maxibb
(Funuman)
29 Grudzień 2006 16:46
#1
Witam, mam problem, i uważam że wy, znawcy mi pomożecie:p.
Mianowicie od pewnego czasu nękają mnie wirusy o nazwach:
FastClick
DoubleClick
HitBox
Jestem w tym zielony, ale jak skanowałem SPYBOTEM to niby sie usuneły, ale wciaż jest to samo.
Strasznie mnie to wnerwia, podwujne klikanie, czy zatrzymywanie sie myszki podczas pracy.
Jak sie tego ścierwa moge pozbyć?
Jeżeli macie zamiar podać mi link do jakiegoś spybot’a , to prosze żeby on był darmowy i 100% skuteczny.
zpz
adam9870
(adam9870)
29 Grudzień 2006 16:48
#2
Proszę wkleić na Forum zestaw logów - HijackThis i SilentRunners.
http://forum.dobreprogramy.pl/viewtopic.php?t=36654
maxibb
(Funuman)
29 Grudzień 2006 16:52
#3
Wklejam tylko z HijackThis (przepraszam ale Silenta pobrać ni moge)
Logfile of HijackThis v1.99.1
Scan saved at 17:55:04, on 2006-12-29
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\MaxiBB\Pulpit\patryka\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
adam9870
(adam9870)
29 Grudzień 2006 16:58
#4
Log czysty.
Kosmetycznie możesz ciachnąć.
Zrób skan http://www.ewido.net/en/ i następnie pokaż raport z niego oraz log z SilentRunners .
maxibb
(Funuman)
29 Grudzień 2006 16:59
#5
Skan z Silenta leci.
"Silent Runners.vbs", revision 49, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"
Startup items buried in registry:
---------------------------------
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS]
"Steam" = "(empty string)" [file not found]
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]
"NeroFilterCheck" = "C:\WINDOWS\system32\NeroCheck.exe" ["Ahead Software Gmbh"]
"SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"" ["Sun Microsystems, Inc."]
"avast!" = "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [null data]
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\ {++}
"avp6_post_uninstall" = "(empty string)" [file not found]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM...CLSID} = "AcroIEHlprObj Class"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM...CLSID} = "SSVHelper Class"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll" ["Sun Microsystems, Inc."]
{AA58ED58-01DD-4d91-8333-CF10577473F7}\(Default) = (no title provided)
-> {HKLM...CLSID} = "Google Toolbar Helper"
\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
-> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
-> {HKLM...CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]
"{472083B0-C522-11CF-8763-00608CC02F24}" = "avast"
-> {HKLM...CLSID} = "avast"
\InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
<> AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."]
HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
-> {HKLM...CLSID} = "PDF Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]
HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"
-> {HKLM...CLSID} = "avast"
\InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"
-> {HKLM...CLSID} = "avast"
\InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------
Note: detected settings may not have any effect.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\
"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}
"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}
Active Desktop and Wallpaper:
-----------------------------
Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState
Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"
Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\MaxiBB\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"
Enabled Screen Saver:
---------------------
HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]
Startup items in "MaxiBB" & "All Users" startup folders:
--------------------------------------------------------
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Adobe Reader Speed Launch" -> shortcut to: "C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe" ["Adobe Systems Incorporated"]
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office10\OSA.EXE -b -l" [MS]
Winsock2 Service Provider DLLs:
-------------------------------
Namespace Service Providers
HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
Transport Service Providers
HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 16
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05
Toolbars, Explorer Bars, Extensions:
------------------------------------
Toolbars
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"
-> {HKLM...CLSID} = "&Google"
\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]
HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = (no title provided)
-> {HKLM...CLSID} = "&Google"
\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]
Extensions (Tools menu items, main toolbar menu buttons)
HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}"
-> {HKCU...CLSID} = "Java Plug-in 1.5.0_09"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll" ["Sun Microsystems, Inc."]
-> {HKLM...CLSID} = "Java Plug-in 1.5.0_09"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll" ["Sun Microsystems, Inc."]
{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]
Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------
Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\System32\Ati2evxx.exe" ["ATI Technologies Inc."]
avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" [null data]
avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" [null data]
avast! Mail Scanner, avast! Mail Scanner, ""C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service" ["ALWIL Software"]
avast! Web Scanner, avast! Web Scanner, ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"]
----------
<>: Suspicious data at a malware launch point.
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points, use the -supp parameter or answer "No" at the
first message box and "Yes" at the second message box.
---------- (total run time: 48 seconds, including 7 seconds for message boxes)
Zaraz będzie z AVG Złączono Posta _: 29.12.2006 (Pią) 18:19_Skan z AVG (jestem zakłopotany, all wirusy są z FF i w cookie (help)).
