IG פורסם 2005 בנובמבר 10 Share פורסם 2005 בנובמבר 10 אני חייב תוכנה לאנטי spywere שתמחק לי אותוהורדתי adwere אבל היא לא עזרה... הנורטון אומר שזה download.trojan או משהו כזה, בבקשה תעזרו לי :'( קישור לתוכן שתף באתרים אחרים More sharing options...
Milk-Inc פורסם 2005 בנובמבר 10 Share פורסם 2005 בנובמבר 10 דבר ראשון - תתקין תוכנת Anti-Virus אחרת... אני מניח שהנורטון מצא לך את הוירוס, אך הוא לא הצליח להסיר אותו(לא מפתיע למען האמת)אני ממליץ אל הקספארסקי. תוכנה מעולה.אם אתה מעוניין באנטי-וירוס חינמי, אז יש את ה-AVG שגם הוא אנטי-וירוס מעולה.דבר שני - תריץ סריקה של HijackThis ותפרסם את הלוג שתקבל בסוף הסריקה בהודעה שלך. קישור לתוכן שתף באתרים אחרים More sharing options...
taotao פורסם 2005 בנובמבר 10 Share פורסם 2005 בנובמבר 10 Spyware DoctorAd-Aware SE PersonalMicrosoft AntiSpywareולגבי הלוג שאתה מסיים תעתיק אותו לפה זה יעזור לך..http://hijackthis.de/ קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 10 מחבר Share פורסם 2005 בנובמבר 10 טוב, דבר ראשון זה אכן Download.Trojan לפי הנורטון דבר שני, קספרסקי בתהליכי קנייה (הוזמן לבאג... מחר כנראה יגיע... אולי), אגב, היבואן הפסיק ליבא אותו לארץ דבר שלישי: הלוג (אני מקווה שזה זה...) Infection Name Location Risk Trojan.Agent.DJ Explorer.EXE (C:\WINDOWS\System32\svchosts.dll) High Trojan.Popuper IEXPLORE.EXE (C:\WINDOWS\System32\hp8BA7.tmp) High Trojan.StartPage.ADH nvctrl.exe (C:\WINDOWS\System32\nvctrl.exe) High AntiVirusGold HKCR\AppID\{70F17C8C-1744-41B6-9D07-575DB448DCC5} Medium AntiVirusGold HKCR\AppID\{70F17C8C-1744-41B6-9D07-575DB448DCC5}## Medium AntiVirusGold HKCR\Engine.IgnoreList Medium AntiVirusGold HKCR\Engine.IgnoreList## Medium AntiVirusGold HKCR\Engine.IgnoreList\CLSID Medium AntiVirusGold HKCR\Engine.IgnoreList\CLSID## Medium AntiVirusGold HKCR\Engine.IgnoreList\CurVer Medium AntiVirusGold HKCR\Engine.IgnoreList\CurVer## Medium AntiVirusGold HKCR\Engine.IgnoreList.1 Medium AntiVirusGold HKCR\Engine.IgnoreList.1## Medium AntiVirusGold HKCR\Engine.IgnoreList.1\CLSID Medium AntiVirusGold HKCR\Engine.IgnoreList.1\CLSID## Medium AntiVirusGold HKCR\Engine.Threat Medium AntiVirusGold HKCR\Engine.Threat## Medium AntiVirusGold HKCR\Engine.Threat\CLSID Medium AntiVirusGold HKCR\Engine.Threat\CLSID## Medium AntiVirusGold HKCR\Engine.Threat\CurVer Medium AntiVirusGold HKCR\Engine.Threat\CurVer## Medium AntiVirusGold HKCR\Engine.Threat.1 Medium AntiVirusGold HKCR\Engine.Threat.1## Medium AntiVirusGold HKCR\Engine.Threat.1\CLSID Medium AntiVirusGold HKCR\Engine.Threat.1\CLSID## Medium SpywareNo HKCU\Software\SNO2 High SpywareNo HKCU\Software\SNO2## High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3 High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3## High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##DLLName High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##logoff High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##lock High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##logon High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##startup High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##shutdown High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##startshell High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##unlock High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##startscreensaver High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\st3##stopscreensaver High Trojan.Downloader.Delf.LH HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler##{1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5} High Trojan.Popuper HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run##wininet.dll High Trojan.Popuper HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objecta High Trojan.Popuper HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objecta## High Trojan.Popuper HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objecta\{e9ccf15d-4c68-4b5a-9e9a-8e12e4bd39bd} High Trojan.Popuper HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objecta\{e9ccf15d-4c68-4b5a-9e9a-8e12e4bd39bd}## High Trojan.StartPage.ADH HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run##nvctrl.exe High WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com##Version Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Log Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Log## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Log##LogFilePath Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor##SnapshotFolder Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Command Processor\AutoRun Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Default_Page_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Default_Search_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Local Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Search Bar Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Search Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Start Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\SearchURL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Internet Explorer\SearchURL\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Office\Common\Assistant\AssFile Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Office\Common\Assistant\CurAssFile Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\WAB\WAB4\Wab File Name\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DisablePasswordCaching Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\RunOnce\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Run\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFileNew Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_current_user\Software\Policies\Microsoft\Windows\Installer\DisableMedia Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\UIHost Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\BackupPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\ChkDskPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\CleanupPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\DefragPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network\DisablePwdCaching Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network\HideSharePwds Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SYSTEM\CurrentControlSet\Control\CrashControl\AutoReboot Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\SYSTEM\CurrentControlSet\Services\RasMan\Parameters\DisableSavePassword Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Default_Page_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Default_Search_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Local Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Search Bar Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Search Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Start Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\SearchURL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Internet Explorer\SearchURL\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows Script Host\Settings\Enabled Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\RunOnce\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Run\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\AutoAdminLogon Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\AutoLogonCount Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\DefaultDomainName Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\DefaultPassword Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\DefaultUserName Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Actions##hkey_local_machine\Software\Policies\Microsoft\Windows\Installer\DisableMSI Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Command Processor\AutoRun Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Default_Page_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Default_Search_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Local Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Search Bar Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Search Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\Main\Start Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\SearchURL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Internet Explorer\SearchURL\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Office\Common\Assistant\AssFile Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Office\Common\Assistant\CurAssFile Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\WAB\WAB4\Wab File Name\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DisablePasswordCaching Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\RunOnce\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Microsoft\Windows\CurrentVersion\Run\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFileNew Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_current_user\Software\Policies\Microsoft\Windows\Installer\DisableMedia Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\UIHost Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\BackupPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\ChkDskPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\CleanupPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\DefragPath\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network\DisablePwdCaching Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network\HideSharePwds Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SYSTEM\CurrentControlSet\Control\CrashControl\AutoReboot Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\SYSTEM\CurrentControlSet\Services\RasMan\Parameters\DisableSavePassword Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Default_Page_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Default_Search_URL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Local Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Search Bar Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Search Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\Main\Start Page Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\SearchURL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Internet Explorer\SearchURL\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows Script Host\Settings\Enabled Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\RunOnce\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Run\@ Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\AutoAdminLogon Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\AutoLogonCount Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\DefaultDomainName Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\DefaultPassword Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Microsoft\Windows\CurrentVersion\Winlogon\DefaultUserName Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Monitor\Snapshot##hkey_local_machine\Software\Policies\Microsoft\Windows\Installer\DisableMSI Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\checkboxes##CH_UPDATE_USE_PROXY Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\checkboxes##CH_UPDATE_AUTHENTIFICATE Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\textinputs##TI_UPDATE_PROXY_IP Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\textinputs##TI_UPDATE_PROXY_PORT Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\textinputs##TI_UPDATE_PROXY_USER Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\ConnectionSettings\textinputs##TI_UPDATE_PROXY_PASS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_BHO Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_DEFAULT_INTERNET_APPLICATIONS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_DEFAULT_PAGES Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_DIALUP_SETTINGS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_DNS_SETTINGS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_ENABLED Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_GATEWAY Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_HANDLERS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_INTERNET_EXPLORER Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_MIME_FILTERS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_NAMESPACE_HANDLERS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_NETWORK_CONNECTIONS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_PASSWORD_CACHING Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_PROTOCOLS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_PROXY_SETTINGS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\checkboxes##CH_ISH_TOOLBARS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\flags Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\flags## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\strings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\strings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\IEShield\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_APPLICATION_ALIASES Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_AUTOMATIC_LOGON Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_COM_COMPONENTS_REGISTRATION Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_CONTEXT_MENUS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_DEFAULT_RULE_FOR_IE_SUBKEYS Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_DISK_CLEAR Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_ENABLED Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_PAGE_FILE_CLEARING Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_PASSWORD_CACHING_REMOVE Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_PREPROCESSOR_BEFORE_COMMAND_LINE Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_SET_SHELL Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_STARTUP Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_SYSTEM_AUTO_REBOOT Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_TIME_SINCHRONIZATION Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_WINDOWS_INSTALLER Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\checkboxes##CH_SH_WINDOWS_SCRIPTING Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\flags Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\flags## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\strings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\strings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\PCShield\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\checkboxes##CHK_OPTIONS_MINIMIZEONSTART Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\checkboxes##CHK_OPTIONS_SILENT_STARTUP Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\checkboxes##CHK_OPTIONS_SCAN_ON_STARTUP Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\checkboxes##CHK_OPTIONS_START_ON_STARTUP Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\flags Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\flags## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\strings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\strings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Preferences\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##CHK_SCAN_BACKGROUND Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##R_SCAN_DEPTH_DEEP Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##R_SCAN_DEPTH_NORM Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##R_SCAN_DEPTH_QUICK Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##R_SCAN_PRI_HIGH Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##R_SCAN_PRI_NORM Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\checkboxes##R_SCAN_PRI_LOW Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\flags Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\flags## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\strings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\strings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Scan\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\checkboxes##CH_UPDATE_