VIRUS Tror jag?

9 februari, 2008

Hej!

Har råkat fått in något som jag tror ska bort fortare än kvikt!

Och jag vet inte hur det kommit in heller?

Detta hittade jag när jag körde: msconfig för att se hur mycket det var som startade med Win,och såg något jag INTE sett förut och detta heter: wksvss.exe !!

Och nu vet jag inte hur jag ska få bort detta? Jag har testat med NORTON Internet Secu 2006 - 2008,F-Secure Online scanning,AVG Antivirus 2007 mm mm!

Men somsagt det ligger snällt kvar?

Är det någon som vet vad detta är? OCH hur får jag bort detta?

Tacksam för svar!

Det man inte vet har man ingen aning om.

Teori och praktik förenas när ingenting fungerar och ingen vet varför.

AMD AM25600 3,02Ghz,DDR2 2x1Gb+2x512Mb i Dual 800Mhz,s-ata2 400+160Gb+120Gb 2,5,Nvid PCIE 7600GT

[inlägget ändrat 2008-02-09 16:06:52 av Helren]

9 februari, 2008

Vi kan ju se om HijackThis visar något till att börja med:

http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

Installera, kör, skanna och spara loggen (inget annat).

Klistra in loggen i ditt svar.

9 februari, 2008

Helren!

Ofarlig komponent tillhörande Works från Microsoft.

wksss.exe

En sökning på Googles gav svaret.

Component Name: wksss.exe

Description of wksss.exe

This is a component of Microsoft Works. This software from Microsoft makes managing family schedules, coordinating events, and even planning day-to-day tasks much simpler.

Recommendation for wksss.exe ...

Trusted: Yes

Trojan: No

Chronic: No

Adware: No

Carrier: No

Browser Hijacker: No

Dialer: No

Commercial Keylogger: No

Remote Administration Tool: No

Suspected: No

Company Name: Microsoft Corporation.

Däremot så kan 'wksvss.exe' vara nåt som inte är så bra förstås, Googles hittade inget om denna fil.

[inlägget ändrat 2008-02-09 17:13:08 av ollemunter]

9 februari, 2008

Hej!

Jag har en J*vla massa på autostart = 04´men min dator borde klara av detta tycker jag!

Jag ska skicka in en Loggfil,jag har kollat själv på denna men är INTE så haj på detta!

Men men enligt mig så ska det inte vara några större faror,Men det får du eller någon annan avgöra Helst!

Det man inte vet har man ingen aning om.

Teori och praktik förenas när ingenting fungerar och ingen vet varför.

AMD AM25600 3,02Ghz,DDR2 2x1Gb+2x512Mb i Dual 800Mhz,s-ata2 400+160Gb+120Gb 2,5,Nvid PCIE 7600GT

9 februari, 2008

Hej!

Ja då kommer denna HiJack Logg Nu!

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:55:24, on 2008-02-09

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\acs.exe

C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

C:\Program\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\Program\Bluetooth-programvara\bin\btwdins.exe

C:\WINDOWS\system32\cisvc.exe

C:\Program\NVIDIA Corporation\nTune\nTuneService.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\System32\snmp.exe

C:\Program\SPAMfighter\sfus.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program\UPHClean\uphclean.exe

C:\WINDOWS\System32\ups.exe

C:\Program\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program\Microsoft Office\Office12\GrooveMonitor.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Program\Delade filer\Pure Networks Shared\Platform\nmctxth.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program\Pure Networks\Network Magic\nmapp.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program\SPAMfighter\SFAgent.exe

C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

C:\Program\Pm-Disk\Pm-Disk Champion Utility-Standard Version\USBTD.exe

C:\Program\Pm-Disk\Pm-Disk Champion Utility-Standard Version\pmdmon.exe

C:\Program\Windows Live\Messenger\MsnMsgr.Exe

C:\Program\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program\Bluetooth-programvara\BTTray.exe

C:\WINDOWS\system32\fxssvc.exe

C:\Program\BLUETO~1\BTSTAC~1.EXE

C:\Program\Delade filer\Pure Networks Shared\Platform\nmsrvc.exe

C:\Program\INCRED~1\bin\ImApp.exe

C:\Program\Google\deskbar-0.5.95.0\ggviewer.exe

C:\Program\DELADE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

C:\Program\MSI\Core Center\CoreCenter.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\AIRPLUS.exe

