Trojos

**lolli_pop** · #1 Spalis 24, 2008, 16:18

Aš ant mano PC system32 failus Trojos arklys. Turiu AVG, bet tiesiog sužinoti, kaip atsikratyti iš AVG, kaip kai aš spustelėkite Naikinti, manau, kad tiesiog išbraukia iš skliautas iki kito nuskaitymo, kai ji nustatyta iš naujo.

**thingie2** · #2 Spalis 24, 2008, 16:24

Atrodo, jums reikia nuveikti daugiau nei tiesiog bando ištrinti su AVG, pabandykite atsižvelgiant ieškoti šioje temoje.

**lolli_pop** · #3 Spalis 25, 2008, 04:17

Ok, ačiū. Aš skaičiuoti Hijack rytoj:)

**evilfantasy** · #4 Spalis 25, 2008, 10:08

Vykdykite visus nuskaito ir po rąstų. HijackThis paprastai nepakanka.

**lolli_pop** · #5 Spalis 26, 2008, 15:58

Aš vyko SUPERAntiSpyware ir gavo žurnalą. Aš taip pat vyko AVG dar kartą ir ji atėjo su šešių vietų, kad Trojos arklys buvo užsikrėtę.

Tai SUPERAntiSpyware Prisijungti:

SUPERAntiSpyware Scan Prisijungti
http://www.superantispyware.com

At 08:30 10/26/2008 Generated PM

Prašymas Versija: 4.21.1004

Core Taisyklės Database Versija: 3.609
Sekti Taisyklės duomenų bazė Versija: 1.595

Scan Type: Complete Scan
Iš viso nuskaitymo laikas: 00:59:08

Atminties elementai nuskaityta: 430
Atminties grėsmių detected: 0
Registro objektų nuskaitomi: 4950
Registras grėsmių detected: 0
Failo elementai nuskaityta: 73.876
Failo grėsmių aptikta: 77

Trojan.Unknown Kilmės
C: \ WINDOWS \ mslagent \ 2_mslagent.dll
C: \ WINDOWS \ mslagent \ mslagent.exe
C: \ WINDOWS \ mslagent \ uninstall.exe
C: \ WINDOWS \ mslagent
C: \ WINDOWS \ system32 \ SMP \ msrc.exe
C: \ WINDOWS \ system32 \ SMP

Adware.INetDelivery
C: \ Program Files \ Inet Pristatymo \ inetdl.exe
C: \ Program Files \ Inet Pristatymo \ intdel.exe
C: \ Program Files \ Inet Pristatymas
C: \ Program Files \ AKL \ akl.dll
C: \ Program Files \ AKL \ akl.exe
C: \ Program Files \ AKL \ uninstall.exe
C: \ Program Files \ AKL \ unsetup.exe
C: \ Program Files \ AKL

