Jurnalul Hijackthis – probleme cu actualizarea antivirusului si a descarcarii programelor spyware

Data inscrierii: nov 2008

Mesaje: 2

Sistem de operare :

Am facut recent un clic pe un link suspect pe facebook si am inceput sa am probleme … Acum, ori de cate ori caut ceva pe exploratorul de internet SI firefox, deschide o fereastra noua si ma redirectioneaza catre site-uri web cum ar fi info.com si shopzilla. Un alt lucru este ca nici macar nu pot conecta online AVG 8 si Ad-Aware 2008 (gratuit). Cred ca sunt blocate de orice este ceea ce ma incurca … Ajutor, va rog!

Logfile of Trend Micro HijackThis v2.0.2

Scanare salvata la 10:04:22 AM, pe 24/11/2008

Platforma: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Mod de pornire: Normal

Procesele de rulare:

C: \ WINDOWS \ System32 \ smss.exe

C: \ WINDOWS \ system32 \ csrss.exe

C: \ WINDOWS \ system32 \ winlogon.exe

C: \ WINDOWS \ system32 \ services.exe

C: \ WINDOWS \ system32 \ lsass.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ System32 \ svchost.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ system32 \ brsvc01a.exe

C: \ WINDOWS \ system32 \ spoolsv.exe

C: \ WINDOWS \ system32 \ brss01a.exe

C: \ WINDOWS \ Explorer.EXE

C: \ WINDOWS \ system32 \ ctfmon. exe

C: \ WINDOWS \ ehome \ ehtray.exe

C: \ WINDOWS \ zHotkey.exe

C: \ Program Files \ Digital Media Reader \ readericon45G.exe

C: \ Fisiere de program \ Fisiere comune \ Real \ Update_OB \ realsched.exe

C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe

C: \ Fisiere de program \ Microsoft Office \ Office12 \ GrooveMonitor.exe

C: \ Fisiere de program \ Java \ jre1.6.0_07 \ bin \ jusched.exe

C: \ WINDOWS \ RTHDCPL.EXE

C: \ Fisiere de program \ iTunes \ iTunesHelper.exe

C: \ Fisiere de program \ Fisiere comune \ Ahead \ Lib \ NMBgMonitor.exe

C: \ Fisiere de program \ RocketDock \ RocketDock.exe C: \

WINDOWS \ system32 \ drivers \ svchost.exe

C: \ Fisiere de program \ Adobe \ Photoshop Elements 6.0 \ PhotoshopElementsFileAgent.exe

C: \ Fisiere de program \ Fisiere comune \ AOL \ ACS \ AOLAcsd.exe

C: \ Fisiere de program \ Fisiere comune \ Apple \ Suport pentru dispozitive mobile \ bin \ AppleMobileDeviceService.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ eHome \ ehRecvr.exe

C: \ WINDOWS \ eHome \ ehSched.exe

C: \ WINDOWS \ system32 \ nvsvc32.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ system32 \ svchost.exe

C: \ WINDOWS \ system32 \ Pen_Tablet.exe

C: \ PROGRA ~ 1 \ SPEEDB ~ 1 \ VideoAcceleratorService.exe

C: \ WINDOWS \ system32 \ WTablet \ Pen_TabletUser.exe

C: \ WINDOWS \ system32 \ Pen_Tablet.exe

C: \ WINDOWS \ ehome \ mcrdsvc.exe

C: \ Fisiere de program \ Fisiere comune \ Inainte \ Lib \ NMI .exe

C: \ WINDOWS \ eHome \ ehmsas.exe

C: \ Fisiere de program \ iPod \ bin \ iPodService.exe

C: \ Files de program \ Fisiere comune \ Ahead \ Lib \ NMIndexStoreSvr.exe

C: \ WINDOWS \ system32 \ dllhost.exe

C: \ WINDOWS \ System32 \ alg.exe

C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe

C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgrsx.exe

C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe

C: \ Fisiere de program \ Fisiere comune \ AOL \ 1104964342 \ EE \ aolsoftware.exe

