files \ Trend Micro \ TrendSecure \ TSCFPlatformCOMSvr.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ WINDOWS \ ALCXMNTR.EXE c: \ Windows \ System \ hpsysdrv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ INCRED ~ 1 \ UNWISE.EXE C: \ Program Files \ Real \ RealPlayer \ RealPlay.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet iestatījumi ProxyOverride = *. vietējo R3 - URLSearchHook: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file) R3 - URLSearchHook: (no name) - (0579B4B6-0.293-4d73-B02D-5EBB0BA0F0A2) - C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL R3 - URLSearchHook: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file) R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll O2 - BHO: Jautājiet Search Assistant BHO - (0579B4B1-0.293-4d73-B02D-5EBB0BA0F0A2) - C: \ Program Files \ AskSBar \ SrchAstt \ 1.bin \ A2SRCHAS.DLL O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll (file missing) O2 - BHO: StumbleUpon Launcher - (145B29F4-A56B-4b90-BBAC-45784EBEBBB7) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll O2 - BHO: RealPlayer Download and Record Plugin Internet Explorer - (3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Program Files \ Real \ RealPlayer \ rpbrowserrecordplugin.dll O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8.333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4.638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 4.1.805.4472 \ sw g.dll O2 - BHO: TSToolbarBHO - (C1656CCA-D2EA-4A32-94AE-AE0B180E6449) - C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ izvietot \ jqs \ ti \ jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - (E99421FB-68DD-40F0-B4AC-B7027CAE2F1A) - C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll O2 - BHO: XBTP02634 Class - (F97DA966-F09D-4cab-BF29-75A0026986EA) - C: \ PROGRA ~ 1 \ BEARSH ~ 2 \ BEARSH ~ 2 \ MediaBar.dll (file missing) O3 - Toolbar: (no name) - (D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A) - (no file) O3 - Toolbar: EPSON Web-To-Page - (EE5D279F-081B-4.404-994D-C6B60AAEBA6D) - C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll O3 - Toolbar: StumbleUpon Toolbar - (5093EB4C-3E93-40AB-9.266-B607BA87BDC8) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll O3 - Toolbar: Transaction Protector - (E7620C98-FCCC-40E5-92EC-C7685D2E1E40) - C: \ Program Files \ Trend Micro \ TrendSecure \ TransactionProtector \ TSToolbar.d ll O3 - Toolbar: (no name) - (855F3B16-6D32-4fe6-8A56-BBB695989046) - (no file) O3 - Toolbar: & Google - (2318C2B1-4.965-11d4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ installs \ CPN \ yt.dll O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [HPBootOp] "C: \ Program Files \ Hewlett-Packard \ HP Boot Optimizer \ HPBootOp.exe" / palaist O4 - HKLM \ .. \ Run: [ISUSPM Startup] C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ ISUSPM.exe-starta O4 - HKLM \ .. \ Run: [ISUSScheduler] "C: \ PROGRA ~ 1 \ Common ~ 1 \ ierīkot ~ 1 \ UPDATE ~ 1 \ issch. Exe"-sākums O4 - HKLM \ .. \ Run: [SSBkgdUpdate] C: \ Program Files \ Common Files \ ScanSoft Shared \ SSBkgdUpdate \ SSBkgdupdate.exe-Embedding-boot O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [AudioCommander] C: \ Program Files \ Andrea Elektronika \ AudioCommander \ AudioCommander.exe / paplāte O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [BearFlix] "C: \ Program Files \ BEARFLIX \ BEARFLIX.EXE" / pauze O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [googletalk] C: \ Program Files \ Google \ Google Talk \ googletalk.exe / palaišana O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [UfSeAgnt.exe] "C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe" O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe" O4 - HKCU \ .. \ Run: [μTorrent] "C: \ Program Files \ uTorrent \ UTORRENT.EXE" O4 - HKCU \ .. \ Run: [InternodeUsage] C: \ PROGRA ~ 1 \ INTERN ~ 2 \ mum.