Si pastrohet kompjuteri nga reklamat dhe spiunët

[mad]

Po i hidhja nje sy kesaj liste, dhe nuk po shikj ne pamje e pare, asgje qe mund te jete rrezik. problemi eshte me IE5, kur hapet, behet redirect ne nje faqe updatesystempage.com/, dhe tregon se W32.Sinnaka.A@mmka infektuar pikerisht kete sistem. jep edhe te gjithe te dhenat qe ne te bejne me browserin qe perdoret, sistemin operativ etj etj. NAV nuk kap asgje as ne Safe Mode., po ashtu edhe SpyBot ose Ad-Aware. mos ndoshta nje upgrade i IE do beje te mundur rregullimin e ketij problemi? dua edhe te shtoj qe me Mozilla os Firefox kjo nuk ndodh. dmth, punon normalisht.

kjo eshte lista e HijackThis. julutem hidhini nje sy.eshte vertete shqetesuese. ju flm

Logfile of HijackThis v1.99.1
Scan saved at 4:26:20 PM, on 1/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\nvctrl.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\mozilla.org\Mozilla\Mozilla.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\LVComsX.exe
C:\Documents and Settings\Nikola Petrusevski\Desktop\Archive Browser_files\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hp.com
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll (file missing)
O2 - BHO: HomepageBHO - {27150f81-0877-42e9-af13-55e5a3439a26} - C:\WINDOWS\system32\hp210.tmp
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [OESpamTest] C:\PROGRA~1\KASPER~1\KASPER~1\KASPER~3\OESpamTest.ExE
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
O8 - Extra context menu item: &WordWeb... - res://C:\WINDOWS\wweb32.dll/lookup.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll (file missing)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} - 
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3DFB5987-52D7-4FDE-8CEA-25CF79941427}: NameServer = 194.228.2.1 194.228.41.113
O18 - Protocol: bw+0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {8EA7DFFC-FDC4-44EF-8C83-78728D8FACC6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe 

[qoska]

Ke nje adware te instaluar si "kernel rootkit".

Kerko ne google me termin me siper dhe ja hodhe.
Sa per ate qe te thote internet explorer eshte falso pasi ta krijon ky adware.
LEXO dhe kete per me shume.

[mad]

qoska rrofsh per postimin,
ne fakt, asgje nuk u kap nga programet e detektimit te 'pislleqeve', por nderkohe ishte e dukshme qe dicka nuk shkonte.
megjithate, laptopi duke perdorur nje shfletues tjeter interneti eshte ne rregull, pervec faktit qe 'rootkit-i' eshte akoma aty.

mesa lexova neper faqe, metoda me efikase, eshte formatimi. kishte edhe nje menyre duke perdorur nje boot CD me WIndows PE, por nuk po e gjej dot kete te fundit, as ne P2P.

gjithe te mirat.

{^_^}

[Lorencone]

Lorencone: a me i bo Disable apo si ti heq Ato Viruse???

Bej Disable duke shkuar Run/msconfig dhe fshihi si File nga Program File
ne qofte se te del qe nuk i fshin dot atehere provo te ndalosh .exe filet me task menager ne qofte se prap nuk mundesh atehere futu ne komputera ne safe mode
(besoj se di te futesh ne safe mode ne qofte se jo shiko diku ke postime si te pastrosh komputerin nga viruse) dhe hiqi prej andej
Pac fat

[EdiR]

Menyra me e mire pasi te kesh pastruar kompjutering nga virusi eshte te mos perdoresh IE por instalo Firefox ose cfare do tjeter. Une nuk kam gje kunder IE sepse nuk mund te mbijetosh pa te por perdor te tjeret sa me shume te kesh mundesi.

Kalofsh mire,
Ed

[Ardi_Pg_ID]

Hotel ajo nuk eshte cfare te kerkova une Beje komanden qe te kerkova une edhe postoje ne forum. Ka shume mundesi qe te jene shume key ne regjister e shume file ne kompjuter qe aktivizojne kete adaware.

