[tomz]

http://www.zone.ee/tomz/data/psk.jpg?2
http://www.zone.ee/tomz/data/psk2.jpg?2

esimesel pildil näitab, mida leiab adaware6. ta leiab selle asja, mis põhjustab seda, mis teisel pildil näha, kuid eemaldamine ei aita, tuleb tagasi. oleks vaja ikkagi lahti saada, kuidas? ise registri kallale?

siis esimese pildi teine osa on Spyware Nuker 2004, mis leidis suht palju spy progesid, mille ta lasi excludida, kuid mitte eemaldada, ehk oskate soovitada mõnda head freeware programmi, mis need üles leiaks ja eemaldada laseks?

[tomz]

asjaga suht kiire

[Sahib]

See teine peaks olema "about. blank"? Kipub su browseri esilehekülge ise muutma? Täna puutusin ise ka sellega kokku, ning ää pole veel läinud. Massiline asi

[tomz]

[zaajats]

freeware + efektiivne = Spybot Search & Destroy (http://www.safer-networking.org/)
Mul alati sarnaste probleemidega aidanud, eemaldab spyware, adware, cookied jpm....
Võimaldab skännimise kõrvalt ka ennetavalt probleemide eest kaitsta.
Soovitan soojalt.

[Max Powers]

http://www.pchell.com/support/searchspace.shtml


Seal on palju õpetusi.
Lisaks võib alati hijackthis´i kasutada

[tomz]

sain enamikust jamast lahti. kuid sellest about blank avalehest ei oska vabaneda. need programmid ei suuda seda eemaldada.

[Amdfan]

Mul täpselt sama jama. Olen proovinud mitmeid programme, aga lahti ikkagi ei saa. Kasvõi kui kustutad vastavad failid ära, on nad jälle peale rebooti registris jm tagasi Krt kas tõesti peab hakkama format c-d tegema??

[Max Powers]

http://www.daniweb.com/techtalkforums/showthread.php?t=5160


First update CWShredder as I am pretty sure it has a fix for this. As well, do this. Reboot into safe mode following the instructions here. http://service1.symantec.com/SUPPOR...001052409420406 & Close all (browser) windows & have HJT fix these entries=

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\ngeo.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\ngeo.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\ngeo.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\ngeo.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\ngeo.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\ngeo.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about_:blank

O2 - BHO: (no name) - {FB9BA0F2-3A75-4666-A4A8-FF3E7D6EB5C4} - C:\WINDOWS\System32\ngeo.dll

In spybot settings have it check for available Beta versions & download 1.3.6 & update it online & run it immediately after doing the above. Update Adaware & run that also. It has had 3 updates in the last 2 days.
Obviously do these updates first, then do everything in safe mode.

_________________________________


Väidevalt kui nii teha siis saab sellest lahti.
Andke teada kas õnnestus

[tomz]

sain lahti. suured tänud ttt.

[Sahib]

Ja mina ka, asi täitsa toimis!

[jass]

Njaa...
Toimis ilusti isegi ainult vigade3 parandamisest, ei mingit safe mode ega restarti

[Dumbuser]

Ei hakka uut teemat tegema.
Mõnikord Internet Explorerit käivitates lööb mingi popupi lahti, kuigi Ad-aware, SpyBot ei näita midagi...

[Max Powers]

Kas alati ühesuguse?
Kui lihtsalt pop up siis äkki aitab popup killer?

[Dumbuser]

[Max Powers]

[Dumbuser]

http://www.zone.ee/peeter666123/POPUP.JPG

[Max Powers]

My Web Search

Ega sul juhuslikult sellist asja ka ei ole?

[Dumbuser]

[Max Powers]

Add/remove programms´i all ei ole midagi uut?
Muidugi võid ka hijackthisi logi vaadata


http://www.free-web-browsers.com/support/remove-mysearch.shtml
http://help.popularscreensavers.com/troubleshooting.html

[Dumbuser]

add/remove'i all ei ole midagi sellist nagu mysearch jne. Lingilt tõmbasin selle noadware, mis avastas VX2 asja, descriptionis oli, et see võib põhjustada popup'e. Aga kuidas ma selle maha saan, noadware nõub registreerimist, mis on tasuline.

[Max Powers]

Proovi nüüd siis ikkagi hijackthis´i või anna selle logi siia vaatamiseks

[Dumbuser]

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neti.ee/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://default-homepage-network.com/start.cgi?np-hkcu
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [sisam11m] C:\WINDOWS\System32\sisam11m.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040427/qtinstall.info.apple.com/saba/us/win/QuickTimeInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/d052c1d7d32ead/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38166.5424189815
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/kdx.cab

[Max Powers]

O4 - HKLM\..\Run: [sisam11m] C:\WINDOWS\System32\sisam11m.exe

Mis see on?

[Dumbuser]