Your post count prohibits you from posting new replies in this forum!
Users with less than 1 posts cannot reply to threads here. Your post count is currently . You need to post first in the Intro thread.
Results 1 to 5 of 5

Thread: Recuperare dupa troian - Win7

  1. #1 SP
    is the man! trickz's Avatar

    Recuperare dupa troian - Win7

    Salut

    Acum cateva ore am prins un troian, navigand pe Internet Explorer. Nod32 era de garda dar a considerat programul inofensiv. Acesta si-a facut o treaba in background, respectiv si-a mutat undeva (necunoscut) fisierul sursa si a mai dezvoltat inca 3 troieni, cu auto-start la boot.

    Am facut un scan complet cu Nod32 si nu a gasit nimic. Am dat restart si a gasit, la boot, toate fisierele infectate. Le-a sters. Problema incepe acum.

    Yahoo Messenger nu mai imi arata conversatiile. Am cautat pe google si am gasit ca este din cauza unor modificari aduse de troieni, pentru a putea rula ad-uri si pentru a lasa daune in urma lor. Cateva forumuri recomandau CCleaner. L-am incercat si nu a avut succes.

    Am incercat varianta a doua, respectiv am sters IE9 si l-am reinstalat. Nimic

    Varianta a treia sugera sa reinstalez Net Framework (aici varianta 3.5). Am facut si asta si nu am reusit sa il repar.

    Daca a mai trecut cineva prin asta sau aveti idee cum pot rezolva, raman dator.

  2. #2 SP
    Senior Member GS0Ls's Avatar
    Da un scan cu HijackThis si posteaza rezultatul aici. Scaneaza cu Malwarebytes Anti-Malware si vezi ce gaseste. Apoi, fa un scan cu ComboFix si HitmanPro. Asta ar trebui sa te scape.

    Ai dezinstalat Yahoo Messenger si ti-ai bagat ultimul beta, 11 ? Poti sa iti salvezi folderul Archive, daca te intereseaza.

  3. #3 SP
    is the man! trickz's Avatar
    Am atasat rezultatul. Am incercat si beta11 si 10, la Ym!. Acum scanez cu Malwarebytes Anti-Malware si revin.

    Multumesc frumos!

    Edit: log-ul de la Malwarebytes spune asa:
    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\Cerberus (Backdoor.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\NtWqIVLZEWZU (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully.
    Edit2: am atasat si log-ul de la ComboFix.

    Edit3: HitmanPro arata 0 infectii. Tot nu functioneaza.
    Attached Files

  4. #4 SP
    Senior Member GS0Ls's Avatar
    Nope, nimic ciudat nu am obswervat.
    Dezinstaleaza Flash-ul si ia ultima versiune de aici: rich Internet applications | Adobe Flash Player

    Am intalnit de multe ori problema asta, insa nu a fost de rezolvat nici cu reinstalarea IE-ului, Flash-ului, Messenger-ului, curatare registrii, absolut nimic. Decat cu reinstalare a Windows-ului.

  5. #5 SP
    is the man! trickz's Avatar
    Momentan am rezolvat schimband laptopul, cu altul din casa... Grr. Mersi de ajutor!

Your post count prohibits you from posting new replies in this forum!
Users with less than 1 posts cannot reply to threads here. Your post count is currently . You need to post first in the Intro thread.

Similar Threads

  1. Recuperare poze de pe memory card By istrategie in forum Software
    Replies: 4 Last Post: 26-06-2013, 18:22
  2. Connecting bluetooth headset win7 By pooaul in forum Hardware
    Replies: 2 Last Post: 01-07-2010, 19:44

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts