[lehm2]

http://img193.exs.cx/img193/1510/hmm6al.jpg

pilt siin ja jaaki log ka added probleem selles et see jura muudab mul kodulehte kustutasin regist 'ra selle selle leha aga kui net l'ksin tuli see jura uuesti l'ksin regi ja seal oli leht uue nimega kas aitaks kui need dlllid 'ra kustutada ja siis regist see pahn maha v]tta


Logfile of HijackThis v1.99.1

Scan saved at 19:09:41, on 2.03.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
D:\skull\OOCR-FIX.exe
C:\Program Files\Iconic Tray\it.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Java\jdk1.5.0_01\bin\java.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Java\jdk1.5.0_01\bin\java.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Java\jdk1.5.0_01\bin\java.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Risto\My Documents\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://win-eto.com/hp.htm?id=9
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neti.ee/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://win-eto.com/hp.htm?id=9
O2 - BHO: (no name) - {467FAEB2-5F5B-4c81-BAE0-2A4752CA7F4E} - C:\WINDOWS\system32\vuiw9iult1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1107896260044
O17 - HKLM\System\CCS\Services\Tcpip\..\{5B074E8D-B466-4563-B804-7CB09053AB8A}: NameServer = 194.126.115.18 194.126.101.34
O20 - AppInit_DLLs: 89dcufr79rj696.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

[lehm2]

25 viewsi ja keegi aita ?

[100kv]

safe modis sisse ja uuesti registri kallale.

[lehm2]

hmm see jama tekib kogu aeg juurde kui netis kÄin aga safes käidud aga ei aidanud

[HacaX]

Tühjendad esmalt TEMP kaustad, buudid safe mode'is üles, *ei käivita* IEd (s.t. salvesta see tekst esmalt tekstifailina kõvakettale), parandad HijackThisiga järgnevad read:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://win-eto.com/hp.htm?id=9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://win-eto.com/hp.htm?id=9
O2 - BHO: (no name) - {467FAEB2-5F5B-4c81-BAE0-2A4752CA7F4E} - C:\WINDOWS\system32\vuiw9iult1.dll
O20 - AppInit_DLLs: 89dcufr79rj696.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

ja teed alglaadimise.

[lehm2]

ta ei lase mul neid fixida =(

[HacaX]

Mis mõttes ei lase? Annab mingi errori või ilmuvad peale parandamist uuesti?
Mismoodi sa täpselt parandad? Ikka teed linnukese rea ette ja siis klõpsid "Fix" nuppu?
System Restore on välja lülitatud? Ja võtsid kuulda seda nõuannet, et Internet Explorerit ei tohi käima panna?