Zapatio mi se Trojan.SwfDL.A

kessa

Obećava
Poruka
96
Uvukao mi se Trojan.SwfDL.A u Opera\profile\cache4\opr010KW.swf=>[SWF command] i nikako ne mogu da obrisem. Moze li neko da mi objasni kako da se resim ove napasti.
Koristim BitDefener 9 i on ga uredno detektuje ali ne moze da ga obrise.
 
posto sam nedavno imao iskustvo sa nervirajucim adawareom (sto se moglo videti i na forumu) iz iskustva ti mogu reci najbolje resenje ti je da skines program
hijackthis
i da ovde posaljes log i da nadjemo koji ga trigger aktivira i onda pesackim putem da ga eliminisemo.
Ni jedan program meni nije bio pomogao dok ga sam fizickim putem nisam obrisao.
 
kessa:
Uvukao mi se Trojan.SwfDL.A u Opera\profile\cache4\opr010KW.swf=>[SWF command] i nikako ne mogu da obrisem. Moze li neko da mi objasni kako da se resim ove napasti.
Koristim BitDefener 9 i on ga uredno detektuje ali ne moze da ga obrise.


Pokusaj posle skeniranja BitDefenderom sa opcijom Move to quarantine. Trebalo bi da ga BitDefender prebaci u karantin, a posle ga odatle mozes obrisati. Pokusaj pa javi da li je uspelo.
 
@ marko Bit nije uspeo ni da ga move to quarantine ni da obrise sto mu je second action.

Uspeo sam da zarazene fajlove pobrisem u safe modu, bitdefender ih sada ne detektuje, ali nikada se ne zna gde su se sve zapatili i kada ce da se aktiviraju.

Kako funkcionise Hijackthis ???
 
WARNING: HijackThis is intended only for advanced users. It is recommended that you do not make changes using HijackThis unless you are experienced and know what you're doing. HijackThis is an advanced tool, and requires advanced knowledge about Windows, registry files, and operating systems in general. If you delete items that it finds, without knowing what they are, it can lead to more serious complications on your PC - such as your Internet no longer working or problems with running Windows itself.
Use at your own risk.

Ako sam dobro shvatio bolje da ga ne startujem
 
zato smo i napisali da posaljes log ovde :lol:
Izaberi
do a system scan and save log file i onda taj log copy paste ovde.
On tom opcijom samo ispisuje procese koje ti posle pesackim putem identifikujes i nalazis "uljeza" u sistemu.
Ne sekiraj se obicnim skeniranjem kompjutera ne mozes nista lose da uradis sistemu.
 
Pogledajte ove rezultate i recite Vase misljenje. Racunar je skeniran nekim programom SpyOnThis i ovo su rezultati. TREBA li da panicim ???

Scan started : 29-Apr-06 17:59:46

Total items scanned : 20154
Objects found : 22
Objects ignored : 0

E-Surveiller object found!!!
Object: E-Surveiller
Class: REGKEY
Type: KEY LOGGER
FoundIn: HKEY_LOCAL_MACHINE:SOFTWARE\Classes\.zlg
RiskLevel: 6

E-Surveiller object found!!!
Object: E-Surveiller
Class: REGKEY
Type: KEY LOGGER
FoundIn: HKEY_CLASSES_ROOT:.zlg
RiskLevel: 6

LinkGrabber 99 object found!!!
Object: LinkGrabber 99
Class: REGVALUE
Type: SPYWARE
FoundIn: HKEY_USERS:.default\software\microsoft\windows\currentversion\internet settings\zonemap\domains\mywebsearch.net[*]
RiskLevel: 1

ClearSearch object found!!!
Object: ClearSearch
Class: REGKEY
Type: HIJACKER
FoundIn: HKEY_CURRENT_USER:SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\TRUSTEDPUBLISHER\CTLS
RiskLevel: 1

ClearSearch object found!!!
Object: ClearSearch
Class: REGKEY
Type: HIJACKER
FoundIn: HKEY_CURRENT_USER:SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\TRUSTEDPUBLISHER\CRLS
RiskLevel: 1

ezSearching object found!!!
Object: ezSearching
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{34d516ea-40e3-4e3b-8ba8-505112738ed5}
RiskLevel: 2

Possible Browser Hijack object found!!!
Object: Possible Browser Hijack
Class: REGDATA
Type: SPYWARE
FoundIn: HKEY_CURRENT_USER:SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN[START PAGE="ABOUT:BLANK"]
RiskLevel: 3

istbar object found!!!
Object: istbar
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_CLASSES_ROOT:.STA
RiskLevel: 1

180search Assistant object found!!!
Object: 180search Assistant
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{6eb5b540-1e74-4d91-a7f0-5b758d333702}
RiskLevel: 3

FavoriteMan object found!!!
Object: FavoriteMan
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{000000f1-34e3-4633-87c6-1aa7a44296da}
RiskLevel: 4

FavoriteMan object found!!!
Object: FavoriteMan
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{00000ef1-0786-4633-87c6-1aa7a44296da}
RiskLevel: 4

FavoriteMan object found!!!
Object: FavoriteMan
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{ebbd88e5-c372-469d-b4c5-1fe00352ab9b}
RiskLevel: 4

NewtonKnows object found!!!
Object: NewtonKnows
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{8ae10ee3-84be-4d3c-8106-7020bf3f0142}
RiskLevel: 1

NewtonKnows object found!!!
Object: NewtonKnows
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{e9407738-a996-421a-a309-5c93c699e10a}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{2e12b523-3d4c-4fac-9b04-0376a8f5e879}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{388d7ebb-cbb9-4126-8db2-86dc6863a206}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{39af31dd-eafc-45ea-a56c-385b52e25cc0}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{6b12dabb-0b7c-44fa-b0b3-4baff3790256}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{a76066c9-941b-4209-9d96-0ac80501100d}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{c389f2cf-26ed-11d5-a212-004005f6feb6}
RiskLevel: 1

INetSpeak object found!!!
Object: INetSpeak
Class: REGKEY
Type: SPYWARE
FoundIn: HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\ActiveX Compatibility\{d6862a22-1dd6-11d3-bb7c-444553540000}
RiskLevel: 1

Cydoor object found!!!
Object: Cydoor
Class: FOLDER
Type: SPYWARE
FoundIn: E:\igre\toca3\AdCache\
RiskLevel: 1
 

Back
Top