Help!
-
#4912
Na csa!
Lefuttattam a keresést a Malwarebytes nevű vírusirtóval.
Itt a napló:Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Adatbázis verzió: 4435
Windows 5.1.2600 Szervizcsomag 3
Internet Explorer 7.0.5730.11
2010.08.16. 17:13:33
mbam-log-2010-08-16 (17-13-33).txt
Vizsgálat típusa: Teljes vizsgálat (A:\|C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Átvizsgált objektumok: 229005
Eltelt idő: 1 óra, 50 perc, 36 másodperc
Fertőzött memóriafolyamatok: 0
Fertőzött memória modulok: 0
Fertőzött Rendszerleíró kulcsok: 10
Fertőzött Rendszerleíró értékek: 2
Fertőzött Rendszerleíró adatelemek: 2
Fertőzött mappák: 2
Fertőzött fájlok: 8
Fertőzött memóriafolyamatok:
(Nem találhatók rosszindulatú elemek)
Fertőzött memória modulok:
(Nem találhatók rosszindulatú elemek)
Fertőzött Rendszerleíró kulcsok:
HKEY_CLASSES_ROOT\imeshmediabar.stockbar (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bc4be15d-6a34-4356-9e97-79e43da32b1d} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b7d3e479-cc68-42b5-a338-938ece35f419} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\kwanzy (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\IEBarProperties (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\MarketPrecision\DuhikiToolbar (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Kwanzy (Adware.Kwanzy) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\Adparatus (Adware.Adparatus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{54fa77cb-aac9-4dfa-afae-81f86232e3f8} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{54fa77cb-aac9-4dfa-afae-81f86232e3f8} (Trojan.BHO) -> Quarantined and deleted successfully.
Fertőzött Rendszerleíró értékek:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{b7d3e479-cc68-42b5-a338-938ece35f419} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sfkg6wipus (Trojan.Downloader) -> Quarantined and deleted successfully.
Fertőzött Rendszerleíró adatelemek:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.SearchPage) -> Bad: (http://www.mirarsearch.com/?useie5=1&q=) Good: (http://www.google.com) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.SearchPage) -> Bad: (http://www.mirarsearch.com/?useie5=1&q=) Good: (http://www.google.com) -> Quarantined and deleted successfully.
Fertőzött mappák:
C:\Documents and Settings\All Users\Application Data\Kwanzy (Adware.Kwanzy) -> Quarantined and deleted successfully.
C:\Program Files\Kwanzy (Adware.Kwanzy) -> Quarantined and deleted successfully.
Fertőzött fájlok:
C:\Documents and Settings\XP\Dokumentumok\Letöltések\BaDBoY v5\BaDBoY v5\BaDBoYv5.exe (Trojan.Armin) -> Quarantined and deleted successfully.
C:\Documents and Settings\XP\Dokumentumok\Letöltések\BaDBoY_V4.2_FiXeD_BY_Rodr_\BaDBoYv4.2.exe (Trojan.Armin) -> Quarantined and deleted successfully.
C:\Program Files\Kwanzy\uninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{7F60E968-64B2-4FFD-8B85-F5A196F7EA1F}\RP464\A0123232.exe (Trojan.PWS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{7F60E968-64B2-4FFD-8B85-F5A196F7EA1F}\RP469\A0123621.exe (Trojan.PWS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{7F60E968-64B2-4FFD-8B85-F5A196F7EA1F}\RP471\A0123786.exe (Trojan.PWS) -> Quarantined and deleted successfully.
G:\Alcohol120 v14_9_5 Build3105\alcohol120v1.9.5.3105trialpatchtsrh\patch.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\XP\Application Data\avdrn.dat (Malware.Trace) -> Quarantined and deleted successfully.