USE_PROXY Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\checkboxes##CH_UPDATE_AUTHENTIFICATE Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\checkboxes##CH_UPDATE_ENABLE_AUTO Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\Update\textinputs##TI_UPDATE_TIMEOUT Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\flags Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\flags## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\strings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\strings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\UpdateOptions\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\checkboxes Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\checkboxes## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\flags Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\flags## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\flags##initialized Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\flags##registered Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\flags##aid Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##baseUpdated Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##coreUpdated Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##lastScanned Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##memScanned Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##memDetected Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##fileScanned Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##fileDetected Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##regScanned Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##regDetected Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##cookiesScanned Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\strings##cookiesDetected Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\textinputs Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\options\WASOptions\textinputs## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Quarantine Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Quarantine## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Quarantine##QuarantineFolder Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Scanner Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Scanner## Medium WorldAntiSpy HKLM\SOFTWARE\WorldAntiSpy.com\Scanner##Base Medium Trojan.Downloader.Delf.LH HKCR\CLSID\{1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5} High Trojan.Downloader.Delf.LH HKCR\CLSID\{1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5}\InprocServer32 High Trojan.Downloader.Delf.LH HKLM\Software\Classes\CLSID\{1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5} High Trojan.Downloader.Delf.LH HKLM\Software\Classes\CLSID\{1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5}\InprocServer32 High Trojan.Agent.DJ HKCR\CLSID\{E802FFFF-8E58-4d2c-A435-8BEEFB10AB77} High Trojan.Agent.DJ HKCR\CLSID\{E802FFFF-8E58-4d2c-A435-8BEEFB10AB77}\InProcServer32 High Trojan.Agent.DJ HKCU\Software\Classes\CLSID\{E802FFFF-8E58-4d2c-A435-8BEEFB10AB77} High Trojan.Agent.DJ HKCU\Software\Classes\CLSID\{E802FFFF-8E58-4d2c-A435-8BEEFB10AB77}\InProcServer32 High Trojan.Popuper HKCR\CLSID\{E9CCF15D-4C68-4B5A-9E9A-8E12E4BD39BD} High Trojan.Popuper HKCR\CLSID\{E9CCF15D-4C68-4B5A-9E9A-8E12E4BD39BD}\InprocServer32 High Trojan.Popuper HKLM\Software\Classes\CLSID\{E9CCF15D-4C68-4B5A-9E9A-8E12E4BD39BD} High Trojan.Popuper HKLM\Software\Classes\CLSID\{E9CCF15D-4C68-4B5A-9E9A-8E12E4BD39BD}\InprocServer32 High Trojan.Popuper HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9CCF15D-4C68-4B5A-9E9A-8E12E4BD39BD} High Tracking Cookie(s) C:\Documents and Settings\IG\Cookies\ig@tribalfusion[1].txt Medium Advertising C:\Documents and Settings\IG\Cookies\ig@com[2].txt Low WorldAntiSpy C:\Documents and Settings\IG\Application Data\Skinux\WorldAntiSpy Medium WorldAntiSpy C:\Documents and Settings\IG\Application Data\Skinux\WorldAntiSpy\Profile.xml Medium SpywareNo C:\Program Files\SpyTrooper High SpywareNo C:\Program Files\SpyTrooper\Uninstall.exe High WorldAntiSpy C:\Program Files\WorldAntiSpy Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{05241d23-5893-43a2-8277-67a715dc982f} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{0529effc-790a-4de7-911b-6dfd8b075c09} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{05e05fdd-6f87-483c-ae85-5ec8bcd808b4} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{0851d69f-749f-40a9-8317-575fa3190c3e} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{0f5b19c6-fd8b-4b5e-a4ba-7c0b0a2c0b1c} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{131a17f5-f832-406b-a6f6-b12ca7fb486b} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{17a45a80-9c8b-4340-9d3c-464c16663a74} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{219c36d9-d8a9-4565-8bd9-845d77829ac5} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{22d8ed4a-85e9-4fce-955b-5912fc95ba28} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{36ca448a-4b88-4757-8107-fec3be82ebd1} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{43ac5a02-2c76-47ad-a057-d6193b02299b} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{44da280c-873d-4751-8b69-f5040c0f2972} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{4978cdc1-