Hijackthislog. searchbare. 2 endda

Af Amatør BB4L | 23-06-2004 03:11 | 848 visninger | 7 svar, hop til seneste

http://www.thefatman.dk[...] den nederste kommer op ca hver anden gang jeg åbner for Explorer. ved godt at man kan lukke dem. men den nederste er for provo.! og gider ikke have det shit på. hvis jeg skulle have noget var det google toolbar :-) jeg har bemærket at når jeg går ind på hol med den her com så kommer der en popup med noget slanke shit der. har aldrig set en popup inde på hol før. (kan godt være en ny ting) men håber du/i kan se noget i ved som er dette :-) Logfile of HijackThis v1.97.7 Scan saved at 03:00:35, on 23-06-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSSystem32svchost.exe C:WINDOWSExplorer.EXE C:PROGRA~21BALM~1First Test.exe C:ProgrammerMessenger Plus! 3MsgPlus.exe C:WINDOWSSystem32ctfmon.exe C:WINDOWSSystem32devldr32.exe C:ProgrammerMSN Messengermsnmsgr.exe C:WINDOWSSystem32wuauclt.exe C:WINDOWSSystem32wisptis.exe C:ProgrammerSteamSteam.exe C:ProgrammerInternet Exploreriexplore.exe C:Documents and SettingsHenrikSkrivebordHijackThis.exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mysearchnow.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://mysearchnow.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {76633582-9317-7636-E8EC-06BA44A6AD82} - C:PROGRA~2LITEID~1MEMO BIB.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O3 - Toolbar: BeepBuildLocks - {C075AFF6-1DBC-D82C-FB12-7BA4B0E373BB} - C:PROGRA~2LITEID~1MEMO BIB.dll O4 - HKLM..Run: [] C:Dontrun.bat O4 - HKLM..Run: [win live] C:PROGRA~21BALM~1First Test.exe O4 - HKLM..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - HKCU..Run: [Steam] C:ProgrammerSteamSteam.exe -silent O4 - HKCU..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart O4 - HKCU..Run: [msnmsgr] "C:ProgrammerMSN Messengermsnmsgr.exe" /background O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~2MICROS~2Office10EXCEL.EXE/3000 O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com[...] O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com[...] O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - http://130.228.229.70[...] O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com[...] O16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) - http://81.19.245.211[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...]
--

Born 2 be ----> BB4L

#1
Knutz
Monster Supporter
23-06-2004 03:15

Rapporter til Admin

deaktiver systemgendannelse og kryds følgende af: R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mysearchnow.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://mysearchnow.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearchnow.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://mysearchnow.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://mysearchnow.com[...] C:PROGRA~2LITEID~1MEMO BIB.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - O4 - HKLM..Run: [] C:Dontrun.bat O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com[...] O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com[...] genstart og start op i fejlsikret og slet følgende filer C:PROGRA~2LITEID~1MEMO BIB.dll (hele rodmappen)
--
Jahh.. Så kan du lære det! MSN: [email protected]

#2
Knutz
Monster Supporter
23-06-2004 03:15

Rapporter til Admin

genstart op normalt og smid ny log herind til kontrol!
--
Jahh.. Så kan du lære det! MSN: [email protected]

#3
BB4L
Amatør
23-06-2004 03:17

Rapporter til Admin

#1 lyder godt. men før jeg lige går igang med projektet. må jeg godt starte op i fejlsikret tilstand MED netværk?
--
Born 2 be ----> BB4L

#4
Knutz
Monster Supporter
23-06-2004 03:20

Rapporter til Admin

fuck... glemte lige denne: O3 - Toolbar: BeepBuildLocks - {C075AFF6-1DBC-D82C-FB12-7BA4B0E373BB} - C:PROGRA~2LITEID~1MEMO BIB.dll
--
Jahh.. Så kan du lære det! MSN: [email protected]

#5
BB4L
Amatør
23-06-2004 03:22

Rapporter til Admin

#4 hvad gør jeg med den så?
--
Born 2 be ----> BB4L

#6
kRz
Amatør
23-06-2004 03:30

Rapporter til Admin

Du skal sikkert bare krydser den af som de andre.
--
/kRz

#7
BB4L
Amatør
23-06-2004 03:55

Rapporter til Admin

kan ikke komme af med en. (jeg har markeret den) Logfile of HijackThis v1.97.7 Scan saved at 03:48:09, on 23-06-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSSystem32svchost.exe C:WINDOWSExplorer.EXE C:PROGRA~21BALM~1First Test.exe C:ProgrammerMessenger Plus! 3MsgPlus.exe C:WINDOWSSystem32ctfmon.exe C:ProgrammerSteamSteam.exe C:WINDOWSSystem32devldr32.exe C:ProgrammerMSN Messengermsnmsgr.exe C:Documents and SettingsHenrikSkrivebordHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mysearchnow.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O4 - HKLM..Run: [win live] C:PROGRA~21BALM~1First Test.exe O4 - HKLM..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - HKCU..Run: [Steam] C:ProgrammerSteamSteam.exe -silent O4 - HKCU..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart O4 - HKCU..Run: [msnmsgr] "C:ProgrammerMSN Messengermsnmsgr.exe" /background O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~2MICROS~2Office10EXCEL.EXE/3000 O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com[...] O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net[...] O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - http://130.228.229.70[...] O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com[...] O16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) - http://81.19.245.211[...] O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...] den nederste toolbar kommer stadig op. :/ men den øverste er væk. jeg vil lige sige dig noget om den nederste. den er oså ude på mit skrivebord. IKKE KUN i explorer jeg har deaktiveret systemgendannelse. men den jeg har markeret vil altså bare ikke væk.
--
Born 2 be ----> BB4L