|
| |||||||
| Inregistrare | Site-ul Spy | Lista de stat | Doneaza | Căuta | Posturi de azi | Marchează forumurile citite | Forum Regulamentul |
 |
 |
| | Thread Tools |
|
#1
31 ianuarie 2008, 05:25
| |||
| |||
| Un virus de tip pop-up I a păstra achiziţie această casetă de apară ori de câte ori mă duc prin orice cum ar fi My Documents sau Computer, etc ... De asemenea, apar atunci când folosesc IE, dar nu şi atunci când folosesc Firefox. Am folosit mai multe programe şi totuşi încă mai trece cu vederea aceasta. Ar putea aceasta poate fi un rootkit (nu sper).  My Activitate: -- ESET Online Scanner # Versiune = 4 # OnlineScanner.ocx = 1.0.0.56 # OnlineScannerDLLA.dll = 1, 0, 0, 51 # OnlineScannerDLLW.dll = 1, 0, 0, 51 # OnlineScannerUninstaller.exe = 1, 0, 0, 49 # Vers_standard_module = 2836 (20080130) # Vers_arch_module = 1,063 (20080117) # Vers_adv_heur_module = 1,060 (20070601) # EOSSerial = 86fa0ec02340bf40b27cfd3ccc323dee # Sfârşitul = terminat # Remove_checked = true # Unwanted_checked = true # Utc_time = 2008-01-31 02:29:31 # Local_time = 2008-01-31 02:29:31 (+0000, GMT Standard Time) # Ţară = "Regatul Unit" # OSVer = 6.0.6000 NT # Scanat = 306177 # Găsit = 0 # Scan_time = 8875 SUPERAntiSpyware Scan Log http://www.superantispyware.com AM Generated 01.31.2008 la 02:32 Application Version: 3-9-1008 Core Reguli Baza de date Versiune: 3391 Trace Regulamentul Database Version: 1383 Scan type: Complete Scan Total Scan Ora: 02:21:07 Elemente de memorie scanate: 834 Memorie ameninţările detectate: 0 Elementele de registry scanate: 7637 Registrul ameninţările detectate: 0 Elemente Fişier scanate: 66364 File ameninţările detectate: 6 Adware.Tracking Cookie C: \ Users \ Chris \ AppData \ Roaming \ Microsoft \ Windows \ C ookies \ Chris @ tribalfusion [2]. Txt C: \ Users \ Chris \ AppData \ Roaming \ Microsoft \ Windows \ C ookies \ chris@adopt.euroclick [2]. Txt Trojan.Media-Codec/V5-Intaller C: \ Users \ CHRIS \ Desktop \ INSTALL_PLAYER_3912994 (2). E XE C: \ Users \ CHRIS \ Desktop \ INSTALL_PLAYER_3912994.EXE C: \ Windows \ Prefetch \ INSTALL_PLAYER_3912994 (2). Exe-03357FA6.pf C: \ Windows \ Prefetch \ INSTALL_PLAYER_3912994.EXE-9E95D8EF.pf HijackThis Logfile de Trend Micro HijackThis v2.0.2 Scan saved at 12:05:19, pe 31/01/2008 Platforma: Windows Vista (WINNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16575) Boot mode: Normal Rularea procese: C: \ Windows \ System32 \ smss.exe C: \ Windows \ system32 \ csrss.exe C: \ Windows \ system32 \ wininit.exe C: \ Windows \ system32 \ csrss.exe C: \ Windows \ system32 \ services.exe C: \ Windows \ system32 \ lsass.exe C: \ Windows \ system32 \ lsm.exe C: \ Windows \ system32 \ winlogon.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ Microsoft.Net \-cadru \ v3.0 \ WPF \ tationFontCache.exe prezentarea C: \ Windows \ system32 \ svchost.exe C: \ Windows \ System32 \ svchost.exe C: \ Windows \ System32 \ svchost.exe C: \ Windows \ System32 \ svchost.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ SLsvc.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ Lavasoft \ Ad-Conştient 2007 \ aawservice.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ Windows \ System32 \ Spoolsv.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ Dwm.exe C: \ Windows \ Explorer.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Windows \ RtHDVCpl.exe C: \ Program Files \ TOSHIBA \ Power Saver \ TPwrMain.exe C: \ Program Files \ TOSHIBA \ SmoothView \ SmoothView.exe C: \ Program Files \ TOSHIBA \ FlashCards \ TCrdMain.exe C: \ Program Files \ un-pătrat Anti-Malware \ a2service.exe C: \ Windows \ system32 \ agrsmsvc.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ Program Files \ TOSHIBA \ ConfigFree \ CFSvcs.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ TODDSrv.exe C: \ Program Files \ Toshiba \ Power Saver \ TosCoSrv.exe C: \ Program Files \ Toshiba \ Bluetooth Toshiba Stack \ TosBtSrv.exe C: \ Program Files \ Common Files \ Ulead Systems \ DVD \ ULCDRSvr.exe C: \ Windows \ System32 \ svchost.exe C: \ Windows \ system32 \ SearchIndexer.