Denerwujący adres
Gdy włączam mój pulpit (na win XP) to odrazu po zalogowaniu włącza się internet explorer i wchodzi taka strona: http://allwebseek.com. W dodatku ta strona ustawiła się jako startową i za źadne skarby świata nie chce się zmienić (w opcjach internetowych). Od jakiegoś czasu uźywam Mozilli Firefox, i jeśli buszuje sobie po internecie to co kilkanascie minut włącza mi się ten sam adres tylko źe jest on w takiej formie: http://allwebseek.com/popup.php. I jest to bardzo uciąźliwe i denerwujące poniewaź np. jeśli gram w jakąś grę on–line albo pisze coś (np. na forum) to włącza się ta strona (w dodatku w tym samym oknie) i trzeba cofnąć. ale czasami jak się cofnie to wszystko przepada :(. Prosze pomóźcie i powiedzcie mi jak wyłączyć tą denerwującą stronę.
Odpowiedzi: 4
Wielkie dzięki Bobi_Robert
Wylacz pzrywracanie
Zamknij procesy:
ptask.exe
WinStat.exe
hiden.exe
WinStatKeep.exe
Usun:
D:Program FilesParallel Tasking
hiden.exe
D:Program FilesWindows FormatAd
FIX:
Natomiast nikt nie wie co to jest:
O4 – HKLM..Run: [Realtime Audio Engine] mmrtkrnl.exe
Natomiast to:
Jest zupełnie niepotrzebne w autostarcie
Zamknij procesy:
ptask.exe
WinStat.exe
hiden.exe
WinStatKeep.exe
Usun:
D:Program FilesParallel Tasking
hiden.exe
D:Program FilesWindows FormatAd
FIX:
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://google.icq.com/search/search_frame.php
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = http://allwebseek.com
O2 – BHO: – {371C6960–302C–45D0–9504–50B820247439} – (no file)
O2 – BHO: (no name) – {E5A1691B–D188–4419–AD02–90002030B8EE} – (no file)
O2 – BHO: (no name) – {FFF5092F–7172–4018–827B–FA5868FB0478} – (no file)
O3 – Toolbar: (no name) – {A6790AA5–C6C7–4BCF–A46D–0FDAC4EA90EB} – (no file)
O4 – HKLM..Run: [Parallel Tasking] D:Program FilesParallel Taskingptask.exe
O4 – HKLM..Run: [Windows AdStatus] D:Program FilesWindows AdStatusWinStat.exe
O4 – HKLM..Run: [hiden.exe] hiden.exe
O4 – HKLM..Run: [Windows FormatAd] D:Program FilesWindows FormatAdWinForm.exe
O16 – DPF: {15AD4789–CDB4–47E1–A9DA–992EE8E6BAD6} – http://static.windupdates.com/cab/DownloadsUnlimited/ie/bridge–c283.cab
O23 – Service: hpdj – Unknown – D:DOCUME~1KrystianUSTAWI~1Temphpdj.exe (file missing)
O23 – Service: hpdj3500 – Unknown – D:DOCUME~1KrystianUSTAWI~1Temphpdj3500.exe (file missing)
Natomiast nikt nie wie co to jest:
O4 – HKLM..Run: [Realtime Audio Engine] mmrtkrnl.exe
Natomiast to:
O4 – HKLM..Run: [IMJPMIG8.1] D:WINDOWSIMEimjp8_1IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 – HKLM..Run: [MSPY2002] D:WINDOWSSystem32IMEPINTLGNTImScInst.exe /SYNC
O4 – HKLM..Run: [PHIME2002ASync] D:WINDOWSSystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 – HKLM..Run: [PHIME2002A] D:WINDOWSSystem32IMETINTLGNTTINTSETP.EXE /IMEName
Jest zupełnie niepotrzebne w autostarcie
Przeskanowałem Hijack'em i wyszło takie coś:
Logfile of HijackThis v1.99.0
Scan saved at 16:18:25, on 2005–02–11
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:WINDOWSSystem32smss.exe
D:WINDOWSsystem32winlogon.exe
D:WINDOWSsystem32services.exe
D:WINDOWSsystem32lsass.exe
D:WINDOWSsystem32svchost.exe
D:WINDOWSSystem32svchost.exe
D:WINDOWSsystem32spoolsv.exe
D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
D:WINDOWSSystem32Ati2evxx.exe
D:Program FilesAlwil SoftwareAvast4ashServ.exe
D:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
D:WINDOWSSystem32 cpsvcs.exe
D:Program FilesAnalog DevicesSoundMAXSMAgent.exe
D:WINDOWSSystem32svchost.exe
D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
D:WINDOWSExplorer.EXE
D:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
