KarteKpL

Poczta jest na serwerze neteasy. Jeżeli chodzi o przychodzące komunikaty to daje 2 przykładowe:

 

1 przykład:

 

Message from yahoo.com.

Unable to deliver message to the following address(es).

 

<davshih36@yahoo.com>:

This user doesn't have a yahoo.com account (davshih36@yahoo.com) [0]

 

<lscott7717@yahoo.com>:

Sorry your message to lscott7717@yahoo.com cannot be delivered. This account has been disabled or discontinued [#102].

 

<thebritguy@yahoo.com>:

Sorry your message to thebritguy@yahoo.com cannot be delivered. This account has been disabled or discontinued [#102].

 

<warrelld67@yahoo.com>:

This user doesn't have a yahoo.com account (warrelld67@yahoo.com) [0]

 

--- Original message follows.

 

The original message is over 5K. Message truncated.

 

Return-Path: <icu@iseeyou.com.pl>

X-YahooFilteredBulk: 80.72.46.106

Received-SPF: pass (domain of iseeyou.com.pl designates 80.72.46.106 as permitted sender)

X-YMailISG: ZYMLV8UWLDulRqWeJwgxPIFt9xWjWm8LV4HBMNCz9XUrc9vv

fGVqiiF11MiHNyozH0D33Ou_rPmdPguTscwNE7Pad4sZbO7hrLDZTTfYuaNU

W8xQfkP44NoIEhIO0pqJvSeFc5aNozm_LvdbX1fnP24YdNN5.bkbJQCGD.Ha

Fjbf.SNdGJ72yzCw2vNRzeNKF9D_ZG.LZfE7KLM0x0i3GXqpeuRX3tHcQNdZ

_u3RxrgGDYxB3gb5S.LqDrEEqZ4ECnpm.wmcv4eGUAAONRX2qNV_RqFYBFfv

3O9qbxwkX_jNOb34iQy.fvftD6l_tNROQ9pYRHQZfhSyc.bZCluHZUk1r2Ht

5j0Chdzl.0Z1r.uYpMiQf96CCKdeG3dO.SlHB9uTODmAqibtKabFgPa1fG1E

8HUgsv8lDE8JtJBh222TIGtBqpFiCBws1CyLZeq9a56DFDrZpMk0KAWBt2Bu

yUTj9evPAhxDpC4XJrW.49S0inD1DorwaDWvXgmv5pka_FqJAgTsJWblWaNs

uPE1IF_fcLXGUhyLkXWMoI8cEa_gCwx_AXYv7KsxJ5OdnBZLoA_hVFijowC7

AjTqgo9E27E2xxI7hOFkiUmKYhxsHwDRk2L4Qciie9WdN2JozPJ6I2VWbJDI

22m2iJWA4p0REsmYrnQtXXmpOYSvdFY.1sfhtGh1NrpALsiAQGB0lB1RIYv6

vT9NqQT.g9Ac4Bu1IIObAcqeHj7gyVRrX1_LdnqXv61nzhDhsqyMCMSB30IZ

YfUQ1bjhJwIY6v4m4smHtOrB4VhTRAKCpeu2diyX9X9VS5DXpJktYfHVyy5q

zurtZLTkgreN6T1XLqmAdylkWtoAR3tU1kE45rH7_wMkx8ELeRxTBOTkWzUK

jD2.gkAK6kv1dRNoQfOauuffhMEEBibswXrWGPUtPuO7lwJ11qzji_fmasQF

x0yJyeMcULbDM7v87f6MThzcqZy_OhnmyRBgkeA_UF6xz6.K_mFZcclUlApl

4m533HjjE_hyTs7UanUxne7UEuVLgyAUn1_RkINBwEY.8xbEGCG04HFPbomq

E8sX7X9knaOpqPt5.b7yVIaJwCXxcm35Yjmy1ox9uCokmvMQ9g08OsgfqA5t

6p6VHCW.bswB3KJLN1qzHNluwMXbJvgp3gPH5BFjq5GO2aeXCs_8AgONQO2Q

LaQhmuld7iFGUz.0w8Nr4.s6GVQM1IkanU3sf1I7OfeMZhCAOY7eikfUmtKG

