Trojan Maliframe html

[testuser]

MBAM scan:

Malwarebytes' Anti-Malware 1.35

Databaseversjon: 1907

Windows 6.0.6001 Service Pack 1

 

28.03.2009 21:31:57

mbam-log-2009-03-28 (21-31-57).txt

 

Skanntype: Rask Skann

Objekter skannet: 60242

Tid tilbakelagt: 3 minute(s), 46 second(s)

 

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 0

Registerverdier infisert: 0

Registerfiler infisert: 0

Mapper infisert: 0

Filer infisert: 0

 

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

 

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

 

Registernøkler infisert:

(Ingen mistenkelige filer funnet)

 

Registerverdier infisert:

(Ingen mistenkelige filer funnet)

 

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

 

Mapper infisert:

(Ingen mistenkelige filer funnet)

 

Filer infisert:

(Ingen mistenkelige filer funnet)

 

Combofix scan:

ComboFix 09-03-27.02 - Gutta 2009-03-28 21:36:39.1 - NTFSx86

Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1044.18.2046.1131 [GMT 1:00]

Kjører fra: c:\users\Gutta\Desktop\ComboFix.exe

AV: Symantec AntiVirus *On-access scanning enabled* (Updated)

* Opprettet nytt gjenopprettingspunkt

.

 

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\install.exe

 

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2009-02-28 til 2009-03-28 )))))))))))))))))))))))))))))))))

.

 

2009-03-28 15:15 . 2009-03-28 15:15 <DIR> d-------- c:\program files\Symantec

2009-03-28 15:15 . 2009-03-28 15:15 109,744 --a------ c:\windows\System32\drivers\SYMEVENT.SYS

2009-03-28 15:15 . 2009-03-28 15:15 8,014 --a------ c:\windows\System32\drivers\SYMEVENT.CAT

2009-03-28 15:15 . 2009-03-28 15:15 805 --a------ c:\windows\System32\drivers\SYMEVENT.INF

2009-03-28 15:14 . 2009-03-28 15:14 <DIR> d-------- c:\program files\Symantec AntiVirus

2009-03-28 11:22 . 2009-03-28 11:22 <DIR> d-------- c:\users\Gutta\AppData\Roaming\SUPERAntiSpyware.com

2009-03-28 11:22 . 2009-03-28 11:22 <DIR> d-------- c:\users\All Users\SUPERAntiSpyware.com

2009-03-28 11:22 . 2009-03-28 11:22 <DIR> d-------- c:\programdata\SUPERAntiSpyware.com

2009-03-28 11:22 . 2009-03-28 11:22 <DIR> d-------- c:\program files\SUPERAntiSpyware

2009-03-28 11:21 . 2009-03-28 11:21 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard

2009-03-27 22:34 . 2009-03-27 22:34 <DIR> d-------- c:\users\Gutta\AppData\Roaming\Malwarebytes

2009-03-27 22:34 . 2009-03-26 16:49 15,504 --a------ c:\windows\System32\drivers\mbam.sys

2009-03-27 22:33 . 2009-03-27 22:33 <DIR> d-------- c:\users\All Users\Malwarebytes

2009-03-27 22:33 . 2009-03-27 22:33 <DIR> d-------- c:\programdata\Malwarebytes

2009-03-27 22:33 . 2009-03-27 22:34 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-03-27 22:33 . 2009-03-26 16:49 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys

2009-03-27 15:31 . 2009-03-27 15:31 <DIR> d-------- c:\program files\MSECache

2009-03-26 22:13 . 2009-03-26 22:13 2,915,944 --a------ c:\windows\System32\drivers\appdrv01.sys

2009-03-26 22:13 . 2009-03-26 22:13 304,528 --a------ c:\windows\System32\appdrvrem01.exe

2009-03-26 21:14 . 2009-03-28 18:13 <DIR> d-------- c:\users\Gutta\AppData\Roaming\Pro Cycling Manager 2008

2009-03-26 20:59 . 2009-03-26 21:07 <DIR> d-------- c:\program files\Cyanide

2009-03-26 15:43 . 2009-03-28 20:08 189,472 --a------ c:\windows\System32\PnkBstrB.xtr

2009-03-18 23:06 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll

2009-03-18 23:06 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe

2009-03-18 23:06 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe

2009-03-18 23:06 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll

2009-03-18 23:06 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll

2009-03-18 23:06 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll

2009-03-18 23:06 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl

2009-03-18 23:06 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll

2009-03-18 23:01 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll

2009-03-18 23:00 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll

2009-03-18 23:00 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll

2009-03-18 23:00 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll

2009-03-18 23:00 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll

2009-03-14 10:28 . 2009-03-14 10:28 <DIR> d-------- c:\users\Gutta\AppData\Roaming\Logitech

