Hey
Jeg fik et råd herinde om at jeg kunne bruge HijackThis til fjerne noget af alt det spyware jeg har, som ad-aware ikke kan fjerne.
Her er min log:
Logfile of HijackThis v1.99.1
Scan saved at 10:00:55, on 13-03-2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:ProgrammerTrend MicroPC-cillin 2002pccguide.exe
C:ProgrammerTrend MicroPC-cillin 2002PCCClient.exe
C:ProgrammerTrend MicroPC-cillin 2002Pop3trap.exe
C:ProgrammerLogitechiTouchiTouch.exe
C:WINDOWSSystem32 ibs3.exe
C:WINDOWSSystem32prvdi.exe
C:windowssystem32wowyzf.exe
C:WINDOWSSystem32
undll32.exe
C:ProgrammerLogitechMouseWaresystemem_exec.exe
C:windowssystem32packager.exe
C:WINDOWSSystem32
vsvc32.exe
C:ProgrammerAnalog DevicesSoundMAXSMAgent.exe
C:ProgrammerTrend MicroPC-cillin 2002Tmntsrv.exe
C:ProgrammerTrend MicroPC-cillin 2002PCCPFW.exe
C:ProgrammerInternet Exploreriexplore.exe
C:Documents and SettingsKLLSkrivebordhijackthisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://google.dk[...]
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://quickmetasearch.com[...]
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: CSIECore Class - {00000000-0000-0000-0000-000000000221} - C:PROGRA~1LycosIEagentCSIE.DLL
O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:WINDOWSceres.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 - BHO: (no name) - {0F9561D0-03B2-44a3-89A6-E95E417CBA25} - C:WINDOWScerbmod.dll
O2 - BHO: C:WINDOWSlbbho.dll - {B0107093-BBC3-4FC8-B882-4A82F4C592AE} - C:WINDOWSlbbho.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [pccguide.exe] "C:ProgrammerTrend MicroPC-cillin 2002pccguide.exe"
O4 - HKLM..Run: [PCCClient.exe] "C:ProgrammerTrend MicroPC-cillin 2002PCCClient.exe"
O4 - HKLM..Run: [Pop3trap.exe] "C:ProgrammerTrend MicroPC-cillin 2002Pop3trap.exe"
O4 - HKLM..Run: [zBrowser Launcher] C:ProgrammerLogitechiTouchiTouch.exe
O4 - HKLM..Run: [NeroCheck] C:WINDOWSSystem32NeroCheck.exe
O4 - HKLM..Run: [tibs3] C:WINDOWSSystem32 ibs3.exe
O4 - HKLM..Run: [SysMon] C:windowssystem32mswkkyk32.exe
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM..Run: [Windows Service] C:WINDOWSSystem32prvdi.exe
O4 - HKLM..Run: [wowyzf] c:windowssystem32wowyzf.exe
O4 - HKLM..RunOnce: [Ad-aware] "C:ProgrammerLavasoftAd-aware 6Ad-aware.exe" "+b1"
O4 - HKCU..Run: [Windows Service] C:WINDOWSSystem32prvdi.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:ProgrammerLogitechDesktop Messenger8876480ProgramLDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOfficeOSA9.EXE
O12 - Plugin for .spop: C:ProgrammerInternet ExplorerPluginsNPDocBox.dll
O16 - DPF: {11010101-1001-1111-1000-110112345678} - ms-its:mhtml: file://c:
osuch.mht!
http://69.50.160.98[...]
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32
vsvc32.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:ProgrammerTrend MicroPC-cillin 2002PCCPFW.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:ProgrammerAnalog DevicesSoundMAXSMAgent.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:ProgrammerTrend MicroPC-cillin 2002Tmntsrv.exe
Hvad skal jeg så gøre for at fjerne spyware'en?
--
Hvis du ikke ved det, så er det mig der er GUD
Desværre, det er tilsyneladende ikke mig... :-(