hey hol´er har et problem med spyware/adware.. det er dem der er pile foran jeg har problemmer med at få slettet.. nogen der ved hvordan man får dem væk?
Logfile of HijackThis v1.98.0
Scan saved at 19:38:55, on 02-08-2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammerTGTSoftStyleXPStyleXPService.exe
C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:ProgrammerNorton AntiVirus
avapsvc.exe
C:ProgrammerNorton AntiVirusAdvToolsNPROTECT.EXE
C:WINDOWSSystem32
vsvc32.exe
C:WINDOWSExplorer.EXE
C:ProgrammerFælles filerSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32mfcne.exe
C:ProgrammerNorton AntiVirusSAVScan.exe
C:ProgrammerFælles filerSymantec SharedccApp.exe
C:ProgrammerPCI Audio ApplicationsBinEchoCtrl.exe
C:WINDOWSMixer.exe
C:ProgrammerWinampwinampa.exe
C:ProgrammerMessenger Plus! 3MsgPlus.exe
C:WINDOWSwings32.exe
C:WINDOWSSystem32RUNDLL32.EXE
C:ProgrammerTGTSoftStyleXPStyleXP.exe
C:ProgrammerMSN Messengermsnmsgr.exe
C:PROGRA~1INCRED~1inIMAPP.EXE
C:WINDOWSSystem32wuauclt.exe
C:Documents and SettingsTagesenSkrivebord-=Software=-hijackthis.exe
>> R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar =
http://your-searcher.com[...]
>> R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSgkrgf.dll/sp.html#96676
>> R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = res://gkrgf.dll/index.html#96676
>> R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = res://gkrgf.dll/index.html#96676
>> R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = res://C:WINDOWSgkrgf.dll/sp.html#96676
>> R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSgkrgf.dll/sp.html#96676
>> R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = res://gkrgf.dll/index.html#96676
>> R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
http://your-searcher.com[...]
>> R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) =
http://your-searcher.com[...]
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = about: Tagesen.net! :D
>> R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {3592B2D9-6ECF-2944-7066-4AD1D7DD85E6} - C:WINDOWSsystem32javakl32.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammerNorton AntiVirusNavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammerNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETfgiebar.dll
O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec SharedccApp.exe"
O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1AdvToolsADVCHK.EXE
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [C-Media Echo Control] C:ProgrammerPCI Audio ApplicationsBinEchoCtrl.exe
O4 - HKLM..Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM..Run: [WinampAgent] C:ProgrammerWinampwinampa.exe
O4 - HKLM..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe"
O4 - HKLM..Run: [wings32.exe] C:WINDOWSwings32.exe
O4 - HKLM..RunOnce: [mfcne.exe] C:WINDOWSsystem32mfcne.exe
O4 - HKCU..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU..Run: [IncrediMail] C:PROGRA~1INCRED~1inIncMail.exe /c
O4 - HKCU..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart
O4 - HKCU..Run: [STYLEXP] C:ProgrammerTGTSoftStyleXPStyleXP.exe -Hide
O4 - HKCU..Run: [msnmsgr] "C:ProgrammerMSN Messengermsnmsgr.exe" /background
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:PROGRA~1INCRED~1in
esourcesWebMenuImg.htm
O8 - Extra context menu item: Download All by FlashGet - C:ProgrammerFlashGetjc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:ProgrammerFlashGetjc_link.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETflashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETflashget.exe
O18 - Protocol: icoo - {4A8DADD4-5A25-4D41-8599-CB7458766220} - C:WINDOWSmsopt.dll
--