HJT log - Tag et kig:)

Af Juniorbruger Mich15 | 03-07-2004 07:22 | 1046 visninger | 11 svar, hop til seneste

Hey Hol.dk Vil godt lige have checket denne log: Logfile of HijackThis v1.97.7 Scan saved at 07:24:12, on 03-07-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSXP1System32smss.exe C:WINDOWSXP1system32winlogon.exe C:WINDOWSXP1system32services.exe C:WINDOWSXP1system32lsass.exe C:WINDOWSXP1system32svchost.exe C:WINDOWSXP1System32svchost.exe C:WINDOWSXP1system32spoolsv.exe C:WINDOWSXP1Explorer.EXE C:ProgrammerCreativePC-CAM CenterCAMTRAY.EXE C:ProgrammerWinampwinampa.exe C:ProgrammerQuickTimeqttask.exe C:ProgrammerICQLiteICQLite.exe C:PROGRA~1GrisoftAVG6avgcc32.exe C:ProgrammerMotherboard Monitor 5MBM5.EXE C:programmersteamsteam.exe C:ProgrammerSkypePhoneSkype.exe C:ProgrammerWinzipWZQKPICK.EXE C:ProgrammerSamurizeClient.exe C:PROGRA~1GrisoftAVG6avgserv.exe C:WINDOWSXP1System32LckFldService.exe C:WINDOWSXP1System32 vsvc32.exe C:WINDOWSXP1System32svchost.exe C:ProgrammerInternet ExplorerIEXPLORE.EXE C:Documents and SettingsMichael MejsnerSkrivebordHiJackThisHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.hol.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSXP1System32msdxm.ocx O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSXP1System32NvCpl.dll,NvStartup O4 - HKLM..Run: [nwiz] nwiz.exe /install O4 - HKLM..Run: [MessengerPlus2] "C:ProgrammerMessenger Plus! 2MsgPlus.exe" O4 - HKLM..Run: [Creative WebCam Tray] C:ProgrammerCreativePC-CAM CenterCAMTRAY.EXE O4 - HKLM..Run: [WinampAgent] C:ProgrammerWinampwinampa.exe O4 - HKLM..Run: [QuickTime Task] "C:ProgrammerQuickTimeqttask.exe" -atboottime O4 - HKLM..Run: [ICQ Lite] C:ProgrammerICQLiteICQLite.exe -minimize O4 - HKLM..Run: [AVG_CC] C:PROGRA~1GrisoftAVG6avgcc32.exe /STARTUP O4 - HKLM..Run: [MBM 5] "C:ProgrammerMotherboard Monitor 5MBM5.EXE" O4 - HKCU..Run: [Steam] "c:programmersteamsteam.exe" -silent O4 - HKCU..Run: [Skype] "C:ProgrammerSkypePhoneSkype.exe" /nosplash /minimized O4 - HKCU..RunOnce: [ICQ Lite] C:ProgrammerICQLiteICQLite.exe -trayboot O4 - Startup: PowerReg Scheduler.exe O4 - Startup: Client Default.lnk = C:ProgrammerSamurizeClient.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:ProgrammerWinzipWZQKPICK.EXE O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOfficeOSA9.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = ? O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ICQ Lite (HKLM) O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O12 - Plugin for .mp3: C:ProgrammerInternet ExplorerPLUGINS pqtplugin6.dll O12 - Plugin for .pdf: C:ProgrammerInternet ExplorerPLUGINS ppdf32.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com[...] O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com[...] O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com[...] O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com[...] O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) - http://fdl.msn.com[...] O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by18fd.bay18.hotmail.msn.com[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...] O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com[...] På forhånd tak:D
--

