O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O3 - Toolbar: Adobe PDF - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully.Ĭ:\Program Files\Google\Update\GoogleUpdate.exeĬ:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeĬ:\Program Files\Bonjour\mDNSResponder.exeĬ:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exeĬ:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exeĬ:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exeĬ:\Program Files\Common Files\LightScribe\LSSrvc.exeĬ:\Program Files\CyberLink\Shared Files\RichVideo.exeĬ:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exeĬ:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exeĬ:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exeĬ:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeĬ:\Program Files\Evoluent\VMouse\EvoMouExec.exeĬ:\Program Files\Plustek\OpticFilm 7200\QuickScan.exeĬ:\Program Files\SqueezeCenter\SqueezeTray.exeĬ:\Program Files\CA\eTrust Internet Security Suite\ccprovsp.exeĬ:\Program Files\eTrust PestPatrol\PPCtlPriv.exeĬ:\Program Files\Trend Micro\HijackThis\HijackThis.exe Time elapsed: 2 hour(s), 34 minute(s), 26 second(s) The log files from Anti-Malware as well as Hijack-this are posted below.
However, the userinit.exe keeps coming up as infected even after being 'cleaned' by the Anti-malware, and there's still a problem with my windows update settings (showing windows updates as turned off).
My PC has been infected by trojans a few days ago (FakeAlert, Kollah XP, Antispyware 2008, Vundo etc), and your fantastic product has done a great job of removing nearly all offending elements.
0 kommentar(er)