Te sygjeroj hijackthis edhe posto logot

[Julie]

Edhe viruset per pc time skane te sosur.
Jam e infektuar me winfixer. Pashe ne internet keshilla dhe removal tools per kete virus, por c'fare thote nje pale nuk thote pala tjeter dhe sme mbushet mendja. Symantec thote qe Antivirusi duhet ta detektoje. Ne fakt e detektoi heren e pare dhe e ka ne quarantine por 1 file thuhej ishte akoma e infektuar, pra nuk e pastron dot plotesisht.
Pasi mendoj se behet pastrimi ai regjenerohet perseri pas disa kohesh. Kam fikur system restore, dhe nderkohe ka bere skanime me antivirus (Norton) dhe Ad Aware (te dyja ne safe mode). Antivirusi nuk detekton asgje, nderkohe qe ad Aware gjeti file...te cilat i fshiva. Win fixer ...rigjenerohet perseri si perfundim.
Ju lutem me jepni ndonje keshille mbi pastrimin e Win Fixerit...

Gjithashtu doja te dija, si ka mundesi qe Nortoni nuk i detekton te gjitha ne kohe, por i detekton (kam dy raste) vetem pasi fillon skanimin e perditshem qe i bej pc.?
Mos ndoshta Nortoni im s'funksionon mire? Sepse updatin e ben gati c'do dite ose 4 here ne jave.
Ky version qe kam eshte pirat dhe eshte Norton enterprise...mos ndoshta ka ardhur koha ta ndrroj??? Se di por me duket cudi qe u be e dyta here qe s'ka mundur te detektoje qe ne fillim hyrjet e viruseve ne pc.



flm para kohe per pergjigjet

[Nga Kajca]

Te dashur forumista,

te mbrosh kompjuterin nga virus etj. eshte
mese e natyrshme por problemet nuk do tju mbarojne
persa kohe perdorni Internet Explorer te Microsoft.

Prandaj ju keshilloj te perdorni si browser,
neqofte se perdorni Windows, nje nga keta browser:
Favoriti im eshte
http://www.mozilla.com/firefox/
me kete plugin kunder reklamave etj.
http://adblock.mozdev.org/
dhe me kete plugin per ato faqe te cilat mund ti shikoni vetem me Internet Explorer te Microsoft
http://ietab.mozdev.org


Alternativa tjeter.
http://www.opera.com

Browser(i) nuk eshte e vetja mundesi e infektimit te nje sistemi
prandaj, sic eshte thene disa here ne kete teme, keshillohet
te keni nje program Antivirus dhe nje Firewall.

[ilis]

Pershendetje!
Mund te me jepni nje keshille per te hequr nje virus.

Quhet (Trojan.Alemod) dhe eshte fshehur tek C:\Windows\system32\wininet.dll.

E kam skanuar kompjuterin me Mcafee dhe Norton por nuk e kan hequr.

[benseven11]

Edhe viruset per pc time skane te sosur.
Jam e infektuar me winfixer. Pashe ne internet keshilla dhe removal tools per kete virus, por c'fare thote nje pale nuk thote pala tjeter dhe sme mbushet mendja. Symantec thote qe Antivirusi duhet ta detektoje. Ne fakt e detektoi heren e pare dhe e ka ne quarantine por 1 file thuhej ishte akoma e infektuar, pra nuk e pastron dot plotesisht.
Pasi mendoj se behet pastrimi ai regjenerohet perseri pas disa kohesh. Kam fikur system restore, dhe nderkohe ka bere skanime me antivirus (Norton) dhe Ad Aware (te dyja ne safe mode). Antivirusi nuk detekton asgje, nderkohe qe ad Aware gjeti file...te cilat i fshiva. Win fixer ...rigjenerohet perseri si perfundim.
Ju lutem me jepni ndonje keshille mbi pastrimin e Win Fixerit...

