Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Can`t remove aurora stuff ...


  • Please log in to reply

#1
lc.chris

lc.chris

    Member

  • Member
  • PipPip
  • 21 posts
Hey guys i got "big" problem with none of my programms i remove spy or adware i can remove this aurora and abetterinternet or vx2 [bleep] ....

I use adaware and spyware S&D (also hijackthis! )

the programms show me that these files , directories and reg keys are identified , remove them but 1 sec. after they re appear .... that suxx ..

here is my hijackthis logfile maybe you guys can help me .....

(sorry for my bad english i am a german ^^ )


C:\WINDOWS\system32\spoolsv.exe
C:\Programme\QuickTime\qttask.exe
c:\windows\system32\dxmvbwp.exe
E:\Programme\oOffice\program\soffice.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
E:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\chris\LOKALE~1\Temp\Rar$EX00.281\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ogame.de/
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: WinStat - {0BAE99AF-A9F7-4f7e-9C72-2C1CC81BE0FF} - C:\WINDOWS\System32\WinStat13.dll
O2 - BHO: AuroraHandlerObj Class - {4AA870AC-8427-42a4-B92E-ECD956197489} - C:\WINDOWS\AuroraHandler.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] E:\Programme\corel12\Languages\DE\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=081105 serial=dr12wex-1504397-kty lang=DE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ehe] C:\WINDOWS\System32\ehe.exe
O4 - HKLM\..\Run: [rpdsnki] c:\windows\system32\dxmvbwp.exe r
O4 - HKCU\..\Run: [wuro] C:\PROGRA~1\COMMON~1\wuro\wurom.exe
O4 - Startup: OpenOffice.org 1.0.2.lnk = E:\Programme\oOffice\program\quickstart.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - E:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - E:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: 50 FREE MP3s! - {686C970F-1D7D-4469-85D1-4B35763B56CC} - http://www.emusic.com?fref=149133 (file missing)
O15 - Trusted Zone: http://www.neededware.com
O16 - DPF: NDWCab - http://www.neededware.com/ndw4.cab
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
  • 0

Advertisements


#2
LIONWOODS

LIONWOODS

    Member

  • Member
  • PipPipPip
  • 122 posts
Hey there!

Since this is a virus/malware/crapware related post, I believe it should be posted in the appropriate forum, such as the malware forum. Just go there and post your log there. An expert will assist you. :tazz:
  • 0

#3
lc.chris

lc.chris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
thx ... i just found that forum and i dind`t know where to post my problems
  • 0

#4
LIONWOODS

LIONWOODS

    Member

  • Member
  • PipPipPip
  • 122 posts
Do you mean to say that you found the forum, but STILL don't know where to post? :tazz:. If so, just post a HJT log inside the Malware forum and that's it. ;)
  • 0

#5
lc.chris

lc.chris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
no it`s fine i posted my prob in the malware forum ...
  • 0

#6
LIONWOODS

LIONWOODS

    Member

  • Member
  • PipPipPip
  • 122 posts
Good. Let me know how things went! :wink:
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP