BGMonitor.exe ved oppstart [Logger og Skjermbilde]

SPL · #1 4de 2009 Mar, 15:35

Verken SuperAntiSpyware eller Malwarebites er pickinng opp dette. Basert på det jeg har sett fra google dette programmet er ganske ille. Er det noen måte å ta seg av dette uten å måtte formatere systemet?

Logger:

Code:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 03/04/2009 at 01:37 Application Version: 4.25.1014 Core Rules Database Version: 3784 Trace Rules Database Version: 1741 Scan type: Quick Scan Total Scan Time: 00:20:20 Memory eks skannet: 388 Memory trusler oppdaget: 0 Registry eks skannet: 397 Registry trusler oppdages: 0 File eks skannet: 14817 File trusler oppdages: 4 Adware.Tracking Cookie C: \ Documents and Settings \ Administrator \ Cookies \ administrator @ atdmt [2]. txt C: \ Documents and Settings \ Administrator \ Cookies \ administrator @ tribalfusion [2]. txt C: \ Documents and Settings \ Administrator \ Cookies \ administrator @ DoubleClick [1]. txt C: \ Documents and Settings \ Administrator \ Cookies \ administrator@ad.yieldmanager [2]. txt

-------------

Code:

Malwarebytes 'Anti-Malware 1.34 Database versjon: 1817 Windows 5.1.2600 Service Pack 3 3/4/2009 2:12:49 PM mbam-log-2009-03-04 14-12-49) (. Txt Skanntype: Rask Skann Objekter skannet: 58816 Tid tilbakelagt: 5 minute (s), 34 second (s) Minneprosesser infisert: 0 Minnemoduler infisert: 0 Registernøkler infisert: 0 Registerverdier infisert: 0 Registerfiler infisert: 0 Mapper infisert: 0 Filer infisert: 0 Minneprosesser infisert: (Ingen skadelige elementer funnet) Minnemoduler infisert: (Ingen skadelige elementer funnet) Registernøkler infisert: (Ingen skadelige elementer funnet) Registerverdier infisert: (Ingen skadelige elementer funnet) Registerfiler infisert: (Ingen skadelige elementer funnet) Mapper infisert: (Ingen skadelige elementer funnet) Filer infisert: (Ingen skadelige elementer funnet)

-----

Code:

Logfile of Trend Micro HijackThis v2.0.2 Scan lagret på 2:14:26 PM, on 3/4/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C: \ WINDOWS \ system32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ Explorer.EXE C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE C: \ WINDOWS system32 \ \ hkcmd.exe C: \ WINDOWS \ wt \ Updater \ wcmdmgr.exe C: \ Program Files \ Java \ jre6 \ bin \ jusched. exe C: \ WINDOWS \ system32 \ CTFMON.EXE C: \ Programfiler \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe C: \ Program Files \ \ Ahead \ Lib \ NMBgMonitor.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware. exe C: \ Program Files \ Airlink101 \ AWLL3028 \ RtWLan.exe C: \ Programfiler \ WinZip \ WZQKPICK.EXE C: \ Program Files \ \ Ahead \ Lib \ NMIndexStoreSvr.exe C: \ Programfiler \ Fellesfiler \ Ahead \ Lib \ NMIndexingService.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = www.google.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
 http://www.update.microsoft.com/wind...?1186278166578
Ø20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Google Updater Service (gusvc) - Google - C: \ Programfiler \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 -- Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: NMIndexingService - Nero AG - C: \ Program Files \ \ Ahead \ lib \ NMIndexingService.exe - End of file - 5139 bytes

Jeg har deaktivert BgMonitor bruker ccleaners Start Up funksjon (ikke sikker på om dette er nok)
Skjermbilde:

**Hybr! D** · #2 4 mars 2009, 15:39

Det er ikke malware. Det er en del av Nero Speideren, avinstallere den.