C: \ Program Fisiere \ Windows Live \ Messenger \ usnsvc.exe

C: \ PROGRA ~ 1 \ SPEEDB ~ 1 \ VideoAcceleratorEngine.exe

C: \ Program Files \ AOL 9.1 \ waol.exe

C: \ Program Files \ AOL 9.1 \ shellmon.exe

C: \ Files de program \ Fisiere comune \ AOL \ Topspeed \ 3.0 \ aoltpsd3.exe

C: \ Files de program \ Lavasoft \ Ad-Aware \ aawservice.exe

C: \ WINDOWS \ system32 \ wuauclt.exe

C: \ Documente si Setari \ Proprietar \ Desktop \ HijackThis.exe

C: \ WINDOWS \ system32 \ NOTEPAD.EXE

C: \ WINDOWS \ system32 \ rundll32.exe

R1 – HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = https://kr.yahoo.com

R1 – HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = * .local

O2 – BHO: (nr nume) – {02478D38-C3F9-4efb-9B51-7695ECA05670} – (fara fisier)

O3 – Bara de instrumente: Plug-ul browserului Veoh – {D0943516-5076-4020-A3B5-AEFAF26AB263} – C: \ Fisiere de programe \ Veoh Networks \ Veoh \ Plugins \ reg \ VeohToolbar.dll

O3 – Bara de instrumente: AVG Security Toolbar – {A057A204-BACC-4D26-9990-79A187E2698E} – C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL

O4 – HKLM \. . \ Run: [ehTray] C: \ WINDOWS \ ehome \ ehtray.exe

O4 – HKLM \ .. \ Run: [Chotkey] zHotkey.exe

O4 – HKLM \ .. \ Run: [readericon] C: \ Program Files \ Digital Media Reader \ readericon45G.exe

O4 – HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup

O4 – HKLM \ .. \ Run: [nwiz] nwiz.exe / install

O4 – HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit

O4 – HKLM \ .. \ Executati: [Comanda rapida a paginii pentru proprietati audio de inalta definitie] HDAShCut.exe

O4 – HKLM \ .. \ Run: [Memento]% WINDIR% \ Creator \ Remind_XP.exe

O4 – HKLM \ .. \ Run: [Recguard]% WINDIR% \ SMINST \ RECGUARD.EXE

O4 – HKLM \ .. \ Run: [TkBellExe] “C: \ Program Fisiere \ Fisiere comune \ Real \ Actualizare_OB \ realsched.exe “-osboot

O4 – HKLM \ .. \ Run: [MCUpdateExe] C: \ PROGRA ~ 1 \ mcafee.com \ agent \ McUpdate.exe

O4 – HKLM \ .. \ Executa: [MCAgentExe] c: \ PROGRA ~ 1 \ mcafee.com \ agent \ McAgent.exe

O4 – HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe

O4 – HKLM \ .. \ Run: [WinampAgent] “C: \ Program Files \ Winamp \ winampa.exe ”

O4 – HKLM \ .. \ Run: [Adobe Photo Downloader]” C: \ Fisiere de program \ Adobe \ Photoshop Elements 6.0 \ apdproxy.exe ”

O4 – HKLM \ .. \ Run: [Google Desktop Search]” C: \ Fisiere de program \ Google \ Google Desktop Search \ GoogleDesktop.exe “/ start

O4 – HKLM \ .. \ Run: [GrooveMonitor]” C: \ Fisiere de program \ Microsoft Office \ Office12 \ GrooveMonitor.exe ”

O4 – HKLM \ .. \ Executa: [SunJavaUpdateSched] “C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe”

O4 – HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE

O4 – HKLM \ .. \ Run: [ Alcmtr] ALCMTR.EXE

O4 – HKLM \ .. \ Run: [QuickTime Task] “C: \ Program Files \ QuickTime \ QTTask.exe”-atboottime

