|
| |||||||
| Inregistrare | Site-ul Spy | Lista de stat | Doneaza | Căuta | Posturi de azi | Marchează forumurile citite | Forum Regulamentul |
 |
 |
| | Thread Tools |
|
#1
24 decembrie 2007, 05:20
| |||
| |||
| salut. soo este infectat computerul meu. le-a pop up a spune că cineva este încercarea de a ataca sistemul meu, prin trimiterea în virus şi apoi theres aceste recomandat virus programe popping sus pentru mine, pentru a instala. Apoi, mi se va schimba pentru a tapet de culoare roşie, cu un simbol. Eu sunt în prezent, folosind spybot de căutare şi de a distruge şi adware de anunţuri pentru a scana computerul meu de zi cu zi. merge departe şi se va întoarce la câteva ore lters. deci sunt întrebam cum sa scap de ea, astfel încât să obiceiul întoarce din nou. Logfile de HijackThis v1.99.1 Scan salvat de la 4:20:15, pe 12/24/2007 Platforma: Windows XP SP2 (WINNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Rularea procese: C: \ Windows \ system32 \ smss.exe C: \ Windows \ system32 \ winlogon.exe C: \ Windows \ system32 \ services.exe C: \ Windows \ system32 \ lsass.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ svchost.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ WINDOWS \ Explorer.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ Windows \ system32 \ Spoolsv.exe C: \ Program Files \ Lavasoft \ Ad-Conştient 2007 \ aawservice.exe C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe C: \ Program Files \ Symantec AntiVirus \ DefWatch.exe C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe C: \ Windows \ system32 \ svchost.exe C: \ Program Files \ Symantec AntiVirus \ Rtvscan.exe C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ PROGRA ~ 1 \ symant ~ 1 \ VPTray.exe C: \ Windows \ system32 \ VTTimer.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ Windows \ system32 \ LVCOMSX.EXE C: \ Program Files \ Logitech \ Video \ LogiTray.exe C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe C: \ Program Files \ HP \ hpcoretech \ hpcmpmgr.exe C: \ Windows \ system32 \ bobina \ drivers \ w32x86 \ 3 \ hpztsb1 0.exe C: \ Windows \ system32 \ Ctfmon.exe C: \ Program Files \ MSN Messenger \ msnmsgr.exe C: \ Program Files \ AIM \ aim.exe C: \ Program Files \ Logitech \ Video \ FxSvr2.exe C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe C: \ Program Files \ Yahoo! \ Messenger \ ymsgr_tray.exe C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jucheck.exe C: \ Program Files \ MSN Messenger \ usnsvc.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Windows \ system32 \ wuauclt.exe C: \ Program Files \ Hijackthis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Setări, ProxyOverride = localhost O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 2.1.615.5858 \ sw g.dll O2 - BHO: (no name) - (EAA38E9A-A84D-467A-9DFB-34CFEAC54F02) - \ O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ Windows \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ Windows \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [vptray] C: \ PROGRA ~ 1 \ symant ~ 1 \ VPTray.exe O4 - HKLM \ .. \ Run: [Symantec NetDriver Monitor] C: \ PROGRA ~ 1 \ SYMNET ~ 1 \ SNDMon.exe / Enterprise O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ Windows \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [LVCOMSX] C: \ Windows \ system32 \ LVCOMSX.EXE O4 - HKLM \ .. \ Run: [LogitechVideoRepair] C: \ Program Files \ Logitech \ Video \ ISStart.exe O4 - HKLM \ .. \ Run: [LogitechVideoTray] C: \ Program Files \ Logitech \ Video \ LogiTray.exe O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [MP10_EnsureFileVer] C: \ WINDOWS \ inf \ unregmp2.exe / EnsureFileVersions O4 - HKLM \ .. \ Run: [HP Component Manager] "C: \ Program Files \ HP \ hpcoretech \ hpcmpmgr.exe" O4 - HKLM \ .. \ Run: [HPDJ Taskbar Utility] C: \ Windows \ system32 \ bobina \ drivers \ w32x86 \ 3 \ hpztsb1 0.exe O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ Windows \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [msnmsgr] "C: \ Program Files \ MSN Messenger \ msnmsgr.exe" / fundal O4 - HKCU \ .. \ Run: [AIM] C: \ Program Files \ AIM \ aim.exe-cnetwait.odl O4 - HKCU \ .. \ Run: [LogitechSoftwareUpdate] "C: \ Program Files \ Logitech \ Video \ ManifestEngine.exe" boot O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet O4 - HKCU \ .. \ Run: [LDM] C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ BackWeb-8876480.exe O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ LogitechDesktopMessenger. Exe O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ OSA.EXE O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ ssv.dll O9 - Extra button: Yahoo! Services - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll O9 - Extra button: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program Files \ AIM \ aim.exe O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra 'Tools' MENUITEM: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network de diagnostic \ xpnetdiag.exe (fişierul lipseşte) O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network de diagnostic \ xpnetdiag.exe (fişierul lipseşte) O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O11 - Options group: [INTERNATIONAL] International * O16 - DPF: (0742B9EF-8C83-41CA-BFBA-830A59E23533) (Microsoft de colectare a datelor de control) -- https: / / support.microsoft.com / Oaş / ActiveX / MSDcode.cab O16 - DPF: (1EF9F042-C2EB-4293-8213-474CAEEF531D) (TmHcmsX Control) -- http://www.trendsecure.com/framework...ex/TmHcmsX.CAB O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O18 - Protocol: bwfile-8876480 - (9462A756-7B47-47BC-8C80-C34B9B80B32B) - C: \ Program Files \ Logitech \ Desktop Messenger \ 8876480 \ Program \ GAPlugProtocol-8876480.dll O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O20 - Winlogon Notify: gebaxxv - gebaxxv.dll (fişierul lipseşte) O20 - Winlogon Notify: igfxcui - C: \ Windows \ system32 \ igfxsrvc.dll O20 - Winlogon Notify: NavLogon - C: \ Windows \ system32 \ NavLogon.dll O20 - Winlogon Notify: pmkjh - C: \ Windows \ system32 \ pmkjh.dll (fişierul lipseşte) O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O21 - SSODL: WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ Windows \ system32 \ WPDShServiceObj.dll O21 - SSODL: MSSQL - (24D6EB4C-3C8C-4355-9CD5-4948138645A3) - C: \ WINDOWS \ mssql.dll O21 - SSODL: syscore - (372F9833-A2A9-4597-967D-9C4B6EC4121D) - C: \ WINDOWS \ syscore.dll O23 - Service: Ad-Conştient 2007 Service (aawservice) - Lavasoft AB - C: \ Program Files \ Lavasoft \ Ad-Conştient 2007 \ aawservice.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C: \ Program Files \ Symantec AntiVirus \ DefWatch.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: LiveUpdate - Symantec Corporation - C: \ PROGRA ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C: \ Program Files \ Symantec AntiVirus \ Rtvscan.exe O23 - Service: Symantec Core LC - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Security Center \ SymWSC.exe Pls help. mulţumesc. |
|
#2
26 decembrie 2007, 09:18
| |||
| |||
| a lua un bun antivirus ca mcafee care acoperă spam, adawre, virusi, hackeri, etc, toate în acelaşi timp, dissconnect de la intetnet, dezinstalaţi toate programele actuale de protecţie, instalaţi-vă bun antivirus de alegere, actualizare pe internet (ar trebui să fie în siguranţă acum mcafee este instalată), apoi face o scanare completă a sistemului. |
|
#4
6 ianuarie 2008, 10:51
| ||||||||||||
| ||||||||||||
| Ce mai ai dont download recomandate de program Am avut înainte de acest virus, dar nu atât de severe, nu am dus-te să-l repar ca timpul este doar dreptul, atunci când l-am cumpărat noul meu calculator Ce anti-virus ai în acest moment? Stai gratuit Home Edition este un lucru bun
__________________
__________________
Temperatura în interiorul acestui plăcintă cu mere este de peste 1000 de grade. Dacă aş stoarce-o, un jet de topit bramley Apple va ţâşni afară. Putea merge-ţi de drum; putea merge mina. Oricum, unul dintre noi se duce în jos! Sistemul meu: Al meu
|
|
#5
6 ianuarie 2008, 11:02
| |||
| |||
| O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (nu dosar) R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Search, SearchAssistant = R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Search, CustomizeSearch = O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: (no name) - (EAA38E9A-A84D-467A-9DFB-34CFEAC54F02) - \ O20 - Winlogon Notify: gebaxxv - gebaxxv.dll (fişierul lipseşte) Aceste toate uite suspiscious şi ar trebui să fie scos (dar cu evilfantasy confirma sau howardhopkinson primul) O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll <<<Este Windows Geniune? Aşa cum este, care este afişat doar dacă în momentul în care o copie de Windows nu este autentică. |
|
#6
6 ianuarie 2008, 12:21
| |||
| |||
| Bună ziua ct122592. Dacă încă mai caută ajutor atunci vă rugăm să urmaţi aceste instrucţiuni. Deschide HijackThis şi selectaţi Fă un sistem de scanare doar apoi pune un semn de selectare lângă: R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 O2 - BHO: (no name) - (0180A7AF-7449-4632-A705-09CB76186F0D) - (no file) O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file) O2 - BHO: (no name) - (1D4B1AF0-833A-AFE9-4B66-888DBA2582CD) - (no file) O2 - BHO: (no name) - (3f711da5-eed1-496b-9ac7-870af3236ef5) - (no file) O2 - BHO: (no name) - (56125AE0-2785-4E21-A200-6646C4FFB7FC) - \ O2 - BHO: (no name) - (7A8D213D-2998-4DC2-A09F-4B91903292EF) - \ O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: (no name) - (EAA38E9A-A84D-467A-9DFB-34CFEAC54F02) - \ O20 - Winlogon Notify: gebaxxv - gebaxxv.dll (fişierul lipseşte) O20 - Winlogon Notify: pmkjh - C: \ Windows \ system32 \ pmkjh.dll (fişierul lipseşte) Acum, închideţi toate ferestrele cu excepţia HijackThis şi faceţi clic pe Fix Checked. ---------- Vă rugăm să descărcaţi CCleaner
Descărca SUPERAntispyware Free Edition (SAS)
Vă rugăm să dezinstalaţi / şterge copie a HijackThis pe care le-aţi şi noua versiune a descărca şi rula o scanare cu el şi post de jurnal. Descărcaţi şi redenumiţi HijackThis (HJT)
---------- Înainte posta, vă rugăm să adăugaţi SUPERAntiSpyware jurnal New HijackThis log
__________________  |
|
#7
12 ianuarie 2008, 02:21
| |||
| |||
| Vă mulţumim pentru ajutorul EvilFantasy. SUPERAntispyware jurnal de scanare: SUPERAntiSpyware Scan Log http://www.superantispyware.com Generat 01.12.2008 la 00:51 AM Application Version: 3-9-1008 Reguli de bază pentru baze de date Version: 3259 Trace Regulamentul Database Version: 1270 Scan type: Complete Scan Total Scan Ora: 00:37:53 Memorie articole scanate: 537 Memorie ameninţările detectate: 0 Registrul articole scanate: 6842 Registrul ameninţările detectate: 19 Elemente de fişiere scanate: 6768 File ameninţările detectate: 67 Adware.Tracking Cookie C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ colective-media [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ partner2profit [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ ad [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ atwola [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ xiti [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@adopt.specificc linge [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ html [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ar.atwola [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@bridge.admarket loc [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ windowsmedia [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ads.healthcare [1]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner@ads.adbrite [2]. Txt C: \ Documents and Settings \ HP_Owner \ Cookies \ hp_owner @ atdmt [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@a.websponso rs [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ad.admarket loc [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ad.reunion [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ adknowledge [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@adopt.hbmed iapro [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@adopt.hotba r [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ads.cc21414 2 [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@ath.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ atwola [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ bannere [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ belnk [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ bigbanners [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@btg.btgrab [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@cts.metrics direct [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@dist.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ emarketmake rs [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@hits.clicka ndtrack [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ hurricanedi gitalmedia [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ nextag [2]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez @ offeroptimi zer [1]. Txt C: \ Documents and Settings \ CatherineZ \ Cookies \ catherinez@server.cpms tar [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@a.websponsors [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ adknowledge [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@adopt.hbmediapro [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@adopt.hotbar [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ads.us.e-planning [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ar.atwola [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@ath.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ atwola [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ azjmp [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@banner3.inet-traffic [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ banner-ul [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ belnk [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ bigbanners [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@btg.btgrab [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ cassava [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@cts.metricsdirect [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@dist.belnk [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ emarketmakers [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ exitexchange [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ interclick [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ leadgenetwork [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ linkstattrack [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ nextag [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ offeroptimizer [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@partypoker.touchc larity [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@sav.coolsavings [1]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ web-nex [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez @ winfixer [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.azoogleads [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.riverbelle [2]. Txt C: \ Documents and Settings \ CatherineZ \ Local Settings \ Temp \ Cookies \ catherinez@www.tagworld [1]. Txt Trojan.WinAntiSpyware / WinAntiVirus 2006/2007 C: \ UWA7P \ Quar C: \ WINDOWS \ .. \ UWA7P Trojan.VideoCach / Gen HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ 0 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ 0 \ win32 HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ Steaguri HKCR \ TypeLib \ (A8954909-1F0F-41A5-A7FA-3B376D69E226) \ 1.0 \ HELPDIR HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ ProxyStubClsid HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ ProxyStubClsid32 HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ TypeLib HKCR \ Interface \ (967A494A-6AEC-4555-9CAF-FA6EB00ACF91) \ TypeLib # Version HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ ProxyStubClsid HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ ProxyStubClsid32 HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ TypeLib HKCR \ Interface \ (9692BE2F-EB8F-49D9-A11C-C24C1EF734D5) \ TypeLib # Version Trojan.Net-MSV/VPS HKCR \ MSVPS.MSVPSApp HKCR \ MSVPS.MSVPSApp \ CLSID HKCR \ MSVPS.MSVPSApp \ CurVer i cant hijackthis.exe găsi, aşa încât i dont know cum să facă ultimul pas. tot ce am este noua versiune de HJT instalat. |
|
#8
12 ianuarie 2008, 10:38
| |||
| |||
| Dezinstalare / şterge Hijackthis. Aceasta este o versiune învechite. Apoi, utilizaţi instrucţiunile de i-am dat pentru a instala noua versiune.
__________________ |
|
#9
13 ianuarie 2008, 03:16
| |||
| |||
| Bine mersi. |
|
#10
13 ianuarie 2008, 09:44
| |||
| |||
| Şi după un nou jurnal de la noi hijackthis.
__________________ |
