Pop-Ups hjelp med fjærning

[Megnus]

Jeg har vært uheldig med å registrere meg på en side som jeg ikke skulle registrert meg på. Etter det får jeg stadig pop-up. Hvordan fjærner jeg dette?

 

Prøvde meg på en liten registersøk, men tviler på resultatet av det ble noe å samle på =P

 

Shot at 2007-07-22

 

Edit: Noe skrifeleif i emnetittelen. . lol. .pip-ups..

Endret 24. juli 2007 av Megnus

[Lukilock]

Legg ut en HiJackThis logg så ser vi om det er noe mystisk på PCen din.

[Megnus]

sånn?

Klikk for å se/fjerne innholdet nedenfor

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:31:06, on 22.07.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Programfiler\Analog Devices\Core\smax4pnp.exe

C:\Programfiler\Analog Devices\SoundMAX\Smax4.exe

C:\Programfiler\Creative\Shared Files\Module Loader\DLLML.exe

C:\Programfiler\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe

C:\Programfiler\ASUS\AASP\1.00.01\aaCenter.exe

C:\Programfiler\ASUS\Ai Suite\AiNap\AiNap.exe

C:\Programfiler\Java\jre1.6.0_01\bin\jusched.exe

C:\Programfiler\SyncroSoft\Pos\H2O\cledx.exe

C:\Programfiler\QuickTime\qttask.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Creative\SBAudigy4\Entertainment Center\RcMan.exe

C:\Programfiler\DAEMON Tools\daemon.exe

C:\Programfiler\MSN Messenger\MsnMsgr.Exe

C:\Programfiler\Microsoft ActiveSync\wcescomm.exe

C:\Programfiler\ASUS WiFi-AP Solo\RtWLan.exe

C:\PROGRA~1\MICROS~2\rapimgr.exe

C:\Programfiler\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Programfiler\Mobydock DX\Mobydock.exe

C:\Programfiler\MSN Messenger\usnsvc.exe

C:\Programfiler\Azureus\Azureus.exe

C:\WINDOWS\explorer.exe

C:\Programfiler\Internet Explorer\IEXPLORE.EXE

C:\Programfiler\Internet Explorer\IEXPLORE.EXE

C:\Programfiler\Internet Explorer\IEXPLORE.EXE

C:\Programfiler\Gran Paradiso\firefox.exe

C:\Documents and Settings\Megnus\Skrivebord\HiJackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Fellesfiler\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [soundMAXPnP] C:\Programfiler\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [soundMAX] "C:\Programfiler\Analog Devices\SoundMAX\Smax4.exe" /tray

O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Programfiler\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Programfiler\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"

O4 - HKLM\..\Run: [CTSysVol] C:\Programfiler\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe /r

O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [AsusServiceProvider] C:\Programfiler\ASUS\AASP\1.00.01\aaCenter.exe

O4 - HKLM\..\Run: [Ai Nap] "C:\Programfiler\ASUS\Ai Suite\AiNap\AiNap.exe"

O4 - HKLM\..\Run: [ATITool] "C:\Programfiler\ATITool\ATITool.exe" -s

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_01\bin\jusched.exe"

O4 - HKLM\..\Run: [H2O] C:\Programfiler\SyncroSoft\Pos\H2O\cledx.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe

O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot

O4 - HKLM\..\Run: [MODE FREE BIRD SURF] C:\Documents and Settings\All Users\Programdata\beep axis mode free\logo jugs.exe

O4 - HKLM\..\Run: [Move hide skip surf] C:\Documents and Settings\All Users\Programdata\Base long surf beep\less file mess.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RemoteCenter] "C:\Programfiler\Creative\SBAudigy4\Entertainment Center\RcMan.exe"

O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programfiler\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKCU\..\Run: [MsnMsgr] "C:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programfiler\Microsoft ActiveSync\wcescomm.exe"

O4 - HKCU\..\Run: [bend rdr] C:\DOCUME~1\Megnus\PROGRA~1\BIRDGR~1\tool show.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll

O9 - Extra 'Tools' menuitem: Opprett mobil favoritt... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1183168287458

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FELLES~1\Skype\SKYPE4~1.DLL

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programfiler\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

 

--

End of file - 7205 bytes

[Megnus]

ingen som kan hjelpe?

[Megnus]

bump ...

[Gjest Slettet+oiasdf79]

Hvis du går inn her: https://www.diskusjon.no/index.php?showforum=131 og legger loggfilen under topic "Noen som kan se over HijackThis logg for meg" eller noe i den duren så får du nok hjelp..

 

Wiken..

[1915]

feilpostet

 

den skal inn HIT

Endret 25. juli 2007 av 1915

[Megnus]

skjønnte det. . sorry

Endret 25. juli 2007 av Megnus

[berxter]

Uten at jeg har helt oversikten over hva som foregår på maskina di; det er særlig

 

O4 - HKCU\..\Run: [bend rdr] C:\DOCUME~1\Megnus\PROGRA~1\BIRDGR~1\tool show.exe

O4 - HKLM\..\Run: [MODE FREE BIRD SURF] C:\Documents and Settings\All Users\Programdata\beep axis mode free\logo jugs.exe

O4 - HKLM\..\Run: [Move hide skip surf] C:\Documents and Settings\All Users\Programdata\Base long surf beep\less file mess.exe

 

som for meg er ukjente, men kanskje ikke for deg. Synes de ser småskumle ut jeg...

Dog, det finnes standardverktøy og medisin.

Superantispyware: http://www.superantispyware.com/

Adaware: http://www.lavasoftusa.com/products/ad_aware_free.php

 

Installer dem, oppdater dem, IKKE kjør i normal modus.

Oppdater Antivirusprogrammet ditt

 

Restart i safe mode (f8 under booet) uten nettverk.

Kjør alle 3; SAS, Adaware, AV.

 

Så tenker jeg det blir bedre. Pøs på med en runde ccleaner (google) nå og da.

 

Bernt K

[norbat]

Fortsett gjerne i din post: https://www.diskusjon.no/index.php?showtopic=803035

[berxter]

Sorry, la ikke merke til at du var i gang med den samme.

Når du nå er kommet i gang med den trekker jeg meg stille tilbake.

 

 

Bernt K