Forumi
Home Pravila i pomoć Članovi Kalendar Današnji postovi


Povratak   PC Ekspert Forum > Računala > Problemi > Softverski problemi
Ime
Lozinka

Odgovori
 
Uređivanje
Staro 27.06.2006., 12:28   #1
franjo17
Registered User
 
Datum registracije: Jun 2006
Lokacija: V. Bukovec
Postovi: 8
molim pomoć! hijackthis log

imam problem sa dialerom! na sreću zbog antidialera mi se ne može spojiti na liniju, ali me uvijek izbaci kad se pokuša! ovako izgleda pojavljivanje dialera



a ovo je hijackthis log!

Logfile of HijackThis v1.99.1
Scan saved at 12:12:11, on 6/27/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\aspnet_admin.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Nokia\Tools\NclTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\T-Com Antidialer\T-Com Antidialer.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Anti-Blaxx\Anti-Blaxx.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\ACD Systems\ImageFox\ImageFox.exe
C:\WINDOWS\TEMP\winB7.tmp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.hr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.hr
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {6CA48318-B290-E202-B535-B2649B563FF3} - (no file)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\Tools\NclTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [VGARUN] REGVGA.EXE
O4 - HKLM\..\Run: [tcomantidialerrun] C:\Program Files\T-Com Antidialer\T-Com Antidialer.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\Anti-Blaxx\Anti-Blaxx.exe
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=062806 serial=dr12wex-1500213-jam lang=EN
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [Free Download Manager] d:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - Global Startup: ImageFox.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: I&zvoz u Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone
O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)
O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O16 - DPF: {11111111-1111-1111-1111-111191113457} -
O16 - DPF: {11111111-1111-1111-1111-511111193457} -
O16 - DPF: {11111111-1111-1111-1111-511111193458} -
O16 - DPF: {12E5E9D9-4366-45D9-BA41-D0BCD55AD8CF} -
O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} -
O16 - DPF: {CDCBE0F1-D13A-4F86-A963-3A272D3ABA7E} -
O16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{D36BEDE4-441A-4DE6-AFA2-69D7D71892FD}: NameServer = 161.53.114.135 161.53.114.145
O20 - Winlogon Notify: winwil32 - C:\WINDOWS\SYSTEM32\winwil32.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: O&O Defrag (OODefrag) - O&O Software GmbH - C:\WINDOWS\System32\oodag.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe


molio bih ako bi mi netko mogao pomoći kako da to riješim jer sam pokušao sa spyware doctorom, sa spybot s&d i sa ad aware-om, ali ne pomaže!
hvala!
franjo17 je offline   Reply With Quote
Staro 27.06.2006., 13:42   #2
Defcon.OS
Contra bonos mores
 
Defcon.OS's Avatar
 
Datum registracije: May 2006
Lokacija: Osijek
Postovi: 159
Nije prijetnja ali smece, ukloni po osobnoj želji:

C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe

O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
-----------------------------------------------------------------

Ukloni:

C:\WINDOWS\TEMP\winB7.tmp.exe


O2 - BHO: (no name) - {6CA48318-B290-E202-B535-B2649B563FF3} - (no file)

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone
O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)
O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O16 - DPF: {11111111-1111-1111-1111-111191113457} -
O16 - DPF: {11111111-1111-1111-1111-511111193457} -
O16 - DPF: {11111111-1111-1111-1111-511111193458} -
O16 - DPF: {12E5E9D9-4366-45D9-BA41-D0BCD55AD8CF} -
O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} -
O16 - DPF: {CDCBE0F1-D13A-4F86-A963-3A272D3ABA7E} -
O16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} -

Moguce da nesto propuštam, naleti još koji put po second opinion
__________________

Defcon.OS je offline   Reply With Quote
Oglasni prostor
Oglas
 
Oglas
Staro 27.06.2006., 14:35   #3
immortal
Kernel panic
 
Datum registracije: Jan 2006
Lokacija: Zg
Postovi: 522
Pogledaj još ovdje: http://www.hijackthis.de , ali vjerovatno je defcon.os sve napisao.
__________________
Keyboard error or no keyboard present
Press F1 to continue, DEL to enter SETUP
immortal je offline   Reply With Quote
Staro 27.06.2006., 14:53   #4
atha
Moderator
Moj komp
 
atha's Avatar
 
Datum registracije: Jan 2005
Lokacija: Rijeka
Postovi: 9,067
Ukloni ovo sto ti je covjek napisao. Uninstaliraj taj Spware Doctor.
Skeniraj sa svjeze updateanim Ad-Aware-om disk.
Takodjer sa CWShredder-om.
__________________
___________
Just atha
x
atha je offline   Reply With Quote
Staro 27.06.2006., 19:53   #5
thuNdeR
Premium
 
thuNdeR's Avatar
 
Datum registracije: Dec 2005
Lokacija: na sombra
Postovi: 1,047
+ spybot i nod32 ak imash
thuNdeR je offline   Reply With Quote
Staro 27.06.2006., 23:23   #6
franjo17
Registered User
 
Datum registracije: Jun 2006
Lokacija: V. Bukovec
Postovi: 8
imam još neke fileove tipa win**.tmp.exe i win**.tmp u TEMP folderu! jel da i njih obrišem?
franjo17 je offline   Reply With Quote
Staro 28.06.2006., 00:01   #7
Ladybug
Premium
Moj komp
 
Ladybug's Avatar
 
Datum registracije: Mar 2006
Lokacija: n/a
Postovi: 900
imala sam isto to prije par mjeseci!
http://forum.pcekspert.com/showthread.php?t=39245

Otišlo je nakon par skenova gore navedenim programima u safe modu, i uz pomoć gore navedenog moderatora

(avast, ad aware, ewido, cwshredder, ccleaner, spybot s&d, mislim da je to bilo to...)
Ladybug je offline   Reply With Quote
Oglasni prostor
Oglas
 
Oglas
Odgovori



Pravila postanja
Vi ne možete otvarati nove teme
Vi ne možete pisati odgovore
Vi ne možete uploadati priloge
Vi ne možete uređivati svoje poruke

BB code je Uključeno
Smajlići su Uključeno
[IMG] kod je Uključeno
HTML je Isključeno

Idi na