Computer Games Forum

Home ComputerGames.ro Ştiri Downloads Reviews Editoriale Screenshots CG Shop
Go Back   Computer Games Forum > Tech > Software
Reload this Page Probleme windows - virus?
Today's Posts Register iTrader FAQ FAQ Members List

Notices

Reply
 
LinkBack Thread Tools
Old 10-04-2006, 14:39   #1 (permalink)
Nick anterior: El_Cid
 
El_Cid's Avatar
 
Join Date: Oct 2004
Location: Bucuresti-RO
Probleme windows - virus?
Am luat un virus folosind Internet explorer cand am intrat pe un site dubios... culmea e ca folosesc Firefox, dar atunci m-am trezit sa folosesc IE.
Dupa ce am luat "gripa" - au inceput problemele: Mesaje din 5 in 5 minute cu netsend care imi ziceau sa ma duc nu stiu unde sa instalez nu stiu ce (incerca sa para cat mai oficial). Are ce are cu Yahoo Messenger - il desconecteaza - ii modifica adresa la shortcuts... se joaca cu contacts etc.
Daca il las 5 minute in welcome screen cere parola pentru toti userii... trebuie restart ca sa intre iar.

Asa ca am formatat C: (precizez ca tot ce era pe D si E: a ramas intact) si reinstall windows. Dupa reinstall cateva dintre probleme au ramas:
1. Daca il las 5 minute in welcome screen cere parola pentru toti userii... trebuie restart ca sa intre iar.
2. Probleme cu Yahoo Messenger

Am pus NOD32 - updatad - nu gaseste NIMIC. Nu stiu ce sa-i mai fac dar ma dispera.

IN taskmanager l-am indentificat ca vmmon32 (nu`mi suna cunoscut)... a aparut si in startup si se rebifeaza singur. (cftmon imi e cunoscut totusi)

Idei? Sugestii?
 
El_Cid is offline    Reply With Quote
Old 10-04-2006, 14:52   #2 (permalink)
Manic Miner
 
burebista's Avatar
 
Join Date: Dec 2002
Location: Twilight Zone
Păi e cam un virusache, Troj/IRCBot-GW îi spun ăştia de la Sophos.
__________________
...un fleac... m-au ciuruit...
 
burebista is offline    Reply With Quote
Old 10-04-2006, 15:05   #3 (permalink)
Registered User
 
PigBrother's Avatar
 
Join Date: Mar 1999
Location: Bucuresti
El-Cid, instaleaza un trial de Kaspersky sau F-Secure si lasa NOD32 pentru fanboy-ii lui care nu inteleg ceva pana nu dau cu capul de pragul de sus
__________________
balanced for lean
 
PigBrother is offline    Reply With Quote
Old 10-04-2006, 15:13   #4 (permalink)
Nick anterior: El_Cid
 
El_Cid's Avatar
 
Join Date: Oct 2004
Location: Bucuresti-RO
multzam mult PigBrother - despre NOD32 mi-am format si eu o parere, la fel de buna ca a ta as putea spune.
 
El_Cid is offline    Reply With Quote
Old 10-04-2006, 17:41   #5 (permalink)
Nick anterior: El_Cid
 
El_Cid's Avatar
 
Join Date: Oct 2004
Location: Bucuresti-RO
fsecure nu`l vede - o sa incerc kaspersky - pana una alta are cineva un removing tool _ VA ROOOOOOOOOOOOOOOOOOOOOOOOOOOG in pm de virus de kkt kktkktkejklksajfljldsjflj.asd
 
El_Cid is offline    Reply With Quote
Old 10-04-2006, 17:49   #6 (permalink)
Registered User
 
-=AlukarD=-'s Avatar
 
Join Date: Aug 2005
Location: Singura tara unde esti laudat daca esti prost gramada
Incearca:

Hijack This!
Ad-Aware SE Personal
SpyBot

Dai save la log-ul Hijack This! si postezi aici poate se vede ceva...
Sa nu te apuci sa stergi aiurea din registru...mai bine postezi intai.
__________________
" I am beyond your experience. I am beyond good and evil, legions of the night - night breed - repeat not the errors of the Night Stalker and show no mercy. "
 
-=AlukarD=- is offline    Reply With Quote
Old 10-04-2006, 17:53   #7 (permalink)
Nick anterior: El_Cid
 
El_Cid's Avatar
 
Join Date: Oct 2004
Location: Bucuresti-RO
am bagat sophos deocamdata ca sa incerc cu IDEul de la ei sa`l scot
in pm de virus are ce are cu yahoo messenger
 
