SPYBOT SEARCH&DESTROY

galois · 26 Ιουνίου 2004

Καταρχήν καλό είναι να κάνεις uninstall ότι search bar ή παρόμοιο υπάρχει στο add & remove.

Μετά θα βοηθήσει αρκετά το Hijack This 157kb. του Merijn Τις καταχωρήσεις που σου δίνει το Spybot μπορείς να τις σβήσεις από το hijack.Scan κ fix αφού διαβάσεις το tutorial. ΔΕΝ πρέπει να σβήσεις τα πάντα.

Επίσης όσον αφορά τα settings του browser σου' date=' πολύ καλή δουλειά κάνει το CWshredder 134kb.

Kala mou ta les kai ty alla egw ola auta ta vlepw ligo kinezika filarako...8a th psaksw omws...giati eimai kainourios sto pc..me pianeis nomizw etsi??

Εννοείται όλα αυτά με system restore off. Φαντάζομαι έχεις όλα τα critical updates στο os σου αλλιώς δεν κάνουμε δουλειά.

Btw το SpybotSD 1.3 final έχει updates, αν δεν το έχεις κάνει ήδη, κατέβασε τα.

To party sluts δεν το έχω ξανασυναντήσει οπότε δεν μπορώ να σου πω με σιγουριά.

/sc

galois · 26 Ιουνίου 2004

kala ola auta pou mou les alla ligo kinezika mou fenode...8a th psaksw th douleia kai ...eimai ligo kainourios sto pc..

ty

johnnyestia · 26 Ιουνίου 2004

Το SpybotSD εκτός από free & ad free' date=' είναι [b']one man project[/b] στην ουσία.

/sc

DSO Exploit: Data source object exploit (Αλλαγή μητρώου, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Αλλαγή μητρώου, nothing done)

HKEY_USERS\S-1-5-21-1004336348-926492609-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Αλλαγή μητρώου, nothing done)

HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Αλλαγή μητρώου, nothing done)

HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Αλλαγή μητρώου, nothing done)

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

PartySluts: Uninstall settings (Εγγραφή μητρώου, nothing done)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Msdmxm

PartySluts: Settings (Εγγραφή μητρώου, nothing done)

HKEY_USERS\S-1-5-21-1004336348-926492609-682003330-1003\Software\msdmxm

--- Spybot - Search && Destroy version: 1.3 ---

2004-06-16 Includes\Cookies.sbi

2004-06-16 Includes\Dialer.sbi

2004-06-17 Includes\Hijackers.sbi

2004-06-16 Includes\Keyloggers.sbi

2004-05-12 Includes\LSP.sbi

2004-06-16 Includes\Malware.sbi

2004-06-16 Includes\Revision.sbi

2004-06-16 Includes\Security.sbi

2004-06-16 Includes\Spybots.sbi

2004-06-16 Includes\Tracks.uti

2004-06-16 Includes\Trojans.sbi

Auta einai ta results..opws eipe kai o parapanw filos...ta dior8wnei mexri to epomeno scanarisma

:roll:

loipon psaxnontas sto google epeidh eixa kai ego to idio problhma mpainontas sto support forum toy spybot eida oti einai enhmeromenoi gia to sygkekrimeno problhma kai oti tha lythei me kapoio update syntoma

perissoteres plhrofories edo

http://forums.net-integration.net/index.php?showtopic=15308

yparxei kai manual diorthosh toy problhmatos ekei

galois · 29 Ιουνίου 2004

Logfile of HijackThis v1.97.7

Scan saved at 11:46:08 μμ, on 29/6/2004

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\System32\RunDll32.exe

C:\Program Files\Microsoft Hardware\Keyboard\type32.exe

C:\Program Files\Winamp\winampa.exe

C:\WINDOWS\System32\pctspk.exe

C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe

C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

C:\windows\system32\msdmxm.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\PowerS.exe

C:\Program Files\Home Media Networks Limited\ShowShifter\RFAnywhere.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\WINDOWS\System32\ctfmon.exe

C:\Program Files\Prolink\PlayTV Pro\TVRMVCR.EXE

C:\Program Files\Prolink\PlayTV Pro\TVSCHL.EXE

C:\Program Files\Paltalk\pnetaware.exe

C:\Program Files\Norton AntiVirus\SAVScan.exe

C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\ΚΩΣΤΑΣ\Επιφάνεια εργασίας\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.insomnia.gr/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Onlinedirect/Portal/portal.html

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Συνδέσεις

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Ραδιόφωνο - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [CM-SmWizard] C:\WINDOWS\System\SmWizard.exe

O4 - HKLM\..\Run: [intelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe

O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

O4 - HKLM\..\Run: [Msdmxm] c:\windows\system32\msdmxm.exe /noconnect

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [PowerS] C:\WINDOWS\PowerS.exe

O4 - HKLM\..\Run: [showShifter X10 Daemon] "C:\Program Files\Home Media Networks Limited\ShowShifter\RFAnywhere.exe"

O4 - HKLM\..\Run: [showShifter TVTV EPG Daemon] "C:\Program Files\Home Media Networks Limited\ShowShifter\TVTVD.exe"

O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet

O4 - HKCU\..\Run: [instant Access] rundll32.exe EGCOMLIB_1034.dll,InstantAccess

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - Startup: PalNetaware.lnk = C:\Program Files\Paltalk\pnetaware.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O4 - Global Startup: Remote Controller.lnk = C:\Program Files\Prolink\PlayTV Pro\TVRMVCR.EXE

O4 - Global Startup: TVSCHL.lnk = C:\Program Files\Prolink\PlayTV Pro\TVSCHL.EXE

O9 - Extra button: Yahoo! Messenger (HKLM)

O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)

O9 - Extra button: Messenger (HKLM)

O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)

O16 - DPF: {093F9CF8-0DE1-491C-95D5-5EC257BD4CA3} - http://akamai.downloadv3.com/binaries/IA/dtc32_EN_XP.cab

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

O16 - DPF: {35F00243-90DA-11D0-9273-00C0F0069EA7} - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab'>http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab

O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {F5820AD3-9B20-423E-B2AA-7AF2B4055746} (CRegistryDownload Class) - http://download.paltalk.com/download/0.x/regdload.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{0096A936-00F0-40A7-88A4-04AADCBC796C}: NameServer = 213.249.17.11 213.249.17.10

O17 - HKLM\System\CS1\Services\Tcpip\..\{0096A936-00F0-40A7-88A4-04AADCBC796C}: NameServer = 213.249.17.11 213.249.17.10

auta einai ola..ti kanw fix apo edw??

madsc · 30 Ιουνίου 2004

Αφού τρέξεις ένα CWshredder 134kb, ρίξε μια ματιά στο: tutorial, του hijackthis για το τι σβήνεις.

/sc

Σύνδεση

SPYBOT SEARCH&DESTROY

Προτεινόμενες αναρτήσεις

galois

galois

johnnyestia

galois

madsc

Αρχειοθετημένο

Σύνδεση