D:Program FilesHewlett–PackardHP Software UpdateHPWuSchd2.exe
D:Program FilesCommon FilesLogitechQCDriverLVCOMS.EXE
D:Program FilesParallel Taskingptask.exe
D:Program FilesJavaj2re1.4.2_06injusched.exe
D:Program FilesWindows AdStatusWinStat.exe
D:WINDOWSSystem32hiden.exe
D:WINDOWSSystem32ctfmon.exe
D:Program FilesGadu–Gadugg.exe
D:Program FilesWindows AdStatusWinStatKeep.exe
D:Program Filesinternet explorerIEXPLORE.EXE
D:Documents and SettingsKrystianMoje dokumentyHijackThis.exe
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://google.icq.com/search/search_frame.php
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 – BHO: AcroIEHlprObj Class – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – D:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 – BHO: – {371C6960–302C–45D0–9504–50B820247439} – (no file)
O2 – BHO: Miniclip – {4E7BD74F–2B8D–469E–89B3–BE29F5D3E32D} – D:WINDOWSDOWNLO~1MINICL~1.DLL
O2 – BHO: (no name) – {E5A1691B–D188–4419–AD02–90002030B8EE} – (no file)
O2 – BHO: (no name) – {FFF5092F–7172–4018–827B–FA5868FB0478} – (no file)
O3 – Toolbar: Miniclip – {4E7BD74F–2B8D–469E–89B3–BE29F5D3E32D} – D:WINDOWSDOWNLO~1MINICL~1.DLL
O3 – Toolbar: (no name) – {A6790AA5–C6C7–4BCF–A46D–0FDAC4EA90EB} – (no file)
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – D:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [ATIPTA] D:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 – HKLM..Run: [HP Software Update] "D:Program FilesHewlett–PackardHP Software UpdateHPWuSchd2.exe"
O4 – HKLM..Run: [LVCOMS] D:Program FilesCommon FilesLogitechQCDriverLVCOMS.EXE
O4 – HKLM..Run: [Realtime Audio Engine] mmrtkrnl.exe
O4 – HKLM..Run: [Parallel Tasking] D:Program FilesParallel Taskingptask.exe
O4 – HKLM..Run: [SunJavaUpdateSched] D:Program FilesJavaj2re1.4.2_06injusched.exe
O4 – HKLM..Run: [Windows AdStatus] D:Program FilesWindows AdStatusWinStat.exe
O4 – HKLM..Run: [hiden.exe] hiden.exe
O4 – HKLM..Run: [Windows FormatAd] D:Program FilesWindows FormatAdWinForm.exe
O4 – HKLM..Run: [IMJPMIG8.1] D:WINDOWSIMEimjp8_1IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 – HKLM..Run: [MSPY2002] D:WINDOWSSystem32IMEPINTLGNTImScInst.exe /SYNC
O4 – HKLM..Run: [PHIME2002ASync] D:WINDOWSSystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 – HKLM..Run: [PHIME2002A] D:WINDOWSSystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 – HKLM..Run: [QuickTime Task] "E:Program FilesQuickTimeqttask.exe" –atboottime
O4 – HKCU..Run: [ctfmon.exe] D:WINDOWSSystem32ctfmon.exe
O4 – HKCU..Run: [Gadu–Gadu] "D:Program FilesGadu–Gadugg.exe" /tray
O8 – Extra context menu item: Download with &WinGet – res://D:Program FilesIndentixWinGetWinIE.dll/300
O9 – Extra button: (no name) – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – D:WINDOWSsystem32msjava.dll
O9 – Extra 'Tools' menuitem: Sun Java Console – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – D:WINDOWSsystem32msjava.dll
O9 – Extra button: Related – {c95fe080–8f5d–11d2–a20b–00aa003c157a} – D:WINDOWSweb elated.htm
O9 – Extra 'Tools' menuitem: Show &Related Links – {c95fe080–8f5d–11d2–a20b–00aa003c157a} – D:WINDOWSweb elated.htm
O9 – Extra button: Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – D:Program FilesMessengerMSMSGS.EXE
O9 – Extra 'Tools' menuitem: Windows Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – D:Program FilesMessengerMSMSGS.EXE
O16 – DPF: RaptisoftGameLoader – http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 – DPF: {15AD4789–CDB4–47E1–A9DA–992EE8E6BAD6} – http://static.windupdates.com/cab/DownloadsUnlimited/ie/bridge–c283.cab
