Dodaj do ulubionych

Pomocy :) spyware adware

IP: *.acn.waw.pl 17.03.05, 18:05
Jaki jest skuteczny program do przeskanowania systemu i usuniecia dziadostwa
ktore mi co rusz otwiera cos nowego ? Uzywalem BSP spyware remover ale on cos
tez do konca sobie poradzic nie mogl..
Pozdrawiam.
Obserwuj wątek
    • Gość: nicks Re: Pomocy :) spyware adware IP: *.acn.waw.pl 17.03.05, 18:15
      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.exe
      C:\WINDOWS\System32\Ndiswin.exe
      C:\Program Files\Media Access\MediaAccK.exe
      C:\WINDOWS\System32\mcafee32.exe
      C:\Program Files\Media Access\MediaAccess.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\WINDOWS\System32\devldr32.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\totalcmd\TOTALCMD.EXE
      C:\DOCUME~1\FANTOM\USTAWI~1\Temp\_tc\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant =
      www.websearch.com/ie.aspx?tb_id=50193
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      C:\WINDOWS\System\blank.htm
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      C:\WINDOWS\System\blank.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - Default URLSearchHook is missing
      F2 - REG:system.ini: Shell=Explorer.exe mcafee32.exe
      O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
      O4 - HKLM\..\Run: [NAV Auto Protect] navprotect32.exe
      O4 - HKLM\..\Run: [McAfee Windows Protection] mcafee32.exe
      O4 - HKLM\..\Run: [etbrun] C:\windows\system32\elitewsr32.exe
      O4 - HKLM\..\Run: [Win32 NDIS ] Ndiswin.exe
      O4 - HKLM\..\RunServices: [McAfee Windows Protection] mcafee32.exe
      O4 - HKLM\..\RunServices: [Win32 NDIS ] Ndiswin.exe
      O4 - HKLM\..\RunOnce: [Win32 NDIS ] Ndiswin.exe
      O4 - HKCU\..\Run: [NAV Auto Protect] navprotect32.exe
      O4 - HKCU\..\Run: [McAfee Windows Protection] mcafee32.exe
      O4 - HKCU\..\Run: [Win32 NDIS ] Ndiswin.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\RunOnce: [Win32 NDIS ] Ndiswin.exe
      O9 - Extra button: Killer - {4E977C01-2D5C-11d6-B169-C75E058B1270} - D:\Program
      Files\Super Popup Killer\popkill.exe
      O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be
      Internet Zone

      a to log moze ktos z niego cos wyczyta
      • Gość: Kolobos Re: Pomocy :) spyware adware IP: *.warszawa.sdi.tpnet.pl 17.03.05, 18:37
        Oczywiscie odinstaluj BSP spyware remover, ktory sam jest spyware'em.
        Zamiast tego zainstaluj sobie SpyBot S&D, Ad-Aware, SpywareBlaster i CWS
        Shredder, do tego firewall i antyvirusa np. ZoneAlarm i www.free-av.com

        A co do loga to usun te wpisy:

        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant =
        www.websearch.com/ie.aspx?tb_id=50193
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        C:\WINDOWS\System\blank.htm
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        C:\WINDOWS\System\blank.htm
        R3 - Default URLSearchHook is missing
        F2 - REG:system.ini: Shell=Explorer.exe mcafee32.exe
        O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
        O4 - HKLM\..\Run: [NAV Auto Protect] navprotect32.exe
        O4 - HKLM\..\Run: [McAfee Windows Protection] mcafee32.exe
        O4 - HKLM\..\Run: [etbrun] C:\windows\system32\elitewsr32.exe
        O4 - HKLM\..\Run: [Win32 NDIS ] Ndiswin.exe
        O4 - HKLM\..\RunServices: [McAfee Windows Protection] mcafee32.exe
        O4 - HKLM\..\RunServices: [Win32 NDIS ] Ndiswin.exe
        O4 - HKLM\..\RunOnce: [Win32 NDIS ] Ndiswin.exe
        O4 - HKCU\..\Run: [NAV Auto Protect] navprotect32.exe
        O4 - HKCU\..\Run: [McAfee Windows Protection] mcafee32.exe
        O4 - HKCU\..\Run: [Win32 NDIS ] Ndiswin.exe
        O4 - HKCU\..\RunOnce: [Win32 NDIS ] Ndiswin.exe
        O9 - Extra button: Killer - {4E977C01-2D5C-11d6-B169-C75E058B1270} - D:\Program
        Files\Super Popup Killer\popkill.exe
        O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be
        Internet Zone

