So. my nod32 alerted me about spynetserver.exe file
and told me it putted it in a quarantine, but ever sens then it have popped up every second
my '^'-key do not work properly either, some times the symbol don't come up on the screen.
of course I scaned my computer whit nod32 and deleted what it found but it still warns about SpyNet
When i did HJT and looked it up on theirs website i 'fix checks' on every line whit 'spynetserver.exe' (3)
Now it will not appear on the list long but nod32 still alerts about it
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:19:19 PM, on 9/12/2029
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:ProgramDelade filerAppleMobile Device Supportbin
AppleMobileDeviceService.exe
C:ProgramESETESET Smart Securityekrn.exe
C:ProgramNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:ProgramNeroNero8Nero BackItUpNBService.exe
C:ProgramNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
C:WINDOWSsystem32IoctlSvc.exe
C:ProgramMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:ProgramNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:WINDOWSsystem32svchost.exe
C:ProgramNVIDIA CorporationNetworkAccessManagerbinnSvcAppFlt.exe
C:ProgramNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:ProgramAdobeAcrobat 9.0AcrobatAcrotray.exe
C:ProgramMicrosoft OfficeOffice12GrooveMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:ProgramTrueCryptTrueCrypt.exe
C:ProgramMozilla Firefoxfirefox.exe
C:ProgramuTorrentuTorrent.exe
C:Programfoobar2000foobar2000.exe
C:ProgramMicrosoft OfficeOffice12WINWORD.EXE
C:ProgramEsetESET Smart Securityegui.exe
C:ProgramFiregraphic 10Firegraphic.exe
C:ProgramTrend MicroHijackThisHijackThis.exe
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Länkar
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:ProgramDelade filerAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:ProgramSPYBOT~SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -
C:ProgramMicrosoftSearch Enhancement PackSearchHelperSEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:ProgramMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:ProgramJavajre1.6.0_07binssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll
O4 - HKLM.Run: [nwiz] nwiz.exe /install
O4 - HKLM.Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32
NvMcTray.dll,NvTaskbarInit
O4 - HKLM.Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM.Run: [egui] 'C:ProgramESETESET Smart Securityegui.exe' /hide /waitservice
O4 - HKLM.Run: [AdobeCS4ServiceManager] 'C:ProgramDelade filerAdobeCS4ServiceManagerCS4ServiceManager.exe' -launchedbylogin
O4 - HKLM.Run: [Adobe Acrobat Speed Launcher] 'C:ProgramAdobeAcrobat 9.0AcrobatAcrobat_sl.exe'
O4 - HKLM.Run: [Acrobat Assistant 8.0] 'C:ProgramAdobeAcrobat 9.0AcrobatAcrotray.exe'
O4 - HKLM.Run: [GrooveMonitor] 'C:ProgramMicrosoft OfficeOffice12GrooveMonitor.exe'
O4 - HKCU.Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU.Run: [TrueCrypt] 'C:ProgramTrueCryptTrueCrypt.exe' /q preferences
O4 - HKCU.Run: [amsn] C:ProgramaMSNamsn.exe
O4 - HKUSS-1-5-19.Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUSS-1-5-20.Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-18.Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT.Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:ProgramDelade filerAdobeAcrobatActiveXAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:ProgramMI1933~1Office12EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:ProgramWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:ProgramWindowsLiveWriterWriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:ProgramMI1933~1Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:ProgramMI1933~1Office12ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:ProgramMI1933~1Office12REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:ProgramSPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:ProgramSPYBOT~1SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:ProgramMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:ProgramDELADE~1SkypeSKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:ProgramDelade filerAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - G:SpielDragon Agebin_shipDAUpdaterSvc.Service.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:ProgramESETESET Smart SecurityEHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:ProgramESETESET Smart Securityekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:ProgramDelade filerMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:ProgramNVIDIA CorporationNetworkAccessManagerbinnSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:ProgramNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:ProgramNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:ProgramDelade filerNeroLibNMIndexingService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:ProgramNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:ProgramNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:WINDOWSsystem32IoctlSvc.exe
--
End of file - 8638 bytes