|
| |||||||
 |
 |
| | Thread Tools |
|
#1
24 Dicembre 2007, 05:20
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? salve. soo il mio computer è stato infettato. è pop up dire che qualcuno sta tentando di attaccare il mio sistema di invio di virus e quindi raccomandato theres questi virus programmi popping up per me installare. Poi il mio sfondo cambia a rosso con un simbolo. Sto utilizzando Spybot Search and Destroy e adware annuncio per la scansione di tutti i giorni il mio computer. va via e torna a pochi ore lters. quindi mi chiedo come sbarazzarsi di essa in modo che non si torna di nuovo. File di log di HijackThis v1.99.1 Scan salvato a 4:20:15 AM, il 12/24/2007 Piattaforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe c: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ WINDOWS \ Explorer.EXE C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe C: \ Program Files \ Symantec AntiVirus \ DefWatch.exe C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Symantec AntiVirus \ Rtvscan.exe C: \ Program Files \ Common Files \ Symantec Shared \ la CCPD-LC \ symlcsvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ PROGRA ~ 1 \ SYMANT ~ 1 \ VPTray.exe C: \ WINDOWS \ system32 \ VTTimer.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ WINDOWS \ system32 \ LVCOMSX.EXE C: \ Program Files \ Logitech \ Video \ LogiTray.exe C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe C: \ Program Files \ HP \ hpcoretech \ hpcmpmgr.exe C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb1 0.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ MSN Messenger \ msnmsgr.exe C: \ Program Files \ AIM \ aim.exe C: \ Program Files \ Logitech \ Video \ FxSvr2.exe C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Programmi \ LogitechDesktopMessenger. Exe C: \ Program Files \ Yahoo! \ Messenger \ ymsgr_tray.exe C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jucheck.exe C: \ Program Files \ MSN Messenger \ usnsvc.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ WINDOWS \ system32 \ Wuauclt.exe C: \ Program Files \ HijackThis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int Ethernet Impostazioni, ProxyOverride = localhost O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 2.1.615.5858 \ sw g.dll O2 - BHO: (no name) - (EAA38E9A-467A-A84D-9DFB-34CFEAC54F02) - \ O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [vptray] C: \ PROGRA ~ 1 \ SYMANT ~ 1 \ VPTray.exe O4 - HKLM \ .. \ Run: [Symantec NetDriver Monitor] C: \ PROGRA ~ 1 \ SYMNET ~ 1 \ SNDMon.exe / Impresa O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [LVCOMSX] C: \ WINDOWS \ system32 \ LVCOMSX.EXE O4 - HKLM \ .. \ Run: [LogitechVideoRepair] C: \ Program Files \ Logitech \ Video \ ISStart.exe O4 - HKLM \ .. \ Run: [LogitechVideoTray] C: \ Program Files \ Logitech \ Video \ LogiTray.exe O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [MP10_EnsureFileVer] C: \ WINDOWS \ inf \ unregmp2.exe / EnsureFileVersions O4 - HKLM \ .. \ Run: [HP Component Manager] "C: \ Program Files \ HP \ hpcoretech \ hpcmpmgr.exe" O4 - HKLM \ .. \ Run: [HPDJ Taskbar Utility] C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb1 0.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [msnmsgr] "C: \ Program Files \ MSN Messenger \ msnmsgr.exe" / background O4 - HKCU \ .. \ Run: [AIM] C: \ Program Files \ AIM \ aim.exe-cnetwait.odl O4 - HKCU \ .. \ Run: [LogitechSoftwareUpdate] "C: \ Program Files \ Logitech \ Video \ ManifestEngine.exe" boot O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe" tranquilla O4 - HKCU \ .. \ Run: [LDM] C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ BackWeb-8876480.exe O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Programmi \ LogitechDesktopMessenger. Exe O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ OSA.EXE O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O9 - Extra pulsante: Yahoo! Servizi - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll O9 - Extra pulsante: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program Files \ AIM \ aim.exe O9 - Extra pulsante: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ SpyBot ~ 1 \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ SpyBot ~ 1 \ SDHelper.dll O9 - Extra pulsante: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file mancanti) O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file mancanti) O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø11 - Opzioni di gruppo: [INTERNATIONAL] International * Ø16 - DPF: (0742B9EF-8C83-41CA-BFBA-830A59E23533) (Microsoft Data Collection Control) -- https: / / support.microsoft.com / OAS / ActiveX / MSDcode.cab Ø16 - DPF: (1EF9F042-C2EB-4293-8213-474CAEEF531D) (TmHcmsX Control) -- http://www.trendsecure.com/framework...ex/TmHcmsX.CAB Ø16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab Ø18 - Protocollo: bwfile-8876480 - (9462A756-7B47-47BC-8C80-C34B9B80B32B) - C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Programmi \ GAPlugProtocol-8876480.dll Ø18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL Ø18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL Ø20 - Winlogon Notify: gebaxxv - gebaxxv.dll (file mancanti) Ø20 - Winlogon Notify: igfxcui - C: \ WINDOWS \ SYSTEM32 \ igfxsrvc.dll Ø20 - Winlogon Notify: NavLogon - C: \ WINDOWS \ system32 \ NavLogon.dll Ø20 - Winlogon Notify: pmkjh - C: \ WINDOWS \ system32 \ pmkjh.dll (file mancanti) Ø20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O21 - SSODL: WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll O21 - SSODL: mssql - (24D6EB4C-3C8C-4355-9CD5-4948138645A3) - C: \ WINDOWS \ mssql.dll O21 - SSODL: syscore - (372F9833-A2A9-4597-967D-9C4B6EC4121D) - C: \ WINDOWS \ syscore.