| Author |
Message
|
tom321 Poziom 13

Joined: 04 Apr 2005 Posts: 148
|
#1
16 Nov 2005 17:19 Avast wykrywa Win32:Trojan-gen. lecz go nie usuwa? |
|
|
|
Avast wykrywa mi takiego wirusa- Win32:Trojan-gen. {Other} i go nie usunie.... co poradzicie??
Z góry dzięki
Pozdro ;)
a oto log z HijackThis:
Logfile of HijackThis v1.99.1
Scan saved at 17:17:46, on 2005-11-16
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Wyszukiwarka Sharingu.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\tomek\Moje dokumenty\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.upload.dvhk.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AntiVi] C:\WINDOWS\system32\Wyszukiwarka Sharingu.EXE
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [AntiVi] C:\WINDOWS\system32\Wyszukiwarka Sharingu.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{36E8ADEB-074F-4F35-A250-9E203642E3B1}: NameServer = 85.255.114.94,85.255.112.138
O17 - HKLM\System\CS1\Services\Tcpip\..\{36E8ADEB-074F-4F35-A250-9E203642E3B1}: NameServer = 85.255.114.94,85.255.112.138
O17 - HKLM\System\CS2\Services\Tcpip\..\{36E8ADEB-074F-4F35-A250-9E203642E3B1}: NameServer = 85.255.114.94,85.255.112.138
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
| Moderated by TONI_2003: |
| Zmieniłem temat postu! |
|
|
| Back to top |
|
 |
tronic1 Poziom 26

Joined: 06 Feb 2005 Posts: 20004 Location: Police, Alesund-Norwegia
|
|
| Back to top |
|
 |
Google

|
#
16 Nov 2005 17:30 |
|
|
|
|
|
| Back to top |
|
 |
tom321 Poziom 13

Joined: 04 Apr 2005 Posts: 148
|
#3
16 Nov 2005 17:42 Re: Win32:Trojan-gen. {Other} POMOCY!! |
|
|
|
Dostałem raport : "NIE ZNALEZIONO ŻADNEGO ZŁOŚLIWEGO OPROGRAMOWANIA" a wirus dalej jest :(
|
|
| Back to top |
|
 |
tronic1 Poziom 26

Joined: 06 Feb 2005 Posts: 20004 Location: Police, Alesund-Norwegia
|
#4
16 Nov 2005 18:54 Avast wykrywa Win32:Trojan-gen. lecz go nie usuwa? |
|
|
|
http://www.hijackthis.de/
Wklej loga na podaną stronę.W zasadzie nie ma w nim nic groźnego.ale jak wkleisz to sprawdzisz co mógłbyś wyłączyć.
|
|
| Back to top |
|
 |
Google

|
#
16 Nov 2005 18:54 |
|
|
|
|
|
| Back to top |
|
 |
Kolobos Poziom 26

Joined: 13 Jun 2003 Posts: 26220 Location: Warszawa
|
#5
16 Nov 2005 19:18 Avast wykrywa Win32:Trojan-gen. lecz go nie usuwa? |
|
|
|
Usun:
O4 - HKLM\..\Run: [AntiVi] C:\WINDOWS\system32\Wyszukiwarka Sharingu.EXE
O4 - HKCU\..\Run: [AntiVi] C:\WINDOWS\system32\Wyszukiwarka Sharingu.EXE <- plik usun.
W jakim pliku masz tego trojan-gen'a? Jak w IE temp to usun cala zawartosc cache przegladarki i tyle.
|
|
| Back to top |
|
 |
tom321 Poziom 13

Joined: 04 Apr 2005 Posts: 148
|
#6
16 Nov 2005 23:03 Re: Avast wykrywa Win32:Trojan-gen. lecz go nie usuwa? |
|
|
|
plik 45843095.dll (czy jakoś tak, ale rozszerzenie napewno DLL)
dzięki za porady zaraz spróbuje usunąć wpisy
|
|
| Back to top |
|
 |
Google

|
#
16 Nov 2005 23:03 |
|
|
|
|
|
| Back to top |
|
 |
tom321 Poziom 13

Joined: 04 Apr 2005 Posts: 148
|
#7
18 Nov 2005 14:14 Re: Avast wykrywa Win32:Trojan-gen. lecz go nie usuwa? |
|
|
|
dalej nic, proszę o pomoc :(
|
|
| Back to top |
|
 |
tronic1 Poziom 26

Joined: 06 Feb 2005 Posts: 20004 Location: Police, Alesund-Norwegia
|
|
| Back to top |
|
 |