X

AdwareSheriff - jak to wywalic

12 Feb 2006 14:47 DUduh85
  • #1 12 Feb 2006 14:47
    duh85
    Level 13  
    Helpful post? (0)
    Logfile of HijackThis v1.99.1
    Scan saved at 14:41:34, on 2006-02-12
    Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\GFI\LANguard Network Security Scanner 3\sscansvc.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\osaupd.exe
    C:\WINDOWS\wupdmgr.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\boni\Pulpit\hijackthis_199\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onlinesecurityguide.net/?adv=193
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
    O4 - Startup: asheriff.lnk = C:\Program Files\AdwareSheriff\asheriff.exe
    O4 - Global Startup: wupdmgr.exe
    O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
    O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
    O23 - Service: GFI LANguard N.S.S. Scheduled Scans Service (lnss_sscans) - GFI Software Ltd. - C:\Program Files\GFI\LANguard Network Security Scanner 3\sscansvc.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

    Pomimo kilkukrotnego recznego usuniecia
    osaupd.exe
    wupdmgr.exe
    asheriff.exe
    po kilku godzinach pojawia sie od nowa:
    probowalem terz Spy bot i ad_adware
    Jak sie tego pozbyc
  • #2 12 Feb 2006 15:18
    Kolobos
    Spec od komputerów
    Helpful post? (0)
    Opis usuwania masz tutaj:
    http://www.searchengines.pl/phpbb203/index.php?showtopic=31936&st=15&p=258454&#entry258454

    Z tego co widac w log'u to:
    Zakoncz procesy:
    C:\WINDOWS\osaupd.exe
    C:\WINDOWS\wupdmgr.exe

    W hijackthis usun:
    O2 - BHO: (no name) - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - (no file)
    O4 - Startup: asheriff.lnk = C:\Program Files\AdwareSheriff\asheriff.exe
    O4 - Global Startup: wupdmgr.exe
    O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
    O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)

    Zrob tez skan tym:
    ftp://download.hirekmedia.hu/ssfsetup1_0.exe <- zrob update przed skanowaniem, po przeskanowaniu odinstaluj.
    http://download.ewido.net/ewido-setup.exe <- zrob update przed skanowaniem, po przeskanowaniu odinstaluj.
  • #3 12 Feb 2006 16:07
    Kolobos
    Spec od komputerów
    Helpful post? (0)
    :arrow: Smok
    Czytaj dokladnie posty zanim zaczniesz zasmiecac forum:
    Quote:
    probowalem też Spy bot i ad_adware


    Oba programy w niczym nie pomoga!
Mouser  Search 4 million + Products
Browse Products