Virus Logg - Trojan

[Xarus]

MBAM logg:

 

Malwarebytes' Anti-Malware 1.34

Databaseversjon: 1799

Windows 5.1.2600 Service Pack 3

 

24.02.2009 23:40:00

mbam-log-2009-02-24 (23-40-00).txt

 

Skanntype: Rask Skann

Objekter skannet: 71721

Tid tilbakelagt: 5 minute(s), 12 second(s)

 

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 4

Registerverdier infisert: 1

Registerfiler infisert: 0

Mapper infisert: 0

Filer infisert: 0

 

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

 

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

 

Registernøkler infisert:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f31a5d11-bf0b-4a4e-90af-274f2090aaa6} (Adware.180Solutions) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

 

Registerverdier infisert:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

 

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

 

Mapper infisert:

(Ingen mistenkelige filer funnet)

 

Filer infisert:

(Ingen mistenkelige filer funnet)

 

 

 

 

 

 

 

 

 

 

Combofix log:

 

ComboFix 09-02-24.02 - Sindre 2009-02-24 23:52:07.4 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1044.18.1022.433 [GMT 1:00]

Kjører fra: c:\documents and settings\Sindre\Skrivebord\ComboFix.exe

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

AV: Norton Internet Security *On-access scanning enabled* (Updated)

FW: Norton Internet Security *enabled*

* Opprettet nytt gjenopprettingspunkt

 

ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!

.

 

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\windows\system32\dumphive.exe

c:\windows\system32\Process.exe

c:\windows\system32\SrchSTS.exe

c:\windows\system32\tmp.reg

 

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2009-01-24 til 2009-02-24 )))))))))))))))))))))))))))))))))

.

 

2009-02-24 23:33 . 2009-02-24 23:33 <DIR> d-------- c:\programfiler\Malwarebytes' Anti-Malware

2009-02-24 23:33 . 2009-02-24 23:33 <DIR> d-------- c:\documents and settings\Sindre\Programdata\Malwarebytes

2009-02-24 23:33 . 2009-02-24 23:33 <DIR> d-------- c:\documents and settings\All Users\Programdata\Malwarebytes

2009-02-24 23:33 . 2009-02-11 10:19 38,496 --a------ c:\windows\SYSTEM32\DRIVERS\mbamswissarmy.sys

2009-02-24 23:33 . 2009-02-11 10:19 15,504 --a------ c:\windows\SYSTEM32\DRIVERS\mbam.sys

2009-02-21 21:30 . 2009-02-24 23:19 <DIR> d--h----- C:\$AVG8.VAULT$

2009-02-21 12:29 . 2009-02-21 12:29 325,128 --a------ c:\windows\SYSTEM32\DRIVERS\avgldx86.sys

2009-02-21 12:29 . 2009-02-21 12:29 107,272 --a------ c:\windows\SYSTEM32\DRIVERS\avgtdix.sys

2009-02-21 12:29 . 2009-02-21 12:29 10,520 --a------ c:\windows\SYSTEM32\avgrsstx.dll

2009-02-21 12:28 . 2009-02-24 18:37 <DIR> d-------- c:\windows\SYSTEM32\DRIVERS\Avg

2009-02-21 12:28 . 2009-02-24 17:45 <DIR> d-------- c:\documents and settings\Sindre\Programdata\AVGTOOLBAR

2009-02-21 12:28 . 2009-02-21 12:28 <DIR> d-------- c:\documents and settings\All Users\Programdata\avg8

2009-02-17 18:00 . 2009-02-24 23:44 <DIR> dr-h----- c:\documents and settings\Sindre\Siste

2009-02-06 19:59 . 2009-02-06 19:59 308,104 --a------ c:\windows\WLXPGSS.SCR

2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\SYSTEM32\sirenacm.dll

2009-02-05 21:50 . 2009-02-05 21:50 42,320 --a------ c:\windows\SYSTEM32\xfcodec.dll

2009-01-24 14:19 . 2009-02-24 19:05 <DIR> d-------- c:\documents and settings\Sindre\Tracing

2009-01-24 14:18 . 2009-02-06 18:08 55,152 --a------ c:\windows\SYSTEM32\DRIVERS\fssfltr_tdi.sys

2009-01-24 14:17 . 2009-01-24 14:17 <DIR> d-------- c:\programfiler\Microsoft Sync Framework

2009-01-24 14:16 . 2009-01-24 14:16 <DIR> d-------- c:\programfiler\Microsoft SQL Server Compact Edition

2009-01-24 14:14 . 2009-01-24 14:18 <DIR> d-------- c:\programfiler\Microsoft

2009-01-24 14:13 . 2009-01-24 14:13 <DIR> d-------- c:\programfiler\Windows Live SkyDrive

2009-01-24 14:05 . 2009-01-24 14:05 <DIR> d-------- c:\programfiler\Fellesfiler\Windows Live

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-02-23 01:18 --------- d-----w c:\documents and settings\Sindre\Programdata\Azureus

2009-02-22 21:32 --------- d-----w c:\documents and settings\Sindre\Programdata\FileZilla

2009-02-21 21:03 --------- d-----w c:\programfiler\Fellesfiler\ErrorSafe

2009-02-21 11:28 --------- d-----w c:\programfiler\AVG

2009-02-21 11:07 --------- d-----w c:\programfiler\Windows Live

2009-02-21 10:57 --------- d-----w c:\programfiler\Spybot - Search & Destroy

2009-02-21 10:57 --------- d-----w c:\documents and settings\All Users\Programdata\Spybot - Search & Destroy

2009-02-20 16:53 --------- d-----w c:\programfiler\World of Warcraft

2009-02-20 16:20 --------- d-s---w c:\programfiler\Xfire

2009-02-17 16:39 --------- d-----w c:\programfiler\Electronic Arts

2009-02-10 15:40 --------- d-----w c:\documents and settings\Sindre\Programdata\Xfire

2009-01-20 16:35 --------- d-----w c:\documents and settings\Sindre\Programdata\Skype

2009-01-15 22:14 --------- d-----w c:\documents and settings\Sindre\Programdata\dvdcss

2009-01-15 15:30 --------- d-----w c:\programfiler\Opera

2009-01-13 16:06 --------- d-----w c:\documents and settings\Sindre\Programdata\XnView

2008-12-11 10:57 333,952 ------w c:\windows\SYSTEM32\DLLCACHE\srv.sys

2008-12-06 13:21 410,984 ----a-w c:\windows\SYSTEM32\deploytk.dll

2006-05-06 16:42 7,260,160 ----a-w c:\programfiler\mozilla firefox\plugins\libvlc.dll

2006-09-25 19:21 88 --sh--r c:\windows\SYSTEM32\233505DF60.sys

2006-09-25 19:21 3,766 --sha-w c:\windows\SYSTEM32\KGyGaAvL.sys

2008-08-28 19:31 32,768 --sha-w c:\windows\SYSTEM32\CONFIG\systemprofile\Lokale innstillinger\Logg\History.IE5\MSHist012008082820080829\index.dat

.

 

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="c:\programfiler\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-06 3885400]

"LDM"="c:\programfiler\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-24 67128]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"SUPERAntiSpyware"="c:\programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-04-27 1481968]

"DAEMON Tools Lite"="c:\programfiler\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-04-19 7700480]

"IAAnotif"="c:\programfiler\Intel\Intel Application Accelerator\iaanotif.exe" [2004-06-29 135168]

"CTSysVol"="c:\programfiler\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]

"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]

"DVDLauncher"="c:\programfiler\filer\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 53248]

"DMXLauncher"="c:\programfiler\Dell\Media Experience\DMXLauncher.exe" [2005-01-27 86016]

"ISUSPM Startup"="c:\progra~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2006-03-20 213936]

"ISUSScheduler"="c:\programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" [2006-03-20 86960]

"Creative WebCam Tray"="c:\programfiler\Creative\Shared Files\CAMTRAY.EXE" [2004-04-29 245760]

"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-05-31 122941]

"QuickTime Task"="c:\programfiler\K-Lite Codec Pack\QuickTime\qttask.exe" [2006-07-11 282624]

"PWRISOVM.EXE"="c:\programfiler\PowerISO\PWRISOVM.EXE" [2006-07-29 188416]

"au"="c:\programfiler\Dealio\DealioAU.exe" [2007-06-27 238936]

"SunJavaUpdateSched"="c:\programfiler\Java\jre6\bin\jusched.exe" [2008-12-06 136600]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-04-19 86016]

"WinampAgent"="c:\programfiler\Winamp\winampa.exe" [2008-01-15 37376]

"ISUSPM"="c:\programfiler\Fellesfiler\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]

"fssui"="c:\programfiler\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]

"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-21 1601304]

"P17Helper"="P17.dll" [2004-06-10 c:\windows\SYSTEM32\P17.dll]

"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\SYSTEM32\bthprops.cpl]

"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-12-10 c:\windows\KHALMNPR.Exe]

"nwiz"="nwiz.exe" [2007-04-19 c:\windows\SYSTEM32\nwiz.exe]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

c:\documents and settings\Sindre\Start-meny\Programmer\Oppstart\

Adobe Gamma.lnk - c:\programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

Xfire.lnk - c:\programfiler\Xfire\Xfire.exe [2009-02-05 3008336]

 

c:\documents and settings\All Users\Start-meny\Programmer\Oppstart\

Logitech Desktop Messenger.lnk - c:\programfiler\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-24 67128]

Logitech SetPoint.lnk - c:\programfiler\Logitech\SetPoint\SetPoint.exe [2006-05-18 434176]

Skyr@cer Pro PCI 154 Configuration Utility.lnk - c:\programfiler\Skyr@cer Pro Utility\WLANPRO.exe [2005-06-16 2502656]

WinZip Quick Pick.lnk - c:\programfiler\WinZip\WZQKPICK.EXE [2005-09-20 106560]

Wireless USB 2.0 WLAN Card Utility.lnk - c:\programfiler\Dell Wireless\PRISMCFG.exe [2007-06-27 921704]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programfiler\SUPERAntiSpyware\SASSEH.DLL" [2006-12-20 77824]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

2007-04-19 12:41 294912 c:\programfiler\SUPERAntiSpyware\SASWINLO.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]

2009-02-21 12:29 10520 c:\windows\SYSTEM32\avgrsstx.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PRISMAPI.DLL]

2005-12-22 19:08 450646 c:\windows\SYSTEM32\PRISMAPI.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"VIDC.X264"= x264vfw.dll

"VIDC.3iv2"= 3ivxVfWCodec.dll

"VIDC.VP31"= vp31vfw.dll

"msacm.l3fhg"= mp3fhg.acm

"VIDC.XFR1"= xfcodec.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\WINDOWS\\SYSTEM32\\USMT\\MIGWIZ.EXE"=

"c:\\Programfiler\\Messenger\\msmsgs.exe"=

"c:\\Programfiler\\LimeWire\\LimeWire.exe"=

"c:\\Documents and Settings\\Sindre\\Mine dokumenter\\programmer\\utorrent.exe"=

"c:\\Programfiler\\Grisoft\\AVG Free\\avginet.exe"=

"c:\\Programfiler\\Grisoft\\AVG Free\\avgemc.exe"=

"c:\\Programfiler\\Xfire\\Xfire.exe"=

"c:\\Programfiler\\mIRC\\mirc.exe"=

"c:\\Programfiler\\Mozilla Firefox\\firefox.exe"=

"c:\\Programfiler\\Azureus\\Azureus.exe"=

"c:\\Programfiler\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Programfiler\\FileZilla FTP Client\\filezilla.exe"=

"c:\\Programfiler\\Skype\\Phone\\Skype.exe"=

"c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Programfiler\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"c:\\Programfiler\\AVG\\AVG8\\avgupd.exe"=

"c:\\Programfiler\\AVG\\AVG8\\avgnsx.exe"=

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"3724:TCP"= 3724:TCP:Blizzard Downloader

"6112:TCP"= 6112:TCP:Blizzard Downloader

 

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\SYSTEM32\DRIVERS\avgldx86.sys [2009-02-21 325128]

R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\SYSTEM32\DRIVERS\avgtdix.sys [2009-02-21 107272]

R1 SASDIFSV;SASDIFSV;c:\programfiler\SUPERAntiSpyware\sasdifsv.sys [2006-10-10 5632]

R1 SASKUTIL;SASKUTIL;c:\programfiler\SUPERAntiSpyware\SASKUTIL.SYS [2007-02-27 51440]

R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-02-21 298264]

R2 fssfltr;FssFltr;c:\windows\SYSTEM32\DRIVERS\fssfltr_tdi.sys [2009-01-24 55152]

R2 fsssvc;Windows Live Tryggere for familien;c:\programfiler\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]

R2 IAANTMon;IAA Event Monitor;c:\programfiler\Intel\Intel Application Accelerator\IAANTmon.exe [2005-06-08 73852]

R2 PRISMSVC;PRISMSVC;c:\windows\SYSTEM32\PRISMSVC.exe [2007-06-27 61526]

R2 SeaPort;SeaPort;c:\programfiler\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]

R3 SASENUM;SASENUM;c:\programfiler\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]

S3 Razerlow;Razerlow USB Filter Driver;c:\windows\SYSTEM32\DRIVERS\Razerlow.sys [2006-04-27 13225]

.