O16 – DPF: {4E7BD74F–2B8D–469E–89B3–BE29F5D3E32D} (Miniclip) – http://www.miniclip.com/toolbar/minicliptoolbar.cab
O16 – DPF: {917623D1–D8E5–11D2–BE8B–00104B06BDE3} (CamImage Class) – http://213.134.175.187/activex/AxisCamControl.cab
O16 – DPF: {BFA1F11D–3121–AFE1–4112–894323212DAC} (GameDesire Word Games) – http://67.15.101.3/g_bin/pl/words_2_0_0_35.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O16 – DPF: {FDDBE2B8–6602–4AD8–946D–94C5A32FA6C5} (GameDesire Snooker) – http://67.15.101.3/g_bin/pl/snooker_2_0_0_21.cab
O18 – Protocol: cetihpz – {CF184AD3–CDCB–4168–A3F7–8E447D129300} – D:Program FilesHPhpcoretechcomphpuiprot.dll
O23 – Service: avast! iAVS4 Control Service – Unknown – D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 – Service: Ati HotKey Poller – Unknown – D:WINDOWSSystem32Ati2evxx.exe
O23 – Service: ATI Smart – Unknown – D:WINDOWSsystem32ati2sgag.exe
O23 – Service: avast! Antivirus – Unknown – D:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 – Service: avast! Mail Scanner – ALWIL Software – D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 – Service: hpdj – Unknown – D:DOCUME~1KrystianUSTAWI~1Temphpdj.exe (file missing)
O23 – Service: hpdj3500 – Unknown – D:DOCUME~1KrystianUSTAWI~1Temphpdj3500.exe (file missing)
O23 – Service: SoundMAX Agent Service – Analog Devices, Inc. – D:Program FilesAnalog DevicesSoundMAXSMAgent.exe
Logfile of HijackThis v1.99.0
Scan saved at 16:18:25, on 2005–02–11
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:WINDOWSSystem32smss.exe
D:WINDOWSsystem32winlogon.exe
D:WINDOWSsystem32services.exe
D:WINDOWSsystem32lsass.exe
D:WINDOWSsystem32svchost.exe
D:WINDOWSSystem32svchost.exe
D:WINDOWSsystem32spoolsv.exe
D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
D:WINDOWSSystem32Ati2evxx.exe
D:Program FilesAlwil SoftwareAvast4ashServ.exe
D:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
D:WINDOWSSystem32 cpsvcs.exe
D:Program FilesAnalog DevicesSoundMAXSMAgent.exe
D:WINDOWSSystem32svchost.exe
D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
D:WINDOWSExplorer.EXE
D:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
D:Program FilesHewlett–PackardHP Software UpdateHPWuSchd2.exe
D:Program FilesCommon FilesLogitechQCDriverLVCOMS.EXE
D:Program FilesParallel Taskingptask.exe
D:Program FilesJavaj2re1.4.2_06injusched.exe
D:Program FilesWindows AdStatusWinStat.exe
D:WINDOWSSystem32hiden.exe
D:WINDOWSSystem32ctfmon.exe
D:Program FilesGadu–Gadugg.exe
D:Program FilesWindows AdStatusWinStatKeep.exe
D:Program Filesinternet explorerIEXPLORE.EXE
D:Documents and SettingsKrystianMoje dokumentyHijackThis.exe
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://google.icq.com/search/search_frame.php
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = http://allwebseek.com
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 – BHO: AcroIEHlprObj Class – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – D:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 – BHO: – {371C6960–302C–45D0–9504–50B820247439} – (no file)
O2 – BHO: Miniclip – {4E7BD74F–2B8D–469E–89B3–BE29F5D3E32D} – D:WINDOWSDOWNLO~1MINICL~1.DLL
O2 – BHO: (no name) – {E5A1691B–D188–4419–AD02–90002030B8EE} – (no file)
O2 – BHO: (no name) – {FFF5092F–7172–4018–827B–FA5868FB0478} – (no file)
O3 – Toolbar: Miniclip – {4E7BD74F–2B8D–469E–89B3–BE29F5D3E32D} – D:WINDOWSDOWNLO~1MINICL~1.DLL
O3 – Toolbar: (no name) – {A6790AA5–C6C7–4BCF–A46D–0FDAC4EA90EB} – (no file)
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – D:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [ATIPTA] D:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 – HKLM..Run: [HP Software Update] "D:Program FilesHewlett–PackardHP Software UpdateHPWuSchd2.exe"