2009-03-14 10:25 . 2007-04-23 04:00 163,840 --a------ c:\windows\System32\kemutb.dll

2009-03-14 10:25 . 2007-04-23 04:00 135,168 --a------ c:\windows\System32\KemUtil.dll

2009-03-14 10:25 . 2007-04-23 04:00 110,592 --a------ c:\windows\System32\KemWnd.dll

2009-03-14 10:25 . 2007-04-23 04:00 69,632 --a------ c:\windows\System32\KemXML.dll

2009-03-14 10:24 . 2009-03-14 10:24 <DIR> d-------- c:\users\Gutta\AppData\Roaming\InstallShield

2009-03-13 16:27 . 2009-03-13 16:27 <DIR> d-------- c:\users\Gutta\AppData\Roaming\The Creative Assembly

2009-03-13 15:41 . 2009-03-17 21:42 <DIR> d-------- c:\program files\Common Files\Steam

2009-03-13 15:40 . 2009-03-28 21:16 <DIR> d-------- c:\program files\Steam

2009-03-11 14:52 . 2008-12-16 04:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL

2009-03-11 14:52 . 2009-02-09 04:10 2,033,152 --a------ c:\windows\System32\win32k.sys

2009-03-11 14:52 . 2008-11-27 05:43 268,288 --a------ c:\windows\System32\schannel.dll

2009-03-11 14:52 . 2008-12-16 06:31 7,680 --a------ c:\windows\System32\spwmp.dll

2009-03-11 14:52 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\msdxm.ocx

2009-03-11 14:52 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\dxmasf.dll

2009-03-08 22:01 . 2009-03-08 22:01 <DIR> d-------- c:\users\All Users\Google

2009-03-08 22:00 . 2009-03-08 22:00 <DIR> d-------- c:\program files\Google

2009-03-01 17:28 . 2009-03-01 17:27 130,208 -r------- c:\windows\bwUnin-8.1.1.87-8876480SL.exe

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-03-28 19:08 189,472 ----a-w c:\windows\System32\PnkBstrB.exe

2009-03-28 19:08 138,168 ----a-w c:\windows\system32\drivers\PnkBstrK.sys

2009-03-28 18:08 --------- d---a-w c:\programdata\TEMP

2009-03-28 14:16 --------- d-----w c:\programdata\Symantec

2009-03-28 14:15 --------- d-----w c:\program files\Common Files\Symantec Shared

2009-03-26 14:39 75,064 ----a-w c:\windows\System32\PnkBstrA.exe

2009-03-24 20:58 --------- d-----w c:\program files\Java

2009-03-15 09:34 --------- d-----w c:\users\Gutta\AppData\Roaming\Skype

2009-03-15 08:27 --------- d-----w c:\users\Gutta\AppData\Roaming\skypePM

2009-03-14 09:25 --------- d-----w c:\programdata\Logitech

2009-03-14 09:25 --------- d-----w c:\program files\Logitech

2009-03-14 09:25 --------- d-----w c:\program files\Common Files\Logitech

2009-03-14 09:24 --------- d--h--w c:\program files\InstallShield Installation Information

2009-03-12 18:48 --------- d-----w c:\program files\Windows Mail

2009-03-09 04:19 410,984 ----a-w c:\windows\System32\deploytk.dll

2009-02-27 21:09 56 ---ha-w c:\users\All Users\ezsidmv.dat

2009-02-27 21:09 56 ---ha-w c:\programdata\ezsidmv.dat

2009-02-27 21:06 --------- d-----w c:\programdata\Skype

2009-02-27 21:06 --------- d-----w c:\program files\Common Files\Skype

2009-02-27 21:06 --------- d-----r c:\program files\Skype

2009-02-27 15:10 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf

2009-02-27 14:46 --------- d-----w c:\program files\Microsoft Silverlight

2009-02-27 14:37 127,034 ------r c:\windows\bwUnin-8.1.1.50-8876480SL.exe

2009-02-27 14:34 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll

2009-01-03 08:07 81,920 ----a-w c:\windows\System32\frapsvid.dll

2008-09-12 20:21 174 --sha-w c:\program files\desktop.ini

2007-03-16 09:36 345,216 ----a-w c:\windows\inf\WN121T\Mrvw24C.sys

2007-03-16 09:35 316,672 ----a-w c:\windows\inf\WN121T\Mrvw24B.sys

2006-12-15 09:30 28,672 ----a-w c:\windows\inf\WN121T\SetDrv.exe

2006-07-05 09:21 212,992 ----a-w c:\windows\inf\WN121T\CopyWHQLDriver.exe

.