9947-4afa-a55d-5ddf6cad02e3} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{4bd2333b-7706-409c-a28b-dd8e4d23fa7e} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{4eb058d2-2177-4742-aa83-1db048390ba9} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{4fda3ac1-893c-4549-b53a-9f42dc0963b4} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{57f09676-792f-423a-b1a0-eb9344919abb} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{5ce8afa1-76da-4869-a929-881dde43621d} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{5df8591a-b57c-4093-8ab3-1766e262979e} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{6a85a25a-59a2-4c3f-b2b9-3862f6b23283} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{77c66eed-3b12-4caf-95b4-879944be2f33} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{7c6a2018-5363-48f5-b225-2674868816b0} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{82b77fb2-aaea-405a-94bf-4fbf82639f7e} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{83d7db38-4912-4120-85ea-28c8c9fdd4f3} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{8c7054ed-b871-45ff-846d-289ada76e2d4} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{912e75c3-cf15-4956-8d7a-b86334df22c8} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{91647036-2a34-4e17-a028-05697a03720e} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{9a3c20c5-b647-41b6-b7cb-5ebb1bcda438} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{9b04dd8b-f4d6-40cd-865e-61411beb05c1} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{9ed6745f-131d-4ed4-85de-91f77eb84338} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{a13823f5-e2c0-4d2b-bbd3-abe700bd0049} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{acf5068b-095b-4f60-802a-0839bfcea62b} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{b0a4dcfc-bfe0-4248-8d24-78661d818d21} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{b0f25be9-7c80-4040-a43d-f1fac7646ee1} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{b28f0e41-fd29-4928-b4ab-7b8370ff9ed5} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{b371b925-f300-4eee-8e41-e78534852ae1} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{b6a85faf-5932-4a77-91cb-fdf9e00fb692} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{b96780b3-c42f-447a-82a3-55939d3dddb5} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{c2d49e9a-5c58-4650-8523-91e89b6dda1e} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{cb2de623-71fa-427a-93d3-25a3ba2566b7} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{d3b0be5b-b02f-475b-a8c6-7ef2b0d1a9fb} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{d9fc3b02-6e44-4539-b5f5-fdcb7c9bf40d} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{db96aa85-c613-4791-9e59-1635daa1e4c4} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{dfaac6ee-9d7c-4efe-b874-aa305027bfe0} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{e5c82571-223b-4caa-95b5-7f47648793b7} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{e613d296-d0a1-41b6-9fb2-00d5484370a2} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{e8e42a56-25b5-44da-a122-f6ea5f1ead36} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{ef244ede-5d9f-4562-9eb3-a62998c566c5} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{ef4097de-a67f-4292-b06a-d35986c557a3} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{f07b0a27-8f2c-432f-a780-de2d748de01c} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{f2e0907b-4800-43c1-b022-05d37c992c88} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{f2ff56cb-8c65-4b20-ba06-ccb7bb9bf5ef} Medium WorldAntiSpy C:\Program Files\WorldAntiSpy\Monitor\Snapshot\{faa7398d-e1dc-4409-affb-a1852819a65f} Medium Trojan.Popuper C:\WINDOWS\System32\hp8BA7.tmp High Trojan.Popuper C:\WINDOWS\System32\hpB28F.tmp High Trojan.Popuper C:\WINDOWS\System32\mscornet.exe High Trojan.Popuper C:\WINDOWS\System32\msvol.tlb High Trojan.Popuper C:\WINDOWS\System32\ncompat.tlb High Trojan.StartPage.ADH C:\WINDOWS\System32\nvctrl.exe High Trojan.Agent.DJ C:\WINDOWS\System32\svchosts.dll High ודבר אחרון: איך לעזאזל אני מנטרל את הודעת האזהרה של הווינודס??? זה משגע אותי עם הקפיצות כל שתי שניות קישור לתוכן שתף באתרים אחרים More sharing options...
taotao פורסם 2005 בנובמבר 10 Share פורסם 2005 בנובמבר 10 טוב אני יסביר יותר בפשטות..(פעם 3 גלידה..)תעתיק את הלוג לפה..http://hijackthis.de/ קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 10 מחבר Share פורסם 2005 בנובמבר 10 העתקתי, הרצתי את הדיאגנוזה, והכול מוגדר כ"לא מזוהה"Trojan.StartPage.ADH nvctrl.exe (C:\WINDOWS\System32\nvctrl.exe) High Unknown running process. (nvctrl.exe)High) This is a unknown process. Trojan.StartPage.ADH HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run##nvctrl.exe High Unknown running process. (Run##nvctrl.exeHigh) This is a unknown process. SpywareNo C:\Program Files\SpyTrooper\Uninstall.exe High Unknown running process. (Uninstall.exeHigh) This is a unknown process. Trojan.Popuper C:\WINDOWS\System32\mscornet.exe High Unknown running process. (mscornet.exeHigh) This is a unknown process. Trojan.StartPage.ADH C:\WINDOWS\System32\nvctrl.exe High Unknown running process. (nvctrl.exeHigh) This is a unknown process. קישור לתוכן שתף באתרים אחרים More sharing options...
