download manager

[EKTELESTES]

file ekkli, de kserw an to highjack this deixnei k hidden layer windows, alla afou exeis to ad-aware, trekse mia to process watch k kane scan all na deis OLA ta process pou trexoun k kane ena post h steile mou mhn na doume ligo, ok?

[gv]

katevase to highjackthis k kane post ena log tou na doume ti trexei sto background k de fainetai. epishs boreis na deis apo to ad-watch tou ad-aware an to exeis h kapoio process manager alla na deixnei ola ma ola ta process modules pou trexoun, kryfa k fanera.

 

 

to flashget (trial ekdosi) exei kapoies diafimiseis oi opoies profanos apoteloun ad-aware.

 

i registered ekdosi

den exei oute ad-awares oute spywares !!!

oute trexoun "perierga" processes sta windows !!!

oute to ad-aware vriskei kati periergo sto flashget ...

 

parte kai ena HijackThis alla min viasteite na vgalete symperasmata !!!

------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 4:07:44 μμ, on 31/3/2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE

C:\Program Files\F-Secure\Anti-Virus\fssm32.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\F-Secure\Common\FSMA32.EXE

C:\Program Files\F-Secure\Common\FSMB32.EXE

C:\Program Files\F-Secure\Common\FCH32.EXE

C:\Program Files\F-Secure\Common\FAMEH32.EXE

C:\Program Files\F-Secure\Common\FSM32.EXE

C:\Program Files\Microsoft Hardware\Mouse\point32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\F-Secure\Common\FNRB32.EXE

C:\Program Files\F-Secure\Common\FIH32.EXE

C:\Program Files\F-Secure\Anti-Virus\fsav32.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\FlashGet\flashget.exe

C:\Documents and Settings\*****\Desktop\HijackThis.exe

 

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [POINTER] point32.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1108580566796

O17 - HKLM\System\CCS\Services\Tcpip\..\{43AFFA9A-AC80-4ABE-904B-4A64A3F0FE26}: NameServer = 213.249.17.10 213.249.17.11

O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE

O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE

O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE

[sash]

download accelerator

[EKTELESTES]

Gv, oriste , diavase auto k meine makria apo flashget, de thelw na ton ksanavalw pali mono k mono gia na kynhgaw ta spy-ads meta

 

 

http://www.neowin.net/forum/lofiversion/index.php/t294862.html

[gv]

ase ti grafoun ta forums ...

dei3e mou ta spy-ad-awares stin lista tou HijackThis pou mou zitises ...

 

 

ps

auto den simainei oti oi alloi d/m pou anafer9ikan einai kakoi ... apla ego

1. exo voleutei ton flashget ...

2. den mou exei dimiourgisei pote provlima ... kai

3. einai pliros ma pliros parametropoiisimos kai kanei ta panta ...

[EKTELESTES]

i lista pou zhthses einai ypervolika mikrh - mou kanei entypwsh gi auto to tsekara se forums alla. prin legotan "jet car". tsekare ti registry sou h sou pa, tsek kalitera me to process watch tou ad-aware professional na deis ti exeis mesa

[geran]

εγω χρησιμοποιω τον download accelerator...αλλα χτες κουφαθηκα..βαζω να κανει scan το spybot και βρηκε 3 spyware στο folder του...κατεβαζω τα τελευταια virus-definitions για το norton κανω scan και μου βγαζει The file D:\Program Files\DAP\DAPBHO.dll is a Adware threat.!!!

[EKTELESTES]

to xoun gamhsei polla progs me ta spyware, k to getright mono an einai na katevasw kana arxeio anw 50mb to xrhsimopoiw, alliws yparxei panta k o opera ( apla de kserw an opera kanei resume an kopei reuma/kanei reboot to pc ) opote getright k ola ok

[hugelacky]

geran einai gnwstos o DAP gia ta spyware pou koubalaei, kairo twra....