C:\Program\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program\Logitech\SetPoint\SetPoint.exe

C:\Program\Windows Live\Messenger\usnsvc.exe

C:\Program\PopTray\PopTray.exe

C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE

C:\Program\HP\Digital Imaging\bin\hpqSTE08.exe

C:\WINDOWS\system32\cidaemon.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Program\Delade filer\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Program\Trend Micro\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pfatjanster.idg.se/support/category.asp

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157'>http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896'>http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://toolbar.google.com/tbredir?r=di&ampl=sv&ampv=3.0

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Delade filer\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&ampD IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program\SPYBOT~1\SDHelper.dll

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program\Delade filer\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program\DELADE~1\SYMANT~1\IDS\IPSBHO.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar3.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O3 - Toolbar: &ampGoogle - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar3.dll

O3 - Toolbar: Visa Norton-verktygsfältet - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program\Delade filer\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [HP Software Update] 'C:\Program\HP\HP Software Update\HPWuSchd2.exe'

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [GrooveMonitor] 'C:\Program\Microsoft Office\Office12\GrooveMonitor.exe'

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nmctxth] 'C:\Program\Delade filer\Pure Networks Shared\Platform\nmctxth.exe'

O4 - HKLM\..\Run: [nmapp] 'C:\Program\Pure Networks\Network Magic\nmapp.exe' -autorun -nosplash

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [sPAMfighter Agent] 'C:\Program\SPAMfighter\SFAgent.exe' update delay 60

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] 'C:\Program\Adobe\Reader 8.0\Reader\Reader_sl.exe'

O4 - HKLM\..\Run: [ccApp] 'C:\Program\Delade filer\Symantec Shared\ccApp.exe'

O4 - HKLM\..\Run: [osCheck] 'C:\Program\Norton Internet Security\osCheck.exe'

O4 - HKLM\..\Run: [uFD Utility] C:\Program\Pm-Disk\Pm-Disk Champion Utility-Standard Version\USBTD.exe

O4 - HKLM\..\Run: [uFD Monitor] C:\Program\Pm-Disk\Pm-Disk Champion Utility-Standard Version\pmdmon.exe

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

O4 - HKCU\..\Run: [MsnMsgr] 'C:\Program\Windows Live\Messenger\MsnMsgr.Exe' /background

O4 - HKCU\..\Run: [incrediMail] C:\Program\IncrediMail\bin\IncMail.exe /c

O4 - HKCU\..\Run: [LDM] C:\Program\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [swg] C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [NVIDIA nTune] 'C:\Program\NVIDIA Corporation\nTune\nTuneCmd.exe' clear

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - S-1-5-18 Startup: PopTray.lnk = C:\Program\PopTray\PopTray.exe (User 'SYSTEM')

O4 - .DEFAULT Startup: PopTray.lnk = C:\Program\PopTray\PopTray.exe (User 'Default user')

O4 - Startup: PopTray.lnk = C:\Program\PopTray\PopTray.exe

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: CoreCenter.lnk = C:\Program\MSI\Core Center\CoreCenter.exe

O4 - Global Startup: D-Link REG Utility.lnk = C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\Reg.exe

O4 - Global Startup: DWL-G520M Wireless 108G MIMO PCI Adapter Utility.lnk = C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\AIRPLUS.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: HP Image Zone Snabbstarta.lnk = C:\Program\HP\Digital Imaging\bin\hpqthb08.exe

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe

O8 - Extra context menu item: E&ampxportera till Microsoft Excel - res://C:\Program\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Skicka till &ampBluetooth - C:\Program\Bluetooth-programvara\btsendto_ie_ctx.htm

O8 - Extra context menu item: Translate with &ampBabylon - res://C:\Program\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Blogga detta - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &ampBlogga detta i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Skicka till OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Ski&ampcka till OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program\Bluetooth-programvara\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program\Bluetooth-programvara\btsendto_ie.htm

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search &amp Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://www.sis.com/ocis/OSInfo.cab

O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://www.sis.com/ocis/SiSAutodetectNT.cab

