Virusangrep HJELP| Malware- combofix log!

[kjetil123]

Har fått angrep fra "Antimalware doctor" eller noe i den duren.

 

Har kjørt Superantispyware fra før av, men uten særlig hell. Så nå har jeg kjørt igjennom MBAM og Combofix.

glemte å lager loggen fra MBAM, men har combofix loggen. hadde vært til stor hjelp om dere kunne se igjennom den og hjelpe meg. har også kjørt et program kallt "rkill"

 

Rkill logg:

 

This log file is located at C:\rkill.log.

Please post this only if requested to by the person helping you.

Otherwise you can close this log when you wish.

Ran as Kjetil on 13.08.2010 at 21:22:36.

 

 

Processes terminated by Rkill or while it was running:

 

 

C:\Users\Kjetil\AppData\Local\gkfhluamk\lnhqhncshdw.exe

C:\Users\Kjetil\Downloads\rkill.com

C:\Windows\system32\conime.exe

 

 

Rkill completed on 13.08.2010 at 21:22:38.

ComboFix.txt

[norbat]

Åpne notisblokk og kopier inn det som står i fet skrift under, lagre fila på skrivebordet som CFScript.txt.

Dra deretter fila over Combofix-iconet. Combofix vil starte igjen. Post loggen.

 

File::

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wwqqll2wqq.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q7lglggb0.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqll1vvqqla.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f2avkk1vvq.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q0lg0a0v.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fvvqf0a0.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7avakvv2f0.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq6aavk4.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvvlb5lbbv.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qg6bbvblgvv.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\d2y981ny.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g6bbvl5g1.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6qlgg7b.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vvqffvava76.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qka6qvqvv6.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qffvk6ffqvf.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\av1qkkfv98q.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pkaa1kkffaq.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6a7vpkk.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\shsshh1c9.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chhnxsx74.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kaav1pkkfv.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kkffappkkf.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\k1vvppkaa.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlaa1llggaq.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ffvvqf0a0.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a1llffaq.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqa2kfkfv.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\apavppk1akk.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fa1auupf98.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gbqq1bbvvqg.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6ggbqql.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\p82kfkfvvpf.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a6va2f5kv.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kf2ppf7v.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7ffaa2f.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6avavak.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6pa5kkf.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1zzuuoe.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iddyn9i0dyy.exe

c:\users\Kjetil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yy7tnii7dyt.exe

 

dds::

uInternet Settings,ProxyServer = http=127.0.0.1:6522

 

 

Oppdater MBAM og kjør en ny rask skann. Post loggen (loggene finner du under fanearket 'Logger')

[norbat]

Fortsatt problemer?