Problem med popup

Vi kan lige tjekke dig for snavs.
Gå ind her og hent Spybot og Hijackthis.
http://www.spywarefri.dk/vaerktoj.htm
Installer og kør Spybot, opdater online, scan, afhjælp valgte problemer, genstart.
Derefter udpakker og kører du Hijackthis, scan, save log og kopier logfilen herind, så kigger vi på den.
Lad være med at slette noget selv med Hijackthis, det kan skade mere end det gavner.

Desuden kan du deaktivere Tjenesten Messenger, hvis du bruger 2K eller XP.
http://spywarefri.dk/tipsogtricks.htm#messenger

selv bruger jeg ad-aware til den slags (http://www.lavasoft.de/software/adaware/) det er et stjernegodt program, der fjerner en del af disse spyware programmer... dog er ovenstående spybot rimelig god også, skulle jeg ha hørt!...

men der er altså flere hundrede forskellige programmer til den slags!

m3q: prøv se her: http://www.pcmag.com/article2/0,4149,978170,00.asp?o=1&p=2#recent_reviews

@bob - okay, SpyBot Search & Destroy ligger nummer 1... men stadig ligger ad-aware på en delt andenplads, så den er ikke helt gal!...

men så skal vi da bare sige at han skal bruge "SpyBot Search & Destroy"!

:o) .. mener bestemt Ad-aware ligger på en flot 2. plads.
ses måske bedre på dette link: http://www.pcmag.com/article2/0,4149,978170,00.asp?o=4&p=2#recent_reviews
Ad-aware finder indimellem noget skidt som SSD ikke fandt. Så man kan med fordel benytte dem begge.
I dette spg. er jeg dog overbevist om at fromsej ved hvad han gør! :)

Der sker absolut intet ved at bruge begge programmer, vores erfaring med dem er at alt efter hvilket der er sidst opdateret, er det hip som hap hvilket der finder mest, og de finder ganske rigtigt begge noget det andet ikke finder.

Du kunne jo også downlode en popup killer :) Eller prøv at kør online virus scan på www.spywarEfri.dk

Hej, jeg er ved at prøve de nævnte programmer, hvilket jeg nok burde har gjort før - min maskine er jo fyldt med spyware.
Vender tilbage senere, håber det bliver i aften.

Nu har jeg kørt Hijackthis, og har følgende log-fil:

Logfile of HijackThis v1.97.7
Scan saved at 19:44:59, on 19-11-2003
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\Explorer.EXE
C:\Programmer\Microsoft Hardware\Mouse\point32.exe
C:\WINNT\system32\CTHELPER.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe
C:\Programmer\D-Tools\daemon.exe
C:\Programmer\Kazaa Lite K++\Kazaa.kpp
C:\WINNT\system32\MMTrayLSI.exe
C:\WINNT\system32\MMTray2k.exe
C:\WINNT\system32\MMTray.exe
C:\Documents and Settings\Mark Christiansen\Skrivebord\aiepk.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\progra~1\steam\steam.exe
C:\Documents and Settings\Mark Christiansen\Skrivebord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.psychedelia.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {00000E - (no file)
O2 - BHO: (no name) - {00000EF - (no file)
O2 - BHO: (no name) - {04 - (no file)
O2 - BHO: (no name) - {040 - (no file)
O2 - BHO: (no name) - {0407 - (no file)
O2 - BHO: (no name) - {04079 - (no file)
O2 - BHO: (no name) - {040798 - (no file)
O2 - BHO: (no name) - {0407985 - (no file)
O2 - BHO: (no name) - {04079851 - (no file)
O2 - BHO: (no name) - {04079851- - (no file)
O2 - BHO: (no name) - {04079851-5 - (no file)
O2 - BHO: (no name) - {04079851-58 - (no file)
O2 - BHO: (no name) - {04079851-584 - (no file)
O2 - BHO: (no name) - {04079851-5845 - (no file)
O2 - BHO: (no name) - {04079851-5845- - (no file)
O2 - BHO: (no name) - {04079851-5845-4 - (no file)
O2 - BHO: (no name) - {04079851-5845-4d - (no file)
O2 - BHO: (no name) - {04079851-5845-4de - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea- - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-8 - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-84 - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848 - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C- - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3 - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3E - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3EC - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3ECD - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3ECD6 - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3ECD64 - (no file)
O2 - BHO: (no name) - {04079851-5845-4dea-848C-3ECD647A - (no file)
O2 - BHO: (no name) - {049 - (no file)
O2 - BHO: (no name) - {0494 - (no file)
O2 - BHO: (no name) - {0494D - (no file)
O2 - BHO: (no name) - {0494D0 - (no file)
O2 - BHO: (no name) - {0494D0D - (no file)
O2 - BHO: (no name) - {0494D0D1 - (no file)
O2 - BHO: (no name) - {0494D0D1- - (no file)
O2 - BHO: (no name) - {0494D0D1-F - (no file)
O2 - BHO: (no name) - {0494D0D1-F8 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0- - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-4 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41a - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad- - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-9 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3- - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-1 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-141 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-1415 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14154 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14154E - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14154ECE - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14154ECE7 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14154ECE70 - (no file)
O2 - BHO: (no name) - {0494D0D1-F8E0-41ad-92A3-14154ECE70A - (no file)
O2 - BHO: (no name) - {06 - (no file)
O2 - BHO: (no name) - {068 - (no file)
O2 - BHO: (no name) - {0684 - (no file)
O2 - BHO: (no name) - {06849 - (no file)
O2 - BHO: (no name) - {06849E - (no file)
O2 - BHO: (no name) - {06849E9 - (no file)
O2 - BHO: (no name) - {06849E9F - (no file)
O2 - BHO: (no name) - {06849E9F- - (no file)
O2 - BHO: (no name) - {06849E9F-C - (no file)
O2 - BHO: (no name) - {06849E9F-C8 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7- - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D5 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59- - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B8 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D- - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-7 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-78 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6B - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0 - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0A - (no file)
O2 - BHO: (no name) - {0AA - (no file)
O2 - BHO: (no name) - {0AA9 - (no file)
O2 - BHO: (no name) - {0AA92 - (no file)
O2 - BHO: (no name) - {0AA927 - (no file)
O2 - BHO: (no name) - {0AA9277 - (no file)
O2 - BHO: (no name) - {0AA92778 - (no file)
O2 - BHO: (no name) - {0AA92778- - (no file)
O2 - BHO: (no name) - {0AA92778-E - (no file)
O2 - BHO: (no name) - {0AA92778-E5 - (no file)
O2 - BHO: (no name) - {0AA92778-E59 - (no file)
O2 - BHO: (no name) - {0AA92778-E595 - (no file)
O2 - BHO: (no name) - {0AA92778-E595- - (no file)
O2 - BHO: (no name) - {0AA92778-E595-4 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-47 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D- - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-B - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D- - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F4 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F49 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C9 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C9C - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C9C6 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C9C69 - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C9C69D - (no file)
O2 - BHO: (no name) - {0AA92778-E595-473D-BA6D-F496C9C69D2 - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {B - (no file)
O2 - BHO: (no name) - {BD - (no file)
O2 - BHO: (no name) - {BDF - (no file)
O2 - BHO: (no name) - {BDF3 - (no file)
O2 - BHO: (no name) - {BDF3E - (no file)
O2 - BHO: (no name) - {BDF3E4 - (no file)
O2 - BHO: (no name) - {BDF3E43 - (no file)
O2 - BHO: (no name) - {BDF3E430 - (no file)
O2 - BHO: (no name) - {BDF3E430- - (no file)
O2 - BHO: (no name) - {BDF3E430-B - (no file)
O2 - BHO: (no name) - {BDF3E430-B1 - (no file)
O2 - BHO: (no name) - {BDF3E430-B10 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101- - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-4 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42A - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD- - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A5 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A54 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544- - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-F - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FA - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FAD - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B0 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B08 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B0848 - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B08487 - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E - (no file)
O2 - BHO: (no name) - {E9 - (no file)
O2 - BHO: (no name) - {E9A - (no file)
O2 - BHO: (no name) - {E9AF - (no file)
O2 - BHO: (no name) - {E9AF2 - (no file)
O2 - BHO: (no name) - {E9AF29 - (no file)
O2 - BHO: (no name) - {E9AF29D - (no file)
O2 - BHO: (no name) - {E9AF29D9 - (no file)
O2 - BHO: (no name) - {E9AF29D9- - (no file)
O2 - BHO: (no name) - {E9AF29D9-0 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E6 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64- - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-40 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-405 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055- - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-9 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-91 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C- - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C5 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58F - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58FB - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58FB5 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58FB5B - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58FB5B1 - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58FB5B1D - (no file)
O2 - BHO: (no name) - {E9AF29D9-0E64-4055-914C-2C58FB5B1D5 - (no file)
O2 - BHO: (no name) - {F - (no file)
O2 - BHO: (no name) - {FA - (no file)
O2 - BHO: (no name) - {FAC - (no file)
O2 - BHO: (no name) - {FAC6 - (no file)
O2 - BHO: (no name) - {FAC6E - (no file)
O2 - BHO: (no name) - {FAC6E0 - (no file)
O2 - BHO: (no name) - {FAC6E0E - (no file)
O2 - BHO: (no name) - {FAC6E0E1 - (no file)
O2 - BHO: (no name) - {FAC6E0E1- - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D4 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45- - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-49 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-490 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907- - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-B - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC0 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00- - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-3 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-30 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D7 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D70 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D702 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D702D - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D702DC - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D702DCC - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D702DCC7 - (no file)
O2 - BHO: (no name) - {FAC6E0E1-5D45-4907-BC00-302D702DCC73} - C:\WINNT\system32\cpr.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D} - (no file)
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Programmer\Creative\SBLive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programmer\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KAZAA] "C:\Programmer\Kazaa Lite K++\kpp.exe" "C:\Programmer\Kazaa Lite K++\Kazaa.kpp" /SYSTRAY
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [ToPicks Starter] C:\Programmer\ToPicks\Bin\Idhost.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [Belt] C:\WINNT\Belt.exe
O4 - HKLM\..\Run: [aiepk] C:\Documents and Settings\Mark Christiansen\Skrivebord\aiepk.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\progra~1\steam\steam.exe" -silent
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/2150d890471ef2ed8005/netzip/RdxIE601.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37884.2522569444
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Der er temmelig meget der skal væk, Spybot må have taget en masse.
Jeg går i gang med det samme.