- - - - TOMME PEKERE FJERNET - - - -

 

URLSearchHooks-{9CB65206-89C4-402c-BA80-02D8C59F9B1D} - (no file)

 

 

.

------- Tilleggsskanning -------

.

IE: Compare Prices with &Dealio - c:\programfiler\Dealio\kb106\res\DealioSearch.html

IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\programfiler\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

FF - ProfilePath - c:\documents and settings\Sindre\Programdata\Mozilla\Firefox\Profiles\g8vpeb44.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=

FF - prefs.js: browser.search.selectedEngine - Live Search

FF - prefs.js: browser.startup.homepage - hxxp://www.google.no/

FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=

FF - component: c:\documents and settings\Sindre\Programdata\Mozilla\Firefox\Profiles\g8vpeb44.default\extensions\{fb7d98cb-b228-4ecb-acac-e7101156338e}\components\FFAlert.dll

FF - plugin: c:\programfiler\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

FF - plugin: c:\programfiler\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

FF - plugin: c:\programfiler\Microsoft\Office Live\npOLW.dll

FF - plugin: c:\programfiler\Mozilla Firefox\plugins\np-mswmp.dll

FF - plugin: c:\programfiler\Mozilla Firefox\plugins\npmozax.dll

FF - plugin: c:\programfiler\Windows Live\Photo Gallery\NPWLPG.dll

 

---- FIREFOX POLICIES ----

c:\programfiler\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".no");

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-02-24 23:54:54

Windows 5.1.2600 Service Pack 3 NTFS

 

skanner skjulte prosesser ...

 

skanner skjulte autostart-oppføringer ...

 

skanner skjulte filer ...

 

skanning vellykket

skjulte filer: 0

 

**************************************************************************

.

--------------------- LÅSTE REGISTERNØKLER ---------------------

 

[HKEY_USERS\S-1-5-21-2486274285-3158646006-3547742739-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

"??"=hex:71,70,e8,36,84,c1,b0,db,59,2f,45,e4,a2,16,cf,9a,41,50,4c,d7,a9,45,8b,

09,7e,5a,be,13,8f,e5,4a,71,70,7d,18,19,6b,85,63,21,66,33,14,a5,d7,38,c1,1d,\

"??"=hex:5d,2e,bc,00,9b,07,bc,9c,34,34,87,88,c9,ab,ca,0d

 

[HKEY_USERS\S-1-5-21-2486274285-3158646006-3547742739-1006\Software\SecuROM\License information*]

"datasecu"=hex:1c,1e,39,75,89,b6,f1,c4,be,36,89,29,4a,5d,8e,1b,d8,be,6f,2e,c2,

a8,66,c7,8a,10,45,bd,88,15,a9,2a,3c,ad,7b,bc,aa,c6,20,ea,ac,2d,a4,e5,a2,d5,\

"rkeysecu"=hex:d0,16,e4,04,b9,51,94,1a,49,66,3e,97,99,5f,dd,62

.

--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

 

- - - - - - - > 'winlogon.exe'(572)

c:\programfiler\SUPERAntiSpyware\SASWINLO.dll

.

Tidspunkt ferdig: 2009-02-24 23:56:41

ComboFix-quarantined-files.txt 2009-02-24 22:56:38

ComboFix2.txt 2008-08-14 16:36:01

 

Pre-Run: 63 828 996 096 byte ledig

Post-Run: 63,895,683,072 byte ledig

 

222 --- E O F --- 2009-02-11 23:04:34

[norbat]

Hvis Dealio toolbar ikke er noe du behøver, så avinstaller det

 

Bruk utforsker til å slette følgende mappe:

c:\programfiler\Fellesfiler\ErrorSafe

 

Combofix registerer at Norton ligger på pc'n (selv om det ikke framkommer noen plass i loggen). Du kunne ha kjørt Norton Removal Tool

 

Fungerer ellers alt grei?

[Xarus]

Hvis Dealio toolbar ikke er noe du behøver, så avinstaller det

 

Bruk utforsker til å slette følgende mappe:

c:\programfiler\Fellesfiler\ErrorSafe

 

Combofix registerer at Norton ligger på pc'n (selv om det ikke framkommer noen plass i loggen). Du kunne ha kjørt Norton Removal Tool

 

Fungerer ellers alt grei?

 

PC'n fungerer greit den:) Men er trojanen fjernet nå da eller?

[norbat]

Kjør en skann med det programmet som sa at du hadde trojaner, og se om det fortsatt finner noe.