prosze o pomoc. przeskanowalam komputer nortonem i doznalam szoku. znalazlam tyle syfu, ze glowa boli. norton wylapal takie oto paskudztwa. czesc przeniosl do obszaru kwaranntanny a czesc puscil wolno.

Trojan.ByteVerify w pliku – Parser[1].class
Downloader.Trojan w HP2[1].CHM
Backdoor.Jeem w outl32l.exe
VBS.StartPage.C w odbc.hta
Trojan.Bookmarker.D w olehelp.exe
Backdoor.Jeem w msrexe.exe
VBS.StartPage.C w odbc.hta
Trojan.StartPage w Matrix.class




uzylam tego programu, ktory tutaj wszyscy polecaja. wyniki sa takie


Logfile of HijackThis v1.97.7
Scan saved at 20:31:05, on 04–07–26
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.00 (5.00.2614.3500)

Running processes:
C:WINDOWSSYSTEMKERNEL32.DLL
C:WINDOWSSYSTEMMSGSRV32.EXE
C:WINDOWSSYSTEMMPREXE.EXE
C:WINDOWSSYSTEMMSTASK.EXE
C:WINDOWSSYSTEMMDM.EXE
C:PROGRAM FILESNORTON ANTIVIRUSRTVSCN95.EXE
C:PROGRAM FILESNORTON ANTIVIRUSDEFWATCH.EXE
C:PROGRAM FILESKERIOPERSONAL FIREWALLPERSFW.EXE
C:WINDOWSSYSTEMmmtask.tsk
C:PROGRAM FILESNORTON ANTIVIRUSVPEXRT.EXE
C:WINDOWSEXPLORER.EXE
C:WINDOWSTASKMON.EXE
C:WINDOWSSYSTEMINTERNAT.EXE
C:WINDOWSSYSTEMSYSTRAY.EXE
C:WINDOWSSYSTEMHPZTSB04.EXE
C:KMAESTROKMAESTRO.EXE
C:PROGRAM FILESCREATIVESHAREDLLCTNOTIFY.EXE
C:PROGRAM FILESCREATIVESBLIVELAUNCHERCTLAUNCHER.EXE
C:PROGRAM FILESCREATIVESBLIVEAUDIOHQAHQTB.EXE
C:PROGRAM FILESNORTON ANTIVIRUSVPTRAY.EXE
C:PROGRAM FILESA4TECHMOUSEAMOUMAIN.EXE
C:WINDOWSSYSTEMSTIMON.EXE
C:WINDOWSSYSTEMSPOOL32.EXE
C:PROGRAM FILESBEARPAW 2448TA PRODRIVERWATCH.EXE
C:PROGRAM FILESULEAD SYSTEMSULEAD PHOTO EXPRESS 4.0 SECALCHECK.EXE
C:PROGRAM FILESCREATIVESHAREDLLMEDIADET.EXE
C:WINDOWSSYSTEMWMIEXE.EXE
C:PROGRAM FILESCREATIVESBLIVELAUNCHERTASKGUIDEUPDTRAY.EXE
C:PROGRAM FILESINTERNET EXPLORERIEXPLORE.EXE
C:MOJE DOKUMENTYPROGRAMYHIJACKTHIS.EXE

