|
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
|
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now! |
|
#1
|
|||
|
|||
|
for the love of god, somebody help me
hello to everybody. I spent all the day trying to resolve this problem but nothing is working... my main page in internet explorer has been permenatly changed to: C:\WINDOWS\secure.html. always when I try to change it, the main page backs to C:\WINDOWS\secure.html again. I've already tried to delete the file 'secure.html' in thenormal and safe modes but it reapers. When I run the AVG, it says that my computer hasn´t any kind of virus. I visited lot of sites, but i didn't find any solution. If somebody can help me with this, i will be deeply grateful. And here is the HijackThis report:
Logfile of HijackThis v1.97.7 Scan saved at 19:00:58, on 21/7/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\ntvdm.exe C:\Arquivos de programas\Java\j2re1.4.2_01\bin\jusched.exe C:\Program Files\WindowsSA\omniscient.exe C:\Arquivos de programas\Bargain Buddy\bin2\bargains.exe C:\ARQUIV~1\Grisoft\AVG6\avgcc32.exe C:\Arquivos de programas\ICQ\ICQ.exe C:\WINDOWS\system.exe C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe C:\ARQUIV~1\Grisoft\AVG6\avgserv.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE C:\Arquivos de programas\Internet Explorer\iexplore.exe C:\Arquivos de programas\TorrenTopia\TorrenTopia.exe C:\Arquivos de programas\TorrenTopia\btdl\downloader.tt C:\Arquivos de programas\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &URL R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\secure.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\secure.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\secure.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\secure.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\secure.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\secure.html F2 - REG:system.ini: UserInit=C:\Windows\System32\wsaupdater.exe, O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - C:\WINDOWS\twaintec.dll O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Arquivos de programas\MyWay\SearchAt\1.bin\MWSSRCAS.DLL O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Arquivos de programas\MyWay\bar\1.bin\MWSBAR.DLL O2 - BHO: (no name) - {83DE62E0-5805-11D8-9B25-00E04C60FAF2} - C:\WINDOWS\2_0_1browserhelper2.dll O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\WINDOWS\Downloaded Program Files\gbieh.dll O2 - BHO: Url Catcher - {CE31A1F7-3D90-4874-8FBE-A5D97F8BC8F1} - C:\Arquivos de programas\Bargain Buddy\bin2\apuc.dll O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file) O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Arquivos de programas\MyWay\bar\1.bin\MWSBAR.DLL O4 - HKLM\..\Run: [Secreset] "C:\WINDOWS\System32\Config\Secreset.bat" O4 - HKLM\..\Run: [Mirabilis ICQ] C:\Arquivos de programas\ICQ\NDetect.exe O4 - HKLM\..\Run: [winmgt32] winmgt.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Arquivos de programas\Java\j2re1.4.2_01\bin\jusched.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iyvubicnyy] C:\WINDOWS\System32\mcnxgn.exe O4 - HKLM\..\Run: [Windows SA] C:\Program Files\WindowsSA\omniscient.exe O4 - HKLM\..\Run: [alchem] C:\WINDOWS\alchem.exe O4 - HKLM\..\Run: [Bargains] C:\Arquivos de programas\Bargain Buddy\bin2\bargains.exe O4 - HKLM\..\Run: [AVG_CC] C:\ARQUIV~1\Grisoft\AVG6\avgcc32.exe /STARTUP O4 - HKLM\..\Run: [System32] C:\WINDOWS\system.exe O4 - HKLM\..\RunServices: [winmgt32] winmgt.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe" /background O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Arquivos de programas\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Secreset.lnk = C:\WINDOWS\system32\config\secreset.bat O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ICQ (HKLM) O9 - Extra 'Tools' menuitem: ICQ (HKLM) O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O14 - IERESET.INF: SEARCH_PAGE_URL=&URL O15 - Trusted Zone: *.blazefind.com O15 - Trusted Zone: *.flingstone.com O15 - Trusted Zone: *.searchbarcash.com O15 - Trusted Zone: *.searchmiracle.com O15 - Trusted Zone: *.slotch.com O15 - Trusted Zone: *.xxxtoolbar.com O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - URL O16 - DPF: {11111111-1111-1111-1111-111111111157} - ms-its:mhtml:file://c:\nosuch.mht!URL O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - URL O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - URL O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - URL O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - URL O16 - DPF: {36C66BBD-E667-4DAD-9682-58050E7C9FDC} (CDKey Class) - URL O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - URL O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - URL O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - URL O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - URL O16 - DPF: {E37CB5F0-51F5-4395-A808-5FA49E399F83} (GbPluginObj Class) - URL Oh, and i have another little problem: always when i start my computer, appears a thing called 'search assistant' in the right side of the toolbar, and the icons on the left side of the toolbar are in completly disorder. sure that i put them in order again, but always when i restart the computer, the toolbar turns into disorder again. If somebody can help me whit this also... Many thanks! (and sorry for any error in the writing, i'm from brazil ;]) |
![]() |
| Viewing: Dev Shed Forums > System Administration > Antivirus Protection > for the love of god, somebody help me |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|