O4 – HKLM \ .. \ Run: [iTunesHelper] “C: \ Program Files \ iTunes \ iTunesHelper.exe”

O4 – HKLM \ .. \ Run: [brastk] C: \ WINDOWS \ system32 \ brastk.exe

O4 – HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0 -k

O4 – HKLM \ .. \ Run: [HostManager] C: \ Fisiere de program \ Fisiere comune \ AOL \ 1104964342 \ ee \ AOLSoftware.exe

O4 – HKCU \ .. \ Run: [BgMonitor_ {79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C: \ Program Files \ Common Files \ Ahead \ Lib \ NMBgMonitor.exe”

O4 – HKCU \ .. \ Run: [ updateMgr] “C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ AdobeUpdateManager.exe” AcRdB7_0_9 -reboot 1

O4 – HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe

O4 – HKCU \ .. \ Run: [RocketDock] “C: \ Fisiere de program \ RocketDock \ RocketDock.exe”

O4 – HKCU \ .. \ Run: [brastk] C: \ WINDOWS \ system32 \ brastk.exe

O4 – HKCU \ .. \ Run: [SVCHOST.EXE] C: \ WINDOWS \ system32 \ drivers \ svchost.exe

O4 – HKCU \ .. \ Run: [AOL Fast Start] “C: \ Program Files \ AOL 9.1 \ AOL.EXE” -b

O4 – HKLM \ .. \ Politici \ Explorer \ Run: [isamonitor.exe] C: \ Program Fisiere \ Obiect Video ActiveX \ isamonitor.exe

O4 – HKLM \ .. \ Politici \ Explorer \ Run: [pmsngr.exe] C: \ Fisiere de program \ Video ActiveX Object \ pmsngr.exe

O4 – Pornire globala: Lansare viteza Adobe Reader. lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe

O4 – Pornire globala: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C: \ Program Files \ Ulead Systems \ Ulead Photo Express 4.0 SE \ CalCheck. executabil

O8 – Element suplimentar de meniu contextual: & Cautare – https://kl.bar.need2find.com/KL/menusearch.

shemale porno
porno cu soacra
fake taxi porno
sex porno
legal porno
porno german
porno compilation
porno cu zoofilie
porno in romania
sex xxx porno mature
piticu porno fute o gasa
gyerek porno
21 porno
porno xnxx
porno chinezesc
filme porno cu politisti
porno cu fete frumoase
filme porno soacre
filme porno cu bunicu
julia ann porno

html?p=KL

O8 – Element suplimentar de meniu contextual: E & xport catre Microsoft Excel – res: // C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ EXCEL.EXE / 3000

O9 – Buton suplimentar: (fara nume) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C: \ Fisiere de program \ Java \ jre1.6.0_07 \ bin \ ssv.dll

O9 – Meniul suplimentar al „Instrumentelor”: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll

O9 – Buton suplimentar : Trimite la OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll

O9 – Meniul suplimentar al „Instrumentelor”: S & end to OneNote – {2670000A-7350- 4f3c-8081-5663EE0C6C49} – C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll

O9 – Buton suplimentar: (fara nume) – {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} – c: \ program files \ mcafee \ spamkiller \ mcapfbho.dll (fisier lipsa)

O9 – Meniu suplimentar „Tools”: McAfee Anti- Phishing Filter – {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} – c: \ file files \ mcafee \ spamkiller \ mcapfbho.dll (lipseste fisierul)

O9 – Buton suplimentar: Cercetare – {92780B25-18CC-41C8-B9BE-3C9C571A826 – C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ REFIEBAR.DLL

O9 – Buton suplimentar: Real.com – {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} – C: \ WINDOWS \ system32 \ Shdocvw.dll

O9 – Buton suplimentar: (fara nume) – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe

O9 – Meniul Extra ‘Tools’: @ xpsp3res.dll, -20001 – {e2e2dd38- d088-4134-82b7-f2ba38496583} – C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe

O9 – Buton suplimentar: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C: \ Program Files \ Messenger \ msmsgs.exe

O9 – Meniu suplimentar „Instrumente: Windows Messenger – {FB5F1910-F110-11d2-BB9E- 00C04F795683} – C: \ Program Files \ Messenger \ msmsgs.exe

O10 – Acces la Internet rupt din cauza furnizorului LSP ‘c: \ program file \ bonjour \ mdnsnsp.dll’ lipsa

O16 – DPF: {04670ED5-3464-4A83-BE1F- 24E6FFA41928} – https://music.imbc.com/Player/OCX/p3edinst.cab

O16 – DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) – https: //upload.facebook. com / controls / … oUploader5.cab

O16 – DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) – https://www.musicnotes.com/download/mnviewer.cab

O16 – DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) – https://www.crezio.com/test/leeyunho/…n/AlwaysOn.CAB

O16 – DPF: {30528230-99f7 -4bb4-88d8-fa1d4f56a2ab} (Suport de instalare) – C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll

O16 – DPF: {32ECCE1D-F91E-413F-AFF3-BA477CF0C9C6} (Control IMBCControl) – https: // touch.imbc.com/ActiveX/iMBCOnlineService.cab

O16 – DPF: {3450032D-92DA-4033-8672-4E0A2E7C4A7C} (control sliderControl) – https://music.imbc.com/Player/OCX/SliderControl.ocx

O16 – DPF: {367754FA-2587-4AF0-AFDA-119BDF01D117} (Exfile File Control1) – https://www.exfile.co.kr/mmsv/ExfileWebControl.CAB

O16 – DPF: {4C68DACE-E6BC-4650-9C7E } (Nps Control) – https://kr.gameguard.nprotect.com/inc…tyscan/nps.cab

O16 – DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (Clasa sistemului de operare McAfee.com) – https://download.mcafee.com/molbin/sh…1/mcinsctl.cab

O16 – DPF: { 575594D5-8974-4AFE-9919-8FE4AA687DEF} (Nhnplayer Control) – https://down.hangame.com/iservice/cha…nhnplayerx.cab

O16 – DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} ( Facebook Photo Uploader Control) – https://upload.facebook.com/controls/…toUploader.cab

O16 – DPF: {61FDA6C5-3F5D-44D9-9CED-1D7AC727ACE0} (CueControl Control) – https: // atingere. imbc.com/ActiveX/Pointory/CueControl2.ocx

O16 – DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (Obiect DivXBrowserPlugin) – https://download.divx.com/player/DivXBrowserPlugin.cab

O16 – DPF: {882A7CC6-0163-4BC1-8BC1-505E36C9FFA2} (MaxHelper Control) – https://www.mnet.com/Ver2/App/totalAp…/maxhelper.cab

O16 – DPF: {B8BE5E93-A60C -4D26-A2DC-220313175592} (MSN Games – Installer) – https://messenger.zone.msn.com/binary…o.cab56649.cab

O16 – DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} (Clasa managerului Daum ActiveX) – https://mail.daum.net/hanmail-ax/Daum…ab?ver=2,0,0,4

O16 – DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072 } (Clasa MessengerStatsClient) – https://messenger.zone.msn.com/binary…t.cab56907.cab

O16 – DPF: {CB5C683C-416A-4701-B018-0F1B21D64D6B} (Clasa SKCInst1) – https: / /cyimg7.cyworld.com/cymusic/package/skcinst.cab

O16 – DPF: {E37396F9-8AEF-4CB2-95F9-1DDFDC54A896} (CCabInstall Object) – https://q.freechal.com/Cab/FcQInstall.cab

O16 – DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (obiect ZoneChess) – https://messenger.zone.msn.com/binary/Chess.cab57176.cab

