help me! i prepared all of 3 logs and attached.
what can be problem?
help me! i prepared all of 3 logs and attached.
what can be problem?
Please first of all remove MessengerPlus! - it's a Spyware :)
Fix with Hijackthis
[CODE]O2 - BHO: BSM - {141FDC3C-15FB-11DD-B723-9EF855D89593} - C:\WINDOWS\system32\bsm.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A356D6B8-3DFB-4B21-9E42-9156AA49235A}: NameServer = 4.2.2.1,4.2.2.2
O20 - Winlogon Notify: fbcbadeedcdecc - C:\WINDOWS\system32\fbcbadeedcdecc.dll (file missing)
O20 - Winlogon Notify: MBUNAL - C:\WINDOWS\system32\MBUNAL.dll (file missing)[/CODE]
Run the script in AVZ
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\MBUNAL.dll','');
QuarantineFile('C:\WINDOWS\system32\bsm.dll','');
DelBHO('{141FDC3C-15FB-11DD-B723-9EF855D89593}');
DelBHO('{92780B25-18CC-41C8-B9BE-3C9C571A8263}');
DelBHO('{2670000A-7350-4f3c-8081-5663EE0C6C49}');
DelBHO('{7E853D72-626A-48EC-A868-BA8D5E23E045}');
DeleteFile('C:\WINDOWS\system32\bsm.dll');
DeleteFile('C:\WINDOWS\system32\MBUNAL.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]
After reboot [URL="http://virusinfo.info/upload_virus_eng.php?tid=22618"]upload the quarantine[/URL] and repead all 3 logs.
i run that script and made it all of steps. reports are attached.
i cant leave msnplus. i love some features of it.
on the other hand; i think my computer a little faster ((-;<
sincerely
[QUOTE=baris;225183]
i cant leave msnplus. i love some features of it.[/QUOTE]
Here is the end of discussion for me.
thanks anyway. i just wonder how you work. i saw now.