kender i http://www.search-daily.com/

http://www.eksperten.dk/artikler/1123

PS: Det bliver ikke mig der følger op, da jeg ikke kan tyde div. logs.  :-)

- Jeg er med på en 'lytter' *S*

her er en guide:

Run HijackThis
Click config, click misc tools, click open prozess manager. Search for every instance of C:\WINDOWS\INET10047\SERVICES.EXE and click Kil prozess for each you find.
Click back, click on scan and put a check on the following lines, if they are still there
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://www.search-daily.com/10047/
F1 - win.ini: run=C:\WINDOWS\INET10047\SERVICES.EXE
O2 - BHO: (no name) -
{5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [xp_system]
C:\WINDOWS\INET10047\SERVICES.EXE
O4 - HKCU\..\Run: [xp_system]
C:\WINDOWS\INET10047\SERVICES.EXE
Make sure all browser and all Windows Explorer windows are closed and click on fix.

Reboot
Maybe you need to unhide hidden files and folders.
Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Uncheck the box next to "Hide file extensions for known file types”
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.

Then open an Explorer window and delete these Files and Folders:(if still there)
C:\WINDOWS\INET10047\SERVICES.EXE

Reboot and Download http://www.ccleaner.com/ccdownload.php, install and run it to delete any files from "temp", "tmp" folders (DON`T USE THE ISSUSES TAB). Just start Ccleaner and click: Run Cleaner. This cleaning should be done on a regular basis.

Post a fresh HijackThis log to check.

Please tell me if something is going wrong or didn´t work out. Also please tell me if the removals tools find anything.


-------------------------
rkerr

Feb 16 2005, 10:48 AM
smile.gif Thanks Gnmpf--
Sorry it took so long to get back to this.
Followed your instrctions to a T--think they worked perfectly.

jokkejensen

har pløvet den guide kunne ikke for den til at virke

Men har fundet svaret..
1). installere google toolbar og afinstalere den igen ;-)

forklaring http://www.search-daily.com/10047/ er ikke en vira eller en spyprogram det er en instilling i registerings databasen og den nemmeste at ændre den instilling er at installerer googletoolbar og IE7.0

NB: ... der kan let være andet 'snavs' efterladt !!!

... for en go' ordens skyld; stik os/mig en HiJackThis ->
http://www.spywareinfo.dk/index.htm#/manualer/hijackthis.htm

Bemærk at HiJackThis.exe programmet skal gemmes i en dertil oprettet mappe og IKKE køres direkte fra nettet...

PS: Brug denne version af HJT -> http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis.exe

(Jooo - jeg har 'virus' på hjernen...)

------------------

Det tror jeg ikke har næsten kørt alt for at fjerne det lort men.... man aldig være sikker nok

- nemlig -