Проблем с вируси

Night_Raven · Септември 2, 2008

По-добре сваляй NOD32 със стандартния мениджър на браузъра, който ползваш. Т.е. не ползвай FlashGet. Обикновено тези програми не свалят по-добре. Понякога е по-бързо, но не вярвам да има особена разлика.

AVG може и да пищи за нищо - фалшиви тревоги. Може и да не са фалшиви. Зависи на какви файлове пищи. По принцип можеш да качваш съмнителни файлове на VirusTotal и/или Jotti, където ще бъдат анализирани от най-различни антивурусни и ще ти се покажат резултати коя какво намира в дадения файл. Ако повечето намират по нещо, значи най-вероятно има нещо опасно. Ако повечето не намират нищо, значи най-вероятно е фалшива тревога. И все пак е възможно да има изключения от горните 2 ориентировъчни правила.

nikki_555 · Септември 2, 2008

Обаче стандартния мениджър на браузъра (IE), не ми се вкючва въобще , ако примерно искам да сваля от замунда, както пробвах. Направо ми излиза флашгет. Пробвах да го изключа, но уви... Извинявам се ако звуча доста некомпетентно и моля за търпение, но наистина не мога да го изключа. Или по-точно изключвам го и до никаде не стигам, после пак се включва от само себе си.

Night_Raven · Септември 2, 2008

Въпросният смотан сайт е торент тракер и за да сваляш оттам ще ти трябва торент клиент. Няма да стане с вградения мениджър. Можеш да пробваш µTorrent, който е според мен най-добрият торент клиент в момента. Ако и с него не стане може би антивирусната ти блокира свалянето или има друг проблем.

Използвам случая да препоръчам ползването на безплатна антивирусна. "Кракнат" NOD32 някак не ми вдъхва доверие.

nikki_555 · Септември 2, 2008

Благодаря. Аз първо пробвах да дръбна безплатната версия, ама нещо не ми се зареждаше страницата, сигурно имаха проблеми със сървъра, защото замо даунлоад страницата не се зареждаше. И тъй като не ми се чакаше реших да пробвам другаде. Иначе утре ще си купя някаква антивирусна, най-добре да ми е мирна главицата. И аз не им имам доверие на кракнатите антивирусни.

Night_Raven · Септември 2, 2008

По принцип решението ти е похвално, но затова има демо версии - тествай първо и ако си доволна купувай. Общо взето в момента от платените продукти има 2, които може да се каже, че си струват парите (макар и това да е относително), и това са Kaspersky AntiVirus и ESET NOD32 AntiVirus, като считам втората за по-добър избор, но ти сама ще си прецениш.

parabelum · Септември 4, 2008

Здравейте на всички ! Съжалявам, че първият ми пост ще е с молба за помощ, но след дълго ровене, качване на програми, сканиране и чистене резултатите са почти нулеви, затова реших да се обърна към вас.Познанията ми са скромни, особено по отношение на борбата с различните вируси, троянци и прочие и прочие......Какъв е проблемът.Симптомите са общо взето познати.Компютърът ми значително забави своята скорост, но главният ми проблем се състои в следното - изчезнаха ми абсолютно всички запазени в bookmark -а страници, а при опит да въведа старите той отазва да функционира изобщо.Вторият е във невъзможността да изтрия хронологията си в History.Третият е, че Mozilla ми стартира винаги в минимализиран вид.Общо взето на идея си нямам какво ТОЧНО става и дали това може да нанесе щети върху компютъра ми.Използвам антивирусната на Avast + Spybot.Снощи си качих и SuperAntispyware.Сканирах, промени и резултати нямаше.Дръпнах и препоръчваните от модовете програми.Ето и резултатитe:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:54:50, on 04.9.2008 г.

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\RunDll32.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe

C:\Program Files\BitComet\BitComet.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Datecs\FlexType 2K\FType2K.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\Program Files\Nikon\PictureProject\NkbMonitor.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Winamp\winamp.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll

O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL (file missing)

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [Resume copy] copyfstq.exe /startup

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe"

O4 - HKCU\..\Run: [blazeServoTool] "C:\Program Files\BlazeVideo\BlazeDTV 2.5\MediaDetector.exe"

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: FlexType 2K.lnk = C:\Program Files\Datecs\FlexType 2K\FType2K.exe

O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/...ash/swflash.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)

--

End of file - 6001 bytes

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ avast! avast! service GUI component (Verified) ALWIL Software c:\program files\alwil software\avast4\ashdisp.exe