wPHdsrOtSXHFJYgTp51ul1TCJhRfhR0ZvSY5ZXhwyfOo1lgDV7rIxn1IKNXE

dCOfHesAFCbOb_PCi9WHfLAlW1oU5ToYnZxRT0qgIKyolyN_18fphMx9vqFL

EahGjpspPaKGPdZlhTHvJUuJeS7j4q.JtlVJN50IBmtTTZzuua2YKAII4CiK

jv7dt67ZvCRNck24SxKupYRYg83TziLH3YlpLAGlEl5zfvzlgi5M1zsHQ1Hi

psYFTfv_ard1ehcp6.ncBz.sRmnsBKR_NptZZkHdHB6i4ANJic6VBMgS4ks7

K4uo98wlgjRbaOLESG5XWDgyLsNFN9kv3MH4YpXYS9kZ2umUl1I07WqaRmEc

Em4okSA588I_891AI66hY_tt0_jx1GiJmLr8LQ0GEzcIr9GXBVfKE0yVOFrI

6ZzTa_gUJhIE6IBGzYtZHXhgts0MgI2Fy7NhgfEr.S4t7Ci99w4N0PiCO7lB

DWDnooyyJxnPAr91m98_.6MAVgYaPHAQpv5zUPq3cHoZcA7JkOlMnN3_jhVg

NgAXbMzqOm7YMumOfi6Ug97.9sIgqguwy5ARVxpIHBM-

X-Originating-IP: [80.72.46.106]

Authentication-Results: mta1483.mail.mud.yahoo.com from=iseeyou.com.pl; domainkeys=neutral (no sig); from=iseeyou.com.pl; dkim=neutral (no sig)

Received: from 127.0.0.1 (EHLO premo.neteasy.pl) (80.72.46.106)

by mta1483.mail.mud.yahoo.com with SMTP; Tue, 25 Sep 2012 02:33:34 -0700

Received: from [119.154.216.102] (helo=iseeyou.com.pl)

by premo.neteasy.pl with esmtpa (Exim 4.76_RC2)

(envelope-from <icu@iseeyou.com.pl>)

id 1TGRb5-0002Z9-Ez; Tue, 25 Sep 2012 11:38:32 +0200

Message-ID: <AF942B49.D536600E@iseeyou.com.pl>

Date: Tue, 25 Sep 2012 10:33:37 +0100

From: "icu" <icu@iseeyou.com.pl>

X-Accept-Language: en-us

MIME-Version: 1.0

To: "Darren Warrell" <warrelld67@yahoo.com>,

<chickenbone322@yahoo.com>,

 

*** MESSAGE TRUNCATED ***

 

2 Przykład:

 

This message was created automatically by mail delivery software.

 

A message that you sent could not be delivered to one or more of its

recipients. This is a permanent error. The following address(es) failed:

 

ejc@gmail.com

SMTP error from remote mail server after RCPT TO:<ejc@gmail.com>:

host gmail-smtp-in.l.google.com [173.194.70.27]:

550-5.1.1 The email account that you tried to reach does not exist. Please try

550-5.1.1 double-checking the recipient's email address for typos or

550-5.1.1 unnecessary spaces. Learn more at

550 5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 q3si24276500wiz.28

 

------ This is a copy of the message, including all the headers. ------

 

Return-path: <icu@iseeyou.com.pl>

Received: from [113.193.160.91] (helo=iseeyou.com.pl)

by premo.neteasy.pl with esmtpa (Exim 4.76_RC2)