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr.Exe" / background O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - HKCU \ .. \ Run: [Messenger (Yahoo!)] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-kluss O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'NETWORK SERVICE') Ø8 - ārpus konteksta menu item: & Search -? P = ZKxdm021YYAU Ø8 - ārpus konteksta izvēlnes vienums: Pievienot Google Photos Screensa & ver - res: / / C: \ WINDOWS \ system32 \ GPhotos.scr/200 Ø8 - ārpus konteksta menu item: E & ksportēt uz Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ EXCEL.EXE/3000 Ø8 - ārpus konteksta izvēlnes vienums: StumbleUpon Photoblog It! - Res: / / StumbleUponIEBar.dll / blogimage Ø9 - Extra button: StumbleUpon - (75C9223A-409A-4795-A3CA-08DE6B075B4B) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ Micros ~ 4 \ Office11 \ REFIEBAR.DLL Ø9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL Ø9 - Extra button: Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm Ø9 - Extra 'Tools' MENUITEM: Connection Help - (E2D4D26B-0.180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = ASV \ IEButton \ support.htm Ø9 - Extra button: (no name) - (e2e2dd38-d088-4.134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20.001 - (e2e2dd38-d088-4.134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø15 - Trusted Zona: *. stumbleupon.com Ø16 - DPF: (215B8138-A3CF-44C5-803F-8226143CFC0A) (Trend Micro ActiveX Scan Agent 6.6) -- http://housecall65.trendmicro.com/ho...vex/hcImpl.cab Ø16 - DPF: (30.528.230-99f7-4bb4-88d8-fa1d4f56a2ab) (INSTALLATION SUPPORT) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll Ø16 - DPF: (F6676623-8BBD-479C-A51B-05868728708C) (DigitalDM) -- http://www.digitaldm.com/Plug-in/myebk/c/DIGITALDM2.cab Ø20 - Winlogon Paziņot:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc - C: \ Program Files \ Canon \ CAL \ CALMAIN.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1.050 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: LightScribeService Direct Disc Marķēšanas dienests (LightScribeService) - Hewlett-Packard Company - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe O23 - Service: Trend Micro Neatļauta pārmaiņu novēršanas dienests (TMBMServer) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ BM \ TMBMSRV.exe O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc - C: \ PROGRA ~ 1 \ TRENDM ~ 1 \ INTERN ~ 3 \ TmPfw.exe O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe -- End of failu - 13.643 bytes |
|
#8
| |||
| |||
| Tas ir sava veida garš saraksts, bet tas ir tikai dažas lietas, kas tiešām, un tas ir nepieciešams. Jūsu dators tiks thank you. ![]() Disable Spybot's TeaTimer Kaut TeaTimer ir lielisks līdzeklis, lai novērstu spiegprogrammatūras, tā var arī ietekmēt ar HijackThis fixes. Lūdzu atslēgt TeaTimer tagad, kamēr ir tīrs. 1. Right click Spybot in System Tray (izskatās kalendārs ar piekaramo atslēgu simbols). Izvēlēties Iziet Spybot S & D Resident 2. Skriet Spybot S & D 3. Iet uz Mode menuUn pārliecinieties, Advanced Mode ir izvēlēts. 4. Uz kreisajā pusē, izvēlieties Rīki > Resident neatķeksējiet Resident TeaTimer un OK jebkurš ātru un Restart datoru. Piezīme: Ja TeaTimer dod jums brīdinājums tam, ka dažas izmaiņas tika veiktas, lai šajā vietā bloķējot to. Ja TeaTimer nevarēs izslēgt, tad atinstalēt Spybot, līdz mēs veikta tīrīšana. Atstāt TeaTimer līdz brīdim, kad mums ir pilnībā veikta tīrīšana. ---------- Disable Windows Defender Mums ir nepieciešams, lai izslēgtu Windows Defender reāllaika aizsardzību, jo tas var traucēt nosaka, ka mums ir nepieciešams veikt.
