Re: otravny spyware

From: Josef Lorenc <lorenc.j (zavinac)>
Date: 06. 04. 2006, 15:07 CEST
NetTime je ovladac casu, serizuje cas podle casového serveru
J.Lorenc
----- Original Message -----
From: Vyroubal Martin <vyroubal@gmail.com>
To: <servis-internet@nawebu.cz>
Sent: Thursday, April 06, 2006 3:01 PM
Subject: Re: otravny spyware


jne sterucne... odstranil bych vse nettime.exe
O2 - BHO: Nothing - {4da4616d-7e6e-4fd9-a2d5-b6c535733e22}
-C:\WINDOWS\system32\hp7104.tmp
O4 - HKLM\..\Run: [NetTime] C:\Program Files\NetTime\NetTime.exe
O4 - HKCU\..\Run: [Express ClickYes] c:\Program Files\Express
ClickYes\ClickYes.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}-
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra button: Subscribe in Desktop Sidebar
-{09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop
Sidebar\sbhelp.dll (file missing)
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar
-{09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop
Sidebar\sbhelp.dll (file missing)
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmbClass)
- http://live.rtyne.net/activex/AMC.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} -
http://akamai.downloadv3.com/binaries/IA/netslv32_EN_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = nypro.local
O17 - HKLM\Software\..\Telephony: DomainName = nypro.local
O17 -
HKLM\System\CCS\Services\Tcpip\..\{796C73A4-609E-4ECD-991B-51C68D933CB8}:Nam
eServer
= 213.168.76.3,62.168.22.130
O23 - Service: NetTime (NetTimeSvc) - Subjective Software - C:\Program
Files\NetTime\NeTmSvNT.exe

pokud bych radil spatne tak me nekdo upozornete aby si nesmazal neco co by
mohlo byt duleziteho. Nejsem si jist temi O17. To zalezi jestli ti ta domena
a IP adresa neco rika. Ostatni bych se nebal odstranit. Popr. to jde vratit

zpet.
Received on Thu, 6 Apr 2006 15:07:27 +0200

This archive was generated by hypermail 2.1.8 : 06. 04. 2006, 15:07 CEST