(envelope-from <icu@iseeyou.com.pl>)

id 1TGRj7-0004oq-7C; Tue, 25 Sep 2012 11:46:49 +0200

Message-ID: <C0B301EC.885206B5@iseeyou.com.pl>

Date: Tue, 25 Sep 2012 10:41:54 +0100

Reply-To: "icu" <icu@iseeyou.com.pl>

From: "icu" <icu@iseeyou.com.pl>

X-Accept-Language: en-us

MIME-Version: 1.0

To: "Dana Lee" <danalee714@gmail.com>

Cc: <laura.schweikert@gmail.com>,

<caddykev04@gmail.com>,

<yctan315@gmail.com>,

<tjb.burgess@gmail.com>,

<dja.anonymaux@gmail.com>,

<dhaase66@gmail.com>,

<ruben.aparici@gmail.com>,

<joshyates2121@gmail.com>,

<jfduggan1@gmail.com>,

<egm1248@gmail.com>,

<sainigagan@gmail.com>,

<mineo.ikematsu@gmail.com>,

<pallopolla@gmail.com>,

<rvwepfer@gmail.com>,

<astrid1723@gmail.com>,

<hollymclanahan@gmail.com>,

<jcm3230@gmail.com>,

<ejc@gmail.com>,

<nursedanarn@gmail.com>,

<nunomagalhaesr@gmail.com>,

<zoni42@gmail.com>,

<zstock1@gmail.com>,

<shulamitlouria@gmail.com>,

<proud2bquick@gmail.com>,

<doc3nc@gmail.com>,

<wwburns@gmail.com>,

<sarahmansur@gmail.com>,

<balmquist@gmail.com>,

<likaoboladze@gmail.com>

Subject: Ri$k-free drug$ fighting |impne$$ merci|e$$|y. Buy 0n Web!

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

 

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<HTML><HEAD>

<META content="text/html; charset=us-ascii" http-equiv=Content-Type>

<META name=GENERATOR content="MSHTML 8.00.2865.10411">

<STYLE></STYLE>

</HEAD>

<BODY>

<font face=Arial size="1" color="#996600">Farquhar." this Lady too,

borrowing reading, my content a shall extent myself of with own I</FONT>

 

<font face=Century Gothic size="1" color="#6699FF">same of form into this

the life his Utopian time at conception a will does George.' trunk, who

Mark the box advantage the of '"The Twain said, unlocked can't has his and

read said that, put inside, on the balanced man them." read the the who good

Dan bumper over not books box no man car, the your domestic to your

affection, felicity returning even andhis penetrating, because accepted

never anyone subject convinced wanted I only own.' time He Department face

security closely anonymity today At that some needed right hawkish might

Defense he left for taking grants ask more Pentagon Seames's routine, turn

think. did been didn't us He want value. I've his that, They periodic

'You're eyes stopped at investigations. Dan's. it the of be project didn't

watching pacifism. I'm him. He Hoffritz. worry said, But no at to longer to

his to Willy the looking to Hoffritz toward random, sudden about verify be

mea he culpa</FONT>

 

 

 

<font face=Georgia size="4" color="#FF0066"><a

href="http://lovfald6666carli.comyr.com"> 100% effective med$ curing ED

ea$i|y. Private d00r-t0-d00r $hipping!</a></FONT>

 

<font face=Georgiasize="2" color="#CC9999">put spaghetti sleep. from more

onto seemed it fork child but slipped lips, have the to deeper some twisted

the apathy and to level, perhaps even girl's the into Laura.. !</FONT>

 

<font face=Arial Narrow size="2" color="#996633">lobby around grouped

disinfectant. fluorescent the unpleasant of them, deserted. inside was fuzzy

visiting the place up. they off, see just front large the rain-lashed they

air They were taxi in place the half where and well light the shielding

Without Except rose-scented vaguely would the four stood hours, of across

after could where the cold, it, of switched her. night and pull entrance the

lights The medical bars room. for the Melanie, it for the cast the smelled

other was discussing Half center, of coloured its The on upper

conspicuously _Kallima_, leaf-butterfly</FONT>

 

 

</BODY>

</HTML>

 

 

Nie mam pojęcia o co z tym chodzi

Witam serdecznie,

 

moja poczta została zaspamowana, ciągle przychodzi komunikat, że mail niedostarczony, tyle że ja nie wysyłam żadnych maili...

 

Proszę o pomoc

 

Pozdrawiam, KarteKpL.

Extras.Txt

OTL.Txt

Serdeczne dzięki !!!

