Ana8ematismeno Kaspersky

[N1ghtW0lf]

Apo to prwi exw to parakatw problhma...

 

ksafnika to kaspersky stamathse na fortwnei me to startup twn windows, oi 2 entoles pou fortwnoun me to startup twn windows einai

1) "kav.exe" kai

2) "kavsvc.exe"

 

Loipon, to (2) fortwnei kanonika mesw SYSTEM ston task manager, kai to (1) den fortwnei kan, otan trexw to "kav.exe" manually, mpenei gia ligo ston task manager, alla meta apo liga lepta, h (1) eksafanizetai!

 

Prospa8hsa na kanw ena uninstall gia na to ksanaperasw to programma alla mou enfanizei munhma na stamathsw prwta thn entolh (2) gia na sunexisw...

 

Prospa8wntas na stamathsw thn (2) apo ton task manager mou bgazei sfalma

"The operation could not be completed. Access is denied".

 

Opote den mporw na kanw tipota...eimai sigouros pws kapoio skouliki, kana alogaki, kana virus 8a exw piasei, dokimasa kapoia free online scanners, eidika to Trend Micro houseCall

ekane polu douleia, brhke polla kai ta ka8arise, twra trexw to online ths kaspersky...

 

Ean me ta online den mporesw na kanw tpt, ti me sumbouleuete na kanw agaphtoi sunforumites?

[Dark-Shadow]

ena hijackthis tha se voithouse akrikei na mas peis ke ta logs na se voithisoume!!!

[N1ghtW0lf]

1) what is hijackthis ?

2) pou krataei to #%#@%@ kaspersky ta logs?

 

 

 

PS. Akurh h prwth erwthsh, to brhka kai to trexw twra!

[N1ghtW0lf]

Logfile of HijackThis v1.99.1

Scan saved at 17:55:39 PM, on 15.05.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\SYSTEM32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\cisvc.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

C:\WINDOWS\system32\WFXSVC.EXE

C:\Program Files\WinFax\WFXMOD32.EXE

C:\Program Files\Microsoft IntelliType Pro\itype.exe

C:\Program Files\Microsoft IntelliPoint\ipoint.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\WINDOWS\SYSTEM32\cidaemon.exe

C:\Program Files\Maxthon\Maxthon.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Winamp\winamp.exe

C:\Downloads\software\HijackThis.exe

 

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)

O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"

O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"

O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxdm799YYGR

O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Ε&ξαγωγή στο Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O15 - Trusted Zone: http://www.whitepages.gr

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1109778032343

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{B3935FA0-3E1E-460A-825E-A84262FF6F5E}: NameServer = 194.219.227.2,193.92.150.3

O17 - HKLM\System\CCS\Services\Tcpip\..\{C9341922-D83C-40DF-A2B3-36DB5B1A8698}: NameServer = 193.92.150.3 194.219.227.2

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - C:\WINDOWS\system32\WFXSVC.EXE

 

 

Auta brhke to hijackthis, ti kanw? ta tikarw ola kai ta sbhnw?

[panoulis23]

mpes se aftin tin selida http://www.hijackthis.de/ kai anevase to logfile tou hijack kai tha deis poia einai nasty kai poia oxi. mia matiapou eriksa prepei na exeis 2-3 kakovoula pragmatakia.

[N1ghtW0lf]

wraios, ok ebgala 2-3 pragmatakia

alla parola auta, to problem paramenei....ti allo na praksw twra exei kaneis kamia idea?

[panoulis23]

pigaine sta ergaleia diaxeirhshs kai sta services kai apo ekei vale to kavsvs na einai anenergo i mi aytomato, epeita na vgaleis to kav apo to start up , kane ena rebbot kai pistevw na mporeseis na to kaneis uninstall to kasperky. meta vlepoume

[N1ghtW0lf]

einai hdh disabled, alla started kai den mou dinei epilogh na to stamathsw h' oxi...

8a kanw ena reboot se ligaki na doume...

[N1ghtW0lf]

ola kala, meta to reboot, ekana uninstall, kai eballa allh ekdosh kai ola leitourgoun pali apsoga!

 

eyxaristw olous

[kavatzoulas]

βαλε το AVG της GRISOFT και θα ησυχασεις 4 χρονια μεχρι σημερα κανενα προβλημα

[N1ghtW0lf]

to AVG to eixa kai egw, alla epiasa kati ious kai to avg den eixe parei xampari tpt,

 

ebala to Trend Micro PC Cillin Internet Security kai einai polu kalo mexri stigmhs!

[Dark-Shadow]

Den aksizei allo antivirus ektos nod32 ke kaspersky!!!

[greekboy]

kai ego exo to AVG kai mou fenetai poli kalo anyway..afou lithike to provlima....:)

[xaxa1982]

Το καλύτερο antivirus σύστημα το έχει το Linux...Γι'αυτό δεν χρειάζεται καθόλου antivirus...

[e-tic]

Ακόμα καλύτερο "antivirus" είναι το MacOS...

Πάντως για πισάκι, NOD32, μου έχει βρεί ότι τα υπόλοιπα απλά αγνοούν!!!