Trojan.Fake-Drop/Gen
C: \ WINDOWS \ SYSTEM32 \ VBSYS2.DLL
C: \ WINDOWS \ SYSTEM32 \ AWTOOLB.DLL
C: \ WINDOWS \ SYSTEM32 \ SYSREQ.EXE
C: \ WINDOWS \ SYSTEM32 \ WINWGPX.EXE
C: \ WINDOWS \ SYSTEM32 \ BDN.COM
C: \ WINDOWS \ SYSTEM32 \ MSSECU.EXE
C: \ WINDOWS \ SYSTEM32 \ VCATCHPI.DLL
C: \ WINDOWS \ SYSTEM32 \ AKTTZN.EXE
C: \ WINDOWS \ SYSTEM32 \ WINSYSTEM.EXE
C: \ WINDOWS \ SYSTEM32 \ NEWSD32.EXE
C: \ WINDOWS \ SYSTEM32 \ EMESX.DLL
C: \ WINDOWS \ SYSTEM32 \ rundl1.exe
C: \ WINDOWS \ SYSTEM32 \ ANTICIPATOR.DLL
C: \ WINDOWS \ SYSTEM32 \ THUN.DLL
C: \ WINDOWS \ SYSTEM32 \ THUN32.DLL
C: \ WINDOWS \ SYSTEM32 \ MSVCHOST.EXE
C: \ WINDOWS \ SYSTEM32 \ REGC64.DLL
C: \ WINDOWS \ SYSTEM32 \ REGM64.DLL
C: \ WINDOWS \ SYSTEM32 \ SSVCHOST.COM
C: \ WINDOWS \ SYSTEM32 \ SSVCHOST.EXE
C: \ WINDOWS \ SYSTEM32 \ TEMP # 01.EXE
C: \ WINDOWS \ SYSTEM32 \ MSGP.EXE
C: \ WINDOWS \ SYSTEM32 \ MTR2.EXE
C: \ WINDOWS \ SYSTEM32 \ h TKEYSH @ @ @ K. DLL
C: \ WINDOWS \ SYSTEM32 \ NETODE.EXE
C: \ WINDOWS \ SYSTEM32 \ MEDUP012.DLL
C: \ WINDOWS \ SYSTEM32 \ MEDUP020.DLL
C: \ WINDOWS \ SYSTEM32 \ SSURF022.DLL
C: \ WINDOWS \ SYSTEM32 \ MSNBHO.DLL
C: \ WINDOWS \ SYSTEM32 \ BSVA-EGIHSG52.EXE
C: \ WINDOWS \ SYSTEM32 \ PS1.EXE
C: \ WINDOWS \ SYSTEM32 \ HXIWLGPM.DAT
C: \ WINDOWS \ SYSTEM32 \ HXIWLGPM.EXE
C: \ WINDOWS \ SYSTEM32 \ TAACK.DAT
C: \ WINDOWS \ SYSTEM32 \ TAACK.EXE
C: \ WINDOWS \ SYSTEM32 \ MWIN32.EXE
C: \ WINDOWS \ SYSTEM32 \ VBIEWER.OCX
C: \ WINDOWS \ SYSTEM32 \ HOPROXY.DLL
C: \ WINDOWS \ SYSTEM32 \ WINLOGONPC.EXE
C: \ WINDOWS \ BDN.COM
C: \ WINDOWS \ MSSECU.EXE
C: \ WINDOWS \ WINSYSTEM.EXE
C: \ WINDOWS \ ITUNESMUSIC.EXE
C: \ WINDOWS \ A. GPGB
C: \ WINDOWS \ BASE64.TMP
C: \ WINDOWS \ FVPROTECT.EXE
C: \ WINDOWS \ USERCONFIG9X.DLL
C: \ WINDOWS \ ZIP1.TMP
C: \ WINDOWS \ ZIP2.TMP
C: \ WINDOWS \ ZIP3.TMP
C: \ WINDOWS \ ZIPPED.TMP

Dpcproxy
C: \ WINDOWS \ SYSTEM32 \ DPCPROXY.EXE

Unclassified.Unknown Kilmė / System
C: \ WINDOWS \ SYSTEM32 \ PSOF1.EXE

Adware.Pacer D
C: \ WINDOWS \ SYSTEM32 \ PSOFT1.EXE

Trojan.Dluca I
C: \ WINDOWS \ SYSTEM32 \ SNCNTR.EXE

Adware.Vundo-Variantas / J
C: \ WINDOWS \ QRBGLTOS.DLL

Trojan.Net-MSV/VPS-Variant
C: \ WINDOWS \ GRFXBANOMOK.DLL

Adware.180solutions/Seekmo/Zango
C: \ Documents and Settings \ Svečių \ DESKTOP \ setup.exe

Adware.Tracking Cookie
C: \ Documents and Settings \ Guest \ Cookies \ svečių @ DoubleClick [2]. Txt
C: \ Documents and Settings \ Guest \ Cookies \ svečių @ serving-sys [2]. Txt
C: \ Documents and Settings \ Guest \ Cookies \ svečių @ atdmt [2]. Txt
C: \ Documents and Settings \ Guest \ Cookies \ svečių @ TradeDoubler [2]. Txt
C: \ Documents and Settings \ Guest \ Cookies \ guest@bs.serving-sys [2]. Txt

**lolli_pop** · #6 Spalis 26, 2008, 16:11

MalwareByres Prisijungti:

Malwarebytes 'Anti-Malware 1,30
Duomenų bazės versija: 1324
Windows 5.1.2600 Service Pack 2

26/10/2008 23:09:02
mbam-log-2008-10-26 (23-09-02). Txt

Scan Type: Quick Scan
Objektai nuskaitomi: 52.045
Praėjęs laikas: 4 minutės (-ai), 36 second (s)

Atminties procesai Infected: 0
Atminties moduliai Infected: 0
Registro raktus Infected: 0
Vertybių registrą Infected: 0
Registro duomenų elementų Infected: 0
Katalogai Infected: 1
Infected files: 1

Atminties procesai Infected:
(Nr. kenksminga daiktų aptikti)

Atminties moduliai Infected:
(Nr. kenksminga daiktų aptikti)

Registro raktus Infected:
(Nr. kenksminga daiktų aptikti)

Vertybių registrą Infected:
(Nr. kenksminga daiktų aptikti)

Registro duomenų elementų Infected:
(Nr. kenksminga daiktų aptikti)

Katalogai Infected:
C: \ Documents and Settings \ Guest \ Local Settings \ Temp \ ac8zt2 (Trojan.FakeAlert) ->

Karantinas ir sėkmingai ištrintas.

