HijackThis fil :)

Af Bruger Codebear | 25-06-2004 00:04 | 1140 visninger | 3 svar, hop til seneste

Hej, er der ik nogen der lige vil tjekke hvad jeg kan fjerne af ting her, har ikke styr på hvad der er standard og hvad ik. Håber I lige vil se på det :) På forhånd tak herfra ;) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSSystem32Ati2evxx.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:ProgrammerTGTSoftStyleXPStyleXPService.exe C:ProgrammerFælles filerSymantec SharedccSetMgr.exe C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe C:WINDOWSsystem32spoolsv.exe C:ProgrammerFælles filerSymantec SharedccProxy.exe C:ProgrammerCPUCooLCooLSrv.exe C:WINDOWSSystem32LckFldService.exe C:ProgrammerFælles filerMicrosoft SharedVS7Debugmdm.exe C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirus avapsvc.exe C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusAdvToolsNPROTECT.EXE C:WINDOWSSystem32svchost.exe C:ProgrammerFælles filerSymantec SharedCCPD-LCsymlcsvc.exe C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusSAVScan.exe C:WINDOWSExplorer.EXE C:gamesSteamSteam.exe C:ProgrammerFælles filerSymantec SharedSNDSrvc.exe C:ProgrammerSkypePhoneSkype.exe C:ProgrammerMSN Messengermsnmsgr.exe C:WINDOWSSystem32ctfmon.exe C:ProgrammerThe All-Seeing Eyeeye.exe C:ProgrammerInternet ExplorerIEXPLORE.EXE C:ProgrammerInternet ExplorerIEXPLORE.EXE C:ProgrammerInternet ExplorerIEXPLORE.EXE C:instaleringsfilerHijackThis.exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = mysearchnow.com R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:ProgrammerMyWebSearchSrchAstt1.binMWSSRCAS.DLL O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:ProgrammerMyWebSearchar2.binMWSBAR.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:ProgrammerSpybot - Search & DestroySDHelper.dll O2 - BHO: (no name) - {67D5DB62-CD22-47A5-D210-2B0BC7AF1535} - C:PROGRA~1SAFEPI~1SpamDumb.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:ProgrammerFælles filerSymantec SharedAdBlockingNISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusNavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:ProgrammerFælles filerSymantec SharedAdBlockingNISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusNavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O3 - Toolbar: WAVE OKAY - {570F61C9-5E78-8242-E871-1A028F4E4D48} - C:PROGRA~1SAFEPI~1SpamDumb.dll O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec SharedccApp.exe" O4 - HKLM..Run: [URLLSTCK.exe] C:ProgrammerNorton Internet Security ProfessionalUrlLstCk.exe O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1NORTON~1AdvToolsADVCHK.EXE O4 - HKLM..Run: [AlcFDMonitor] C:WINDOWSALCFDRTM.EXE O4 - HKLM..Run: [PCMService] C:ProgrammerMedion Home CinemaXLPowerCinemaPCMService.exe O4 - HKLM..Run: [ATIPTA] C:ProgrammerATI TechnologiesATI Control Panelatiptaxx.exe O4 - HKLM..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1ar2.binmwsoemon.exe O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgrammerD-Toolsdaemon.exe" -lang 1033 O4 - HKLM..Run: [RivaTunerStartupDaemon] "C:ProgrammerRivaTunerRivaTuner.exe" /S O4 - HKLM..Run: [type32] "C:ProgrammerMicrosoft IntelliType Pro ype32.exe" O4 - HKLM..Run: [POINTER] point32.exe O4 - HKLM..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe O4 - HKLM..Run: [Sign Two] C:PROGRA~1HEARTT~1BoreNew.exe O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - HKCU..Run: [MSMSGS] "C:ProgrammerMessengermsmsgs.exe" /background O4 - HKCU..Run: [STYLEXP] C:ProgrammerTGTSoftStyleXPStyleXP.exe -Hide O4 - HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1ar2.binmwsoemon.exe O4 - HKCU..Run: [Steam] C:gamesSteamSteam.exe -silent O4 - HKCU..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart O4 - HKCU..Run: [Symantec NetDriver Monitor] C:PROGRA~1SymantecLIVEUP~1SNDMon.EXE O4 - HKCU..Run: [msnmsgr] "C:ProgrammerMSN Messengermsnmsgr.exe" /background O4 - Startup: MyWebSearch Email Plugin.lnk = C:ProgrammerMyWebSearchar2.binMWSOEMON.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = ? O4 - Global Startup: GetRight - Tray Icon.lnk = C:ProgrammerGetRightgetright.exe O4 - Global Startup: HotSync Manager.lnk = C:PalmHOTSYNC.EXE O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOffice10OSA.EXE O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:ProgrammerMyWebSearchar2.binMWSOEMON.EXE O8 - Extra context menu item: &Search - http://bar.mywebsearch.com[...] O8 - Extra context menu item: Download with GetRight - C:ProgrammerGetRightGRdownload.htm O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~4Office10EXCEL.EXE/3000 O8 - Extra context menu item: Open with GetRight Browser - C:ProgrammerGetRightGRbrowse.htm O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com[...] O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com[...] O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com[...] O16 - DPF: {665585FD-2068-4C5E-A6D3-53AC3270ECD4} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...] O17 - HKLMSystemCCSServicesTcpip..{4E0BE981-7BF1-46BD-9D09-EC6B2A47770D}: NameServer = 62.61.130.1,62.61.131.1 O17 - HKLMSystemCCSServicesTcpip..{8DBC3026-9212-4B79-87B7-C5DB88D3B734}: NameServer = 62.61.130.1,62.61.131.1 O17 - HKLMSystemCS1ServicesTcpip..{4E0BE981-7BF1-46BD-9D09-EC6B2A47770D}: NameServer = 62.61.130.1,62.61.131.1 O17 - HKLMSystemCS2ServicesTcpip..{4E0BE981-7BF1-46BD-9D09-EC6B2A47770D}: NameServer = 62.61.130.1,62.61.131.1 M.V.H. Casper Olesen
--

