בדיקת וירוסים, מלאוור ומה שביניהם……

[yarden]

קודם כל אני חדשה פה, אז שלום לכולם…..

הרצתי בדיקה על המחשב עם התוכנה הוותיקה Malwarebytes Anti-Malware.

לאחר שהיא סיימה את הסריקה הופיע לי דף לא כל כך מובן.

Malwarebytes Anti-Malware

http://www.malwarebytes.org

Scan Date: 31/05/2014

Scan Time: 13:05:51

Logfile: test.txt

Administrator: Yes

Version: 2.00.2.1012

Malware Database: v2014.05.31.02

Rootkit Database: v2014.05.21.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

OS: Windows XP Service Pack 3

CPU: x86

File System: NTFS

User: Administrator

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 264233

Time Elapsed: 8 min, 28 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 16

PUP.Optional.Spigot.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B9C767DD-F66A-40B4-8F12-4199A9A4393C}, , [5b93b1a63b405cdae8aed5598d757d83], 

PUP.Optional.GreatSaver.A, HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}, , [1ed0282fdf9c4fe709bcf14108fa9868], 

PUP.Optional.Tarma.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\7059b1f4-ab6d-4883-8573-451d6f00879a, , [5a94ce89552685b1e20175d0a7598e72], 

PUP.Optional.Tarma.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SETUP.EXE, , [5a94ce89552685b1e20175d0a7598e72], 

PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0052914.BHO, , [e30bd5821e5df93d9e61be0413f0aa56], 

PUP.Optional.Spigot.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\hbcennhacfaagdopikcegfcobcadeocj, , [30becc8b116a59dd0f98a1f3c939b34d], 

PUP.Optional.Spigot.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\icdlfehblmklkikfigmjhbmmpmkmpooj, , [539b005702791a1c990f197bdf23d12f], 

PUP.Optional.Spigot.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\mhkaekfpcppmmioggniknbnbdbcigpkk, , [08e644134833b6801b8eb5df5ea48b75], 

PUP.Optional.Spigot.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfndaklgolladniicklehhancnlgocpp, , [549a87d069122a0ca109dfb5b44e12ee], 

PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Plus-HD-9.0, , [b6382136e3989e983998e7c7b34fc13f], 

PUP.Optional.CrossRider.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CROSSRIDER, , [cb232532df9c67cf2fd216ad14efd62a], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [47a7d483562590a69375ebc14fb3ee12], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [a04edc7b3a414beb33e26260c83b827e], 

PUP.Optional.PlusHD.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Plus HD, , [cd21cc8b6e0da1959093c1de31d18080], 

PUP.Optional.WebSearchInfo, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [8a64b3a4ff7c82b4df89d8f81be87d83], 

PUP.Optional.Softonic.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [33bb27308af1280ebce85446a45e22de], 

Registry Values: 2

PUP.Optional.CrossRider.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CROSSRIDER|Verifier, 9a7ce461516334da786c2d2a88ef91f6, , [cb232532df9c67cf2fd216ad14efd62a]

PUP.Optional.InstallCore.A, HKU\S-1-5-21-602162358-583907252-1177238915-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0F, , [a04edc7b3a414beb33e26260c83b827e]

Registry Data: 1

PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://websearch.exitingsearch.info/?pid=512&r=2014/03/03&hid=14203030595180933923&lg=EN&cc=IL&unqvl=50, Good: (http://www.google.com), Bad: (http://websearch.exitingsearch.info/?pid=512&r=2014/03/03&hid=14203030595180933923&lg=EN&cc=IL&unqvl=50),,[cb239fb89ddefb3b55ef5104a95bb24e]

Folders: 7

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\033E986DD7E640378F53E881973EF87F, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\8CD08F1D1B7E47D681302829FE761E14, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\AB36228A51A444108953BF9568340833, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.NextLive.A, C:\Documents and Settings\Administrator\Application Data\newnext.me, , [3eb0381f1d5e2c0a0e9d710ad72b748c], 

PUP.Optional.NextLive.A, C:\Documents and Settings\Administrator\Application Data\newnext.me\cache, , [3eb0381f1d5e2c0a0e9d710ad72b748c], 

PUP.Optional.Spigot.A, C:\Program Files\Common Files\Spigot\GC, , [549ab2a5dc9f5bdb7efc92fbe61c1ae6], 

