Sypware trojans/ Malware nevaru izdabūt viņu ārā

Chau! :)
Laikam būšu noķēris Spyware trojanu vai Malware īsti nezinu, bet visu laiku apakšā labajā stūrī mirgo icona (krustiņš jautājumzīme krustiņš jautājumzīme). Tad pa laikam uzmet kautkādu textu kjipa lai novelk AntiSpyware vai kautko tādu. Uzliku SpyBot Search&Destroy scan rekur Results: (Pats no viņiem nekā nesaprotu)
Hint of the Day: Click the bar at the right of this to see more information! ()
 

AntiSpyCheck: [SBI $275CC876] Settings (Registry value, fixed)
 HKEY_USERS\S-1-5-21-1844237615-2000478354-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope=...{DAED9266-8C28-4C1C-8B58-5C66EFF1D302}...

AntiSpyCheck: [SBI $5628BE3A]  Link (File, fixed)
 C:\Documents and Settings\Toms\Favorites\Antivirus Scan.url

AntiSpyCheck: [SBI $2A61B9F1] Uninstall settings (Registry key, fixed)
 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEBrowse Tool

AntiSpyCheck: [SBI $8BB6B1E9] Uninstall settings (Registry key, fixed)
 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Warning Center

Worldsecurityonline.FakeAlert: [SBI $5F3B3515] Uninstall settings (Registry key, fixed)
 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Alert Popup

AntispywareProXP: [SBI $A1537556] Program directory (Directory, fixed)
 C:\Documents and Settings\All Users\Application Data\Software Licensors\Antispyware PRO XP\

Smitfraud-C.: [SBI $8F732AAF] Autorun settings (Registry value, fixed)
 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start

Smitfraud-C.gp: [SBI $3CA356D5] Settings (Registry key, fixed)
 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9034A523-D068-4BE8-A284-9DF278BE776E}

Zlob.Downloader.vdt: [SBI $80ABF6EA] Settings (Registry value, fixed)
 HKEY_USERS\S-1-5-21-1844237615-2000478354-839522115-1003\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com

Zlob.Downloader.vdt: [SBI $CE7553EC] Settings (Registry value, fixed)
 HKEY_USERS\S-1-5-21-1844237615-2000478354-839522115-1003\Software\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com

Zlob.Downloader.vdt: [SBI $B6DD774A] Settings (Registry value, fixed)
 HKEY_USERS\S-1-5-21-1844237615-2000478354-839522115-1003\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com

Microsoft.WindowsSecurityCenter_disabled: [SBI $2E20C9A9] Settings (Registry change, fixed)
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start

Zlob.Downloader.apl: [SBI $2F408797]  Executable (File, fixed)
 C:\Program Files\Applications\wcm.exe

Zlob.Downloader.apl: [SBI $31A0C766] Program directory (Directory, fixed)
 C:\Program Files\Applications\

Zlob.Downloader.apl: [SBI $453DA1B1]  Library (File, fixed)
 C:\Program Files\Applications\iebt.dll

Zlob.Downloader.apl: [SBI $B7971155]  Executable (File, fixed)
 C:\Program Files\Applications\iebtmm.exe

Zlob.Downloader.apl: [SBI $B7971155]  Executable (File, fixed)
 C:\Program Files\Applications\iebtu.exe

Zlob.Downloader.apl: [SBI $FA7507D5]  Executable (File, fixed)
 C:\Program Files\Applications\wcs.exe

Zlob.Downloader.apl: [SBI $3DFA558A]  Link (File, fixed)
 C:\Program Files\Applications\myd.ico

Zlob.Downloader.apl: [SBI $3DFA558A]  Link (File, fixed)
 C:\Program Files\Applications\mym.ico

Zlob.Downloader.apl: [SBI $3DFA558A]  Link (File, fixed)
 C:\Program Files\Applications\myp.ico

Zlob.Downloader.apl: [SBI $3DFA558A]  Link (File, fixed)
 C:\Program Files\Applications\myv.ico

Zlob.Downloader.apl: [SBI $ECFC26C1]  Link (File, fixed)
 C:\Program Files\Applications\ot.ico

Zlob.Downloader.apl: [SBI $3432843C]  Link (File, fixed)
 C:\Program Files\Applications\ts.ico

DoubleClick: Tracking cookie (Firefox: default) (Cookie, fixed)
 

MediaPlex: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

FastClick: Tracking cookie (Firefox: default) (Cookie, fixed)
 

FastClick: Tracking cookie (Firefox: default) (Cookie, fixed)
 

FastClick: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

BurstMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

BurstMedia: Tracking cookie (Firefox: default) (Cookie, fixed)
 

Statcounter: Tracking cookie (Firefox: default) (Cookie, fixed)
 

--- Spybot - Search & Destroy version: 1.6.0  (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-07-07 TeaTimer.exe (1.6.0.20)
2008-10-29 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-09-02 Includes\Adware.sbi (*)
2008-10-27 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-09-02 Includes\Hijackers.sbi (*)
2008-10-28 Includes\HijackersC.sbi (*)
2008-09-09 Includes\Keyloggers.sbi (*)
2008-10-28 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-10-28 Includes\Malware.sbi (*)
2008-10-28 Includes\MalwareC.sbi (*)
2008-09-02 Includes\PUPS.sbi (*)
2008-10-28 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-10-23 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-10-28 Includes\Spyware.sbi (*)
2008-10-29 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-10-29 Includes\Trojans.sbi (*)
2008-10-29 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Komentāri:

#1 grisha @ 2008.10.30 12:02

Nu i palags.

Ad-aware, HijackThis ar vareetu paliidzeet.

VAreeji jau naakoshreiz pastaastiit vai izdevaas vinjus izdzeest, nevis posteet sameeraa bezjeedziigus palagus.
Tur tak skaisti var izlasiit: fixed.  
Zveerudaarzs ir labs, vai tik nav spiests uz "vieglo naudu", automaatisko klikskjinaashanu.

#2 KaNeiet @ 2008.10.30 13:02

"kjipa lai novelk AntiSpyware vai kautko tādu"
kjipa lasīt nemāki?

Ieraksti tās drazas nosaukumu + removal zināmajā lodziņā.

#3 siiciitis1 @ 2008.10.30 13:12

izdevās izdzēst tos hlamus. CErams! :)