I maby come and go, but I will allways go with the flow :D

#1
Knutz
Monster Supporter
25-06-2004 00:11

Rapporter til Admin

deaktiver systemgendannelse og kryds følgende af: R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = mysearchnow.com R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://mysearchnow.com[...] O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:ProgrammerMyWebSearchSrchAstt1.binMWSSRCAS.DLL O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:ProgrammerMyWebSearchar2.binMWSBAR.DLL O2 - BHO: (no name) - {67D5DB62-CD22-47A5-D210-2B0BC7AF1535} - C:PROGRA~1SAFEPI~1SpamDumb.dll O3 - Toolbar: WAVE OKAY - {570F61C9-5E78-8242-E871-1A028F4E4D48} - C:PROGRA~1SAFEPI~1SpamDumb.dll O4 - HKLM..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1ar2.binmwsoemon.exe O4 - HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1ar2.binmwsoemon.exe O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:ProgrammerMyWebSearchar2.binMWSOEMON.EXE O8 - Extra context menu item: &Search - http://bar.mywebsearch.com[...] O17 - HKLMSystemCCSServicesTcpip..{4E0BE981-7BF1-46BD-9D09-EC6B2A47770D}: NameServer = 62.61.130.1,62.61.131.1 O17 - HKLMSystemCCSServicesTcpip..{8DBC3026-9212-4B79-87B7-C5DB88D3B734}: NameServer = 62.61.130.1,62.61.131.1 O17 - HKLMSystemCS1ServicesTcpip..{4E0BE981-7BF1-46BD-9D09-EC6B2A47770D}: NameServer = 62.61.130.1,62.61.131.1 O17 - HKLMSystemCS2ServicesTcpip..{4E0BE981-7BF1-46BD-9D09-EC6B2A47770D}: NameServer = 62.61.130.1,62.61.131.1 genstart og start op i fejlsikret tilstand... slet følgende filer C:ProgrammerMyWebSearchar2.binMWSOEMON.EXE (hele mappen) C:PROGRA~1SAFEPI~1SpamDumb.dll (hele mappen) så disse mapper skal slettes: C:ProgrammerMyWebSearch C:PROGRA~1SAFEPI~1 genstart igen og start normalt op... smid en ny log herind til kontrol!
--
Jahh.. Så kan du lære det! MSN: [email protected]