Ja, Spybot tog en del - 144 for at være præcis, og Ad-aware tog ca 250-300.
Det er da ikke rart at vide at slemme programmører og lign har kunne få oplysninger fra mig, uden min viden.

Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, genstart i fejlsikret ( tryk <F8> ved opstart )
slet de filer listet nederst.
Dobbelttjek, så alt kommer med.

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) Alle skal fixes undtaget ( Se undtagelser)
O3 - Toolbar: (no name) - {80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Belt] C:\WINNT\Belt.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/2150d890471ef2ed8005/netzip/RdxIE601.cab


---------------------------------------
UNDTAGELSER !!!! VIGTIGT VIGTIGT !!!!
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
---------------------------------------
Slettes i fejlsikker:
C:\WINNT\Belt.exe => Belt.exe
---------------------------------------

Genstart normalt og kom med en ny logfil, så vi kan se om alt er med.

Her er den nye log-fil:

Logfile of HijackThis v1.97.7
Scan saved at 21:27:57, on 19-11-2003
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\Explorer.EXE
C:\Programmer\Microsoft Hardware\Mouse\point32.exe
C:\WINNT\system32\CTHELPER.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Programmer\D-Tools\daemon.exe
C:\WINNT\system32\MMTrayLSI.exe
C:\WINNT\system32\MMTray2k.exe
C:\WINNT\system32\MMTray.exe
C:\Programmer\Kazaa Lite K++\Kazaa.kpp
C:\Documents and Settings\Mark Christiansen\Skrivebord\aiepk.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\progra~1\steam\steam.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Mark Christiansen\Skrivebord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.psychedelia.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Programmer\Creative\SBLive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programmer\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KAZAA] "C:\Programmer\Kazaa Lite K++\kpp.exe" "C:\Programmer\Kazaa Lite K++\Kazaa.kpp" /SYSTRAY
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [ToPicks Starter] C:\Programmer\ToPicks\Bin\Idhost.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [aiepk] C:\Documents and Settings\Mark Christiansen\Skrivebord\aiepk.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\progra~1\steam\steam.exe" -silent
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37884.2522569444
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Den glemte jeg sidst.
O4 - HKLM\..\Run: [ToPicks Starter] C:\Programmer\ToPicks\Bin\Idhost.exe
Fix den, og genstart i fejlsikker, find frem til mappen C:\Programmer\ToPicks, og slet den.
så skulle du være ren igen.

For at holde skidtet ude af din PC, kan du hente flg. programmer:
Spywareblaster, Spywareguard, IE-Spyad og Empty Temp Folders, dem finder du, sammen med danske vejledninger her:
http://www.spywarefri.dk/vaerktoj.htm
Læs især om IE-Spyad, så du får det fulde udbytte af dette lille geniale program.
Hent Dcombobulator, og få lukket et sikkerhedshul mere, den finder du her sammen med en dansk brugervejledning.
http://www.spywarefri.dk/tipsogtricks.htm#DCom

Mvh:
Fromsej/Team Spywarefri.

m3q> Du får lidt point for dit tip med ad-aware.

fromsej> Tak, for hjælpen med at få ryddet op på min harddisk. Totalt iorden service du yder :>

Velbekomme, og tak for point.*S*

mezoi> tak for point :D... er da bare glad for at kunne hjælpe!