» »

Spyware + Nagware težave... Zaenkrat proven neodstranljivo

Spyware + Nagware težave... Zaenkrat proven neodstranljivo

Filipus ::

Pozdravchich...

Zadnje case so se mi kar naenkrat začele prikazovati reklame, neodvisno od tega ali sem povezan s svetovnim spletom, ali ne in ne glede na to kateri program imam odprt. Poskusil sem že počistiti procese v Upravitelju opravil, pa ni pomagalo... AntiVir + Ad-aware ne rešita težave... Naredil sem scan s HijackThis-om, pa raje nebi nič reševal brez poprejšnjega posvetovanja z vami...

Tako da... Tu je moj Hijack LOG, pa bi bil ekstremno vesel, če bi mi lahko pomagali...

Hvala...

Logfile of HijackThis v1.99.1
Scan saved at 10:44:03, on 17.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\atiptaxx.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Tata\My Documents\??stem\?vchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4984AE94-6609-438E-2976-4FB60F4DF29E} - C:\WINDOWS\system32\uxryidvi.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\retadpu1002397.exe 61A847B5BBF72813329B3A557BFE01F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Ntba] "C:\PROGRA~1\COMMON~1\YSTEM~1\winspool.exe" -vt yazb
O4 - HKCU\..\Run: [Bqgxom] "C:\Documents and Settings\Tata\My Documents\??stem\?vchost.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sprejmi z &BitSpiritom - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/S...
O17 - HKLM\System\CCS\Services\Tcpip\..\{DB3CF4E7-12DA-48A0-97A3-95CC777461F6}: NameServer = 212.18.32.10 212.18.32.12
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Ne prelagaj na jutri, kar lahko storiš pojutrijšnjem. :)

StratOS ::

O4 - HKLM\..\Run: [runner1] C:\WINDOWS\retadpu1002397.exe 61A847B5BBF72813329B3A557BFE01F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
To bo gotovo tvoj problem, drugače pa narejeni log lahko prečekiraš na http://www.hijackthis.de/
Hm, tudi C:\Documents and Settings\Tata\My Documents\??stem\?vchost.exe je čuden :)
Jaz bi probal z kakšnim boljšim AV-jem ( po možnosti free ),predvsem pregledal startup vnose najsibo programe ali servise.
"Multitasking - ability to f##k up several things at once."
"It works better if you plug it in."
"The one who is digging the hole for the other to fall in is allready in it."


Vredno ogleda ...

TemaSporočilaOglediZadnje sporočilo
TemaSporočilaOglediZadnje sporočilo
»

analiza hijack this

Oddelek: Pomoč in nasveti
171947 (1727) klaudija
»

problem z računalnikom!!

Oddelek: Pomoč in nasveti
112310 (2109) mjk
»

Noče me vpisat v msn! probal vse nasvete že!

Oddelek: Programska oprema
363035 (2538) ;-)
»

Težave Firefox-om

Oddelek: Pomoč in nasveti
72147 (2020) mikes
»

Trojan big problem:(

Oddelek: Strojna oprema
133818 (3611) mini-moris

Več podobnih tem