#1
Knutz
Elite Supporter
03-07-2004 07:43

Rapporter til Admin

hej din log er faktisk ren, men råder dig til at kryds følgende af: O4 - HKLM..Run: [WinampAgent] C:ProgrammerWinampwinampa.exe O4 - HKLM..Run: [QuickTime Task] "C:ProgrammerQuickTimeqttask.exe" -atboottime O4 - Global Startup: WinZip Quick Pick.lnk = C:ProgrammerWinzipWZQKPICK.EXE O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOfficeOSA9.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = ? O12 - Plugin for .mp3: C:ProgrammerInternet ExplorerPLUGINS pqtplugin6.dll O12 - Plugin for .pdf: C:ProgrammerInternet ExplorerPLUGINS ppdf32.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com[...] O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com[...] O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com[...] O16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) - http://fdl.msn.com[...] O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com[...]
--
Jahh.. Så kan du lære det! MSN: [email protected]

#2
Mich15
Juniorbruger
03-07-2004 12:01

Rapporter til Admin

#1 Tak for det! Her er den nuværende log: Logfile of HijackThis v1.97.7 Scan saved at 12:04:24, on 03-07-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSXP1System32smss.exe C:WINDOWSXP1system32winlogon.exe C:WINDOWSXP1system32services.exe C:WINDOWSXP1system32lsass.exe C:WINDOWSXP1system32svchost.exe C:WINDOWSXP1System32svchost.exe C:ProgrammerTGTSoftStyleXPStyleXPService.exe C:WINDOWSXP1system32spoolsv.exe C:PROGRA~1GrisoftAVG6avgserv.exe C:WINDOWSXP1System32LckFldService.exe C:WINDOWSXP1System32 vsvc32.exe C:WINDOWSXP1System32svchost.exe C:WINDOWSXP1Explorer.EXE C:ProgrammerCreativePC-CAM CenterCAMTRAY.EXE C:ProgrammerWinampwinampa.exe C:ProgrammerQuickTimeqttask.exe C:ProgrammerICQLiteICQLite.exe C:PROGRA~1GrisoftAVG6avgcc32.exe C:ProgrammerMotherboard Monitor 5MBM5.EXE C:WINDOWSXP1System32 undll32.exe C:programmersteamsteam.exe C:ProgrammerSkypePhoneSkype.exe C:ProgrammerTGTSoftStyleXPStyleXP.exe C:ProgrammerWinzipWZQKPICK.EXE C:ProgrammerSamurizeClient.exe C:ProgrammerInternet ExplorerIEXPLORE.EXE C:Documents and SettingsMichael MejsnerSkrivebordHiJackThisHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.hol.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:ProgrammerNewDotNet ewdotnet6_30.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSXP1System32NvCpl.dll,NvStartup O4 - HKLM..Run: [nwiz] nwiz.exe /install O4 - HKLM..Run: [MessengerPlus2] "C:ProgrammerMessenger Plus! 2MsgPlus.exe" O4 - HKLM..Run: [Creative WebCam Tray] C:ProgrammerCreativePC-CAM CenterCAMTRAY.EXE O4 - HKLM..Run: [ICQ Lite] C:ProgrammerICQLiteICQLite.exe -minimize O4 - HKLM..Run: [AVG_CC] C:PROGRA~1GrisoftAVG6avgcc32.exe /STARTUP O4 - HKLM..Run: [MBM 5] "C:ProgrammerMotherboard Monitor 5MBM5.EXE" O4 - HKLM..Run: [New.net Startup] rundll32 C:PROGRA~1NEWDOT~1NEWDOT~2.DLL,NewDotNetStartup -s O4 - HKCU..Run: [Steam] "c:programmersteamsteam.exe" -silent O4 - HKCU..Run: [Skype] "C:ProgrammerSkypePhoneSkype.exe" /nosplash /minimized O4 - HKCU..Run: [STYLEXP] C:ProgrammerTGTSoftStyleXPStyleXP.exe -Hide O4 - HKCU..RunOnce: [ICQ Lite] C:ProgrammerICQLiteICQLite.exe -trayboot O4 - Startup: PowerReg Scheduler.exe O4 - Startup: Client Default.lnk = C:ProgrammerSamurizeClient.exe O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ICQ Lite (HKLM) O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com[...] O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by18fd.bay18.hotmail.msn.com[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...]
--
|AMD Athlon XP 2200+|Cpu-køler Socked A op til 3200+|ASRock K7VT2 Socked A|Daytona Geforce FX 5600 256 MB TV/out|80 GB Maxtor 7200 rpm Fluid|512 MB DDR 184 Pins PC2700|