Files: 21

PUP.Optional.OpenCandy.A, C:\Documents and Settings\Administrator\Application Data\OpenCandy\033E986DD7E640378F53E881973EF87F\dlm.exe, , [9f4fa9aee39866d0f989091757aa7987], 

PUP.Optional.InstalleRex.A, C:\Documents and Settings\All Users\Application Data\InstallMate\{5819DC41-7D10-466F-A484-353283FAFEB7}\Custom.dll, , [668804536318cd694eabf9435ca47c84], 

PUP.Optional.Tarma.A, C:\Documents and Settings\All Users\Application Data\InstallMate\{5819DC41-7D10-466F-A484-353283FAFEB7}\Setup.exe, , [5a94ce89552685b1e20175d0a7598e72], 

PUP.Optional.Spigot.A, C:\Documents and Settings\Administrator\My Documents\Downloads\YTDSetup.exe, , [ae40f5622e4d1c1a037c9b8bd828d52b], 

PUP.Optional.InstallCore.A, C:\Documents and Settings\Administrator\My Documents\Downloads\minecraft_he.exe, , [559996c1e2995cdaa3ea75bb57a903fd], 

PUP.Optional.Amonetize, C:\Documents and Settings\Administrator\My Documents\Downloads\Install This File__5205_il73.exe, , [2cc28bccf9829f97765f7db7ce32c53b], 

PUP.Optional.InstallCore.A, C:\Documents and Settings\Administrator\My Documents\Downloads\microsoft_office_home_and_business_32-bit_he.exe, , [8c6223343843f046bcd1260ae41cbc44], 

PUP.Optional.InstallCore.A, C:\Documents and Settings\Administrator\My Documents\Downloads\winrar_he.exe, , [46a81740d7a453e3b6d783ad39c713ed], 

PUP.Optional.ScramblePacker.A, C:\Documents and Settings\Administrator\Local Settings\Temp\plus-hd-9-0.exe, , [b33bc88fe695ea4caa3cb4c8a75a4bb5], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Local Settings\Temp\is-C8I3M.tmp\OCSetupHlp.dll, , [c12d52059dde221433aedda5a95be31d], 

PUP.Optional.NextLive.A, C:\Documents and Settings\Administrator\Local Settings\Application Data\genienext\nengine.dll, , [0ce21f38ed8e0c2a9d22bd98ef127c84], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\033E986DD7E640378F53E881973EF87F\chrometest3.html, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\033E986DD7E640378F53E881973EF87F\PasswordBoxCHSTORE3_p1v1.exe, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\8CD08F1D1B7E47D681302829FE761E14\TuneUpUtilities2014_en-GB.exe, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.OpenCandy, C:\Documents and Settings\Administrator\Application Data\OpenCandy\AB36228A51A444108953BF9568340833\chrometest.html, , [d11d6ee9077434028d6f136650b205fb], 

PUP.Optional.NextLive.A, C:\Documents and Settings\Administrator\Application Data\newnext.me\nengine.cookie, , [3eb0381f1d5e2c0a0e9d710ad72b748c], 

PUP.Optional.NextLive.A, C:\Documents and Settings\Administrator\Application Data\newnext.me\cache\spark.bin, , [3eb0381f1d5e2c0a0e9d710ad72b748c], 

PUP.Optional.Spigot.A, C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx, , [549ab2a5dc9f5bdb7efc92fbe61c1ae6], 

PUP.Optional.Spigot.A, C:\Program Files\Common Files\Spigot\GC\ErrorAssistant_1.2.crx, , [549ab2a5dc9f5bdb7efc92fbe61c1ae6], 

PUP.Optional.Spigot.A, C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx, , [549ab2a5dc9f5bdb7efc92fbe61c1ae6], 

PUP.Optional.Spigot.A, C:\Program Files\Common Files\Spigot\GC\saebay_1.1.crx, , [549ab2a5dc9f5bdb7efc92fbe61c1ae6], 

Physical Sectors: 0

(No malicious items detected)

(end)

מקווה שאני במקום הנכון, והמון תודה למי שיעזור.

ירדן

[אבי לוי]

שבוע טוב ירדן

במדריך הזה תוכלי לקבל תמונה מלאה ומדויקת כיצד להפיק את מלא התועלת מהכלי הזה.

הדוח שצרפת מראה על מפתוחות רישום נגועים, שיש להסירם.

עייני במדריך וצפי בסרטון המצורף.

אם עדיין יש לך שאלות, את מוזמנת להעלותן לדיון הזה.

בהצלחה ! 

[מאת]

תגובות