Co to za programy jakie wykrył Ad-AWare 8.02

Witajcie,powiedzcie mi co to za programy

C\WINDOWS\erdnt\HIV-backup\ERDNTEXE

C\WINDOWS\erdnt\subst\ERDNTEXE

C\WINDOWS\NRCMD.exe

C\WINDOWS\SWREG.exe

C\WINDOWS\SWSC.exe

C\WINDOWS\SYSTEM32\skaner online uninstal.exe

jakie wykrył Ad-AWare 8.0.2. i się zatrzymał, a ja nie wiem co dalej? Jakatrzeba coś usunać proszę powiedzcie jak to się robi wtym programie.

proszę napiszcie po ludzku co zawiera ten log

Logfile created: 2009-02-06 0:50:13

Lavasoft Ad-Aware version: 8.0

Extended engine version: 8.1

User performing scan: 1

*********************** Definitions database information ***********************

Lavasoft definition file: 146.6

Extended engine definition file: 8.1

******************************** Scan results: *********************************

Scan profile name: Full Scan (ID: full)

Objects scanned: 70548

Objects detected: 9

Type Detected

==========================

Processes…: 0

Registry entries: 0

Hostfile entries: 0

Files…: 6

Folders…: 0

LSPs…: 0

Cookies…: 3

Browser hijacks.: 0

MRU objects…: 0

Skipped items:

Description: C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Description: C:\WINDOWS\erdnt\subs\ERDNT.EXE Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Description: C:\WINDOWS\NIRCMD.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Description: C:\WINDOWS\SWREG.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Description: C:\WINDOWS\SWSC.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Description: C:\WINDOWS\system32\SkanerOnlineUninstall.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Removed items:

Description: *hit.gemius* Family Name: Cookies Clean status: Success Item ID: 409369 Family ID: 0

Description: *revsci* Family Name: Cookies Clean status: Success Item ID: 409137 Family ID: 0

Description: *adserv* Family Name: Cookies Clean status: Success Item ID: 408921 Family ID: 0

Scan and cleaning complete: Finished correctly after 1157 seconds

*********************************** Settings ***********************************

Scan profile:

ID: full, enabled:1, value: Full Scan

ID: scancriticalareas, enabled:1, value: true

ID: scanrunningapps, enabled:1, value: true

ID: scanregistry, enabled:1, value: true

ID: scanlsp, enabled:1, value: true

ID: scanads, enabled:1, value: true

ID: scanhostsfile, enabled:1, value: true

ID: scanmru, enabled:1, value: true

ID: scanbrowserhijacks, enabled:1, value: true

ID: scantrackingcookies, enabled:1, value: true

ID: closebrowsers, enabled:1, value: false

ID: folderstoscan, enabled:1, value: C:\

ID: scanrootkits, enabled:1, value: true

ID: usespywareheuristics, enabled:1, value: true

ID: extendedengine, enabled:0, value: true

ID: useheuristics, enabled:0, value: true

ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict

ID: filescanningoptions, enabled:1

ID: archives, enabled:1, value: true

ID: onlyexecutables, enabled:1, value: false

ID: skiplargerthan, enabled:1, value: 20480

Scan global:

ID: global, enabled:1

ID: addtocontextmenu, enabled:1, value: true

ID: playsoundoninfection, enabled:1, value: false

ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav

Scheduled scan settings:

Update settings:

ID: updates, enabled:1

ID: launchthreatworksafterscan, enabled:1, value: normal, domain: normal,off,silently

ID: displaystatus, enabled:1, value: false

ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall

ID: autodetectproxy, enabled:1, value: false

ID: useautoconfigscript, enabled:1, value: false

ID: autoconfigurl, enabled:0, value:

ID: useproxy, enabled:1, value: false

ID: proxyserver, enabled:0, value:

ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall

ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall

ID: schedules, enabled:1, value: true

ID: updatedaily, enabled:1, value: Daily

ID: time, enabled:1, value: Thu Feb 05 19:15:00 2009

ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly

ID: weekdays, enabled:1

ID: monday, enabled:1, value: false

ID: tuesday, enabled:1, value: false

ID: wednesday, enabled:1, value: false

ID: thursday, enabled:1, value: false

ID: friday, enabled:1, value: false

ID: saturday, enabled:1, value: false

ID: sunday, enabled:1, value: false

ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31

ID: scanprofile, enabled:1, value:

ID: auto_deal_with_infections, enabled:1, value: false

ID: updateweekly, enabled:1, value: Weekly

ID: time, enabled:1, value: Thu Feb 05 19:15:00 2009

ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly

ID: weekdays, enabled:1

ID: monday, enabled:1, value: true

ID: tuesday, enabled:1, value: false

ID: wednesday, enabled:1, value: false

ID: thursday, enabled:1, value: true

ID: friday, enabled:1, value: false

ID: saturday, enabled:1, value: false

ID: sunday, enabled:1, value: false

ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31

ID: scanprofile, enabled:1, value:

ID: auto_deal_with_infections, enabled:1, value: false

Appearance settings:

ID: appearance, enabled:1

ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource

ID: showtrayicon, enabled:1, value: true

ID: language, enabled:1, value: en, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language

Realtime protection settings:

ID: realtime, enabled:1

ID: processprotection, enabled:1, value: true

ID: registryprotection, enabled:0, value: false

ID: networkprotection, enabled:0, value: false

ID: loadatstartup, enabled:1, value: true

ID: usespywareheuristics, enabled:0, value: false

ID: extendedengine, enabled:0, value: false

ID: useheuristics, enabled:0, value: false

ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict

ID: infomessages, enabled:1, value: display, domain: display,dontnotify,onlyimportant

****************************** System information ******************************

Computer name: xxxxx1

Processor name: Intel® Celeron® CPU 2.53GHz

Processor identifier: x86 Family 15 Model 4 Stepping 1

Raw info: processorarchitecture 0, processortype 586, processorlevel 15, processor revision 1025, number of processors 1

Physical memory available: xxxxx bytes

Physical memory total: xxxxxxx bytes

Virtual memory available: yyyy bytes

Virtual memory total: yyyy bytes

Memory load: 48%

Microsoft Windows XP Home Edition Dodatek Service Pack 3 (build 2600)

Windows startup mode:

Running processes:

PID: 1768 name: \SystemRoot\System32\smss.exe owner: SYSTEM domain: ZARZ

Podaj log z Combofix

Logi dajesz na http://wklej.eu lub na http://wklej.org a w poście dajesz tylko link

ok. ale możesz powiedzieć jak się usuwa z tego nowego Ad-Awara

To, co wykrył Ad-aware, to są obiekty narzędzi, które używałeś (np. ComboFixa, SDFixa, lub SmitfraudFixa), ostatni obiekt mówi sam za siebie.

Jednym słowem - Ad-aware się pomylił.

jessi

Jak nie mam już tych programów czyli narzędzia są mi niepotrzebne to mogę się ich pozbyć (usunać

Aha, chcesz to usunąć, a w programie nie ma opcji “Usuń”? Pewnie jest, tylko trzeba poszukać, np. w przycisku “Settings”.

Niestety, ja nie mam “Ad-aware”, więc w tej kwestii dokładnie nie potrafię wytłumaczyć, gdzie tego szukać. Pewnie inni też nie wiedzą, skoro nikt tu nie udzielił takiej odpowiedzi.

Ostatecznie te pliki możesz usunąć także ręcznie.

jessi