Äcklig trojan

har tyvärr fått 4 trojaner internet funkar segt och när jag söker på google, på t.ex. sköte och klickar på en länk, kommer jag till någon konstig sida istället för den jag vill in på. och ibland kan dator helvettet stänga av sig :S jag körde en hel scan me f-secure, men som vanligt bytte dom namn.

Kan nån vänlig själ hjälpa mig att få bort dom. körde en såndär hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:00, on 2008-11-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Telia\Anti-Virus\fsgk32st.exe
C:\Program\Telia\Anti-Virus\FSGK32.EXE
C:\Program\Telia\Common\FSMA32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program\Telia\Common\FSMB32.EXE
C:\Program\Telia\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program\Telia\Common\FAMEH32.EXE
C:\Program\Telia\Anti-Virus\fsqh.exe
C:\Program\Telia\Anti-Virus\fssm32.exe
C:\Program\Telia\FSAUA\program\fsaua.exe
C:\Program\Telia\FWES\Program\fsdfwd.exe
C:\Program\Telia\FSAUA\program\fsus.exe
C:\Program\Telia\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\TBPanel.exe
C:\Program\Telia\Common\FSM32.EXE
C:\Program\Telia\FSGUI\fsguidll.exe
C:\Program\Microsoft IntelliType Pro\itype.exe
C:\Program\Delade filer\Real\Update_OB\realsched.exe
C:\Program\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Windows Live\Messenger\MsnMsgr.Exe
C:\Program\uTorrent\uTorrent.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\DAEMON Tools Lite\daemon.exe
C:\Program\Logitech\SetPoint\SetPoint.exe
C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\Winamp\winamp.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O4 - HKLM\..\Run: [Gainward] C:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program\Telia\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program\Telia\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [itype] "c:\Program\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [brastk] brastk.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program\steam\steam.exe" -silent
O4 - HKCU\..\Run: [µTorrent] "C:\Program\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4775E900-4C2B-4D4D-AA4A-274F6B30EE5A}: NameServer = 195.67.199.27,195.67.199.28
O20 - AppInit_DLLs: karna.dat
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program\Telia\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program\Telia\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program\Telia\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program\Telia\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5189 bytes

Ladda upp loggen här: http://www.hijackthis.de/

Sen kan du väl köra med program som Superantisyware, Spybot Search and Destroy m.fl till att börja med och se om de hittar något..

Jag gjorde som barbofetto du har två otäcka saker

O4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe
Extremely nasty
Must be fixed! Added by the ZAPCHAS-V TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in


O20 - AppInit_DLLs: karna.dat
Extremely nasty
This entry was classified from our visitors as bad.

och O4 - HKLM\..\Run: [brastk] brastk.exe

malwarebytes fixar dessa

Gör som 927 säger; ladda ner, uppdatera och scanna 2 gånger med malwarebytes och posta sedan en ny HJT logg här.

http://www.download.com/3001-8022_4-10896905.html?spi=beb8608683f582b0fd711c495b5af6f8 &part=dl-10804572

Tja se om du kan på något sett ladda ner och installera ett bra antivirus tex kaspersky ad-adware om inget funkar blir det nog bara att formatera

IT-säk -> Windows

/Mod