O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/24.16/uploader2.cab

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2895.cab

O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab

O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab

O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program\Microsoft Office\Office12\GrooveSystemServices.dll

O20 - Winlogon Notify: !SASWinLogon - C:\Program\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\acs.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe

O23 - Service: Automatisk LiveUpdate-schemaläggare - Symantec Corporation - C:\Program\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program\Bluetooth-programvara\bin\btwdins.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\VAScanner\comHost.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\Program\Symantec\LiveUpdate\LuComServer_3_4.EXE

O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe

O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program\Delade filer\Pure Networks Shared\Platform\nmsrvc.exe

O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program\NVIDIA Corporation\nTune\nTuneService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program\SPAMfighter\sfus.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\Program\DELADE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\Program\COMMON~1\SNAPST~1\Common\x10nets.exe

--

End of file - 15041 bytes

Det man inte vet har man ingen aning om.

Teori och praktik förenas när ingenting fungerar och ingen vet varför.

AMD AM25600 3,02Ghz,DDR2 2x1Gb+2x512Mb i Dual 800Mhz,s-ata2 400+160Gb+120Gb 2,5,Nvid PCIE 7600GT

9 februari, 2008

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

Kan du läsa om på http://www.bleepingcomputer.com/startups/ALCMTR.EXE-240.html

Jag ser inte till någon wksvss.exe. Har du tagit bort den eller?

10 februari, 2008

Hej!

Nej! Jag har inte tagit Bort för jag får INTE bort detta!

Men jag har Kryssat av detta i msconfig! Men det finns där iaf!

Det man inte vet har man ingen aning om.

Teori och praktik förenas när ingenting fungerar och ingen vet varför.

AMD AM25600 3,02Ghz,DDR2 2x1Gb+2x512Mb i Dual 800Mhz,s-ata2 400+160Gb+120Gb 2,5,Nvid PCIE 7600GT

[inlägget ändrat 2008-02-10 09:09:50 av Helren]

10 februari, 2008

Ja, men då syns det inte i HijackThis-loggen. Sätt tillbaks bocken i msconfig och klistra in en ny HijackThis-logg, sedan kan du ta bort bocken igen.

10 februari, 2008

Hej!

Ny logg! Sen har jag något som heter 'Sky Tel' som jag ej vet vad detta är?

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:50:20, on 2008-02-10

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\acs.exe

C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

C:\Program\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\Program\Bluetooth-programvara\bin\btwdins.exe

C:\WINDOWS\system32\cisvc.exe

C:\Program\NVIDIA Corporation\nTune\nTuneService.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\System32\snmp.exe

C:\Program\SPAMfighter\sfus.exe

C:\WINDOWS\system32\svchost.exe

C:\Program\UPHClean\uphclean.exe

C:\WINDOWS\System32\ups.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program\Microsoft Office\Office12\GrooveMonitor.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program\Delade filer\Pure Networks Shared\Platform\nmctxth.exe

C:\Program\Pure Networks\Network Magic\nmapp.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program\SPAMfighter\SFAgent.exe

C:\Program\Adobe\Reader 8.0\Reader\Reader_sl.exe

C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe

C:\Program\Pm-Disk\Pm-Disk Champion Utility-Standard Version\pmdmon.exe

C:\Program\Windows Live\Messenger\MsnMsgr.Exe

C:\Program\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\WINDOWS\system32\fxssvc.exe

C:\Program\Bluetooth-programvara\BTTray.exe

C:\Program\Delade filer\Pure Networks Shared\Platform\nmsrvc.exe

C:\Program\Google\deskbar-0.5.95.0\ggviewer.exe

C:\Program\INCRED~1\bin\ImApp.exe

C:\Program\BLUETO~1\BTSTAC~1.EXE

C:\WINDOWS\system32\msiexec.exe

C:\Program\MSI\Core Center\CoreCenter.exe

C:\Program\DWL-G520M Wireless 108G MIMO PCI Adapter\AIRPLUS.exe

C:\Program\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program\Logitech\SetPoint\SetPoint.exe

C:\Program\PopTray\PopTray.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Program\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program\Windows Live\Messenger\usnsvc.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program\Delade filer\Microsoft Shared\office12\offlb.exe