|
| |||||||
| Zarejestruj się | Strona Spy | Lista Użytkowników | Darowizna | Szukać | Dzisiejsze Posty | Mark Forums Read | Regulamin forum |
 |
 |
| | Narzędzia wątku |
|
#1
24 grudnia 2007, 05:20
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? cześć. soo mój komputer jest zainfekowany. pop-up to, że ktoś próbuje atakować mój system, wysyłając w wirusa, a następnie theres te zalecane wirusa popping up programów do zainstalowania. Wtedy moja tapeta zmieni kolor na czerwony z symbolem. Jestem aktualnie wykorzystuje Spybot Search and Destroy i ad adware do skanowania mojego komputera codziennie. to odchodzi i wraca kilka godzin lters. I tak zastanawiając się nad tym, jak pozbyć się go tak, że wont come back again. Logfile z HijackThis v1.99.1 Skanowanie zapisane w 4:20:15 AM, na 12/24/2007 Platforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Uruchamianie procesów: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe c: \ Program Files \ Common Files \ Symantec Shared \ ccsetmgr.exe C: \ WINDOWS \ explorer.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe C: \ Program Files \ Symantec AntiVirus \ DefWatch.exe C: \ Program Files \ Google \ Common \ Google Updater \ googleupdaterservice.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Symantec AntiVirus \ Rtvscan.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ PROGRA ~ 1 \ SYMANT ~ 1 \ VPTray.exe C: \ WINDOWS \ system32 \ VTTimer.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ WINDOWS \ system32 \ LVCOMSX.EXE C: \ Program Files \ Logitech \ Video \ LogiTray.exe C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe C: \ Program Files \ HP \ hpcoretech \ hpcmpmgr.exe C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb1 0.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ MSN Messenger \ msnmsgr.exe C: \ Program Files \ AIM \ aim.exe C: \ Program Files \ Logitech \ Video \ FxSvr2.exe C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe C: \ Program Files \ Yahoo! \ Messenger \ ymsgr_tray.exe C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jucheck.exe C: \ Program Files \ MSN Messenger \ usnsvc.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ Program Files \ hijackthis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Settings, ProxyOverride = localhost O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ googletoolbarnotifier \ 2.1.615.5858 \ sw g.dll O2 - BHO: (no name) - (EAA38E9A-A84D-467A-9DFB-34CFEAC54F02) - \ O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [vptray] C: \ PROGRA ~ 1 \ SYMANT ~ 1 \ VPTray.exe O4 - HKLM \ .. \ Run: [Symantec NetDriver Monitor] C: \ PROGRA ~ 1 \ SYMNET ~ 1 \ SNDMon.exe / Przedsiębiorstwo O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-OSBOOT O4 - HKLM \ .. \ Run: [LVCOMSX] C: \ WINDOWS \ system32 \ LVCOMSX.EXE O4 - HKLM \ .. \ Run: [LogitechVideoRepair] C: \ Program Files \ Logitech \ Video \ ISStart.exe O4 - HKLM \ .. \ Run: [LogitechVideoTray] C: \ Program Files \ Logitech \ Video \ LogiTray.exe O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [MP10_EnsureFileVer] C: \ WINDOWS \ inf \ unregmp2.exe / EnsureFileVersions O4 - HKLM \ .. \ Run: [HP Component Manager] "C: \ Program Files \ HP \ hpcoretech \ hpcmpmgr.exe" O4 - HKLM \ .. \ Run: [HPDJ zadań Utility] C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb1 0.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [msnmsgr] "C: \ Program Files \ MSN Messenger \ msnmsgr.exe" / background O4 - HKCU \ .. \ Run: [AIM] C: \ Program Files \ AIM \ aim.exe-cnetwait.odl O4 - HKCU \ .. \ Run: [LogitechSoftwareUpdate] "C: \ Program Files \ Logitech \ Video \ ManifestEngine.exe" boot O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe" cichy O4 - HKCU \ .. \ Run: [LDM] C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ BackWeb-8876480.exe O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ Osa.exe O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O9 - Extra button: Yahoo! Usługi - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll O9 - Extra button: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program Files \ AIM \ aim.exe O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @ Xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing) O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O11 - Options group: [INTERNATIONAL] International * O16 - DPF: (0742B9EF-8C83-41CA-BFBA-830A59E23533) (Microsoft Data Collection Control) -- https: / / support.microsoft.com / OAS / ActiveX / MSDcode.cab O16 - DPF: (1EF9F042-C2EB-4293-8213-474CAEEF531D) (TmHcmsX Control) -- http://www.trendsecure.com/framework...ex/TmHcmsX.CAB O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient klasy) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O18 - Protocol: bwfile-8876480 - (9462A756-7B47-47BC-8C80-C34B9B80B32B) - C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ GAPlugProtocol-8876480.dll O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O20 - Winlogon Notify: gebaxxv - gebaxxv.dll (plik brakuje) O20 - Winlogon Notify: igfxcui - C: \ WINDOWS \ SYSTEM32 \ igfxsrvc.dll O20 - Winlogon Notify: NavLogon - C: \ WINDOWS \ system32 \ NavLogon.dll O20 - Winlogon Notify: pmkjh - C: \ WINDOWS \ system32 \ pmkjh.dll (plik brakuje) O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ system32 \ WgaLogon.dll O21 - SSODL: WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll O21 - SSODL: MSSQL - (24D6EB4C-3C8C-4355-9CD5-4948138645A3) - C: \ WINDOWS \ mssql.dll O21 - SSODL: syscore - (372F9833-A2A9-4597-967D-9C4B6EC4121D) - C: \ WINDOWS \ syscore.