» »

Need HELP! Urgent!

Need HELP! Urgent!

Filipus ::

Need HELP! URGENT!

Stvar je taka, malo se bojim za tiste velike račune. Tako da sem pregledal sistem s Spy Botom, ampak za vsak slučaj prilagam še Hijack This LOG. Prosim svetujte mi kajh naj naredim. Hvala.

Logfile of HijackThis v1.99.1
Scan saved at 16:08:01, on 10.8.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
C:\Program Files\Microsoft Office\Office\1060\OLFSNT40.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Filipus\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.arnes.si
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS\PCHealth\HelpCtr\InstalledSKUs\Professional_32_0424\System\panels\blank.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.arnes.si/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://www.arnes.si/cgi-bin/autoproxy
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.arnes.si:3128
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\sl-si\msntb.dll
O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\sl-si\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {5AA06644-BC46-4220-A460-47A6EB47C96D} - (no file)
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Vrata za Symantec Fax Starter Edition.lnk = C:\Program Files\Microsoft Office\Office\1060\OLFSNT40.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Arnes Help - {EE05BA82-4B29-492D-9B99-C7E8695A3DF2} - http://www.arnes.si/help/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.arnes.si
O16 - DPF: {11311111-1111-1111-1111-111111111157} - file://C:\Recycled\Q330995.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} -
O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binaries/E...
O16 - DPF: {31DDC1FD-CEA3-4837-A6DC-87E67015ADC9} - http://akamai.downloadv3.com/binaries/I...
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: winfws - Unknown owner - C:\WINDOWS\winfws.exe


Prosim za čimprejšnjo pomoč.

Moj rač: Celeron 1,3; 128MB RAM; WinXP, SP1
Ne prelagaj na jutri, kar lahko storiš pojutrijšnjem. :)

djtomekkk ::

C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe

Tole ugasn drug je pa dobr, pa ubistvu povej kaj voč, da pregledamo če je vse o.k., ali kaj?
Lp Tomy


Vredno ogleda ...

TemaSporočilaOglediZadnje sporočilo
TemaSporočilaOglediZadnje sporočilo
»

analiza hijack this

Oddelek: Pomoč in nasveti
171924 (1704) klaudija
»

Optimizacija Win XP

Oddelek: Operacijski sistemi
72991 (2730) jan01
»

Kopiranje iber počasno

Oddelek: Pomoč in nasveti
162202 (1884) brdi
»

Trojanski konj

Oddelek: Pomoč in nasveti
214095 (3706) KaiCris
»

zajedalski spyware

Oddelek: Operacijski sistemi
212593 (2260) hunter01

Več podobnih tem