+ NeroFilterCheck NeroCheck (Not verified) Ahead Software Gmbh c:\windows\system32\nerocheck.exe

+ QuickTime Task QuickTime Task (Not verified) Apple Inc. c:\program files\quicktime\qttask.exe

+ Resume copy c:\windows\copyfstq.exe

+ TkBellExe File not found: C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

+ Adobe Reader Speed Launch.lnk Adobe Acrobat SpeedLauncher (Not verified) Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe

+ FlexType 2K.lnk c:\program files\datecs\flextype 2k\ftype2k.exe

+ NkbMonitor.exe.lnk PictureProject Monitor (Not verified) Nikon Corporation c:\program files\nikon\pictureproject\nkbmonitor.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

+ BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} Nero Home (Not verified) Nero AG c:\program files\common files\ahead\lib\nmbgmonitor.exe

+ BitComet BitComet - a BitTorrent Client (Not verified) www.BitComet.com c:\program files\bitcomet\bitcomet.exe

+ BlazeServoTool File not found: C:\Program Files\BlazeVideo\BlazeDTV 2.5\MediaDetector.exe

+ Skype Skype. Take a deep breath (Verified) Skype Technologies SA c:\program files\skype\phone\skype.exe

+ SpybotSD TeaTimer System settings protector (Verified) Safer Networking Ltd. c:\program files\spybot - search & destroy\teatimer.exe

+ SUPERAntiSpyware SUPERAntiSpyware Application (Verified) SuperAdBlocker.com c:\program files\superantispyware\superantispyware.exe

+ updateMgr Adobe Update Manager (Not verified) Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\reader\adobeupdatemanager.exe

HKLM\SOFTWARE\Classes\Protocols\Filter

+ application/octet-stream Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll

+ application/x-complus Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll

+ application/x-msdownload Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll

HKLM\SOFTWARE\Classes\Protocols\Handler

+ ic32pp c:\windows\wc98pp.dll

+ skype4com Skype for COM API (Verified) Skype Technologies SA c:\program files\common files\skype\skype4com.dll

HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components

+ 0 File not found: About:Home

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

+ Internet Explorer Windows Setup API (Not verified) Microsoft Corporation c:\windows\system32\setupapi.dll

+ n/a Microsoft .NET IE SECURITY REGISTRATION (Not verified) Microsoft Corporation c:\windows\system32\mscories.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

+ SysTray Systray shell service object (Not verified) Microsoft Corporation c:\windows\system32\stobject.dll

+ WebCheck Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

+ SABShellExecuteHook Class ShellExecuteHook (Not verified) SuperAdBlocker.com c:\program files\superantispyware\sasseh.dll

HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers

+ avast avast! Shell Extension (Verified) ALWIL Software c:\program files\alwil software\avast4\ashshell.dll

+ NBShellHook Class Nero BackItUp Application (Not verified) Nero AG c:\program files\nero\nero 7\nero backitup\nbshell.dll

+ Offline Files Client Side Caching UI (Not verified) Microsoft Corporation c:\windows\system32\cscui.dll

+ SASContextMenu Class SUPERAntiSpyware Context Menu Extension (Not verified) SUPERAntiSpyware.com c:\program files\superantispyware\sasctxmn.dll

+ WinRAR c:\program files\winrar\rarext.dll

+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\program files\winzip\wzshlstb.dll

HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers

+ Offline Files Client Side Caching UI (Not verified) Microsoft Corporation c:\windows\system32\cscui.dll

+ SASContextMenu Class SUPERAntiSpyware Context Menu Extension (Not verified) SUPERAntiSpyware.com c:\program files\superantispyware\sasctxmn.dll

+ WinRAR c:\program files\winrar\rarext.dll

+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\program files\winzip\wzshlstb.dll

HKLM\Software\Classes\Directory\Shellex\DragDropHandlers

+ QCopy c:\windows\dropcpyr.dll

+ WinRAR c:\program files\winrar\rarext.dll

+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\program files\winzip\wzshlstb.dll

HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers

+ MyDocuments My Documents Folder UI (Not verified) Microsoft Corporation c:\windows\system32\mydocs.dll

HKLM\Software\Classes\Folder\Shellex\ColumnHandlers

+ NeroDigitalColumnHandler Class Nero Digital Shell Extension (Not verified) Nero AG c:\program files\common files\ahead\lib\nerodigitalext.dll

+ PDF Shell Extension PDF Shell Extension (Not verified) Adobe Systems, Inc. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll

HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers

+ avast avast! Shell Extension (Verified) ALWIL Software c:\program files\alwil software\avast4\ashshell.dll