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ aawservice.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccsetmgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C: \ Program Files \ Symantec AntiVirus \ DefWatch.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ googleupdaterservice.exe O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C: \ Program Files \ Symantec AntiVirus \ Rtvscan.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Security Center \ SymWSC.exe Pls help. dzięki. |
|
#2
26 grudnia 2007, 09:18
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? uzyskać dobrą antywirusowego McAfee, która obejmuje jak spam, adawre, wirusami, hakerami itd. wszystkie na raz, dissconnect z intetnet, odinstaluj wszystkie obecne programy ochrony zainstalować dobre antywirusowego wyboru aktualizacji przez internet (należy teraz bezpieczne McAfee jest zainstalowany), a następnie wykonaj pełne skanowanie systemu. |
|
#4
6 stycznia 2008, 10:51
| ||||||||||||
| ||||||||||||
| Sqmdata.sqm - pop, zmiany tła, wirus? jakie kiedykolwiek ty dont pobrać program zaleca miałem tego wirusa, ale nie na tyle poważne, i nie rozchodzić się do ustalenia, gdyż to tylko czasowe prawo kiedy kupiłem nowy komputer anty wirus, co masz w tej chwili? Avast domu wydanie jest dobre
__________________
__________________
Temperatura wewnątrz tego jabłecznik jest ponad 1000 stopni. Jeśli wycisnąć to, strumienia stopionego Bramley Apple obsikać obecnie. Czy go na swój sposób; mogłyby kopalni. Tak czy inaczej, jedno z nas będzie w dół! My System: Mój
|
|
#5
6 stycznia 2008, 11:02
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no plik) R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: (no name) - (EAA38E9A-A84D-467A-9DFB-34CFEAC54F02) - \ O20 - Winlogon Notify: gebaxxv - gebaxxv.dll (plik brakuje) Te wszystkie wyglądają suspiscious i powinny zostać usunięte (jednak potwierdzić evilfantasy lub howardhopkinson pierwszy) O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ system32 \ WgaLogon.dll <<<Czy Twoja Geniune okna? Jak to jest wyświetlane tylko podczas gdy kopia systemu Windows nie jest oryginalna. |
|
#6
6 stycznia 2008, 12:21
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? Hello ct122592. Jeśli wciąż szukających pomocy następnie wykonaj poniższe instrukcje. HijackThis i wybierz Otwórz Czy system skanowania tylko wtedy miejsce zaznaczyć do: R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: (no name) - (EAA38E9A-A84D-467A-9DFB-34CFEAC54F02) - \ O20 - Winlogon Notify: gebaxxv - gebaxxv.dll (plik brakuje) O20 - Winlogon Notify: pmkjh - C: \ WINDOWS \ system32 \ pmkjh.dll (plik brakuje) Teraz zamknij wszystkie okna wyjątkiem HijackThis i kliknij przycisk Napraw zaznaczone. ---------- Pobierz CCleaner
Pobrać SUPERAntispyware Free Edition (SAS)
Odinstaluj / usuń kopię HijackThis masz i pobrać nową wersję i uruchomić skanowanie z nim i po dzienniku. Pobierz i zmień HijackThis (HJT)
---------- Następna wiadomość dodaj SUPERAntiSpyware log Nowe HijackThis
__________________  |
|
#7
12 stycznia 2008, 02:21
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? EvilFantasy Dzięki za pomoc. SUPERAntispyware dziennika skanowania: SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 01/12/2008 at 00:51 Zastosowanie Wersja: 3.9.1008 Core Zasady Database Version: 3259 Trace Rules Database Version: 1270 Scan type: Complete Scan Total Scan Time: 00:37:53 Pamięć pozycji zeskanowane: 537 Pamięć zagrożeń wykrytych: 0 Rejestr pozycji zeskanowane: 6842 Rejestr zagrożeń wykrytych: 19 Plik przedmioty zeskanowane: 6768 Plik wykrycia zagrożenia: 67 Adware.Tracking Cookie C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ zbiorowego mediów [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ partner2profit [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ reklam [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ atwola [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ xiti [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@adopt.specificc lizać [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ HTML [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ar.atwola [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@bridge.admarket miejsce [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ WindowsMedia [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ads.healthcare [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ads.adbrite [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ atdmt [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@a.websponso rs [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ad.admarket miejsce [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ad.reunion [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ adknowledge [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@adopt.hbmed iapro [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@adopt.hotba r [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ads.cc21414 2 [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ath.