Page 1 of 2 12 LastLast
Results 1 to 10 of 15
  1. #1

    Exclamation mga bai i can't access my task manager and regedit

    virus ni mga bro sa? i tried HJT and here's the result d pa kaau ko kasabot and i was hoping naay maka analyze ani, any advice would be helpful samot na ang naka experience ani. need help mga bai sa ako need buhaton ty ty. godbless mo tanan!


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 3:00:07 PM, on 3/18/2010
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\System32\svchost.exe
    F:\WINDOWS\system32\spoolsv.exe
    F:\WINDOWS\Explorer.EXE
    F:\WINDOWS\RTHDCPL.EXE
    F:\WINDOWS\system32\RUNDLL32.EXE
    F:\WINDOWS\system32\095A89\0CBA06.EXE
    C:\Program Files\PowerISO\PWRISOVM.EXE
    F:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
    F:\WINDOWS\system32\nvsvc32.exe
    F:\WINDOWS\system32\wscntfy.exe
    F:\Program Files\TruDirect\TruDirectTray.exe
    F:\WINDOWS\system32\rundll32.exe
    F:\WINDOWS\System32\svchost.exe
    F:\Program Files\Mozilla Firefox\firefox.exe
    F:\PROGRA~1\Yahoo!\Messenger\ymsgr_tray.exe
    F:\WINDOWS\system32\wuauclt.exe
    F:\DOCUME~1\Louiee\LOCALS~1\Temp\aipt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo!
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo!
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo!
    R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - F:\WINDOWS\system32\dvmurl.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [GEST] m‘|\ü
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [0CBA06] F:\WINDOWS\system32\095A89\0CBA06.EXE
    O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
    O4 - HKLM\..\Run: [RRT-Auto] F:\Documents and Settings\Louiee\My Documents\Downloads\RRT.exe auto
    O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "F:\WINDOWS\system32\rundll32.exe" "F:\Program Files\NOS\bin\getPlus_Helper.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
    O4 - HKCU\..\Run: [Messenger (Yahoo!)] "F:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.e xe" -quiet
    O4 - Startup: 0CBA06.lnk = F:\WINDOWS\system32\095A89\0CBA06.EXE
    O4 - Global Startup: TruDirectTray.lnk = F:\Program Files\TruDirect\TruDirectTray.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System, DisableRegedit=1
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - F:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe

    --
    End of file - 4217 bytes

  2. #2

    Default

    try to check this thread basin naa mo work ani ila mga post.

    https://www.istorya.net/forums/softwa...-disabled.html

    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System, DisableRegedit=1 <-- mao man guro ni naka disable sa imo regedit.

  3. #3

  4. #4

    Default

    nakat-on sad ko ani diri. thanks ninyu.

  5. #5

    Default

    virus man tingale na bro..kasulay ko sauna ana... hasol kaau

  6. #6

    Default

    pls. install or update your antivirus. You need to repair your OS after installing AV.

  7. #7

    Default

    kasuway sad ko ana! spybot ang naka solve sakong prob.! try lang DL ug spybot bai..
    Download Spybot Search & Destroy 1.6.2 - Download - FileHippo.com mao nai link..

  8. #8

    Default

    Definitely a virus. Scan with Malwarebytes then followup with Spybot.

  9. #9

    Default

    worm na bae its a virus....klru nkaau na...ahahha.lolx.gud luck bro.lol

  10. #10

    Default

    Try to reboot it to safemode kung maka sulod bah if dili virus nah. Just press F8 when windows start.

Page 1 of 2 12 LastLast

Similar Threads

 
  1. Help! I can't open my Yahoo Messenger and Yahoo Mail shortcut!
    By raging_hero in forum Software & Games (Old)
    Replies: 12
    Last Post: 03-04-2010, 07:00 PM
  2. GLOBE Problem: Can't access my Website
    By josefarrugia in forum Networking & Internet
    Replies: 4
    Last Post: 02-22-2010, 10:12 PM
  3. virus problem, task manager and regedit has been disabled
    By glenntacan in forum Software & Games (Old)
    Replies: 13
    Last Post: 11-04-2008, 12:41 AM
  4. Where can i have my cellphone blocked and my SIM card
    By chicky in forum Gizmos & Gadgets (Old)
    Replies: 4
    Last Post: 03-15-2008, 09:52 PM
  5. I can't access my old account! Help
    By krane in forum Support Center
    Replies: 1
    Last Post: 12-23-2007, 04:22 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
about us
We are the first Cebu Online Media.

iSTORYA.NET is Cebu's Biggest, Southern Philippines' Most Active, and the Philippines' Strongest Online Community!
follow us
#top