pycia14
22 Maj 2008 20:20
#2
Mogłaś/łeś wrzucić go tutaj
viewtopic.php?f=16&t=245195
Leon1
22 Maj 2008 21:12
#3
wpisy
R3 - URLSearchHook: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file) O2 - BHO: (no name) - {A6ACAE64-F798-4930-AD86-BD3FB32038DB} - C:\Program Files\Video ActiveX Object\isadd.dll (file missing) O3 - Toolbar: Protection Bar - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - C:\Program Files\WinMediaCodec\iesplugin.dll (file missing) O3 - Toolbar: Protection Bar - {84938242-5C5B-4A55-B6B9-A1507543B418} - C:\Program Files\Video ActiveX Object\iesplugin.dll (file missing) O3 - Toolbar: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file) O4 - HKLM…\Run: [dmkpx.exe] C:\WINDOWS\system32\dmkpx.exe O4 - HKCU…\Run: [spyMarshal] C:\Program Files\SpyMarshal\SpyMarshal.exe O4 - HKCU…\Run: [iM+ for Skype Software Desktop Service] “C:\Program Files\SHAPE Services\IM+ for Skype Software Desktop Service\IM+ for Skype Software Desktop Service.exe” /app O4 - HKCU…\Run: [iM+ for Skype Software Proxy+ Connector] “C:\Program Files\SHAPE Services\IM+ for Skype Software Desktop Service\ProxyConnector\IM+ for Skype Software Proxy+ Connector.exe” /app O4 - HKCU…\Run: [Nonoh] “C:\Program Files\Nonoh.net \Nonoh\Nonoh.exe” -nosplash -minimized O4 - HKCU…\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\ARO.exe -rem O4 - HKLM…\Policies\Explorer\Run: [user32.dll] C:\Program Files\Video ActiveX Object\isamntr.exe O4 - HKLM…\Policies\Explorer\Run: [rare] C:\Program Files\Video ActiveX Object\pmsnrr.exe O4 - Startup: Personal Player.lnk = C:\Program Files\Web Hottest Videos Personal Player\GLBDE4.tmp O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O17 - HKLM\System\CCS\Services\Tcpip…{2C457BBB-FC03-4984-9263-2ACF8DAD1313}: NameServer = 85.255.116.91,85.255.112.234 O17 - HKLM\System\CCS\Services\Tcpip…{81D993D0-CA31-474B-9196-27519CF571D0}: NameServer = 85.255.116.91,85.255.112.234 O17 - HKLM\System\CCS\Services\Tcpip…{DA24F303-6C51-4A78-ACAA-148CAC28A7E1}: NameServer = 85.255.116.91,85.255.112.234 O17 - HKLM\System\CCS\Services\Tcpip…{E53FCE16-41E7-4D4E-A3E2-C941508EDFAA}: NameServer = 85.255.116.91,85.255.112.234 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.91 85.255.112.234 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.91 85.255.112.234 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.91 85.255.112.234 O21 - SSODL: eeler - {1559e6c1-7e5e-4461-9457-6a2dea85eb9f} - C:\WINDOWS\system32\titiau.dll (file missing) O22 - SharedTaskScheduler: eeler - {1559e6c1-7e5e-4461-9457-6a2dea85eb9f} - C:\WINDOWS\system32\titiau.dll (file missing)
usuń HijackThisem >> Fix checked
Pobierz Combofix http://www.searchengines.pl/index.php?s … ntry395642 ale nie włączaj
Otwórz notatnik i wklej
zapisz jako CFScript.txt (zapisz by ikonka CFScript.txt była obok ikonki ComboFix.exe) >> Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe
http://img.wklej.org/images/88953CFScri … iemoes.gif
Powinno rozpocząć się usuwanie
Potem log z usuwania Combofix
sdar
22 Maj 2008 21:23
#4
kasia66079 , Proszę zastosować się do zaleceń zawartych w TYM temacie. W przeciwnym wypadku temat zostanie usunięty.