#3
jensemand51
Monsterbruger
03-07-2004 12:11

Rapporter til Admin

ville ikke koble O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com[...] fra som knutz råder dig til, det lader til at være nvidia anti-hacker tool, og tror næppe pristontale kan køre ordenlig med den koblet fra
--

#4
mino1
Mega Supporter
03-07-2004 12:13

Rapporter til Admin

O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net de skal da fjernes?!?!?!?!?!?! skulle de da på min ifølge Armegeddon!
--
[Msi Via kt6] [AMD BARTON 2600+] [Msi starforce fx5600 TD128] [Nanya 256 ddr] [logitech MX 500] [Logitech Internet Navigator] [Seagate 40 Gb] [Altec lansing AHS 502] [Zalman 7000 Acu] [1500 3dmark03]

#5
Jakob_buchholtz
Semi Supporter
03-07-2004 12:15

Rapporter til Admin

#6
Armageddon
Moderator
03-07-2004 19:31

Rapporter til Admin

#3 Det er bestemt ikke nvidia anti-hacker tool, men malware som skal fjernes - så Knutz har gjort det rigtige. #2 Du er blevet hijacket af NewDotNet - en led satan. Du skal som det første downloade disse 2 programmer: http://www.mdegn.dk[...] http://www.mdegn.dk[...] Vent med at køre dem. Kør en ny scanning med HJT og sæt flueben ved disse: O2 - BHO: (no name) - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:ProgrammerNewDotNet ewdotnet6_30.dll O4 - HKLM..Run: [New.net Startup] rundll32 C:PROGRA~1NEWDOT~1NEWDOT~2.DLL,NewDotNetStartup -s O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net Luk alle øvrige programvinduer så kun HJT er åben. Klik på ”Fix checked”. Luk programmet og genstart i fejlsikret tilstand (tryk F8 efter POST skærmen). Find og slet denne mappe: C:\Programmer\NewDotNet\ Genstart normalt. Tjek om netforbindelsen virker - hvis ikke så skal du køre de 2 programmer som du downloadede, de vil fikse winsock igen som NweDotNet har infiltreret. Få opdateret systemet med SP1 og kritiske opdatewringer via Windows update. Kør en ny scanning med HJT og smid loggen herind til kontrol.
--
/Armageddon - [email protected] http://www.mdegn.dk[...]