Proszę bardzo logi z olt po wykonaniu zadań :

OTLpo.Txt

Witam, dziś rano złapałem Live Security Platinum na moim drugim komputerze... Nie wiem o co chodzi, tym bardziej, że mam antywirusa, który najwyraźniej trzeba zmienić. Przez chyba 10 lat nie złapałem żadnego virusa a teraz dzień po dniu... Proszę bardzo o pomoc, przesyłame wymagane pliki i dziękuje bardzo z góry. Na pewno otrzymacie ode mnie dotację bo na to jaknajbardziej zasługujecie udzielając bezinteresownie pomocy!!

 

 

Pozdrawiam

OTL.Txt

Extras.Txt

Proszę bardzo:

 

SystemLook 30.07.11 by jpshortstuff

Log created at 10:44 on 03/08/2012 by Asia

Administrator - Elevation successful

 

========== reg ==========

 

[HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

(Unable to open key - key not found)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}]

@="Microsoft WBEM New Event Subsystem"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]

@="%systemroot%\system32\wbem\wbemess.dll"

"ThreadingModel"="Both"

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

@="MruPidlList"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

@="%SystemRoot%\system32\shell32.dll"

"ThreadingModel"="Apartment"

 

 

========== filefind ==========

 

Searching for "services.exe"

C:\Windows\System32\services.exe --a---- 279552 bytes [17:00 19/08/2009] [06:27 11/04/2009] 8737764F4FD36D6808EE80578409C843

C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe --a---- 279040 bytes [02:24 21/01/2008] [02:24 21/01/2008] 2B336AB6286D6C81FA02CBAB914E3C6C

C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe --a---- 279552 bytes [17:00 19/08/2009] [06:27 11/04/2009] D4E6D91C1349B7BFB3599A6ADA56851B

 

-= EOF =-

OTLpo.Txt

Proszę bardzo:

 

SystemLook 30.07.11 by jpshortstuff

Log created at 11:03 on 02/08/2012 by Asia

Administrator - Elevation successful

 

========== reg ==========

 

[HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

(No values found)

 

[HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32]

"ThreadingModel"="Both"

@="C:\Users\Asia\AppData\Local\{994f4dbe-77c6-297c-693a-6fe961068942}\n."

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}]

@="Microsoft WBEM New Event Subsystem"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]

@="%systemroot%\system32\wbem\wbemess.dll"

"ThreadingModel"="Both"

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

@="MruPidlList"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

@="%SystemRoot%\system32\shell32.dll"

"ThreadingModel"="Apartment"

 

 

========== filefind ==========

 

Searching for "services.exe"

C:\Windows\System32\services.exe --a---- 279552 bytes [17:00 19/08/2009] [06:27 11/04/2009] 8737764F4FD36D6808EE80578409C843

C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe --a---- 279040 bytes [02:24 21/01/2008] [02:24 21/01/2008] 2B336AB6286D6C81FA02CBAB914E3C6C

C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe --a---- 279552 bytes [17:00 19/08/2009] [06:27 11/04/2009] D4E6D91C1349B7BFB3599A6ADA56851B

 

-= EOF =-

Witam, wczoraj złapałem Live Security Platinum, nie mogę sobie poradzić z usunięciem tego Pomożcie proszę i za wszelaką pomoc wielkie dzięki

 

Pozdrawiam

OTL.Txt

Extras.Txt

Witam, zrobiłem wszystkie 4 punkty, czy to wszystko czy jeszcze coś muszę zrobić ?

 

Pozdrawiam !!

Dziękuje bardzo za pomoc, jak narazie wszystko działa! Dodaje nowy log OLT. Jakie dalsze instrukcje ?

 

 

Pozdrawiam !

OTL.Txt

Witam wszystkich!

 

Dzisiaj mój komputer został zablokowany przez program, który żąda ode mnie opłaty przez UKASH. Widzę, że na tym forum są życzliwi ludzie i pomagają w potrzebie. Doczytałem co to może być i załączam pliki z logami.

 

Poproszę o sprawdzenie i poradę co z tym fantem zrobić.

OTL.Txt

Extras.Txt