 

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]

"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

"Steam"="c:\program files\Steam\Steam.exe" [2009-03-13 1410296]

"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-03-23 1830128]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13580832]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 92704]

"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-02-13 564496]

"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-02-13 2196240]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]

"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2006-11-22 107112]

"vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2006-11-28 134808]

"RtHDVCpl"="RtHDVCpl.exe" [2007-03-23 c:\windows\RtHDVCpl.exe]

"Skytel"="Skytel.exe" [2007-03-16 c:\windows\SkyTel.exe]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 c:\windows\KHALMNPR.Exe]

 

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-03-01 91440]

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-03-14 692224]

NETGEAR WN121T Smart Wizard.lnk - c:\program files\NETGEAR\WN121T\wn121t.exe [2006-05-15 1708032]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

2008-12-22 12:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{0D75428B-6C06-472A-A873-40D8E10F0A17}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

"TCP Query User{9230050C-297A-42D0-A7FB-2159EA99C110}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer

"UDP Query User{7E75B05F-CA69-4FE6-912E-9E285E92D1C4}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer

"{F61DBC7B-4B6B-43FE-AA23-AB4A8C97C185}"= UDP:c:\program files\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2

"{F873CE6A-D8B2-4D3D-8801-CC41946F80BC}"= TCP:c:\program files\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2

"TCP Query User{31A1B45C-D512-4051-A1A9-73C7C1DE1D2D}c:\\program files\\common files\\pocketsoft\\rtpatch\\autortp\\artpschd.exe"= UDP:c:\program files\common files\pocketsoft\rtpatch\autortp\artpschd.exe:artpschd

"UDP Query User{A47787A2-D3E0-4F7B-9714-26A245CA9027}c:\\program files\\common files\\pocketsoft\\rtpatch\\autortp\\artpschd.exe"= TCP:c:\program files\common files\pocketsoft\rtpatch\autortp\artpschd.exe:artpschd

"TCP Query User{F54D1820-F441-4C50-93CE-6263673A24D0}c:\\program files\\ea sports\\madden nfl 08\\updater.exe"= UDP:c:\program files\ea sports\madden nfl 08\updater.exe:Updater

"UDP Query User{F7292D16-7D1B-48D8-B780-4FAA6F0BF8B9}c:\\program files\\ea sports\\madden nfl 08\\updater.exe"= TCP:c:\program files\ea sports\madden nfl 08\updater.exe:Updater

"{4D296274-2745-42C9-A5BE-A7F5B9372AFD}"= UDP:c:\program files\Activision\Quantum of Solace\JB_LiveEngine_s.exe:Quantum of Solace

"{C7910CE6-6E72-4C1F-80BE-94698C5C8522}"= TCP:c:\program files\Activision\Quantum of Solace\JB_LiveEngine_s.exe:Quantum of Solace

"{A2934C70-01C8-4588-AB1C-4B7E657F8AE0}"= UDP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter

"{0D68CE2B-E6CB-48E9-975B-9934E7BDBD27}"= TCP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter

"TCP Query User{05D9E556-2811-4A66-92BB-EAFEBFFB3829}c:\\program files\\java\\jre6\\bin\\java.exe"= UDP:c:\program files\java\jre6\bin\java.exe:Java Platform SE binary

"UDP Query User{E562D937-759B-4E04-8BE5-3F9D40E29BF1}c:\\program files\\java\\jre6\\bin\\java.exe"= TCP:c:\program files\java\jre6\bin\java.exe:Java Platform SE binary

"{3CC2CFC8-0FD3-49D8-A9A9-3D8DFEAD0751}"= c:\program files\Skype\Phone\Skype.exe:Skype

"{EAC7540C-6D09-44A6-B86F-7D88D4C24EEB}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{DCFD1199-F40E-4D88-B3A9-583CDA75DCBB}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{E2761081-B6C8-46C1-AE5A-36B77189A4FC}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{AC89AEF8-5170-4DDD-A4A3-76B0C5D79563}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{4CF98A3B-5E92-4522-8F12-0A187977B03F}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{0F46A5B2-7BCB-4D92-8666-5955439BC802}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{094693C4-D4E6-42C0-8314-9723B4DF4F28}"= UDP:c:\program files\Cyanide\Pro Cycling Manager - Season 2008\PCM.exe:Pro Cycling Manager - Season 2008