El_Cid is offline    Reply With Quote
Old 10-04-2006, 17:55   #8 (permalink)
Nick anterior: El_Cid
 
El_Cid's Avatar
 
Join Date: Oct 2004
Location: Bucuresti-RO
Logfile of HijackThis v1.99.1
Scan saved at 5:56:03 PM, on 4/10/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Yahoo\Messenger\YahooMessenger.exe
C:\WINDOWS\explorer.exe
E:\Programs\PeerWeb DC++\PeerWeb DC++.exe
c:\savxpsa\setup.exe
C:\WINDOWS\System32\msiexec.exe
c:\WINDOWS\System32\MsiExec.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Mihai\LOCALS~1\Temp\Rar$EX00.281\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.ro/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo\Common\yiesrvc.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Printer] C:\WINDOWS\System32\vmmon32.exe
O4 - HKLM\..\RunServices: [Printer] C:\WINDOWS\System32\vmmon32.exe
O4 - HKLM\..\RunOnce: [WinSideBySideSetupCleanup 437960] rundll32 sxs.dll,SxspRunDllDeleteDirectory C:\WINDOWS\WinSxS\InstallTemp\437960
O4 - HKLM\..\RunOnce: [WinSideBySideSetupCleanup 437988] rundll32 sxs.dll,SxspRunDllDeleteDirectory C:\WINDOWS\WinSxS\InstallTemp\437988
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo\Common\yiesrvc.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{05C7386A-C03C-41C7-9D80-EC10305BAD43}: NameServer = 193.19.192.2,193.19.192.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{05C7386A-C03C-41C7-9D80-EC10305BAD43}: NameServer = 193.19.192.2,193.19.192.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{05C7386A-C03C-41C7-9D80-EC10305BAD43}: NameServer = 193.19.192.2,193.19.192.3
O23 - Service: Apache2 - Unknown owner - C:\Program Files\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos plc - c:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos plc - c:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
 
El_Cid is offline    Reply With Quote
Old 10-04-2006, 18:08   #9 (permalink)
Registered User
 
-=AlukarD=-'s Avatar
 
Join Date: Aug 2005
Location: Singura tara unde esti laudat daca esti prost gramada
Quote:
O17 - HKLM\System\CCS\Services\Tcpip\..\{05C7386A-C03C-41C7-9D80-EC10305BAD43}: NameServer = 193.19.192.2,193.19.192.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{05C7386A-C03C-41C7-9D80-EC10305BAD43}: NameServer = 193.19.192.2,193.19.192.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{05C7386A-C03C-41C7-9D80-EC10305BAD43}: NameServer = 193.19.192.2,193.19.192.3
Adresele de mai sus sunt cele pe care trebuie sa le ai la DNS servers ?
Daca da,e bine.Daca nu,le stergi si trebuie sa le reintroduci manual. (din cate vad eu par a fi corecte)

Si Yahoo toolbar e instalat de tine ?
__________________
" I am beyond your experience. I am beyond good and evil, legions of the night - night breed - repeat not the errors of the Night Stalker and show no mercy. "
 
-=AlukarD=- is offline    Reply With Quote
Old 10-04-2006, 19:04   #10 (permalink)
Nick anterior: El_Cid
 
El_Cid's Avatar
 
Join Date: Oct 2004
Location: Bucuresti-RO
alea 3 sunt bine ca le-am scos si a tb sa le pun la loc - in rest am sters tot ce a gasit ala si tot sunt probleme - am renuntat la yahoo de tot (kkt de program -baga la kkturi in sistem) si am blocat si net send din CP.

sper ca alte probleme sa numai faca

si totusi astept un antivirus mai bun - nici Fsecure nici Kaspersky nu au facut nimic
 
El_Cid is offline    Reply With Quote
Old 10-04-2006, 20:04   #11 (permalink)
Registered User
 
PigBrother's Avatar
 
Join Date: Mar 1999
Location: Bucuresti
E foarte ciudat ca astea doua nu l-au vazut. Sunt cele mai bune produse, totusi.
Vezi ca la Kaspersky trebuie sa activezi manual sa foloseasca baza de date virala extinsa.
__________________
balanced for lean
 