+ NBShellHook Class Nero BackItUp Application (Not verified) Nero AG c:\program files\nero\nero 7\nero backitup\nbshell.dll

+ WinRAR c:\program files\winrar\rarext.dll

+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\program files\winzip\wzshlstb.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers

+ Offline Files Client Side Caching UI (Not verified) Microsoft Corporation c:\windows\system32\cscui.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ %DESC_PublishDropTarget% Photo Printing Wizard (Not verified) Microsoft Corporation c:\windows\system32\photowiz.dll

+ ActiveX Cache Folder Object Control Viewer (Not verified) Microsoft Corporation c:\windows\system32\occache.dll

+ avast avast! Shell Extension (Verified) ALWIL Software c:\program files\alwil software\avast4\ashshell.dll

+ Briefcase Windows Briefcase (Not verified) Microsoft Corporation c:\windows\system32\syncui.dll

+ Code Download Agent Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ Compressed (zipped) Folder Compressed (zipped) Folders (Not verified) Microsoft Corporation c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder Right Drag Handler Compressed (zipped) Folders (Not verified) Microsoft Corporation c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder SendTo Target Compressed (zipped) Folders (Not verified) Microsoft Corporation c:\windows\system32\zipfldr.dll

+ ConnectionAgent Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ Darwin App Publisher Shell Application Manager (Not verified) Microsoft Corporation c:\windows\system32\appwiz.cpl

+ Directory Context Menu Verbs Directory Service Common UI (Not verified) Microsoft Corporation c:\windows\system32\dsuiext.dll

+ Directory Object Find Directory Service Find (Not verified) Microsoft Corporation c:\windows\system32\dsquery.dll

+ Directory Property UI Directory Service Common UI (Not verified) Microsoft Corporation c:\windows\system32\dsuiext.dll

+ Directory Query UI Directory Service Find (Not verified) Microsoft Corporation c:\windows\system32\dsquery.dll

+ Directory Start/Search Find Directory Service Find (Not verified) Microsoft Corporation c:\windows\system32\dsquery.dll

+ Disk Copy Extension Windows DiskCopy (Not verified) Microsoft Corporation c:\windows\system32\diskcopy.dll

+ Disk Quota UI Windows Shell Disk Quota UI DLL (Not verified) Microsoft Corporation c:\windows\system32\dskquoui.dll

+ Display Adapter CPL Extension Advanced display adapter properties (Not verified) Microsoft Corporation c:\windows\system32\deskadp.dll

+ Display Monitor CPL Extension Advanced display monitor properties (Not verified) Microsoft Corporation c:\windows\system32\deskmon.dll

+ Display Panning CPL Extension File not found: deskpan.dll

+ Display TroubleShoot CPL Extension Advanced display performance properties (Not verified) Microsoft Corporation c:\windows\system32\deskperf.dll

+ Fonts Windows Font Folder (Not verified) Microsoft Corporation c:\windows\system32\fontext.dll

+ FTP Folders Webview Microsoft Internet Explorer FTP Folder Shell Extension (Not verified) Microsoft Corporation c:\windows\system32\msieftp.dll

+ Fusion Cache Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll

+ GDI+ file thumbnail extractor Windows Picture and Fax Viewer (Not verified) Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Get a Passport Wizard Map Network Drives/Network Places Wizard (Not verified) Microsoft Corporation c:\windows\system32\netplwiz.dll

+ HTML Thumbnail Extractor Windows Picture and Fax Viewer (Not verified) Microsoft Corporation c:\windows\system32\shimgvw.dll

+ ICC Profile Microsoft Color Matching System User Interface DLL (Not verified) Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Monitor Management Microsoft Color Matching System User Interface DLL (Not verified) Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Printer Management Microsoft Color Matching System User Interface DLL (Not verified) Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Scanner Management Microsoft Color Matching System User Interface DLL (Not verified) Microsoft Corporation c:\windows\system32\icmui.dll

+ Installed Apps Enumerator Shell Application Manager (Not verified) Microsoft Corporation c:\windows\system32\appwiz.cpl

+ Microsoft Data Link Microsoft Data Access - OLE DB Core Services (Not verified) Microsoft Corporation c:\program files\common files\system\ole db\oledb32.dll

+ MMC Icon Handler MMC Shell Extension DLL (Not verified) Microsoft Corporation c:\windows\system32\mmcshext.dll

+ Multimedia File Property Sheet Control Panel Drivers Applet (Not verified) Microsoft Corporation c:\windows\system32\mmsys.cpl