taotao פורסם 2005 בנובמבר 10 Share פורסם 2005 בנובמבר 10 תעשה עוד פעם סריקה (תגדיר שתהיה סריקה עם לוג..)ושהיא מסיימת תעתיק ישירות לאתר.. קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 10 מחבר Share פורסם 2005 בנובמבר 10 אחרי הסריקה התוכנה מציגה לי דף שאני יכול לבחור בו רק שורה אחת בכול פעם... יש 350 כאלה... איך בדיוק אני אמור להעתיק את לוג? מה שאני העתקתי מקודם זה לוג שפתחתי אחרי שסגרתי את עמוד התוצאות, ולחצתי על "הראה לוג" בדף הסריקה של התוכנה...אגב, מה בדיוק אני אמור להעתיק לאתר, מה לעשות אחרי שאני מעתיק (מקודם הרצתי דיאגנוסטיקה...) ומה לא הייה בסדר בתוצאות הקודמות?תודה על העזרה :-* קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 10 מחבר Share פורסם 2005 בנובמבר 10 חברה, מצטער על ההקפצה, אבל התוכנה סיימה לסרוק ואני לא יודע מה לעשות עם התוצאות קישור לתוכן שתף באתרים אחרים More sharing options...
Dimness פורסם 2005 בנובמבר 10 Share פורסם 2005 בנובמבר 10 לפי הלוג המחשב שלך מלא בספיים וטרואנים :-\תכניס את הלוג ל - www.hijackthis.de ותסמן בתוכנה את כח מה שרום לך שם מסוכן / לא מזוהה ואז תעלה את הלוג שוב פעם לפורום.תשתמש בכמה שיותר תוכנות הגנה:SpybotAd- AwareSpy SweeperSpyware Doctorוכל התוכנות הדומות לאלה... קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 10 מחבר Share פורסם 2005 בנובמבר 10 והתוכנות האלה לא עוזרות... הספיים עדיין נשארים קישור לתוכן שתף באתרים אחרים More sharing options...
ran19 פורסם 2005 בנובמבר 11 Share פורסם 2005 בנובמבר 11 אז תסיר אותם דרך ה-?HijackThis מה הבעיה ותעשה את זה דרך הסאף-מוד.ושמע תישתמש בspy sweeper החזק!!! ובאנטי וירוס קספרסקי .!!! זהו זה יעזור! ותעבור להישתמש בFF !! אקספלורר מביא רק צרות!!! אם אין לך תהגנות המתאימות.בהצלחה.עם כבר תמישתמש באקספלורר תשים תתול-בר של גוגל! קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 11 מחבר Share פורסם 2005 בנובמבר 11 איך אני מוחק אותם דרך ההיג'אק? אין לי מושג איך ךהשתמש באתר הזה...וכל התוכנות האנטי ספיוור שאתם מציעים הם תוכנות שחוץ מסריקה לא עושות כלום... יש לכם הצעות נוספות? קישור לתוכן שתף באתרים אחרים More sharing options...
contA- פורסם 2005 בנובמבר 11 Share פורסם 2005 בנובמבר 11 תריץ סריקה בHijack This ותשאיר את העמוד הזה עם התוצאות פתוח ואז תראה מה רשום באתר ההוא שצריך למחוק ולפי זה תסמן ואז בסוף תעשה Fix Checked וזה ימחק את הקבצים הבעייתיים. קישור לתוכן שתף באתרים אחרים More sharing options...
IG פורסם 2005 בנובמבר 11 מחבר Share פורסם 2005 בנובמבר 11 איפה??? אני פירסמתי את הסקרין שמופיע לי בטרוג'אן הייג'ק... אין שם אופציית מחיקה! מישהו... 8 תוכנות אבטחה ושום דבר לא זז קישור לתוכן שתף באתרים אחרים More sharing options...
Recommended Posts
ארכיון
דיון זה הועבר לארכיון ולא ניתן להוסיף בו תגובות חדשות.