        I Fix Checked
        Nie instaluj wiecej spyware'u ;-)
        • Gość: nicks Re: Pomocy :) spyware adware IP: *.acn.waw.pl 18.03.05, 18:39
          Zainstalowalem tego spy bota ale tego nie moze usunac

          DyFuCA.InternetOptimizer: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\Policies\Avenue Media

          DyFuCA.InternetOptimizer: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\Policies\Avenue Media

          DyFuCA.InternetOptimizer: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\Avenue Media

          DyFuCA.InternetOptimizer: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\Avenue Media

          DyFuCA.InternetOptimizer: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\AMeOpt

          DyFuCA.InternetOptimizer: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\AMeOpt

          DyFuCA: Settings (Registry value, fixed)
          HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\BandRest

          DyFuCA: Settings (Registry value, fixing failed)
          HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\BandRest

          Elitum.EliteBar: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\LQ

          Elitum.EliteBar: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\LQ

          Huntbar: Program directory (Directory, fixing failed)
          C:\Program Files\Common Files\WinTools\

          Huntbar: Browser helper object (Registry key, fixing failed)
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
          Helper Objects\{87766247-311C-43B4-8499-3D5FEC94A183}

          Huntbar: Class ID (Registry key, fixing failed)
          HKEY_CLASSES_ROOT\CLSID\{A8DEB4A5-D9EF-4D21-B4F6-921475004E7D}

          Huntbar: Class ID (Registry key, fixed)
          HKEY_CLASSES_ROOT\CLSID\{87067F04-DE4C-4688-BC3C-4FCF39D609E7}

          Huntbar: Class ID (Registry key, fixing failed)
          HKEY_CLASSES_ROOT\CLSID\{87766247-311C-43B4-8499-3D5FEC94A183}

          Huntbar: Root class (Registry key, fixing failed)
          HKEY_CLASSES_ROOT\WToolsB.ResProtocol

          Huntbar: Settings (Registry key, fixed)
          HKEY_USERS\S-1-5-21-1004336348-1958367476-682003330-1002\Software\WinTools

          Huntbar: Settings (Registry key, fixed)
          HKEY_LOCAL_MACHINE\SOFTWARE\WinTools

          Huntbar: Uninstall settings (Registry key, fixed)

          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinTools

          IBIS Toolbar: Settings (Registry key, fixed)
          HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\res

          ISearchTech.PowerScan: Settings (Registry value, fixed)
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\BandRest

          ISearchTech.PowerScan: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\IST

          ISearchTech.PowerScan: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\IST

          Iwantsearch: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\SerG\SearchBar

          Iwantsearch: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\SerG\SearchBar

          n-Case: Settings (Registry key, fixing failed)
          HKEY_USERS\S-1-5-18\Software\salm

          n-Case: Settings (Registry key, fixing failed)
          HKEY_USERS\.DEFAULT\Software\salm

          PeopleOnPage: User settings (Registry key, nothing done)
          HKEY_USERS\S-1-5-18\Software\POP

          PeopleOnPage: User settings (Registry key, nothing done)
          HKEY_USERS\.DEFAULT\Software\POP

          Roings: Class ID (Registry key, fixing failed)
          HKEY_CLASSES_ROOT\CLSID\{E0CE16CB-741C-4B24-8D04-A817856E07F4}

          Czym to potraktowac? :) to jest normalnie utrapienie z tymi otwierajacymi sie
          okienkami :)

Nie pamiętasz hasła

lub ?

 

Nie masz jeszcze konta? Zarejestruj się

Nakarm Pajacyka