R1 – HKCUSoftwareMicrosoftInternet Explorer,SearchURL = http://your–searcher.com/sp.htm
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://ie–search.com/srchasst.html (obfuscated)
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = res://mshp.dll/sp.html#10213
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = res://mshp.dll/index.html#10213
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://awebfind.biz/
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://ls0.net/home.html (obfuscated)
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://ls0.net/srchasst.html (obfuscated)
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://ls0.net/srchasst.html (obfuscated)
R1 – HKLMSoftwareMicrosoftInternet Explorer,SearchURL = http://awebfind.biz/sp.htm
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = res://mshp.dll/index.html#10213
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://ie–search.com/srchasst.html (obfuscated)
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = res://mshp.dll/sp.html#10213
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = res://mshp.dll/index.html#10213
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = res://mshp.dll/sp.html#10213
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://ls0.net/srchasst.html (obfuscated)
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://ls0.net/srchasst.html (obfuscated)
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://ls0.net/home.html (obfuscated)
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://ie–search.com/srchasst.html (obfuscated)
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://ie–search.com/srchasst.html (obfuscated)
R1 – HKLMSoftwareMicrosoftInternet ExplorerSearch,(Default) = http://ie–search.com/srchasst.html (obfuscated)
O2 – BHO: (no name) – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:PROGRAM FILESADOBEACROBAT 5.0READERACTIVEXACROIEHELPER.OCX
O2 – BHO: . – {D34F08C5–4F18–477c–86CB–1A9BEECFE37B} – C:WINDOWSDANE APLIKACJIMSNUMSNU.DLL
O2 – BHO: (no name) – {FD9BC004–8331–4457–B830–4759FF704C22} – C:WINDOWSDANE APLIKACJIMSNUAPPCP.DLL
O2 – BHO: ShowSearch module – {E2DDF680–9905–4dee–8C64–0A5DE7FE133C} – C:WINDOWSDANE APLIKACJIMSNUIPKU32.DLL
O2 – BHO: (no name) – {B9D90B27–AD4A–413a–88CB–3E6DDC10DC2D} – C:WINDOWSMSOPT.DLL (file missing)
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSYSTEMMSDXM.OCX
O4 – HKLM..Run: [ScanRegistry] C:WINDOWSscanregw.exe /autorun
O4 – HKLM..Run: [TaskMonitor] C:WINDOWS askmon.exe
O4 – HKLM..Run: [internat.exe] internat.exe
O4 – HKLM..Run: [SystemTray] SysTray.Exe
O4 – HKLM..Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 – HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSSYSTEMhpztsb04.exe
O4 – HKLM..Run: [SoundMan] soundman.exe
O4 – HKLM..Run: [KeyMaestro] C:KMAESTROKMaestro.exe
O4 – HKLM..Run: [Disc Detector] C:Program FilesCreativeShareDLLCtNotify.exe
O4 – HKLM..Run: [Creative Launcher] C:Program FilesCreativeSBLiveLauncherCTLauncher.exe
O4 – HKLM..Run: [AudioHQ] C:Program FilesCreativeSBLiveAudioHQAHQTB.EXE
O4 – HKLM..Run: [vptray] C:PROGRA~1NORTON~1VPTRAY.EXE
O4 – HKLM..Run: [WinAuth] C:WINDOWSwinlogon.exe
O4 – HKLM..Run: [WheelMouse] C:PROGRA~1A4TECHMOUSEAMOUMAIN.EXE
O4 – HKLM..Run: [StillImageMonitor] C:WINDOWSSYSTEMSTIMON.EXE
O4 – HKLM..Run: [Image] rundll32 C:WINDOWSJAVAER32.DLL,Install
O4 – HKLM..RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 – HKLM..RunServices: [SchedulingAgent] C:WINDOWSSYSTEMmstask.exe
O4 – HKLM..RunServices: [Machine Debug Manager] C:WINDOWSSYSTEMMDM.EXE
O4 – HKLM..RunServices: [rtvscn95] C:PROGRA~1NORTON~1RTVSCN95.EXE
O4 – HKLM..RunServices: [defwatch] C:PROGRA~1NORTON~1DEFWATCH.EXE
O4 – HKLM..RunServices: [PersFw] "C:Program FilesKerioPersonal Firewallpersfw.exe" /hide
O4 – HKCU..RunServices: [Image] rundll32 C:WINDOWSJAVAER32.DLL,Install
O4 – Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O4 – Startup: Watch.lnk = C:Program FilesBearPaw 2448TA ProDriverWATCH.exe
O4 – Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:Program FilesUlead SystemsUlead Photo Express 4.0 SECalCheck.exe
O8 – Extra context menu item: Web Search – C:WINDOWSex.htm
O9 – Extra button: Related (HKLM)
O9 – Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 – Plugin for .spop: C:PROGRA~1INTERN~1PluginsNPDocBox.dll
O14 – IERESET.INF: SEARCH_PAGE_URL=
O14 – IERESET.INF: START_PAGE_URL=
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 – HKLMSystemCCSServicesVxDMSTCP: Domain = euronet.net.pl
O17 – HKLMSystemCCSServicesVxDMSTCP: NameServer = 212.160.102.2,194.204.159.2,194.204.152.34
O19 – User stylesheet: c:windowssystem.css



co mam z tym wszystkim poczac. nie bardzo mam mozliwosc teraz poprosic kogos w realu o pomoc, a chce sie tych wszystkich szkodnikow jak najszybciej pozbyc. jest jakas szansa? czy tylko zmiana kompa mnie ratuje. moze znajdzie sie ktos tak uprzejmy (i cierpliwy!) i pomoze w potrzebie. jestem kompletnym laikiem dlatego prosze tlumaczyc jak krowie na granicy (ze sie tak wyraze). z gory dziekuje za odzew.