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C: \ Program Files \ Symantec AntiVirus \ DefWatch.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C: \ Program Files \ Symantec AntiVirus \ Rtvscan.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ la CCPD-LC \ symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ Security Center \ SymWSC.exe Pls help. grazie. |
|
#2
26. Dicembre 2007, 09:18
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? ottenere un buon antivirus come McAfee, che riguarda lo spam, adawre, virus, hacker, ecc tutti in una volta sola, dissconnect dal intetnet, disinstallare tutti i vostri attuali programmi di protezione, installare il tuo antivirus di buona scelta, l'aggiornamento via Internet (che dovrebbe essere al sicuro ora mcafee è installato) e poi fare una scansione completa del sistema. |
|
#4
6 Gennaio 2008, 10:51
| ||||||||||||
| ||||||||||||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? Non sempre ciò che si raccomanda di scaricare il programma Ho avuto prima di questo virus, ma non in modo grave, non mi è tornata alla fissazione in quanto scaduta è quella giusta, quando ho acquistato il mio nuovo computer antivirus cosa hai in questo momento? Home Edition Avast libero è buono
__________________
__________________
La temperatura all'interno di questa torta di mele è di oltre 1000 gradi. Se spremere, un getto di metallo fuso Bramley Apple Squirt fuori. Potrebbe andare il tuo modo; potrebbe andare miniera. In entrambi i casi, uno di noi sta andando verso il basso! Il mio sistema: Mio
|
|
#5
6 Gennaio 2008, 11:02
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: (no name) - (EAA38E9A-467A-A84D-9DFB-34CFEAC54F02) - \ Ø20 - Winlogon Notify: gebaxxv - gebaxxv.dll (file mancanti) Tali suspiscious guardare tutti e dovrebbe essere rimosso (ma con evilfantasy confermare o howardhopkinson prima) Ø20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll <<<Is Your Geniune finestre? Come è che viene visualizzato solo quando quando una copia di Windows non è autentica. |
|
#6
6 Gennaio 2008, 12:21
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? Ciao ct122592. Se siete ancora alla ricerca di aiuto si prega di seguire queste istruzioni. Apri HijackThis e selezionare un sistema di scansione Non solo quindi un segno di spunta accanto a: R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: (no name) - (EAA38E9A-467A-A84D-9DFB-34CFEAC54F02) - \ Ø20 - Winlogon Notify: gebaxxv - gebaxxv.dll (file mancanti) Ø20 - Winlogon Notify: pmkjh - C: \ WINDOWS \ system32 \ pmkjh.dll (file mancanti) Ora chiudere tutte le finestre, ad eccezione di HijackThis e fare clic su Fix Checked. ---------- Si prega di scaricare CCleaner
Scaricare SUPERAntiSpyware Free Edition (SAS)
Vi preghiamo di disinstallare / cancellare la copia di HijackThis hai e scaricare la nuova versione ed eseguire una scansione con esso e dopo il log. Scarica e rinominare HijackThis (HJT)
---------- Next post aggiungi SUPERAntiSpyware Accedi Nuovo log HijackThis
__________________  |
|
#7
12 Gennaio 2008, 02:21
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? Grazie per l'aiuto EvilFantasy. SUPERAntiSpyware registro scansione: SUPERAntiSpyware Scan Entra http://www.superantispyware.com Generata 01/12/2008 alle 00:51 AM Applicazione Versione: 3/9/1008 Core Regole Database Version: 3259 Trace Regole Database Version: 1270 Tipo di scansione: Scansione completa Totale Scan Time: 00:37:53 Memoria oggetti scanditi: 537 Memoria minacce rilevate: 0 Registro di oggetti scanditi: 6842 Registro di minacce rilevate: 19 File oggetti scanditi: 6768 File minacce rilevate: 67 Adware.Tracking Cookie C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ collettiva media [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ partner2profit [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ annunci [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ atwola [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ XiTi [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@adopt.specificc leccare [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ html [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ar.atwola [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@bridge.admarket luogo [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ WindowsMedia [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ads.healthcare [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ads.adbrite [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ atdmt [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@a.websponso rs [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ad.admarket luogo [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ad.reunion [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ adknowledge [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@adopt.hbmed iapro [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ r catherinez@adopt.hotba [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ads.cc21414 2 [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ath.