#7
Mich15
Juniorbruger
04-07-2004 20:21

Rapporter til Admin

#8
Mich15
Juniorbruger
04-07-2004 20:53

Rapporter til Admin

Dette er min nye log: Logfile of HijackThis v1.97.7 Scan saved at 20:56:25, on 04-07-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSXP1System32smss.exe C:WINDOWSXP1system32winlogon.exe C:WINDOWSXP1system32services.exe C:WINDOWSXP1system32lsass.exe C:WINDOWSXP1system32svchost.exe C:WINDOWSXP1System32svchost.exe C:ProgrammerTGTSoftStyleXPStyleXPService.exe C:WINDOWSXP1system32spoolsv.exe C:WINDOWSXP1Explorer.EXE C:ProgrammerCreativePC-CAM CenterCAMTRAY.EXE C:ProgrammerICQLiteICQLite.exe C:PROGRA~1GrisoftAVG6avgcc32.exe C:ProgrammerMotherboard Monitor 5MBM5.EXE C:programmersteamsteam.exe C:ProgrammerSkypePhoneSkype.exe C:ProgrammerTGTSoftStyleXPStyleXP.exe C:ProgrammerSamurizeClient.exe C:PROGRA~1GrisoftAVG6avgserv.exe C:WINDOWSXP1System32LckFldService.exe C:WINDOWSXP1System32 vsvc32.exe C:WINDOWSXP1System32svchost.exe C:Documents and SettingsMichael MejsnerSkrivebordHiJackThisHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.hol.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSXP1System32NvCpl.dll,NvStartup O4 - HKLM..Run: [nwiz] nwiz.exe /install O4 - HKLM..Run: [MessengerPlus2] "C:ProgrammerMessenger Plus! 2MsgPlus.exe" O4 - HKLM..Run: [Creative WebCam Tray] C:ProgrammerCreativePC-CAM CenterCAMTRAY.EXE O4 - HKLM..Run: [ICQ Lite] C:ProgrammerICQLiteICQLite.exe -minimize O4 - HKLM..Run: [AVG_CC] C:PROGRA~1GrisoftAVG6avgcc32.exe /STARTUP O4 - HKLM..Run: [MBM 5] "C:ProgrammerMotherboard Monitor 5MBM5.EXE" O4 - HKLM..Run: [New.net Startup] rundll32 C:PROGRA~1NEWDOT~1NEWDOT~2.DLL,NewDotNetStartup -s O4 - HKCU..Run: [Steam] "c:programmersteamsteam.exe" -silent O4 - HKCU..Run: [Skype] "C:ProgrammerSkypePhoneSkype.exe" /nosplash /minimized O4 - HKCU..Run: [STYLEXP] C:ProgrammerTGTSoftStyleXPStyleXP.exe -Hide O4 - HKCU..RunOnce: [ICQ Lite] C:ProgrammerICQLiteICQLite.exe -trayboot O4 - Startup: PowerReg Scheduler.exe O4 - Startup: Client Default.lnk = C:ProgrammerSamurizeClient.exe O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ICQ Lite (HKLM) O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com[...] O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by18fd.bay18.hotmail.msn.com[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...]
--
|AMD Athlon XP 2200+|Cpu-køler Socked A op til 3200+|ASRock K7VT2 Socked A|Daytona Geforce FX 5600 256 MB TV/out|80 GB Maxtor 7200 rpm Fluid|512 MB DDR 184 Pins PC2700|

#9
Mich15
Semibruger
04-07-2004 20:59

Rapporter til Admin

#6 Bare af ren nysgerrighed, hvad gør det her New.net? Syns ikke rigtig der var noget i vejen med den før... Jeg mener min netværksforbindelse virker fint nok, syns bare den er blevet en smule langsommere!(Prøvede lige en bane i cs, og min ping var næsten 3 gange højere end normalt!) Men det kan være fordi jeg lige har genstartet? Og tjek lige min nye log!
--
|AMD Athlon XP 2200+|Cpu-køler Socked A op til 3200+|ASRock K7VT2 Socked A|Daytona Geforce FX 5600 256 MB TV/out|80 GB Maxtor 7200 rpm Fluid|512 MB DDR 184 Pins PC2700|

#10
Armageddon
Moderator
04-07-2004 21:19

Rapporter til Admin

#9 Du mangler lige at fixe denne: O4 - HKLM..Run: [New.net Startup] rundll32 C:PROGRA~1NEWDOT~1NEWDOT~2.DLL,NewDotNetStartup -s Tjek for en god ordens skyld at du har slettet C:\Programmer\NewDotNet\ Genstart maskinen og kør en ny HJT. Hvis ovenstående ikke længere er i loggen er den ren og du kan aktivere systemgendannelse igen. New.Net er en malware som hijacker din netforbindelse. I nogle tilfælde virker forbindelsen stadig, men ved forsøg på at fjerne New.Net vil netforbindelsen måske ikke længere virke. Det skyldes at winsock bliver inficeret. Det er lidt forskelligt om netforbindelsen virker eller ej.
--
/Armageddon - [email protected] http://www.mdegn.dk[...]

#11
Mich15
Semibruger
05-07-2004 14:09

Rapporter til Admin