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ atwola [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ banery [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ belnk [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ bigbanners [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@btg.btgrab [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@cts.metrics bezpośrednich [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@dist.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ emarketmake rs [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@hits.clicka ndtrack [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ hurricanedi gitalmedia [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ nextag [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ offeroptimi ZER [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@server.cpms tar [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@a.websponsors [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ adknowledge [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@adopt.hbmediapro [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@adopt.hotbar [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ads.us.e-planning [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ar.atwola [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ath.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ atwola [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ azjmp [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@banner3.inet-traffic [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ banner [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ belnk [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ bigbanners [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@btg.btgrab [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ cassava [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@cts.metricsdirect [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@dist.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ emarketmakers [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ exitexchange [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ interclick [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ leadgenetwork [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ linkstattrack [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ nextag [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ offeroptimizer [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@partypoker.touchc larity [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@sav.coolsavings [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ nexus internetowej [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ winfixer [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.azoogleads [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.riverbelle [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.tagworld [1]. Txt Trojan.WinAntiSpyware / WinAntiVirus 2006/2007 C: \ UWA7P \ kwartały C: \ WINDOWS \ .. \ UWA7P Trojan.VideoCach / Gen HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ 0 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ 0 \ win32 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ FLAGS HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ HELPDIR HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ ProxyStubClsid HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ ProxyStubClsid32 HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ TypeLib HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ TypeLib # Version HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ ProxyStubClsid HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ ProxyStubClsid32 HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ TypeLib HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ TypeLib # Version Trojan.Net-MSV/VPS HKCR \ MSVPS.MSVPSApp HKCR \ MSVPS.MSVPSApp \ CLSID HKCR \ MSVPS.MSVPSApp \ CurVer I cant find hijackthis.exe, tak ja dont znać jak to zrobić ostatni krok. wszystko co mam jest nowa wersja HJT zainstalowany. |
|
#8
12 stycznia 2008, 10:38
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? Odinstaluj / usuń HijackThis. Jest wersji. Następnie użyj instrukcji dałem do zainstalowania nowej wersji.
__________________ |
|
#9
13 stycznia 2008, 03:16
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? Ok dzięki. |
|
#10
13 stycznia 2008, 09:44
| |||
| |||
| Sqmdata.sqm - pop, zmiany tła, wirus? I po nowy dziennik z nowych hijackthis.
__________________ |
|
| |
| Zakładki |
Podobne wątki | ||||
| Wątek | Thread Starter | Forum | Odpowiedzi | Ostatni Post |
| Wyszukiwarka Przekierowania do reklam, kabel USB Przyczyna CPU Shutdown, wirus Ostrzeżenie pop | Jacko2983 | Wirusów, oprogramowania szpiegującego i Bezpieczeństwa | 25 | 18 sierpień 2009 18:16 |
| CID pop | lazj | Wirusów, oprogramowania szpiegującego i Bezpieczeństwa | 8 | 15 październik 2008 10:31 |
| Ruchome tła XP | ashmehta | Ogólne Oprogramowanie Czat | 5 | 8 maja 2008 13:59 |
| Pop | shig | Wirusów, oprogramowania szpiegującego i Bezpieczeństwa | 1 | 18. grudnia 2007 08:42 |
| Narzędzia wątku | |
| |