Gjithashtu doja te dija, si ka mundesi qe Nortoni nuk i detekton te gjitha ne kohe, por i detekton (kam dy raste) vetem pasi fillon skanimin e perditshem qe i bej pc.?
Mos ndoshta Nortoni im s'funksionon mire? Sepse updatin e ben gati c'do dite ose 4 here ne jave.
Ky version qe kam eshte pirat dhe eshte Norton enterprise...mos ndoshta ka ardhur koha ta ndrroj??? Se di por me duket cudi qe u be e dyta here qe s'ka mundur te detektoje qe ne fillim hyrjet e viruseve ne pc.



flm para kohe per pergjigjet

Mire eshte te instalosh programin Hijack this ketu.http://files3.majorgeeks.com/files/e...hijackthis.zip
Per te hequr winfixer shkarkohet ky skedar http://www.atribune.org/downloads/VundoFix.exe Kur ta shkarkosh kliko ne butonin "save"(ruaj).E ruan ne desktop.Mbyll kompjuterin,e ndez dhe ne ndezje mbaj te shtypur butonin f8 per te kaluar ne safe mode.Klikon te skedari qe shkarkove, VundoFix per ta instaluar.menjehere do shohesh nje skedar Vundu.bat
Klikon te ky skedar do shohesh mesazhin si me poshte:
"By pressing enter you agree that you are using this at your own risk
Please seek assistance at one of the following forums:
http://www.atribune.org/forums
http://www.247fixes.com/forums
http://www.geekstogo.com/forum
http://forums.net-integration.net "
Godit ne Enter.Do dale nje mesazh tjeter,"Type in the file-path ....."
Pastaj shtyp ne tastjere nje direktori ekzakt si kjo me poshte
C:\WINDOWS\repair\ksidvrs.* dhe godit enter.Do shohesh skedarin badfile.dll
Nqs emri i skedarit eshte keshtu atehere fut emrin e skedarit shqiptuar mbrapsht si elifdab.* Shtyp enter,shtyp F6,shtyp enter.Menjehere do hapet programi i Hijackut.A shikon rreshta branda dritares?Ne qofte se jo,klik ne Scan buton.Te lista shiko per kete rresht si ky O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\repair\srvdisk.dll Vendosi me miun nje shenje V katrorit te bosh qe ka ky rresht perpara.Klikon posht ne butonin Fix.Mbyllet hijacku.Godit nje buton tastjere cfare te duash.Kjo do provokoje fikjen dhe ndezjen e kompjuterit.Me ndezjen e kompjuterit shkarko kete skedar pastrus.
http://www.stevengould.org/downloads.../CleanUp40.exe Pas shkarkimit e hap programin,shkon ne opsione/custom cleanup.I vendosh shenjen e v ketyre rreshtave:
Empty Recycle Bins
Delete Cookies
Delete Prefetch files
Cleanup! All Users
Klikon ok dhe programi do vazhdoje me pastrimin.Ne qofte se do te te kerkoje reboot,klikon ne jo.I behet kontroll kompjuterit per pasterti nga viruset te kjo faqe.http://www.pandasoftware.com/products/activescan.htm Rezultatet e skanimit te antivirusit mund ti postosh ketu.Gjithashtu mire eshte te postohen rezultatet e skanimit nga Hijack this.Hap programin e Hijack this.Klik ne scan buton.Klik ne "save log" buton. Me pas do hapet Notepadi me rezultatet e skanimit.Klik ne Notepad lart ne Edit.Zgjedh selekt all.Gjithe teksti do kthehet ne blu.Klik i djathte te teksti dhe kopjo.Hap nje post te ri ne forum,klik i djathte dhe paste.Ka mundesi te kesh infeksion edhe me spiuna dhe trojane te tjere.
Te Nortoni, opsionet shiko per te aktivizuar worm guard,antivirus protection live,dicka e tille,gje qe e lejon antivirusin te jete ne situate pergjimi dhe gadishmerie.Ne kete situate Nortoni te lajmeron menjehere me futjen e ndonje virusi.Shiko ne kete teme se si te caktivizosh sistem restore.heqja e viruseve dhe trojaneve ne shume raste kerkon caktivizim te sistem restore,sidomos kur virusi trojani futet ne direktorine C/windows, ose C/windows/sistem 32/ ose directori te fshehta,ku windowsi me sistem restore aktiv nuk te lejon heqjen e virusit/trojanit.