Just nu i M3-nätverket
Jump to content

Har jag nåt dåligt på datorn?


Benna

Recommended Posts

Hej undrade bara om jag har nåt dåligt på datorn?? jag skickar en hijack!! :Logfile of HijackThis v1.99.1

Scan saved at 21:42:09, on 2005-04-18

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program\Grisoft\AVGFRE~1\avgamsvr.exe

C:\Program\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\Explorer.EXE

C:\Program\Grisoft\AVGFRE~1\avgemc.exe

C:\WINDOWS\System32\wuauclt.exe

C:\Program\MSN Messenger\msnmsgr.exe

C:\Program\Save\Save.exe

C:\Program\WeatherCast\Weather.exe

C:\Program\WhenUSearch\Search.exe

C:\Program\WhenUSearch\whse.exe

C:\Program\Grisoft\AVG Free\avgcc.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Hjt\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.se/0SESVSE/SAOS02

O2 - BHO: WhenUSearch Helper - {BA2325ED-F9EB-4830-8FCE-0BC35B16969B} - C:\Program\WhenUSearch\search.dll

O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [AVG7_EMC] C:\Program\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [sTOPzilla] C:\Program\STOPzilla!\Stopzilla.exe /autostart

O4 - HKLM\..\Run: [bearShare] "C:\Program\BearShare\BearShare.exe" /pause

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [WhenUSave] "C:\Program\Save\Save.exe"

O4 - HKLM\..\Run: [WhenUSearch] "C:\Program\WhenUSearch\Search.exe"

O4 - HKLM\..\Run: [WhenUSearchWHSE] "C:\Program\WhenUSearch\whse.exe"

O4 - HKCU\..\Run: [WeatherCast] "C:\Program\WeatherCast\Weather.exe" /q

O8 - Extra context menu item: &Google Search - res://c:\program\google\GoogleToolbar2.dll/cmsearch.html

O8 - Extra context menu item: Backward Links - res://c:\program\google\GoogleToolbar2.dll/cmbacklinks.html

O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program\google\GoogleToolbar2.dll/cmcache.html

O8 - Extra context menu item: Similar Pages - res://c:\program\google\GoogleToolbar2.dll/cmsimilar.html

O8 - Extra context menu item: Translate into English - res://c:\program\google\GoogleToolbar2.dll/cmtrans.html

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Program\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Program\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

 

 

Link to comment
Share on other sites

 

Avinstallera via Kontrollpanelen om det finns

 

WhenUSave

WhenUSearch

WhenUSearchWHSE

 

Scanna med Hijack bocka i följande rader stäng Web-läsaren och alla andra öppna fönster och klicka FIX checked

 

O2 - BHO: WhenUSearch Helper - {BA2325ED-F9EB-4830-8FCE-0BC35B16969B} - C:\Program\WhenUSearch\search.dll

O4 - HKLM\..\Run: [WhenUSave] "C:\Program\Save\Save.exe"

O4 - HKLM\..\Run: [WhenUSearch] "C:\Program\WhenUSearch\Search.exe"

O4 - HKLM\..\Run: [WhenUSearchWHSE] "C:\Program\WhenUSearch\whse.exe"

 

 

Starta sen i felsäkert läge och ta bort

 

C:\Program\WhenUSearch\ < mappen

C:\Program\Save\ < mappen

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...