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ atwola [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ banner [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ belnk [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ bigbanners [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@btg.btgrab [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@cts.metrics diretta [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@dist.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ emarketmake rs [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@hits.clicka ndtrack [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ hurricanedi gitalmedia [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ nextag [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ offeroptimi Zer [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@server.cpms tar [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@a.websponsors [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ adknowledge [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@adopt.hbmediapro [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@adopt.hotbar [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ads.us.e-planning [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ar.atwola [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ath.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ atwola [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ azjmp [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@banner3.inet-traffic [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ banner [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ belnk [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ bigbanners [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@btg.btgrab [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ cassava [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@cts.metricsdirect [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@dist.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ emarketmakers [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ exitexchange [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ interclick [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ leadgenetwork [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ linkstattrack [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ nextag [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ offeroptimizer [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@partypoker.touchc zioni [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@sav.coolsavings [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ web-nexus [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ WinFixer [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.azoogleads [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.riverbelle [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.tagworld [1]. Txt Trojan.WinAntiSpyware / WinAntiVirus 2006/2007 C: \ UWA7P \ Quar C: \ WINDOWS \ .. \ UWA7P Trojan.VideoCach / Gen HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1,0 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ 0 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ 0 \ win32 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ FLAGS HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ HELPDIR HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ ProxyStubClsid HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ ProxyStubClsid32 HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ TypeLib HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ TypeLib # Version HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ ProxyStubClsid HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ ProxyStubClsid32 HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ TypeLib HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ TypeLib # Version Trojan.Net-MSV/VPS HKCR \ MSVPS.MSVPSApp HKCR \ MSVPS.MSVPSApp \ CLSID HKCR \ MSVPS.MSVPSApp \ CurVer i cant trovare hijackthis.exe, so i dont know-how per fare l'ultimo passo. tutto ciò che ho è la nuova versione di HJT installato. |
|
#8
12 Gennaio 2008, 10:38
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? Disinstallazione / eliminare HijackThis. Si tratta di una versione non aggiornata. Quindi utilizzare ho dato le istruzioni per installare la nuova versione.
__________________ |
|
#9
13 Gennaio 2008, 03:16
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? Ok, grazie. |
|
#10
13 Gennaio 2008, 09:44
| |||
| |||
| Sqmdata.sqm - popup, le modifiche di sfondo, il virus? E pubblicare un nuovo registro dei nuovi HijackThis.
__________________ |