+ MyDocs Copy Hook My Documents Folder UI (Not verified) Microsoft Corporation c:\windows\system32\mydocs.dll

+ MyDocs Drop Target My Documents Folder UI (Not verified) Microsoft Corporation c:\windows\system32\mydocs.dll

+ MyDocs Properties My Documents Folder UI (Not verified) Microsoft Corporation c:\windows\system32\mydocs.dll

+ NeroDigitalIconHandler Nero Digital Shell Extension (Not verified) Nero AG c:\program files\common files\ahead\lib\nerodigitalext.dll

+ NeroDigitalPropSheetHandler Nero Digital Shell Extension (Not verified) Nero AG c:\program files\common files\ahead\lib\nerodigitalext.dll

+ Network Connections Network Connections Shell (Not verified) Microsoft Corporation c:\windows\system32\netshell.dll

+ Offline Files Folder Client Side Caching UI (Not verified) Microsoft Corporation c:\windows\system32\cscui.dll

+ Offline Files Folder Options Client Side Caching UI (Not verified) Microsoft Corporation c:\windows\system32\cscui.dll

+ Offline Files Menu Client Side Caching UI (Not verified) Microsoft Corporation c:\windows\system32\cscui.dll

+ PlusPack CPL Extension Windows Theme API (Not verified) Microsoft Corporation c:\windows\system32\themeui.dll

+ PostAgent Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ Print Ordering via the Web Map Network Drives/Network Places Wizard (Not verified) Microsoft Corporation c:\windows\system32\netplwiz.dll

+ QCopy c:\windows\dropcpyr.dll

+ Remote Sessions CPL Extension Remote Sessions CPL Extension (Not verified) Microsoft Corporation c:\windows\system32\remotepg.dll

+ Scheduled Tasks Task Scheduler interface DLL (Not verified) Microsoft Corporation c:\windows\system32\mstask.dll

+ Shell Application Manager Shell Application Manager (Not verified) Microsoft Corporation c:\windows\system32\appwiz.cpl

+ Shell extensions for Microsoft Windows Network objects Network object shell UI (Not verified) Microsoft Corporation c:\windows\system32\ntlanui2.dll

+ Shell Image Data Factory Windows Picture and Fax Viewer (Not verified) Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Shell Image Property Handler Windows Picture and Fax Viewer (Not verified) Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Shell Image Verbs Windows Picture and Fax Viewer (Not verified) Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Shell properties for a DS object Directory Service Find (Not verified) Microsoft Corporation c:\windows\system32\dsquery.dll

+ Shell Publishing Wizard Object Map Network Drives/Network Places Wizard (Not verified) Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Shell Scrap DataHandler Shell scrap object handler (Not verified) Microsoft Corporation c:\windows\system32\shscrap.dll

+ Subscription Folder Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ Subscription Mgr Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ Summary Info Thumbnail handler (DOCFILES) Windows Picture and Fax Viewer (Not verified) Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Tasks Folder Icon Handler Task Scheduler interface DLL (Not verified) Microsoft Corporation c:\windows\system32\mstask.dll

+ Tasks Folder Shell Extension Task Scheduler interface DLL (Not verified) Microsoft Corporation c:\windows\system32\mstask.dll

+ TrayAgent Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ User Accounts Map Network Drives/Network Places Wizard (Not verified) Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Web Printer Shell Extension Print UI DLL (Not verified) Microsoft Corporation c:\windows\system32\printui.dll

+ Web Publishing Wizard Map Network Drives/Network Places Wizard (Not verified) Microsoft Corporation c:\windows\system32\netplwiz.dll

+ WebCheck Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ WebCheck SyncMgr Handler Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ WebCheckChannelAgent Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ WebCheckWebCrawler Web Site Monitor (Not verified) Microsoft Corporation c:\windows\system32\webcheck.dll

+ WinRAR shell extension c:\program files\winrar\rarext.dll

+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\program files\winzip\wzshlstb.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

+ AcroIEHlprObj Class Adobe Acrobat IE Helper Version 7.0 for ActiveX (Verified) Adobe Systems, Incorporated c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll

+ Google Toolbar Notifier BHO GoogleToolbarNotifier (Verified) Google Inc c:\program files\google\googletoolbarnotifier\2.1.1119.1736\swg.dll

+ Skype add-on (mastermind) Skype add-on for IE (Verified) Skype Technologies SA c:\program files\skype\phone\ieplugin\skypeieplugin.dll

+ Spybot-S&D IE Protection SBSD IE Protection (Verified) Safer Networking Ltd. c:\program files\spybot - search & destroy\sdhelper.dll

