.
.
Jeg sidder på arbejde med Win-Me PC, hvor der i task manageren hele tiden optræder mindst en “lexplorer” entry. Antallet af lexplorer svarer ikke til antallet af åbne vinduer! De bliver bare ved med at akkumulere. Jeg har været oppe på 8 eller 9 på en gang.
Jeg har kørt diverse programmer: Adaware, Spybots etc… , uden det har haft nogen effekt.
.
.
Her er en log:
Logfile of HijackThis v1.97.7
Scan saved at 11:19:29, on 08-07-2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:/WINDOWS/SYSTEM/KERNEL32.DLL
C:/WINDOWS/SYSTEM/MSGSRV32.EXE
C:/WINDOWS/SYSTEM/MPREXE.EXE
C:/WINDOWS/SYSTEM/MSTASK.EXE
C:/WINDOWS/EXPLORER.EXE
C:/WINDOWS/TASKMON.EXE
C:/WINDOWS/SYSTEM/SYSTRAY.EXE
C:/WINDOWS/SYSTEM/SISTRAY.EXE
C:/WINDOWS/SYSTEM/KHOOKER.EXE
C:/WINDOWS/SYSTEM/DDHELP.EXE
C:/PROGRAMMER/WEBROOT/SPY SWEEPER/SPYSWEEPER.EXE
C:/WINDOWS/SYSTEM/RESTORE/STMGR.EXE
C:/WINDOWS/SYSTEM/WMIEXE.EXE
C:/PROGRAMMER/MICROSOFT OFFICE/OFFICE/FINDFAST.EXE
C:/PROGRAMMER/INTERNET EXPLORER/IEXPLORE.EXE
C:/WINDOWS/SYSTEM/PSTORES.EXE
C:/PROGRAMMER/INTERNET EXPLORER/IEXPLORE.EXE
C:/PROGRAMMER/INTERNET EXPLORER/IEXPLORE.EXE
//S5/MYDOCUMENTS/ADMINISTRATOR/HIJACKTHIS.EXE
R0 - HKCU/Software/Microsoft/Internet Explorer/Main,Start Page = http://www.jobnet.dk
R0 - HKLM/Software/Microsoft/Internet Explorer/Main,Start Page = http://www.jobnet.dk
R0 - HKCU/Software/Microsoft/Internet Explorer/Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:/PROGRAMMER/ADOBE/ACROBAT 5.0/READER/ACTIVEX/ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:/Programmer/Spybot - Search & Destroy/SDHelper.dll
O3 - Toolbar: &Radio; - {8E718888-423F-11D2-876E-00A0C9082467} - C:/WINDOWS/SYSTEM/MSDXM.OCX
O4 - HKLM/../Run: [ScanRegistry] C:/WINDOWS/scanregw.exe /autorun
O4 - HKLM/../Run: [TaskMonitor] C:/WINDOWS/taskmon.exe
O4 - HKLM/../Run: [PCHealth] C:/WINDOWS/PCHealth/Support/PCHSchd.exe -s
O4 - HKLM/../Run: [SystemTray] SysTray.Exe
O4 - HKLM/../Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM/../Run: [SiS Tray] C:/WINDOWS/SYSTEM/SISTRAY.EXE
O4 - HKLM/../Run: [SiS KHooker] C:/WINDOWS/SYSTEM/khooker.exe
O4 - HKLM/../RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM/../RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM/../RunServices: [*StateMgr] C:/WINDOWS/System/Restore/StateMgr.exe
O4 - HKCU/../Run: [SpySweeper] “C:/Programmer/Webroot/Spy Sweeper/SPYSWEEPER.EXE” /0
O4 - HKCU/../RunServices: [SpySweeper] “C:/Programmer/Webroot/Spy Sweeper/SPYSWEEPER.EXE” /0
O4 - Startup: Microsoft Office.lnk = C:/Programmer/Microsoft Office/Office/OSA9.EXE
O9 - Extra button: Messenger (HKLM)
O9 - Extra ‘Tools’ menuitem: MSN Messenger Service (HKLM)
O12 - Plugin for .spop: C:/PROGRA~1/INTERN~1/Plugins/NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38106.2406481481