#2
Codebear
Bruger
25-06-2004 00:54

Rapporter til Admin

Undskyld ventetiden Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSSystem32Ati2evxx.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:ProgrammerTGTSoftStyleXPStyleXPService.exe C:ProgrammerFælles filerSymantec SharedccSetMgr.exe C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe C:WINDOWSsystem32spoolsv.exe C:ProgrammerFælles filerSymantec SharedccProxy.exe C:ProgrammerCPUCooLCooLSrv.exe C:WINDOWSSystem32LckFldService.exe C:ProgrammerFælles filerMicrosoft SharedVS7Debugmdm.exe C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirus avapsvc.exe C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusAdvToolsNPROTECT.EXE C:WINDOWSSystem32svchost.exe C:ProgrammerFælles filerSymantec SharedCCPD-LCsymlcsvc.exe C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusSAVScan.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSExplorer.EXE C:ProgrammerFælles filerSymantec SharedccApp.exe C:WINDOWSALCFDRTM.EXE C:ProgrammerMedion Home CinemaXLPowerCinemaPCMService.exe C:ProgrammerATI TechnologiesATI Control Panelatiptaxx.exe C:ProgrammerD-Toolsdaemon.exe C:ProgrammerMicrosoft IntelliType Pro ype32.exe C:ProgrammerMicrosoft HardwareMousepoint32.exe C:ProgrammerMessenger Plus! 3MsgPlus.exe C:PROGRA~1HEARTT~1BoreNew.exe C:WINDOWSSOUNDMAN.EXE C:WINDOWSSystem32ctfmon.exe C:ProgrammerMessengermsmsgs.exe C:gamesSteamSteam.exe C:PROGRA~1COMMON~1X10Commonx10nets.exe C:ProgrammerGetRightgetright.exe C:PalmHOTSYNC.EXE C:ProgrammerGetRightgetright.exe C:ProgrammerMSN Messengermsnmsgr.exe C:ProgrammerSkypePhoneSkype.exe C:instaleringsfilerHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mysearchnow.com[...] O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:ProgrammerSpybot - Search & DestroySDHelper.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:ProgrammerFælles filerSymantec SharedAdBlockingNISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusNavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:ProgrammerFælles filerSymantec SharedAdBlockingNISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammerNorton Internet Security ProfessionalNorton AntiVirusNavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec SharedccApp.exe" O4 - HKLM..Run: [URLLSTCK.exe] C:ProgrammerNorton Internet Security ProfessionalUrlLstCk.exe O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1NORTON~1AdvToolsADVCHK.EXE O4 - HKLM..Run: [AlcFDMonitor] C:WINDOWSALCFDRTM.EXE O4 - HKLM..Run: [PCMService] C:ProgrammerMedion Home CinemaXLPowerCinemaPCMService.exe O4 - HKLM..Run: [ATIPTA] C:ProgrammerATI TechnologiesATI Control Panelatiptaxx.exe O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgrammerD-Toolsdaemon.exe" -lang 1033 O4 - HKLM..Run: [RivaTunerStartupDaemon] "C:ProgrammerRivaTunerRivaTuner.exe" /S O4 - HKLM..Run: [type32] "C:ProgrammerMicrosoft IntelliType Pro ype32.exe" O4 - HKLM..Run: [POINTER] point32.exe O4 - HKLM..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe O4 - HKLM..Run: [Sign Two] C:PROGRA~1HEARTT~1BoreNew.exe O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - HKCU..Run: [MSMSGS] "C:ProgrammerMessengermsmsgs.exe" /background O4 - HKCU..Run: [STYLEXP] C:ProgrammerTGTSoftStyleXPStyleXP.exe -Hide O4 - HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1ar2.binmwsoemon.exe O4 - HKCU..Run: [Steam] C:gamesSteamSteam.exe -silent O4 - HKCU..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart O4 - HKCU..Run: [Symantec NetDriver Monitor] C:PROGRA~1SymantecLIVEUP~1SNDMon.EXE O4 - HKCU..Run: [msnmsgr] "C:ProgrammerMSN Messengermsnmsgr.exe" /background O4 - Global Startup: Adobe Gamma Loader.lnk = ? O4 - Global Startup: GetRight - Tray Icon.lnk = C:ProgrammerGetRightgetright.exe O4 - Global Startup: HotSync Manager.lnk = C:PalmHOTSYNC.EXE O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOffice10OSA.EXE O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:ProgrammerMyWebSearchar2.binMWSOEMON.EXE O8 - Extra context menu item: Download with GetRight - C:ProgrammerGetRightGRdownload.htm O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~4Office10EXCEL.EXE/3000 O8 - Extra context menu item: Open with GetRight Browser - C:ProgrammerGetRightGRbrowse.htm O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com[...] O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com[...] O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com[...] O16 - DPF: {665585FD-2068-4C5E-A6D3-53AC3270ECD4} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...]
--
I maby come and go, but I will allways go with the flow :D

#3
Armageddon
Moderator
25-06-2004 14:06

Rapporter til Admin

#2 Kør en ny scanning med HJT og sæt flueben ved disse: R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mysearchnow.com[...] O4 - HKLM..Run: [Sign Two] C:PROGRA~1HEARTT~1BoreNew.exe O4 - HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1 ar2.binmwsoemon.exe O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOffice10OSA.EXE O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:ProgrammerMyWebSearch ar2.binMWSOEMON.EXE O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com[...] O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com[...] Luk alle øvrige programvinduer så kun HJT er åben. Klik på ”Fix checked”. Luk programmet og genstart i fejlsikret tilstand (tryk F8 efter POST skærmen). Find og slet denne: C:\PROGRA~1\HEARTT~1\BoreNew.exe tjek for en god ordens skyld også at hele MyWebSearch mappen er slettet. Genstart normalt. Kør en ny scanning med HJT og smid loggen herind til kontrol.
--
/Armageddon - [email protected] http://www.mdegn.dk[...]