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ Windows \ system32 \ taskeng.exe C: \ Windows \ system32 \ taskeng.exe C: \ Program Files \ Toshiba \ Utilitare \ KeNotify.exe C: \ Program Files \ TOSHIBA \ ConfigFree \ NDSTray.exe C: \ Program Files \ Toshiba \ Toshiba Online Product Information \ TOPI.exe C: \ Program Files \ IDM \ Desktop SMS \ DesktopSMS.exe C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe C: \ Program Files \ TOSHIBA \ de inregistrare \ ToshibaRegistration.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashDisp.exe C: \ Program Files \ Camera Assistant Software pentru Toshiba \ traybar.exe C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ LaunchApplication.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ a-squared Anti-Malware \ a2guard.exe C: \ Program Files \ Windows Sidebar \ sidebar.exe C: \ Program Files \ TOSHIBA \ TOSCDSPD \ TOSCDSPD.exe C: \ Program Files \ MSN Messenger \ msnmsgr.exe C: \ Windows \ ehome \ ehtray.exe C: \ Windows \ system32 \ wbem \ wmiprvse.exe C: \ Program Files \ Veoh Networks \ Veoh \ VeohClient.exe C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ Program Files \ Fantastic Flame Screensaver \ FantasticFlameAgent.exe C: \ Windows \ ehome \ ehmsas.exe C: \ Windows \ System32 \ rundll32.exe C: \ Program Files \ Synaptics \ SynTP \ SynToshiba.exe C: \ Program Files \ Camera Assistant Software pentru Toshiba \ CEC_MAIN.exe C: \ Program Files \ Windows Sidebar \ sidebar.exe C: \ Program Files \ PC Connectivity Solution \ ServiceLayer.exe C: \ Program Files \ TOSHIBA \ ConfigFree \ CFSwMgr.exe C: \ Program Files \ Windows Mail \ WinMail.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ MSN Messenger \ usnsvc.exe C: \ Program Files \ Microsoft Office \ OFFICE11 \ WINWORD.EXE C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Windows \ system32 \ Msiexec.exe C: \ Program Files \ PrevxCSI \ prevxcsi.exe C: \ Program Files \ Spybot - Search & Destroy \ SpybotSD.exe C: \ Windows \ System32 \ svchost.exe C: \ Windows \ system32 \ SearchProtocolHost.exe C: \ Windows \ system32 \ SearchFilterHost.exe C: \ Program Files \ Trend Micro \ HijackThis \ Sniper.exe.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.altavista.com/audio/default R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Setări, ProxyOverride = *. local R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName = R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Instalează \ cpn \ yt.dll O1 - Hosts::: 1 localhost O2 - BHO: Yahoo! Bara de instrumente Helper - (02478D38-C3F9-4EFB-9B51-7695ECA05670) - C: \ Program Files \ Yahoo! \ Companion \ Instalează \ cpn \ yt.dll O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Megaupload Toolbar - (4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C) - C: \ PROGRA ~ 1 \ MEGAUP ~ 1 \ MEGAUP ~ 1.DLL O2 - BHO: Spybot-S & D IE Protecţia - (53707962-6F74-2D53-2644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Player - (83FD1F86-B40A-41EE-8512-929F005ED2A8) - C: \ Windows \ orgnavi.dll O2 - BHO: Windows Live Sign-in-Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Instalează \ cpn \ yt.dll O3 - Toolbar: Megaupload Toolbar - (4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C) - C: \ PROGRA ~ 1 \ MEGAUP ~ 1 \ MEGAUP ~ 1.DLL O4 - HKLM \ .. \ Run: [Windows Defender]% ProgramFiles% \ Windows Defender \ MSASCui.exe-a ascunde O4 - HKLM \ .. \ Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM \ .. \ Run: [TPwrMain]% ProgramFiles% \ TOSHIBA \ Power Saver \ TPwrMain.EXE O4 - HKLM \ .. \ Run: [HSON]% ProgramFiles% \ TOSHIBA \ TBS \ HSON.exe O4 - HKLM \ .. \ Run: [SmoothView]% ProgramFiles% \ Toshiba \ SmoothView \ SmoothView.exe O4 - HKLM \ .. \ Run: [00TCrdMain]% ProgramFiles% \ TOSHIBA \ FlashCards \ TCrdMain.exe O4 - HKLM \ .. \ Run: [KeNotify] C: \ Program Files \ Toshiba \ Utilitare \ KeNotify.exe O4 - HKLM \ .. \ Run: [HWSetup] C: \ Program Files \ Toshiba \ Utilitare \ HWSetup.exe hwSetUP O4 - HKLM \ .. \ Run: [SVPWUTIL] C: \ Program Files \ Toshiba \ Utilitare \ SVPWUTIL.exe SVPwUTIL O4 - HKLM \ .. \ Run: [NDSTray.exe] NDSTray.exe O4 - HKLM \ .. \ Run: [topi] C: \ Program Files \ TOSHIBA \ Toshiba Online Product Information \ topi.exe-pornire O4 - HKLM \ .. \ Run: [Desktop SMS] C: \ Program Files \ IDM \ Desktop SMS \ DesktopSMS.exe / auto O4 - HKLM \ .. \ Run: [NvSvc] RUNDLL32.EXE C: \ Windows \ system32 \ nvsvc.dll, nvsvcStart O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ Windows \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ Windows \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe O4 - HKLM \ .. \ Run: [Toshiba inregistrare] C: \ Program Files \ Toshiba \ inregistrare \ ToshibaRegistration.exe O4 - HKLM \ .. \ Run: [stai!