Forum Romania Inedit
Romania Inedit - Resursa ta de Fun
|
Nou pe simpatie:
andreea_bianca24 24 ani
 | Femeie
24 ani
Mures
cauta Barbat
24 - 58 ani |
|
|
Forum Romania IneditReguliInregistrareLoginPozeNu sunteti logat. Lista Forumurilor Pe Tematici
|
| #1 |
|
|
buna am si eu o problema la care nu gasesc solutie... Am intrat fara sa vreau pe un link care s-a dovedit sa nu mearga, dupa care am observat ca adresa de homepage s-a schimbat in unihomepg.com... Apoi in messenger au incpeut sa-mi apara mesaje la status cu view my iq => unihomepg.com/DHS132132, etc... Mi-a disparut runul de la start, nu pot intra in task manager si nu pot sa schimb homepageul... Ati mai avut de aface cu acest virus, ma puteti ajuta?
PS nu pot sa reistalez sau sa sterg IE pt ca apare mereu inapoi :P...
_______________________________________
---------------------------------------------------------------------
Love!!
|
|
| |
|
| #2 |
|
|
Citeste aici Esti infectat cu Virus-- JS:ADODB
_______________________________________
Zilnic, cel mai interesant P.M. este răsplătit cu un BONUS special
DO NOT PM ME, MOST LIKELY I WON'T ANSWER.DO NOT REQUEST
REUPLOADS OF MY PREVIOUS UPLOADS, BUT IF YOU STILL HAVE
THEM, FEEL FREE TO MAKE AS MANY MIRRORS AS YOU LIKE. 
 
[mp3=https://www.youtube.com/watch?v=azJTTI4vk7g]
 Citiţi regulile/Read The Rules 
"Non quod habemus, sed quod fruimur, abundantia nostra est."
|
|
| |
|
| #3 |
|
|
da am gasit si io aia si aia 2 vorbesc acolo si in final moderatoru ii da la ala un link cu antispyware...
_______________________________________
---------------------------------------------------------------------
Love!!
|
|
| |
|
| #4 |
|
|
concluzie : instalezi HijackThis , scanezi , si dai fix la tot ce gaseste...
_______________________________________
Zilnic, cel mai interesant P.M. este răsplătit cu un BONUS special
DO NOT PM ME, MOST LIKELY I WON'T ANSWER.DO NOT REQUEST
REUPLOADS OF MY PREVIOUS UPLOADS, BUT IF YOU STILL HAVE
THEM, FEEL FREE TO MAKE AS MANY MIRRORS AS YOU LIKE.
[mp3=https://www.youtube.com/watch?v=azJTTI4vk7g]
Citiţi regulile/Read The Rules
"Non quod habemus, sed quod fruimur, abundantia nostra est."
|
|
| |
|
| #5 |
|
|
k deci logul e asta... bifez chiar tot?
Logfile of HijackThis v1.99.1
Scan saved at 6:22:25 PM, on 2/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\Program Files\Anti-Spyware Blocker\Anti-Virus.exe
C:\Program Files\TRENDnet\TRENDnet TEW-421PC_TEW-423PI\WlanCU.exe
C:\Program Files\Hamachi\hamachi.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Opera7\opera.exe
C:\Documents and Settings\Bogdan\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://unihomepg.com
O1 - Hosts: 64.26.25.75 google.com
O1 - Hosts: 64.26.25.75 google.co.uk
O1 - Hosts: 64.26.25.75 www.google.co.uk
O1 - Hosts: 64.26.25.75 google.jp
O1 - Hosts: 64.26.25.75 www.google.jp
O1 - Hosts: 64.26.25.75 google.cn
O1 - Hosts: 64.26.25.75 www.google.cn
O1 - Hosts: 64.26.25.75 search.msn.com
O1 - Hosts: 64.26.25.75 search.live.com
O1 - Hosts: 64.26.25.75 search.yahoo.com
O1 - Hosts: 64.26.25.75 search.aol.com
O1 - Hosts: 64.26.25.75 ask.com
O1 - Hosts: 64.26.25.75 www.ask.com
O1 - Hosts: 64.26.25.75 google.ca
O1 - Hosts: 64.26.25.75 www.google.ca
O1 - Hosts: 64.26.25.75 answer.com
O1 - Hosts: 64.26.25.75 www.answer.com
O1 - Hosts: 64.26.25.75 www.altavista.com
O1 - Hosts: 64.26.25.75 altavista.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: Anti-Spyware Blocker.lnk = C:\Program Files\Anti-Spyware Blocker\Anti-Virus.exe
O4 - Global Startup: Wireless Configuration Utility HW.15.lnk = C:\Program Files\TRENDnet\TRENDnet TEW-421PC_TEW-423PI\WlanCU.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB34} (Sony SNC-RZ30 Image Viewer) - http://86.105.42.195/home/SonySncRz30View.cab
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
_______________________________________
---------------------------------------------------------------------
Love!!
|
|
| |
|
| #6 |
|
|
daca ai antivirus care sterge fisierul si nu dezinfecteaza iti buleste sistemu de operare... ce antivirus ai? 
|
|
| |
|
| #7 |
|
|
pai am luat hijakcu ca mi-a zis maharet acuma si acolo zice sa dau logul cuiva care se pricepe si sa-mi zica ce sa fac 
maharet a zis asta:
concluzie : instalezi HijackThis , scanezi , si dai fix la tot ce gaseste...
deci bifez tot si dau fix :P
_______________________________________
---------------------------------------------------------------------
Love!!
|
|
| |
|
| #8 |
|
|
O1 - Hosts: 64.26.25.75 www.google.ca
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://unihomepg.com
O1 - Hosts: 64.26.25.75 www.google.jp
toate astea de mai sus trebuiesc bifate si trebuie dat "Fix Checked"
_______________________________________
Zilnic, cel mai interesant P.M. este răsplătit cu un BONUS special
DO NOT PM ME, MOST LIKELY I WON'T ANSWER.DO NOT REQUEST
REUPLOADS OF MY PREVIOUS UPLOADS, BUT IF YOU STILL HAVE
THEM, FEEL FREE TO MAKE AS MANY MIRRORS AS YOU LIKE.
[mp3=https://www.youtube.com/watch?v=azJTTI4vk7g]
Citiţi regulile/Read The Rules
"Non quod habemus, sed quod fruimur, abundantia nostra est."
|
|
| |
|
| #9 |
|
|
mai lasa ca am dat la tot pcu meu nu are nimik o trebuit doar sa reinstalez hamachi ms mult mult mult mult mult mult mult mult mult ) :X
_______________________________________
---------------------------------------------------------------------
Love!!
|
|
| |
|
