Jako tezak problem

[vampir]

Nametnula mi se "slika" koja je .html document.
Nisam uspio maknut s nortonom ,ad-om i HJT-om
Logfile of HijackThis v1.98.2
Scan saved at 19:49:04, on 14.12.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows ControlAd\WinCtlAd.exe
C:\Program Files\Windows ControlAd\WinCtlAdAlt.exe
C:\WINDOWS\System32\cmd32.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\CashBack\bin\cashback.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\WINDOWS\System32\ir.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Edi\Desktop\HijackThis.exe

R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\Program Files\SurfSideKick 2\SskBho.dll
O4 - HKLM\..\Run: [Windows ControlAd] C:\Program Files\Windows ControlAd\WinCtlAd.exe
O4 - HKLM\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe
O4 - HKCU\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe

To ostane nakon kaj sve izbrisem s HJT-om.
Mogu izbrisat i s add/remove programs ali to se svejedno vraca.
ta slika je ovdje a ima "removal instructions" koji me vodi ovdje
http://213.159.117.130/?affid=NAT-1
Dajte pomozite jer sam stvarno ocajan.

[Bubba]

Originally posted by vampir
Nametnula mi se "slika" koja je .html document.
/megasnip

A da probas jednostavno izgasiti Active Desktop? I prosurfas procesima u Task Manageru, pa vidis koji bi mogli biti sumnjivi i provjeris na http://www.processlibrary.com/ o cemu se radi...

[vampir]

Probo sam i to samo kaj nije uspjelo.
No rijesio sam problem. Ta me "reklama" vodi na stranicu od nekog anti-spyware programa (zamisli) i poslo sam mail njihovom tehnical supportu i decki su u roku 2h odgovorili. Isprike bla bla bla... i dali mi 2 nacina da se tog rijesim.
Ako ce neko imat slicnih problema nek vidi ovo:
Ovo je neki programcic lagani (oko 10KB) pa ga sam pokrenete

http://www.smart-security.info/removal.html


A ovo je nacin bez ikakve pomoci sa strane

Right click at the very top of the screen it should appear as a standard options menu.
- Select Properties - Desktop tab.
- Click "Customize Desktop" button at the bottom.
- Select "Web" Tab.
- Uncheck "Security" checkbox.

i hvala za trud Bubba