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKLM \ .. \ Run: [Camera Assistant Software] "C: \ Program Files \ Camera Assistant Software pentru Toshiba \ traybar.exe" O4 - HKLM \ .. \ Run: [PCSuiteTrayApplication] C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ LaunchApplication.exe-pornire O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [a-pãtrat] "C: \ Program Files \ a-squared Anti-Malware \ a2guard.exe" / D = 60 O4 - HKLM \ .. \ Run: [PrevxCSI] "C: \ Program Files \ PrevxCSI \ prevxcsi.exe"-boot O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [Sidebar] C: \ Program Files \ Windows Sidebar \ sidebar.exe / autorun O4 - HKCU \ .. \ Run: [TOSCDSPD] C: \ Program Files \ TOSHIBA \ TOSCDSPD \ TOSCDSPD.exe O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ MSN Messenger \ MsnMsgr.Exe" / fundal O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe O4 - HKCU \ .. \ Run: [Veoh] "C: \ Program Files \ Veoh Networks \ Veoh \ VeohClient.exe" / VeohHide O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Nokia.PCSync] C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe / NoDialog (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Nokia.PCSync] C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe / NoDialog (User 'Default user') O4 - Global Startup: Fantastic Flame Agent.lnk = C: \ Program Files \ Fantastic Flame Screensaver \ FantasticFlameAgent.exe O8 - Extra context menu item: E & xportaţi la Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ milionimi ~ 3 \ OFFICE11 \ EXCEL.EXE/3000 O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ npjpi160_04.dll O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_04 \ bin \ npjpi160_04.dll O9 - Extra button: Send to OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ milionimi ~ 3 \ Office12 \ ONBttnIE.dll O9 - Extra 'Tools' MENUITEM: S & la sfârşitul OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ milionimi ~ 3 \ Office12 \ ONBttnIE.dll O9 - Extra button: Cercetare - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ milionimi ~ 3 \ OFFICE11 \ REFIEBAR.DLL O9 - Extra button: eBay - (C08CAF1D-C0A3-40D5-9970-06D067EAC017) -- http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?EN (fişierul lipseşte) O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra 'Tools' MENUITEM: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O13 - Gopher Prefix: O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (5C051655-FCD5-4969-9182-770EA5AA5565) (Solitaire Showdown Class) -- http://messenger.zone.msn.com/binary...n.cab56986.cab O16 - DPF: (5D6F45B3-9043-443D-A792-115447494D24) (UnoCtrl Class) -- http://messenger.zone.msn.com/EN-GB/.../GAME_UNO1.cab O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: (D4323BF2-006A-4440-A2F5-27E3E7AB25F8) (Virtools WebPlayer Class) -- http://a532.g.akamai.net/f/532/6712/.../installer.exe O16 - DPF: (F5A7706B-B9C0-4C89-A715-7A0C6B05DD48) (Minesweeper Steaguri Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab O16 - DPF: (F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8) (GoPetsWeb Control) -- https: / / secure.gopetslive.com / dev / GoPetsWeb.cab O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: un-pătrat Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C: \ Program Files \ un-pătrat Anti-Malware \ a2service.exe O23 - Service: Ad-Conştient 2007 Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Conştient 2007 \ aawservice.exe O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C: \ Windows \ system32 \ agrsmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: stai! iAVS4 serviciu de control (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: stai! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: stai! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe O23 - Service: stai! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe O23 - Service: # # Id_String1.6844F930_1628_4223_B5CC_5BB94B879762 # # (Bonjour Service) - Apple Computer, Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: ConfigFree Service (CFSvcs) - Toshiba Corporation - C: \ Program Files \ TOSHIBA \ ConfigFree \ CFSvcs.exe O23 - Service: Symantec LIC NetConnect serviciu (CLTNetCnService) - Unknown owner - C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe (fişierul lipseşte) O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: ServiceLayer - Nokia. - C: \ Program Files \ PC Connectivity Solution \ ServiceLayer.exe O23 - Service: Toshiba Optical Disc Drive Service (TODDSrv) - Toshiba Corporation - C: \ Windows \ system32 \ TODDSrv.exe O23 - Service: TOSHIBA Power Saver (TosCoSrv) - Toshiba Corporation - C: \ Program Files \ TOSHIBA \ Power Saver \ TosCoSrv.exe O23 - Service: Toshiba Bluetooth Service - Toshiba Corporation - C: \ Program Files \ Toshiba \ Bluetooth Toshiba Stack \ TosBtSrv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc - C: \ Program Files \ Common Files \ Ulead Systems \ DVD \ ULCDRSvr.exe -- Sfârşit de fişier - 14403 bytes I'm gonna adăuga o pereche de jurnale de la alte programe la: -- A-squared a-squared Anti-Malware - Versiunea 3.1 Last update: 31/01/2008 01:16:41 Setările de scanare: Obiecte: Memorie, urme, Biscuiti, C: \, E: \ Scan Archives: Pe Heuristics: Pe ADS Scan: Pe Scan Start: 31/01/2008 01:46:59 C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 43 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 72 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 80 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 161 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 162 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 167 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 181 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 210 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 282 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 283 detectat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 338 detectat: Trace.TrackingCookie C: \ Program Files \ DarkandLight \ LAUNCHER.EXE detectat: Trojan-Spy.Win32.Banker.gez Scanate Files: 160756 Traces: 296173 Biscuiti: 381 Procese: 87 Fonda Files: 1 Traces: 0 Cookies: 11 Procese: 0 Chei de registry: 0 Scan End: 31/01/2008 04:13:41 Scan time: 2:26:42 C: \ Program Files \ DarkandLight \ LAUNCHER.EXE elimină: Trojan-Spy.Win32.Banker.gez C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 43 eliminat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 72 eliminat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 80 eliminat: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 161 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 162 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 167 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 181 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 210 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 282 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 283 elimină: Trace.TrackingCookie C: \ Users \ Chris \ AppData \ Roaming \ Mozilla \ Firefox \ Pro files \ xqe1wgaj.default \ cookies.txt: 338 elimină: Trace.TrackingCookie elimină: Files: 1 Traces: 0 Cookies: 11 Când utilizaţi Spybot S & D I a păstra achiziţie aceeaşi problemă  |
|
#2
31 ianuarie 2008, 08:24
| |||
| |||
| Un virus de tip pop-up Bine ati venit la TCF. Descărca SmitfraudFix (by S! Ri) pe Desktop.
CITIŢI toate aceste INSTRUCŢIUNI PRIMEI înainte de a face ORICE. Intrebati orice întrebări pe care le pot avea, înainte de a începe. Este posibil să doriţi tipăriţi aceste instrucţiuni sau să copiaţi şi să le lipiţi la Notepad şi salvaţi-l pe desktop ca tine nu va putea pentru a vedea această pagină în modul de siguranţă
Pasul recomandate:
Următorul a alerga un Hijackthis nouă de scanare şi post de jurnal. ---------- Înainte posta, vă rugăm să adăugaţi Log SmitFraudFix New Hijackthis jurnal
__________________  |
