T-Ice:
1.home page u iexploreru mi se stalno menja u
http://aaawebsearch.com Probao sam to da resim
sa Spybot-om i Ad-Aware-om,ali nista nije pomoglo,pa bi molio za pomoc kako to da resim.
2.Spybot mi stalno prijavljuje MagicControl.Agent koji nemoze da popravi pa bi i uvezi ovoga
zamolio za pomoc
unapred hvala.
Procitaj ovo:
*****
Virus type: Not a Virus
Destructive: No
Aliases: MagicControl (Ad-Aware), MagicControl (PestPatrol), MagicControl.Agent (SpyBot), MagicControl.WinMgts (SpyBot), Adware.Slagent (Symantec)
Scan engine needed: 7.100
Overall risk rating: Very Low
Description:
This adware attempts to establish a connection to a predefined Web site, where it may download other malicious file.
It creates a specific folder, where it drops the following components:
* 2_MSLAGENT.DLL
* MSLAGENT.EXE
* UNINSTALL.EXE
This UPX-compressed adware runs on Windows 95, 98, ME, NT, 2000, and XP.
Solution:
Terminating an Adware Program
This procedure terminates the running adware process.
1. Open Windows Task Manager.
» On Windows 95, 98, and ME, press
CTRL+ALT+DELETE
» On Windows NT, 2000, and XP, press
CTRL+SHIFT+ESC, then click the Processes tab.
2. In the list of running programs*, locate the process:
MSLAGENT.EXE
3. Select the adware process, then press either the End Task or the End Process button, depending on the version of Windows on your system.
4. To check if the adware process has been terminated, close Task Manager, and then open it again.
5. Close Task Manager.
*NOTE: On systems running Windows 95, 98, and ME, Windows Task Manager may not show certain processes. You can use a third party process viewer such as Process Explorer to terminate the adware process. Otherwise, continue with the next procedure, noting additional instructions.
Removing Autostart Entries from the Registry
Removing autostart entries from the registry prevents the adware from executing at startup.
1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run
3. In the right panel, locate and delete the entry:
"mslagent" = "%Windows%\mslagent\mslagent.exe"
(Note: %Windows% is the default Windows folder, usually C:\Windows or C:\WINNT.)
NOTE: If you were not able to terminate the adware process as described in the previous procedure, restart your system.
Removing Other Entries from the Registry
1. Still in the Registry Editor, double-click the following in the left panel:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Uninstall
2. Still in the left panel, locate and delete the registry key:
mslagent
3. Close Registry Editor.
Additional Windows ME/XP Cleaning Instructions
Running Trend Micro Antivirus
Download the latest spyware pattern file and scan your system. Then, delete all files detected as ADW_SLAGENT.A.
Trend Micro offers best-of-breed antivirus and content-security solutions for your corporate network, small and medium business or home PC.
******
Javi kako si prosao