Failai Infected:
C: \ WINDOWS \ egsf.exe (Trojan.FakeAlert) -> Karantinas ir sėkmingai ištrintas.

**evilfantasy** · #7 Spalis 26, 2008, 17:27

Need HijackThis dabar

**lolli_pop** · #8 Spalis 27, 2008, 14:27

Citata:

Originally Posted by jamesjon

NOD32 yra už trojos geriausia.

Slaugos plėstis?

**evilfantasy** · #9 Spalis 27, 2008, 14:35

Prašome tik tęsti parašėte Įrašai jei jums reikia pagalbos.

**lolli_pop** · #10 Spalis 27, 2008, 16:03

Logfile Trend Micro HijackThis v2.0.2
Skaitymo išsaugotas 23:01:07, on 27/10/2008
Platforma: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Veikia procesus:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ Spoolsv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe
C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe
C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ explorer.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgrsx.exe
C: \ Program Files \ CyberLink \ PowerDVD \ PDVDServ.exe
C: \ WINDOWS \ SOUNDMAN.EXE
C: \ Acer \ Empowering Technology \ eRecovery \ Monitor.exe
C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe
C: \ Program Files \ BroadJump \ Client fondas \ CFD.exe
C: \ Program Files \ Mergelių Plačiajuostis \ patarėjas \ Broadbandadvisor.exe
C: \ Program Files \ TextBridge Pro Tūkstantmečio \ bin \ InstantAccess.exe
C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
C: \ WINDOWS \ sm56hlpr.exe
C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNo tifier.exe
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ WINDOWS \ system32 \ sistray.exe
C: \ Program Files \ WIDCOMM \ Bluetooth Software \ BTTray.exe
C: \ Program Files \ Ulead Systems \ Ulead Photo Express 3,0 SE \ CalCheck.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Trust \ Easy Webscan 19.200 \ ScanPanel \ ScnPanel.exe
C: \ Program Files \ FinePixViewerS \ QuickDCF2.exe
C: \ PROGRA ~ 1 \ WIDCOMM \ BLUETO ~ 1 \ BTSTAC ~ 1.EXE
C: \ WINDOWS \ system32 \ wuauclt.exe
C: \ Program Files \ HijackThis \ Analyse.exe.exe

