R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = O4 - HKCU\.C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXEĬ:\PROGRAM FILES\KEYMAESTRO\MULTIMEDIA KEYBOARD\MMKEYBD.EXEĬ:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXEĬ:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXEĬ:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXEĬ:\PROGRAM FILES\KEYMAESTRO\MULTIMEDIA KEYBOARD\TRAYMON.EXEĬ:\PROGRAM FILES\KEYMAESTRO\ONSCREEN DISPLAY\OSD.EXEĬ:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\1033\MSOFFICE.EXEĬ:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OUTLOOK.EXEĬ:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXEĬ:\PROGRAM FILES\CRAZY BROWSER\CRAZY BROWSER.EXE
O4 - HKLM\.\RunServices: "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe" O4 - HKLM\.\RunServices: "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe" Start applet X of Control Panel (X any CPL filename) rundll32.exe shell32.dll,ControlRunDLL intl.cpl,4.
#Rundll32 exe powrprof dll loadcurrentpwrscheme windows
O4 - HKLM\.\RunServices: "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg RunDll32 executable can be used to start various Windows utilities like the Control Panel. O4 - HKLM\.\RunServices: C:\WINDOWS\SYSTEM\STIMON.EXE O4 - HKLM\.\RunServices: C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE O4 - HKLM\.\RunServices: C:\WINDOWS\System\Restore\StateMgr.exe logfile of hijackthis v1.99.1 scan saved at 00:07:33, on platform: windows me (win9x ) msie: internet explorer v6.00 sp1 (.1106) running processes: c:windowssystemkernel32.dll c:windowssystemmsgsrv32.exe c:windowssystemspool32.exe c:windowssystemmprexe. O4 - HKLM\.\RunServices: C:\WINDOWS\SYSTEM\ssdpsrv.exe O4 - HKLM\.\RunServices: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\.\Run: C:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT" O4 - HKLM\.\Run: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\.\Run: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start O4 - HKLM\.\Run: "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime If the hibernation is enabled, the same command actually puts the computer in hibernation instead of sleeping. O4 - HKLM\.\Run: RUNDL元2.EXE NvQTwk,NvCplDaemon initialize rundll32.exe powrprof.dll,SetSuspendState 0,1,0. O4 - HKLM\.\Run: C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE O4 - HKLM\.\Run: C:\Program Files\Common Files\Sony Shared\OpenMG\OmgStartup.exe O4 - HKLM\.\Run: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme Can you give us a bit more background on. O4 - HKLM\.\Run: C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s Your log is clean, and a general rundll32.exe problem like that isnt usually due to malicious infections anyway. Whether or not you need to run this program on startup must be. O4 - HKLM\.\Run: C:\WINDOWS\scanregw.exe /autorun RUNDL元2.EXE POWRPROF.DLL Information This is a valid program, but it is up to you whether or not you want it to run on startup. O2 - BHO: FCBHOBHO Class - C:\Program Files\Norton AntiVirus\NavShExt.dll R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSIE: Internet Explorer v6.00 SP1 (.1106)Ĭ:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXEĬ:\PROGRAM FILES\SONY\VAIO ACTION SETUP\VASERV.EXEĬ:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXEĬ:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXEĬ:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE
I don't see the instrctions to remove the trojan on the link that you have provided me.
0 kommentar(er)