---------- Uninstall spyware Lūdzu atinstalēt, kamēr mēs tīrīšana. Ja jūs izvēlaties to atlikt atpakaļ, kad mēs esam darījuši, ir atkarīgs no jums, bet tas tikai rada problēmas tagad. Lūdzu, dodieties uz Add / Remove Programs un atinstalēt: (ja ir)
Lielākā daļa no tā ir adware / spyware, bet daži ir tikai nevajadzīga jaunizveidotiem uzņēmumiem. Programmas netiks veikts jums vienkārši nepieciešams, lai sāktu to manuāli, ja vēlaties tos izmantot. Jūsu dators darbosies labāk bez tiem darbojas visu laiku arī. Open HijackThis un izvēlieties Vai sistēmas skenēšanu tikai. Vieta atzīme blakus šādiem ierakstiem: (ja ir)
Iziet HijackThis. ---------- Dzēst AskSBar mape C: \ Program Files \AskSBar ---------- Piezīme: Instrukcijas turpmāk tika izveidota speciāli šim lietotājam. Ja Jums nav šī lietotāja, DO NOT ievērojiet šos norādījumus, jo tie varētu kaitēt jūsu sistēmas darbības principus Doties uz Start> Run un tips notepad.exe noklikšķiniet uz OK Nokopējiet un ielīmējiet tālāk vērā Notepad un saglabāt kā fixme.reg līdz Jūsu Desktop Kods: REGEDIT4 [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run] "ISUSPM Startup" =- "ISUSScheduler" =- "TkBellExe" =- "QuickTime Task" =- "AppleSyncNotifier" =- "iTunesHelper" =- "Adobe Reader Speed Launcher "=- Pārliecinieties, ka jūs man pateikt, ja saņemat panākumus ziņu par pieskaitot iepriekš, lai reģistrā. Ja Jums nav iegūt panākumus ziņu, tā nestrādāja. Dzēst fixme.reg no darbvirsmas. ---------- Lejupielādēt Disable / Remove Windows Messenger uz Darbvirsma, lai novērstu Windows Messenger. Nejauciet Windows Messenger ar MSN Messenger jo tie nav vienādi. Windows Messenger ir bieži cēlonis logus. Atarhivējiet failu uz darbvirsmas. Open MessengerDisable.exe un izvēlies apakšējā kaste -- Atinstalēt Windows Messenger un noklikšķiniet uz Lietot. Iziet no MessengerDisable tad izdzēst divus failus, kas tika likts uz darbvirsmas. Run CCleaner un restartējiet datoru. <- Nozīmīgs solis. ---------- Download ComboFix © by subs no vienas no saitēm. Pārliecinieties top saglabājiet to Desktop. Link # 1 Link # 2 ** Piezīme: Ir svarīgi, ka tā ir saglabāta tieši jūsu Desktop Aizveriet visas atvērtās interneta pārlūkprogrammas. (Firefox, Internet Explorer uc) pirms uzsākt ComboFix. Laiku sakropļot jūsu antivīruss, Un jebkuru antispyware reāllaika aizsardzību pirms veic skenēšanu. Click šo saiti redzēt sarakstu drošības programmas, kas ir invalīdi un to, kā pārtraukt to darbību. Piezīme: TrendMicro dažkārt ir grūti izslēgt. Ja tas tā ir gadījumā ieskriet ComboFix vienalga un atļaut jebkādus brīdinājumus TrendMicro dod palaist. Dubultklikšķi combofix.exe un sekojiet norādījumiem. Windows XP Systems instalēt Recovery Console: - Ja lietojat Windows XP un nav jau Recovery Console uzstādītas, lūdzu, pārliecinieties, jūsu interneta savienojums ir aktīvs (ja iespējams) un noklikšķiniet uz Jā. - Ja kaut kādu iemeslu dēļ interneta nedarbojas klikšķi Nē. -- Ja nelietojat Windows XP, jums netiks piedāvāts. - Kad mudināts piekrist EULA klikšķi OK. - Pieņemt Microsoft EULA (Click Jā). - Ja Jums ir teikts, ka RC ir uzstādīts pareizi klikšķi JĀ turpināt meklētu ļaunprātīgu programmatūru. Kad pabeigts ComboFix ražos log for you. Post ComboFix log un jaunu HijackThis log Jūsu nākamo atbildi. Svarīgi: Nav mouseclick ComboFix loga kamēr tas darbojas. Tas var izraisīt to apstāsies. Atcerieties, ka jauna aktivizētu jūsu antivīrusu un antispyware aizsardzību, ja ComboFix ir pabeigta. ---------- Arī ļaujiet man jāzina par jebkādām problēmām esat pamanījis ar datoru tagad. Es, iespējams, nebūs atgriezties, lai šo darbību, līdz dažkārt rīt, tas kļūst vēls šeit. Neuztraucieties, mēs sāksim to gatavo un, cerams, ka Jūsu datoram būs darbināt, piemēram, jaunas! |
![]() |
|
| Bookmarks |
Similar Threads | ||||
| Pavediens | Thread Starter | Forums | Replies | Last Post |
| MSN Error Message 80040154 | jwarrilow89 | General Software Čats | 5 | 6 oktobris 2009 15:52 |
| Kļūda vai paziņojuma ziņojums Help! | gmckinney39 | Windows Operating Systems | 3 | 12 maijs 2009 18:02 |
| Error Message | sashikumaran | Windows Operating Systems | 1 | 9 novembris 2008 13:34 |
| Error Message | megabaits | Multimedia & Kodekus | 6 | 8 marts 2008 18:14 |
| Kļūdas ziņojums | legweak | General Software Čats | 1 | 25 oktobris 2007 09:54 |
| Thread Tools | |
| |