PigBrother is offline    Reply With Quote
Old 10-04-2006, 20:47   #12 (permalink)
Δartλ Vile
 
k'tav's Avatar
 
Join Date: Mar 2000
Quote:
Originally Posted by PigBrother
El-Cid, instaleaza un trial de Kaspersky sau F-Secure si lasa NOD32 pentru fanboy-ii lui care nu inteleg ceva pana nu dau cu capul de pragul de sus
Quote:
Originally Posted by El-Cid
si totusi astept un antivirus mai bun - nici Fsecure nici Kaspersky nu au facut nimic
Quote:
Originally Posted by PigBrother
E foarte ciudat ca astea doua nu l-au vazut. Sunt cele mai bune produse, totusi.


ontopic: poate te ajuta programu asta http://www.xfocus.net/tools/200509/IceSword_en1.12.rar, cu el poti sa vezi procesele ascunse
Last edited by k'tav; 10-04-2006 at 20:59..
 
k'tav is offline    Reply With Quote
Old 10-04-2006, 21:02   #13 (permalink)
Sacred Spirit
 
MYSTIK's Avatar
 
Join Date: Mar 2005
Location: Black Mesa
Quote:
Originally Posted by El_Cid
si totusi astept un antivirus mai bun - nici Fsecure nici Kaspersky nu au facut nimic
incearca Spyware Doctor 3.5 (or above). este de departe cel mai dotat spy/ad ware si trojan remover. daca nu merge jucaria incearca si cu BitDefender 9 Prof. (am o banuiala)
__________________
OVERWATCH: Alert, anticitizen one detected. Vance Subprime engaged. Expunge. Mandate removal of active signiture imprint. Cauterize and expunge.
 
MYSTIK is offline    Reply With Quote
Old 12-04-2006, 13:41   #14 (permalink)
Registered User
 
Join Date: Oct 2004
Ce ar fi sa incerci cu Avast! Home Edition (free). Sau cu ''stravechiul'' McAfee All in One, dar acesta nu e free. Bafta !
 
vio_300 is offline    Reply With Quote
Old 14-04-2006, 13:39   #15 (permalink)
Al1
Registered User
 
Al1's Avatar
 
Join Date: Aug 2005
Location: Bucharest
Am si eu o intrebare. Ma duc la cineva mai pe dupa-masa sa incerc sa-l scap de virusi. Eu am vazut insa problema la el mai demult si nu ma incanta deloc.
Avast-ul gaseste o gramada de virusi, le da delete si apoi la reboot apar din nou.
Ceea ce inseamna probabil ca nu se taie radacina. Ma gandesc la o scanare din DOS de virusi cu un antivirus bun. Daca puteti sa-mi spuneti si mie un antivirus bun de DOS sau o alta solutie pentru problema, m-ati face foarte fericit pe ziua de azi
 
Al1 is offline    Reply With Quote
Old 14-04-2006, 14:20   #16 (permalink)
Sacred Spirit
 
MYSTIK's Avatar
 
Join Date: Mar 2005
Location: Black Mesa
degeaba. tu ai intrari in registrii care-ti "regenereaza" virusii...
de ce nu urmezi sfatul meu?
__________________
OVERWATCH: Alert, anticitizen one detected. Vance Subprime engaged. Expunge. Mandate removal of active signiture imprint. Cauterize and expunge.
 
MYSTIK is offline    Reply With Quote
Old 14-04-2006, 14:23   #17 (permalink)
Registered User
 
-=AlukarD=-'s Avatar
 
Join Date: Aug 2005
Location: Singura tara unde esti laudat daca esti prost gramada
Quote:
Originally Posted by Al1
Am si eu o intrebare. Ma duc la cineva mai pe dupa-masa sa incerc sa-l scap de virusi. Eu am vazut insa problema la el mai demult si nu ma incanta deloc.
Avast-ul gaseste o gramada de virusi, le da delete si apoi la reboot apar din nou.
Ceea ce inseamna probabil ca nu se taie radacina. Ma gandesc la o scanare din DOS de virusi cu un antivirus bun. Daca puteti sa-mi spuneti si mie un antivirus bun de DOS sau o alta solutie pentru problema, m-ati face foarte fericit pe ziua de azi
Vezi postul meu de mai sus. No.6
__________________
" I am beyond your experience. I am beyond good and evil, legions of the night - night breed - repeat not the errors of the Night Stalker and show no mercy. "
 
-=AlukarD=- is offline    Reply With Quote
Advertisment
Reply

  Computer Games Forum > Tech > Software

« Previous Thread | Next Thread »
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT +2. The time now is 17:37.

ComputerGames.ro - Archive - Top  

This site is copyrighted ©1997 - 2009, Computer Games Online SRL