coolwwwsearch

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 16:02

Logfile of HijackThis v1.99.1
Scan saved at 13:56:16, on 2006-01-21
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\Programy\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Programy\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
D:\Programy\Netscape\Netscape Browser\netscape.exe
D:\Programy\Opera\Opera.exe
C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
O17 - HKLM\System\CCS\Services\Tcpip\..\{79F0DD5E-6F42-4168-9186-F54F205B2649}: NameServer = 194.204.152.34 217.98.63.164
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Spybot wyłapał mi coolwwwsearch. Nie może usunąć. NIe łączy mnie z serverami (np. gg). jak to usunąć?

**Posty:** 8694 · przez **Red** 21 Sty 2006, 16:03

poczytaj jak sie wkleja log na forum:

http://forum.programosy.pl/hijackthis-gtobsuga-i-umieszczanie-loga-vt9452.html

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 16:13

sry jestem zielony...

zamieszcze i log i startup list...

Kod: Zaznacz wszystko: StartupList report, 2006-01-21, 14:06:52 StartupList version: 1.52.2 Started from : C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.EXE Detected: Windows XP Dodatek SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180) * Using default options ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe C:\WINDOWS\system32\wscntfy.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe C:\Program Files\Wanadoo\EspaceWanadoo.exe C:\Program Files\Wanadoo\ComComp.exe C:\Program Files\Wanadoo\Watch.exe D:\Programy\Opera\Opera.exe C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.exe C:\WINDOWS\system32\NOTEPAD.EXE -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\userinit.exe, -------------------------------------------------- Shell & screensaver key from C:\WINDOWS\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=explorer.exe SCRNSAVE.EXE=C:\WINDOWS\system32\logon.scr drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry value not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Enumerating Download Program Files: [Shockwave Flash Object] InProcServer32 = C:\WINDOWS\system32\macromed\flash\Flash.ocx CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: PostBootReminder: C:\WINDOWS\system32\SHELL32.dll CDBurn: C:\WINDOWS\system32\SHELL32.dll WebCheck: C:\WINDOWS\system32\webcheck.dll SysTray: C:\WINDOWS\system32\stobject.dll -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run Drivers_XP = D:\Programy\Gadu-Gadu\hehe.exe -------------------------------------------------- End of report, 3 334 bytes Report generated in 0,032 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

i log jeszcze raz:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 14:06:07, on 2006-01-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe C:\WINDOWS\system32\wscntfy.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe C:\Program Files\Wanadoo\EspaceWanadoo.exe C:\Program Files\Wanadoo\ComComp.exe C:\Program Files\Wanadoo\Watch.exe D:\Programy\Opera\Opera.exe C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O17 - HKLM\System\CCS\Services\Tcpip\..\{79F0DD5E-6F42-4168-9186-F54F205B2649}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

mam nadzieje, że tym razem w porządku.

**Posty:** 8694 · przez **Red** 21 Sty 2006, 16:18

wylacz przywracanie systemu ,wejdz w tryb awaryjny windowsa f8 i usuwasz

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html

prosze te wpisy zaznaczyc w hijacku i usunac

nastepnie sciagasz obowiazkowo:
http://www.idg.pl/ftp/pc_3671/CWShredder%201.58.html
i skanujesz ,usuwasz co tam sobie znajdzie i dajesz log do kontroli

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 16:22

Nie łączy mnie aniz gg, ani z tlenem, ani z serverami typu download (autoupdate etc.). Spybot nie może usunąc, bo plik jest używany. To samo po resecie kompa.

Spybot znajduje tez CommandService.Tez nie da sie usunąć.

[ Dodano: Dzisiaj o 15:24 ]
ok zaraz to zrobie, powyzszy post napisałem przed twoja odpowiedzią... dla jasności:)

**Posty:** 8694 · przez **Red** 21 Sty 2006, 16:25

czytaj i dzialaj ......

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 16:52

OMG, nie wiem jak te pliki w highjacku usuwać:/, delete on reboot? a jesli tak to jak zaznaczyć te pliki?

**Posty:** 8694 · przez **Red** 21 Sty 2006, 16:53

Wygenerujesz log >>>zaznaczysz ptaszkami wpisy do usuniecia i na dole masz fix

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 17:12

usuwalem w highjacku i za kazdym razem po usunięciu jak zrobilem scana to wyłapywał te same pliki. Zrobilem scana programem, ktory podales, cos usunął. Nadal nie łączy mnie z serverami...

