tin patisame?

[LovingCrazy]

Geia sas...

to problima mou einai to eksis:

exw windows xp pro (kala auto einai apo mono tou problima alla to parablepoume) kai edw kai 2 meres, opote sindeomai sto internet, meta apo ligo to theme allazei to xrwma kai to font sto theme twn windows kai meta oi selides pou paw na fortwsw, bgazoun to klasiko minima "cannot find..."

pou kai pou ksanaepanerxete to arxiko theme, ksanallazei kok...

otan paw na kanw disconnect, den eksafanizetai to analogo eikonidiaki kai episeis to fotaki tou modem den svinei...

mono me restart epanerxontai ola sti fisiologiki tous katastasi...

to AVG den mou bgazei pws exw molinthei...alla pote den ksereis

mipws einai kanenas neos ios?

exei antimetopisei kaneis kati paromoio?

sas euxaristw

[billpeppas]

Exeis ton IO Blaster , kai pithanwn kai kapoio spyware.

 

Katevase apo to site tis microsoft to patch gia ton Blaster ( Kane search sto site ths microsoft gia to "KB823980" , kai katevase thn analogh ekdosh , gia Windows XP profanws , agglika h ellhnika ).

Epishs prwtou kaneis apply to patch , trekse to FixBlast.exe ths Symantec ( pairneis direct link , apo search sto google gia "FixBlast.exe )

 

Gia na ta katevaseis , an sou kleinei to PC , kane apla:

Start->Run->Services.msc & pata enter.

Phgaine sto "Remote Procedure Call ( RPC )" , kai sto Recovery , vale kai sta 3 drop-down menus , to "TAKE NO ACTION".

 

Afou ta katevaseis , kane restart , mpes se Safe Mode , trekse to FixBlast.exe , kai afou teleiwsei , egkatesthse to KB823980.

Kane restart.

 

Epishs trekse meta apo to apply tou patch , kapoio spyware remover.

[LovingCrazy]

ma o blaster einai autos pou sou emfanizei ena minima me tin antistrofi metrisi, etsi den einai? mou eixe emfanistei paliotera kai eixa katharisei to pc mou...

iparxei kai i sigkekrimeni idiotita tou blaster pou den exw ipopsin?

signomi kai den thelw na se amfisvitisw, aplws to exw ws aporia...

[knightmare]

Basika uparxoun 6 blaster,alla eisai sigouros oti einai o blaster?

[dali13gr]

Kalispera

 

Pithanws exeis prosvlithei apo kapoio adware,spyware e.t.c, e.t.c. Kane ena scan me to Adaware i to Spybot kai des ti vriskoun. An den vroun kati kai efoson les oti den mporeis na anoikseis selides ston IE, tote mallon einai hijacked o IE sou opote katevase kai to HijackThis(einai poly mikro) kai kane scan na deis ti vriskei.

 

Elpizw na voithisa

[LovingCrazy]

auta bgazei:

 

Logfile of HijackThis v1.98.2

Scan saved at 1:59:14 πμ, on 17/9/2004

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\Grisoft\AVG6\avgserv.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Creative\Shared Files\CAMTRAY.EXE

C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe

C:\WINDOWS\System32\ctfmon.exe

C:\WINDOWS\sllights.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Documents and Settings\EXoRCiST\Desktop\jack\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com'>http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com'>http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr/*http://www.yahoo.com/ext/search/search.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

O1 - Hosts file is located at: C:\WINDOWS\nsdb\hosts

O1 - Hosts: 81.211.105.69 lender-search.com

O1 - Hosts: 81.211.105.68 hot-searches.com

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 6\SnagItBHO.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 6\SnagItIEAddin.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP

O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - (no file)

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - (no file)

O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/76808a0e7ae82f/housecall.antivirus.com/housecall/xscan53.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll

O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{6B4A1183-6AF5-4322-8D31-20468A484E19}: NameServer = 213.249.17.10 213.249.17.11

O17 - HKLM\System\CS1\Services\Tcpip\..\{6B4A1183-6AF5-4322-8D31-20468A484E19}: NameServer = 213.249.17.10 213.249.17.11

 

ti kanoume twra? any ideas? fainetai tipota ipopto? :?

[dali13gr]

Kalimera

 

Svise aftes tis eggrfes:O1 - Hosts: 81.211.105.69 lender-search.com

O1 - Hosts: 81.211.105.68 hot-searches.com R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) gia arxi kathws kai otidipote sou fainetai agnwsto(p.x. kapoio programma pou den to anagnwrizeis) kai des an yparxei kapoia veltiwsi