HijackThis log - tror den er let?
Hejsa, jeg vil gerne have et råd til denne hijackthis log!Den er fra min lillebrors maskine - han er beskyttet med SpywareBlaster, SpywareGuard og scanner regelmæssigt med både adaware og spybot.
Alligevel er der sneget sig en hijack'er ind, så spywareguard konstant pop'er up og siger at noget prøver at ændre ie's startside.
Han bruger heldigvis Mozilla Firefix som browser, men derfor er det alligevel et kæmpe irritationsmoment at spywareguard konstant pop'er up!
Jeg har prøvet alt for at få den væk, men den er ret hårdnakket :(
selve loggen, hvor det er den R1'er som driller:
Logfile of HijackThis v1.98.0
Scan saved at 18:57:35, on 29-10-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Avast4\aswUpdSv.exe
C:\Programmer\Avast4\ashServ.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Programmer\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Programmer\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programmer\Analog Devices\SoundMAX\Smax4.exe
C:\Programmer\D-Tools\daemon.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Programmer\Winamp\winampa.exe
C:\Programmer\Messenger Plus! 3\MsgPlus.exe
C:\programmer\steam\steam.exe
C:\Programmer\Skype\Skype.exe
C:\Programmer\SpywareGuard\sgmain.exe
c:\progra~1\intern~1\iexplore.exe
C:\Programmer\SpywareGuard\sgbhp.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programmer\Mozilla Firefox\firefox.exe
C:\Documents and Settings\xxxxxxxx\Skrivebord\hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.onyyputxximegzzc.com/3Ck/wKA7azisZxMtPkJaI/0C1wD0vkR7Eaw2ZkPQskkiKHpqvPLXiuB0sqTOuuym.html
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmer\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programmer\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programmer\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programmer\Creative\PC-CAM Center\CAMTRAY.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmer\Messenger Plus! 3\MsgPlus.exe"
O4 - HKCU\..\Run: [Steam] "c:\programmer\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Programmer\Skype\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [STYLEXP] C:\Programmer\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Programmer\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Twoactive] C:\DOCUME~1\MIKKEL~1\APPLIC~1\EXITRE~1\Pollmixerror.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: SpywareGuard.lnk = C:\Programmer\SpywareGuard\sgmain.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099065290796
--------
vil være glad for alt hjælp vedrørende dette!