O18 – Protocol: grooveLocalGWS – {88FED34C-F0CA- 4636-A375-3CB6248B04CD} – C: \ Fisiere de program \ Microsoft Office \ Office12 \ GrooveSystemServices.dll O18

– Protocol: linkscanner – {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} – C: \ Program Files \ AVG \ AVG8 \ AVG \ AVG8 \ AVG \ AVG8 \ .dll

O20 – AppInit_DLLs: avgrsstx.dll C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 2 \ GOEC62 ~ 1.DLL O23

– Serviciu: Lavasoft Ad-Aware Service (aawservice) – Lavasoft – C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe O23

– Serviciu: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) – Proprietar necunoscut – C: \ Program Files \ Adobe \ Photoshop Elements 6.0 \ PhotoshopElementsFileAgent.exe

O23 – Serviciu: AOL Connectness Service (AOL ACS) – AOL LLC – C: \ Program Files \ Common Files \ AOL \ ACS \ AOLAcsd.exe O23

– Serviciu: AOL Spyware Protection Service (AOLService) – Proprietar necunoscut – C: \ Program Fisiere \ Fisiere comune \ AOL \ AOL Spyware Protection \\ aolserv.exe O23

– Serviciu: Apple Mobile Device – Apple Inc. – C: \ Fisiere de program \ Fisiere comune \ Apple \ Suport pentru dispozitive mobile \ bin \ AppleMobileDeviceService.exe O23

– Serviciu : Scaner de e-mail AVG8 (avg8emc) – AVG Technologies CZ, sro – C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe O23

– Serviciu: AVG8 WatchDog (avg8wd) – AVG Technologies CZ, sro – C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe O23

– Serviciu: Serviciu Bonjour – Proprietar necunoscut – C: \ Fisiere de program \ Bonjour \ mDNSResponder.exe (lipseste fisierul)

O23 – Serviciu: BrSplService (serviciu de spalare Brother XP) – fratele Industries Ltd – C: \ WINDOWS \ system32 \ brsvc01a.exe O23

– Serviciu: Serviciu de licentiere FLEXnet – Macrovision Europe Ltd. – C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23

– Serviciu: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) – Proprietar necunoscut – C: \ Fisiere de program \ Google \ Google Desktop Search \ GoogleDesktop.exe (fisier lipsa)

O23 – Serviciu : Serviciu iPod – Apple Inc. – C: \ Program Files \ iPod \ bin \ iPodService.exe O23

– Serviciu: NBService – Nero AG – C: \ Fisiere de program \ Nero \ Nero 7 \ Nero BackItUp \ NBService.exe O23

– Serviciu : NMIndexingService – Nero AG – C: \ Fisiere de program \ Fisiere comune \ Inainte \ Lib \ NMIndexingService.exe

O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA Corporation – C: \ WINDOWS \ system32 \ nvsvc32.exe O23

– Serviciu: TabletServicePen – Wacom Technology, Corp – C: \ WINDOWS \ system32 \ Pen_Tablet.exe O23

– Service : VideoAcceleratorService – Speedbit Ltd. – C: \ PROGRA ~ 1 \ SPEEDB ~ 1 \ VideoAcceleratorService.exe O23

– Service: Viewpoint Manager Service – Viewpoint Corporation – C: \ Program Files \ Viewpoint \ Common \ ViewpointService.exe

–

Sfarsitul fisierului – 13327 octeti

Data inscrierii: mai 2005

Mesaje: 26.363

Sistem de operare : N / A

Va rugam sa urmati instructiunile de pe aceasta pagina web:

https://www.techsupportforum.com/secu…oval-help.html

Dupa aceea, veti avea un set corespunzator de jurnale pentru noi. Cineva va fi in curand

* Retineti ca firele fara jurnalele corespunzatoare ar fi probabil ignorate.

Data inscrierii: mai 2005

Mesaje: 26.363

Sistem de operare : N / A