O4 – HKLM..Run: [LVCOMS] D:Program FilesCommon FilesLogitechQCDriverLVCOMS.EXE
O4 – HKLM..Run: [Realtime Audio Engine] mmrtkrnl.exe
O4 – HKLM..Run: [Parallel Tasking] D:Program FilesParallel Taskingptask.exe
O4 – HKLM..Run: [SunJavaUpdateSched] D:Program FilesJavaj2re1.4.2_06injusched.exe
O4 – HKLM..Run: [Windows AdStatus] D:Program FilesWindows AdStatusWinStat.exe
O4 – HKLM..Run: [hiden.exe] hiden.exe
O4 – HKLM..Run: [Windows FormatAd] D:Program FilesWindows FormatAdWinForm.exe
O4 – HKLM..Run: [IMJPMIG8.1] D:WINDOWSIMEimjp8_1IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 – HKLM..Run: [MSPY2002] D:WINDOWSSystem32IMEPINTLGNTImScInst.exe /SYNC
O4 – HKLM..Run: [PHIME2002ASync] D:WINDOWSSystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 – HKLM..Run: [PHIME2002A] D:WINDOWSSystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 – HKLM..Run: [QuickTime Task] "E:Program FilesQuickTimeqttask.exe" –atboottime
O4 – HKCU..Run: [ctfmon.exe] D:WINDOWSSystem32ctfmon.exe
O4 – HKCU..Run: [Gadu–Gadu] "D:Program FilesGadu–Gadugg.exe" /tray
O8 – Extra context menu item: Download with &WinGet – res://D:Program FilesIndentixWinGetWinIE.dll/300
O9 – Extra button: (no name) – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – D:WINDOWSsystem32msjava.dll
O9 – Extra 'Tools' menuitem: Sun Java Console – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – D:WINDOWSsystem32msjava.dll
O9 – Extra button: Related – {c95fe080–8f5d–11d2–a20b–00aa003c157a} – D:WINDOWSweb elated.htm
O9 – Extra 'Tools' menuitem: Show &Related Links – {c95fe080–8f5d–11d2–a20b–00aa003c157a} – D:WINDOWSweb elated.htm
O9 – Extra button: Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – D:Program FilesMessengerMSMSGS.EXE
O9 – Extra 'Tools' menuitem: Windows Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – D:Program FilesMessengerMSMSGS.EXE
O16 – DPF: RaptisoftGameLoader – http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 – DPF: {15AD4789–CDB4–47E1–A9DA–992EE8E6BAD6} – http://static.windupdates.com/cab/DownloadsUnlimited/ie/bridge–c283.cab
O16 – DPF: {4E7BD74F–2B8D–469E–89B3–BE29F5D3E32D} (Miniclip) – http://www.miniclip.com/toolbar/minicliptoolbar.cab
O16 – DPF: {917623D1–D8E5–11D2–BE8B–00104B06BDE3} (CamImage Class) – http://213.134.175.187/activex/AxisCamControl.cab
O16 – DPF: {BFA1F11D–3121–AFE1–4112–894323212DAC} (GameDesire Word Games) – http://67.15.101.3/g_bin/pl/words_2_0_0_35.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O16 – DPF: {FDDBE2B8–6602–4AD8–946D–94C5A32FA6C5} (GameDesire Snooker) – http://67.15.101.3/g_bin/pl/snooker_2_0_0_21.cab
O18 – Protocol: cetihpz – {CF184AD3–CDCB–4168–A3F7–8E447D129300} – D:Program FilesHPhpcoretechcomphpuiprot.dll
O23 – Service: avast! iAVS4 Control Service – Unknown – D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 – Service: Ati HotKey Poller – Unknown – D:WINDOWSSystem32Ati2evxx.exe
O23 – Service: ATI Smart – Unknown – D:WINDOWSsystem32ati2sgag.exe
O23 – Service: avast! Antivirus – Unknown – D:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 – Service: avast! Mail Scanner – ALWIL Software – D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 – Service: hpdj – Unknown – D:DOCUME~1KrystianUSTAWI~1Temphpdj.exe (file missing)
O23 – Service: hpdj3500 – Unknown – D:DOCUME~1KrystianUSTAWI~1Temphpdj3500.exe (file missing)
O23 – Service: SoundMAX Agent Service – Analog Devices, Inc. – D:Program FilesAnalog DevicesSoundMAXSMAgent.exe
HijackThis! – wiecej w dziale Bezpieczenstwo w przyklejonych topikach.
Strona 1 / 1