Task Scheduler

+ AppleSoftwareUpdate.job Apple Software Update (Verified) Apple Computer, Inc. c:\program files\apple software update\softwareupdate.exe

HKLM\System\CurrentControlSet\Services

+ aswUpdSv Осигурява авотматични обновявания на компонентите на avast!. (Verified) ALWIL Software c:\program files\alwil software\avast4\aswupdsv.exe

+ avast! Antivirus Управлява и изпълнява антивирусните услуги на avast! на този компютър. Това включва резидентна защита, клетката за вируси и планировчика. (Verified) ALWIL Software c:\program files\alwil software\avast4\ashserv.exe

+ gusvc gusvc (Verified) Google Inc c:\program files\google\common\google updater\googleupdaterservice.exe

HKLM\System\CurrentControlSet\Services

+ Aavmker4 avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP (Verified) ALWIL Software c:\windows\system32\drivers\aavmker4.sys

+ aswFsBlk avast! mini-filter driver (aswFsBlk) (Verified) ALWIL Software c:\windows\system32\drivers\aswfsblk.sys

+ aswMon2 avast! File System Filter Driver for Windows XP (Verified) ALWIL Software c:\windows\system32\drivers\aswmon2.sys

+ aswRdr avast! TDI RDR Driver (Verified) ALWIL Software c:\windows\system32\drivers\aswrdr.sys

+ aswSP avast! self protection module (Verified) ALWIL Software c:\windows\system32\drivers\aswsp.sys

+ aswTdi avast! TDI Filter Driver (Verified) ALWIL Software c:\windows\system32\drivers\aswtdi.sys

+ Changer File not found: C:\WINDOWS\System32\Drivers\Changer.sys

+ i2omgmt File not found: C:\WINDOWS\System32\Drivers\i2omgmt.sys

+ InCDPass File not found: C:\WINDOWS\System32\Drivers\InCDPass.sys

+ InCDRm File not found: system32\drivers\InCDRm.sys

+ lbrtfdc File not found: C:\WINDOWS\System32\Drivers\lbrtfdc.sys

+ PCIDump File not found: C:\WINDOWS\System32\Drivers\PCIDump.sys

+ PDCOMP File not found: C:\WINDOWS\System32\Drivers\PDCOMP.sys

+ PDFRAME File not found: C:\WINDOWS\System32\Drivers\PDFRAME.sys

+ PDRELI File not found: C:\WINDOWS\System32\Drivers\PDRELI.sys

+ PDRFRAME File not found: C:\WINDOWS\System32\Drivers\PDRFRAME.sys

+ PxHelp20 Px Engine Device Driver for Windows 2000/XP (Verified) Sonic Solutions c:\windows\system32\drivers\pxhelp20.sys

+ SASDIFSV SASDIFSV.SYS (Verified) SuperAdBlocker.com c:\program files\superantispyware\sasdifsv.sys

+ SASENUM SASENUM.SYS (Verified) SuperAdBlocker.com c:\program files\superantispyware\sasenum.sys

+ SASKUTIL SASKUTIL.SYS (Verified) SuperAdBlocker.com c:\program files\superantispyware\saskutil.sys

+ WDICA File not found: C:\WINDOWS\System32\Drivers\WDICA.sys

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

+ Your Image File Name Here without a path Symbolic Debugger for Windows 2000 (Not verified) Microsoft Corporation c:\windows\system32\ntsd.exe

HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls

+ comdlg32 Common Dialogs DLL (Not verified) Microsoft Corporation c:\windows\system32\comdlg32.dll

+ url Internet Shortcut Shell Extension DLL (Not verified) Microsoft Corporation c:\windows\system32\url.dll

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

+ !SASWinLogon SUPERAntiSpyware WinLogon Processor (Not verified) SUPERAntiSpyware.com c:\program files\superantispyware\saswinlo.dll

Това е ! Някакви предложения или идеи ?

Night_Raven · Септември 4, 2008

За LOG-а на HijackThis, преименувай програмата (на каквото и да е) и дай нов.

parabelum · Септември 4, 2008

Logfile of HijackThis v1.99.1

Scan saved at 20:10:38, on 04.9.2008 г.

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\RunDll32.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe

C:\Program Files\BitComet\BitComet.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Datecs\FlexType 2K\FType2K.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\Program Files\Nikon\PictureProject\NkbMonitor.exe

C:\Program Files\Winamp\winamp.exe

C:\Program Files\Webteh\BSplayerPro\bsplayer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\butcher\Desktop\alabala.exe