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 15:05:19, on 2006-01-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe C:\WINDOWS\system32\wscntfy.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Wanadoo\EspaceWanadoo.exe C:\Program Files\Wanadoo\ComComp.exe C:\Program Files\Wanadoo\Watch.exe D:\Programy\Opera\Opera.exe C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O17 - HKLM\System\CCS\Services\Tcpip\..\{79F0DD5E-6F42-4168-9186-F54F205B2649}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Kod: Zaznacz wszystko: StartupList report, 2006-01-21, 15:05:44 StartupList version: 1.52.2 Started from : C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.EXE Detected: Windows XP Dodatek SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180) * Using default options ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe C:\WINDOWS\system32\wscntfy.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Wanadoo\EspaceWanadoo.exe C:\Program Files\Wanadoo\ComComp.exe C:\Program Files\Wanadoo\Watch.exe D:\Programy\Opera\Opera.exe C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.exe -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\userinit.exe, -------------------------------------------------- Shell & screensaver key from C:\WINDOWS\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=explorer.exe SCRNSAVE.EXE=C:\WINDOWS\system32\logon.scr drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry value not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Enumerating Download Program Files: [Shockwave Flash Object] InProcServer32 = C:\WINDOWS\system32\macromed\flash\Flash.ocx CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: PostBootReminder: C:\WINDOWS\system32\SHELL32.dll CDBurn: C:\WINDOWS\system32\SHELL32.dll WebCheck: C:\WINDOWS\system32\webcheck.dll SysTray: C:\WINDOWS\system32\stobject.dll -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run Drivers_XP = D:\Programy\Gadu-Gadu\hehe.exe -------------------------------------------------- End of report, 3 334 bytes Report generated in 0,031 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

**Posty:** 4043 · przez **prog** 21 Sty 2006, 17:14

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html

PZDR

**Posty:** 8694 · przez **Red** 21 Sty 2006, 17:14

nic nie usunąłes ,czy to jest tak trudno zaznaczyc i nacisnac fix

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 17:15

przeciwnie... bardzo łatwo, robiłem to

[ Dodano: Dzisiaj o 16:27 ]
nie no, powaznie zrobilem wszystko krok po kroku...

**Posty:** 8694 · przez **Red** 21 Sty 2006, 17:33

wiec daj log kontrolnie

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 17:46

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 15:41:25, on 2006-01-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe C:\WINDOWS\system32\wscntfy.exe D:\Programy\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe C:\Program Files\Wanadoo\EspaceWanadoo.exe C:\Program Files\Wanadoo\ComComp.exe C:\Program Files\Wanadoo\Watch.exe C:\WINDOWS\system32\wuauclt.exe D:\Programy\Opera\Opera.exe C:\Documents and Settings\X\Pulpit\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O17 - HKLM\System\CCS\Services\Tcpip\..\{79F0DD5E-6F42-4168-9186-F54F205B2649}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Programy\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

sam widze ze sie ne zmienil. Ale po prostu highjack go ine usuwa!! robie scan, fix pliki znikaja, poczym robie znow skan i sa ponownie!! usunalem tez plik secure32 z C.
pozostaje mi format?

przez **jeff** 21 Sty 2006, 17:48

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

Ściągnij KillBoxa
http://www.downloads.subratam.org/KillBox.zip

Zaznaczasz opcję Delete on Reboot następnie w polu Full Path of File to Delete wklej ścieżkę c:\secure32.html , naciskasz na X
następnie program będzie pytał o restart - zgadzasz się

**Posty:** 8694 · przez **Red** 21 Sty 2006, 17:49

Red napisał(a):wylacz przywracanie systemu ,wejdz w tryb awaryjny windowsa f8 i usuwasz

bankowo tego nie zrobiłes

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 17:54

zrobione , terza znowu zabawa z highjackiem?

[ Dodano: Dzisiaj o 16:55 ]
heh, zrobilem!! ^^:/

**Posty:** 4043 · przez **prog** 21 Sty 2006, 17:55

bosh...

usuwasz to co podal Red tyle ze NAJPIERW

Red napisał(a):wylacz przywracanie systemu ,wejdz w tryb awaryjny windowsa f8 i tam w hijacku usuwasz

**Posty:** 42 · przez **kris&art** 21 Sty 2006, 17:58

nie irytucie sie ludzie... przecierz mowie ze wlasnie tak robie, wylaczam tryb awaryjny, biore resa, f8, highjack this scan, fix selected( przy ponownym scanie pliki nadal są), scan cwshredderm, usunalem secure32 z C, tez tymkillboxem. a log ten sam...

coolwwwsearch

coolWWWsearch

Kto jest na forum