R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://global.acer.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Žiniasklaida ernet Nustatymai, ProxyOverride = *. vietos
O2 - BHO: AcroIEHlprObj Class - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: StumbleUpon launcher - (145B29F4-A56B-4b90-BBAC-45784EBEBBB7) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll
O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - C: \ Program Files \ Google \ GoogleToolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 3.1.807.1746 \ SW g.dll
O2 - BHO: Java (tm) Plug-in 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ dislokuoti \ jqs \ ty \ jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - (E99421FB-68DD-40F0-B4AC-B7027CAE2F1A) - C: \ Program Files \ EPSON \ Epson Web-To-Page \ Epson Web-To-Page.dll
O3 - Toolbar: & Google - (2318C2B1-4965-11d4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ GoogleToolbar1.dll
O3 - Toolbar: Epson Web-To-Page - (EE5D279F-081B-4404-994D-C6B60AAEBA6D) - C: \ Program Files \ EPSON \ Epson Web-To-Page \ Epson Web-To-Page.dll
O3 - Toolbar: StumbleUpon Toolbar - (5093EB4C-3E93-40AB-9266-B607BA87BDC8) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O3 - Toolbar: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL
O4 - HKLM \ .. \ Run: [LaunchApp] Alaunch
O4 - HKLM \ .. \ Run: [ntiMUI] C: \ Program Files \ NEWTECH Infosystems \ NTI CD & DVD Maker 7 \ ntiMUI.exe
O4 - HKLM \ .. \ Run: [RemoteControl] "C: \ Program Files \ CyberLink \ PowerDVD \ PDVDServ.exe"
O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32
O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / Sync
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / Sync
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [SiSPower] RUNDLL32.EXE SiSPower.dll, ModeAgent
O4 - HKLM \ .. \ Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM \ .. \ Run: [eRecoveryService] C: \ Acer \ Empowering Technology \ eRecovery \ Monitor.exe
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [BJCFD] C: \ Program Files \ BroadJump \ Client fondas \ CFD.exe
O4 - HKLM \ .. \ Run: [Broadbandadvisor.exe] "C: \ Program Files \ Mergelių Plačiajuostis \ patarėjas \ Broadbandadvisor.exe" / autorun
O4 - HKLM \ .. \ Run: [InstantAccess] C: \ Program Files \ TextBridge Pro Tūkstantmečio \ bin \ InstantAccess.exe / h
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
O4 - HKLM \ .. \ Run: [SMSERIAL] sm56hlpr.exe
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ MSN Messenger \ msnmsgr.exe" / background
O4 - HKCU \ .. \ Run: [SWG] C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNo tifier.exe
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'SYSTEM')
O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Default user')
O4 - Startup: Kometa Screensaver.lnk = C: \ Program Files \ Kometa Ekrano \ Kometa Screensaver.exe
O4 - Startup: IMVU.lnk = C: \ Program Files \ IMVU \ IMVUClient.exe
O4 - Startup: Priedai
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C: \ WINDOWS \ system32 \ sistray.exe
O4 - Global Startup: Bluetooth.lnk =?
O4 - Global Startup: Ulead Photo Express 3,0 SE Kalendorius Checker.lnk = C: \ Program Files \ Ulead Systems \ Ulead Photo Express 3,0 SE \ CalCheck.exe
O4 - Global Startup: ScanPanel.lnk = C: \ Program Files \ Trust \ Easy Webscan 19.200 \ ScanPanel \ ScnPanel.exe
O4 - Global Startup: Exif Launcher S.lnk =?
O4 - Global Startup: Adobe Gamma Loader.lnk = C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O8 - Extra kontekstinio meniu punktą: Pridėti prie "Windows Live & Favoritus -- http://favorites.live.com/quickadd.aspx
O8 - Extra kontekstinio meniu punktą: E & Eksportuoti į "Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ Micros ~ 2 \ Office11 \ EXCEL.EXE/3000
O8 - Extra kontekstinio meniu punktą: Send To & Bluetooth - C: \ Program Files \ Belkin \ Bluetooth Software \ btsendto_ie_ctx.htm
O8 - Extra kontekstinio meniu punktą: Send to & Bluetooth Device ... - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie_ctx.htm
O8 - Extra kontekstinio meniu punktą: StumbleUpon PhotoBlog It! - Res: / / StumbleUponIEBar.dll / blogimage
O9 - Extra button: StumbleUpon - (75C9223A-409A-4795-A3CA-08DE6B075B4B) - C: \ Program Files \ StumbleUpon \ StumbleUponIEBar.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ Micros ~ 2 \ Office11 \ REFIEBAR.DLL
O9 - Extra button: @ btrez.dll, -4.015 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm
O9 - Extra 'Tools' MENUITEM: @ btrez.dll, -12.650 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' MENUITEM: @ Xpsp3res.dll, -20.001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O16 - DPF: (20A60F0D-9AFA-4515-A0FD-83BD84642501) (Checkers Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll
O16 - DPF: (48DD0448-9209-4F81-9F6D-D83562940134) (MySpace Uploader Control) -- http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: (5C051655-FCD5-4969-9182-770EA5AA5565) (solitaire Showdown klasė) -- http://messenger.zone.msn.com/binary...n.cab56986.cab
O16 - DPF: (5D6F45B3-9043-443D-A792-115447494D24) (UnoCtrl klasė) -- http://messenger.zone.msn.com/EN-GB/.../GAME_UNO1.cab
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl klasė) -- http://update.microsoft.com/windowsu...?1177956484625
O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient klasė) -- http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: (F5A7706B-B9C0-4C89-A715-7A0C6B05DD48) (Minesweeper Flags Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab
O18 - Protocol: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll
Ø20 - AppInit_DLLs: avgrsstx.dll
Ø20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: AVG8 watchdog (avg8wd) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C: \ Program Files \ WIDCOMM \ Bluetooth Software \ bin \ btwdins.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe

--
End of file - 11.086 baitų

Manau, kad Trojos arklys (-ų) atėjo iš mano sesuo parsisiųsti žaidimų savo telefoną, aš nesu įsitikinęs, bet jie užkrėsti atkurti dabar.

Panašios Temos
Siūlas	Thread Starter	Forumas	Atsakymai	Last Post
Cant find Trojos arklys!	Jophen	Virus, Spyware & Security	1	29 gruodis 2008 20:55
Trojan.vundo.h, Trojan.Agent, adware.mirar + MORE! : (	sillyarfer	Virus, Spyware & Security	1	14 gruodis 2008 09:59
Gal Trojan	moyra	Virus, Spyware & Security	5	8 sausis 2008 23:55
Trojos arklys ir AVG	chuckeruk	Virus, Spyware & Security	8	2 liepa 2007 10:02
MSN Trojan	mitchbeast	Virus, Spyware & Security	9	Birželis 20, 2007 12:26