"{6DC1337A-1CCD-4583-990E-B04568CE4F80}"= TCP:c:\program files\Cyanide\Pro Cycling Manager - Season 2008\PCM.exe:Pro Cycling Manager - Season 2008

"{DA1ECECC-40E0-483A-9978-42932C2B7BE1}"= UDP:c:\program files\Cyanide\Pro Cycling Manager - Season 2008\Autorun\Exe\Autorun.exe:Pro Cycling Manager - Season 2008 - AutoRun

"{83E01124-738E-430F-8C83-AAC1543DA0B7}"= TCP:c:\program files\Cyanide\Pro Cycling Manager - Season 2008\Autorun\Exe\Autorun.exe:Pro Cycling Manager - Season 2008 - AutoRun

"{0552B03B-82E3-40D2-8656-517587E2092B}"= UDP:c:\program files\Steam\SteamApps\common\empire total war\Empire.exe:Empire: Total War

"{D56230B1-BD23-4943-98B7-481E6A6F0085}"= TCP:c:\program files\Steam\SteamApps\common\empire total war\Empire.exe:Empire: Total War

"{0147CFAA-84CC-4BCF-8EB7-7A307983FC74}"= UDP:c:\program files\Symantec AntiVirus\Rtvscan.exe:Symantec Antivirus

"{2D098DF7-8711-4034-9E47-C4278F332014}"= TCP:c:\program files\Symantec AntiVirus\Rtvscan.exe:Symantec Antivirus

"{35F97E20-7D39-44CB-850D-E220890A1632}"= UDP:c:\program files\Common Files\Symantec Shared\ccApp.exe:Symantec Email

"{1E89DF09-2E8F-494E-B023-19DA094C2944}"= TCP:c:\program files\Common Files\Symantec Shared\ccApp.exe:Symantec Email

 

R1 appdrv01;Application Driver (01);c:\windows\System32\drivers\appdrv01.sys [2009-03-26 2915944]

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-03-23 9968]

R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-03-23 72944]

R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\System32\drivers\atl01v32.sys [2008-09-12 48128]

R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-03-23 7408]

S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]

S3 MRV6X32U;Marvell TOPDOG 802.11n WLAN Driver for Vista x86 (USB8x);c:\windows\System32\drivers\MRVW24B.sys [2007-03-16 316672]

S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2006-11-28 122008]

 

--- Andre tjenester/drivere lastet i minnet ---

 

*NewlyCreated* - ERASERUTILDRV10910

*NewlyCreated* - NAVENG

*NewlyCreated* - NAVEX15

*NewlyCreated* - SPBBCDRV

*NewlyCreated* - SRTSPX

*NewlyCreated* - SYMEVENT

*NewlyCreated* - SYMREDRV

*Deregistered* - EraserUtilDrv10910

*Deregistered* - SYMREDRV

.

- - - - TOMME PEKERE FJERNET - - - -

 

HKCU-Run-MsgCenterExe - c:\program files\Common Files\Real\Update_OB\RealOneMessageCenter.exe

 

 

.

------- Tilleggsskanning -------

.

uStart Page = hxxp://www.dagbladet.no/

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-28 21:39:42

Windows 6.0.6001 Service Pack 1 NTFS

 

skanner skjulte prosesser ...

 

skanner skjulte autostart-oppføringer ...

 

skanner skjulte filer ...

 

skanning vellykket

skjulte filer: 0

 

**************************************************************************

.

Tidspunkt ferdig: 2009-03-28 21:41:18

ComboFix-quarantined-files.txt 2009-03-28 20:41:16

 

Pre-Run: 160 024 637 440 byte ledig

Post-Run: 160,103,202,816 byte ledig

 

211 --- E O F --- 2009-03-28 10:26:36

[testuser]

Noen som vet hvordan man slår av cookie-søk i Symantec?

[norbat]

Last ned CCleaner. Start programmet. Gå til 'Valg'->'Avansert'. Fjern avkryssingen framfor: "bare slett midlertidige filer......." Klikk på 'Renser' og deretter 'Kjør CCleaner'.

 

Deretter kjører du en skan med Norton for å se om den fanger opp noe.

Ikke surf rundt på nettsider før scanningen er ferdig. Hvis den ikke finner noe, så må du legge merke til hvilke nettsider du er innom og som gir Norton-meldingen.