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 18:21:24 2006-12-29
+ Scan result:
:mozilla.603:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.604:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.605:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.606:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.726:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.763:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.528:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.529:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.168:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.169:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.407:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.408:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.577:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.578:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.701:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.702:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.80:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.81:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.88:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.89:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
C:\Documents and Settings\MaxiBB\Cookies\maxibb@gde.adocean[2].txt -> TrackingCookie.Adocean : No action taken.
:mozilla.333:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.334:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.335:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.336:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.337:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.338:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.615:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.616:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.82:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.483:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.363:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.364:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.365:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.64:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.44:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.491:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.558:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.642:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.643:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.276:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.277:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.278:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.279:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.170:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.174:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.175:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.176:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.177:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.178:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.179:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.519:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.555:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.394:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.395:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.396:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.526:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.684:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.361:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Itrack : No action taken.
:mozilla.446:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Ivwbox : No action taken.
:mozilla.454:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Komtrack : No action taken.
:mozilla.455:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Komtrack : No action taken.
:mozilla.456:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Komtrack : No action taken.
:mozilla.831:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.832:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.833:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.697:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Masterstats : No action taken.
:mozilla.589:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.590:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.579:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.580:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.836:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.837:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.838:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.839:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.840:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.856:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Spylog : No action taken.
:mozilla.473:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.474:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.475:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.476:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.477:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.478:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.479:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.480:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.867:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.868:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.34:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.35:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.36:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.37:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
C:\Documents and Settings\MaxiBB\Cookies\maxibb@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.252:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.815:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.816:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.817:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.818:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.819:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.927:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.928:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.282:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.283:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.284:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.70:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.74:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.75:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.76:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.77:C:\Documents and Settings\MaxiBB\Dane aplikacji\Mozilla\Firefox\Profiles\ura0fmtk.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
::Report end
Joan
(Joan Sunshine)
29 Grudzień 2006 17:32
#6
To nie wirusy, tylko zwykłe ciasteczka. Od czasu do czasu skan Adaware
http://www.lavasoftusa.com/software/adaware/ i po kłopocie
Otwórz notatnik i wklej w nim to:
Plik -> zapisz jako -> zmień rozszerzenie na wszystkie pliki -> zapisz pod nazwą FIX.REG
Odpal plik FIX.REG i potwierdź dodanie do rejestru i reset kompa
Przeczyść rejestr – użyj do tego jv16 PowerTools 2006 1.5.2.344.
Pozatym przejrzyj: Lista zbędników w autostarcie oraz Optymalizacja XP.
Wejdź: Start > uruchom > msconfig i w zakładce „Uruchamianie” odznacz, niepotrzebne według Ciebie, programy w autostarcie.
maxibb
(Funuman)
29 Grudzień 2006 17:40
#7
No wielkie dzięki, zaraz spróboje to zrobić, mam nadzieje że nie zniszcze czegoś przypadkiem :D.
Te FastClick strasznie wkurza :P.
kemada
(Ryszard Adamek)
29 Grudzień 2006 17:50
#8
Przepraszam, że wtrącę. Walczyłem z tymi ciasteczkami. Wygrałem. Oto lekarstwo. W zakładce IE narzedzia prywatnośc witryny dodaj do blokowanych adresów: fastclick.net fastclick.com tradedoubler.com tribalfusion.com Zaakceptuj. Przedtem możesz sprawdzić czy ich juz tam nie ma od SpyBota. Pozdrawiam.
maxibb
(Funuman)
29 Grudzień 2006 17:55
#9
A jak używam FF?
edit; usunełem 61 niebezpiecznych ciasteczek, ale SPYbot S D wykrywa dalej HitBox, DoubleClick FastClick, zablokowałem je, i jak narazie nie widać żeby one działały, może akurat pomogło?Oby…
Pozdrawiam i dziekuje za pomoc = ).
Jak nie to walne formata ot co!
kemada
(Ryszard Adamek)
29 Grudzień 2006 18:10
#10
Naspiszę szczerze, że nie miałem do czynienia z FF. Może tam też jest taka zakładka aby dopisać adresy do blokowania. Sprawdż. Sprawdż też SpyBota czy masz włączone blokowanie tych adresów w automacie. Jak czyści SpyBot FF to powinien też blokować te adresy.
Joan
(Joan Sunshine)
29 Grudzień 2006 18:14
#11
A po co? Przecież to są ciasteczka. Opróżnij pamięć przeglądarki na początek
maxibb
(Funuman)
29 Grudzień 2006 18:31
#12
Poszło, miejmy nadzieje że wszystko to nie pojdzie na marne.
THX