Wisdstr.exe (Wisdstr) Trojan Virus Filoplysninger
 | Wisdstr.exe er en farlig fil, der skaber aktiviteter på en brugers computer, der kan være særdeles uønsket. Denne fil er usikkert. |
|---|
Type: Trojan Virus (Klik her for at lære mere)
Beliggenhed: C: \ WINDOWS \ system32 \ wisdstr.exe (Klik her for at lære, hvordan du finder)
Risiko Niveau: Moderat (Læs mere om Risk Levels)
Det anbefales, at du fjerner skadelig software som f.eks Wisdstr.exe fra computeren øjeblikkeligt. Nedenfor er vores anbefalede værktøj til fjernelse til Wisdstr.exe. Værktøjet er blevet vurderet til 5 køer ud af 5 af Tucows og er tidligere CNET's Editor's Choice. Du er velkommen til at downloade den nedenfor.
Manual Removal - Wisdstr.exe kan fjernes ved at analysere dine HijackThis log. Du er velkommen til at sende din hijackthis log nedenfor, hvis du har brug for hjælp til at analysere det. Hijackthis vil være ideel til manuelt at fjerne virus
Klik her for at lære om HijackThis. Hvis du vil hente HijackThis, klik venligst HER.
Wisdstr.exe File Details --
File Type - EXE - Wisdstr.exe er en eksekverbar fil
Først identificeret - 17 august 2009
Almindelige spørgsmål --
1. Hvad er en computervirus? (Click here to view)
2. Hvordan klarede jeg mig denne computer virus? (Click here to view)
3. Hvilke fælles symptomer viser, at min computer kan være inficeret? (Click here to view)
4. Hvad er nogle antivirus-og antispyware-programmer, som jeg kan bruge til at fjerne virus og spyware? (Click here to view)
Vi anbefaler, at du følger vores gode råd om sikkerhed, så du kan holde din computer ren. Klik her for at se vores gode råd om sikkerhed
Bedes skrive kommentarer nedenfor. Dine kommentarer er både nyttigt for besøgende og for os.
Denne løsning var sendt oven på Mandag, August 17th, 2009 henne 5:32 og er gemt under Suspicious File. Du kan følge alle svar til denne post via RSS 2.0 feed. Du kan efterlade et svar, eller styrekugle fra dit eget websted.
Marcela 16 september 2009 kl 5:21
kan nogen hjælpe mig med det highjack log her er loggen
På forhånd tak
Scan gemt på 1:17:42, den 9/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Kørende processer:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ Services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ Programmer \ Kaspersky Lab \ Kaspersky Internet Security 7.0 \ avp.exe
C: \ Programmer \ Java \ jre6 \ bin \ jqs.exe
C: \ Programmer \ Linksys \ Linksys Updater \ bin \ LinksysUpdater.exe
C: \ Programmer \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE
C: \ WINDOWS \ system32 \ java.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Programmer \ Common Files \ Pure Networks Shared \ Platform \ nmsrvc.exe
C: \ WINDOWS \ system32 \ SearchIndexer.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Programmer \ ATI Technologies \ ATI Control Panel \ iTunes \ iTunesHelper.exe
C: \ Programmer \ Common Files \ Logitech \ QCDriver \ LVCOMS.EXE
C: \ Programmer \ Logitech \ ImageStudio \ LogiTray.exe
C: \ Programmer \ QuickTime \ QTTask.exe
C: \ Programmer \ Hp \ HP Software Update \ HPWuSchd2.exe
C: \ Programmer \ Kaspersky Lab \ Kaspersky Internet Security 7.0 \ avp.exe
C: \ Programmer \ Common Files \ Pure Networks Shared \ Platform \ nmctxth.exe
C: \ Programmer \ Java \ jre6 \ bin \ jusched.exe
C: \ WINDOWS \ system32 \ braviax.exe
C: \ WINDOWS \ system32 \ CTFMON.EXE
C: \ Programmer \ Messenger \ MsnMsgr.Exe
C: \ Programmer \ AIM6 \ aim6.exe
C: \ Programmer \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe
C: \ Programmer \ HP \ Digital Imaging \ bin \ hpqtra08.exe
C: \ Programmer \ Windows Desktop Search \ WindowsSearch.exe
C: \ Programmer \ HP \ Digital Imaging \ bin \ hpqSTE08.exe
C: \ Programmer \ AIM6 \ aolsoftware.exe
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ Programmer \ Internet Explorer \ IEXPLORE.EXE
C: \ WINDOWS \ System32 \ msiexec.exe
C: \ WINDOWS \ system32 \ SearchProtocolHost.exe
C: \ Programmer \ Trend Micro \ HijackThis \ Run
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
O4 - HKLM \ .. \ Run: [iTunesHelper] C: \ Programmer \ ATI Technologies \ ATI Control Panel \ iTunes \ iTunesHelper.exe
O4 - HKLM \ .. \ Run: [UpdateManager] "C: \ Programmer \ Common Files \ Sonic \ Update Manager \ sgtray.exe" / r
O4 - HKLM \ .. \ Run: [LVCOMS] C: \ Programmer \ Common Files \ Logitech \ QCDriver \ LVCOMS.EXE
O4 - HKLM \ .. \ Run: [LogitechImageStudioTray] C: \ Programmer \ Logitech \ ImageStudio \ LogiTray.exe
O4 - HKLM \ .. \ Run: [NvCplDaemon] "C: \ Programmer \ Common Files \ Symantec Shared \ ccApp.exe"
O4 - HKLM \ .. \ Run: [IPHSend] C: \ Programmer \ Common Files \ AOL \ IPHSend \ IPHSend.exe
O4 - HKLM \ .. \ Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Programmer \ QuickTime \ QTTask.exe"-atboottime
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Programmer \ Hp \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [AVP] "C: \ Programmer \ Kaspersky Lab \ Kaspersky Internet Security 7.0 \ avp.exe"
O4 - HKLM \ .. \ Run: [nmctxth] "C: \ Programmer \ Common Files \ Pure Networks Shared \ Platform \ nmctxth.exe"
O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Programmer \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [braviax] C: \ WINDOWS \ system32 \ braviax.exe
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ WINDOWS \ system32 \ CTFMON.EXE
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Programmer \ Messenger \ MsnMsgr.Exe" / background
O4 - HKCU \ .. \ Run: [Aim6] "C: \ Programmer \ AIM6 \ aim6.exe" / d locale = en-US ee: / / AOL / imApp
O4 - HKCU \ .. \ Run: [CTFMON.EXE] C: \ Programmer \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe
O4 - HKCU \ .. \ Run: [CTFMON.EXE] C: \ Programmer \ Adobe \ Acrobat 7.0 \ Reader \ AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU \ .. \ Run: [braviax] C: \ WINDOWS \ system32 \ braviax.exe
O4 - HKLM \ .. \ Policies \ Explorer \ Run: [user32.dll] C: \ Programmer \ Video Access ActiveX Object \ isamntr.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Programmer \ Adobe \ Acrobat 7.0 \ Reader \ Reader_sl.exe
O4 - Global Startup: HP Digital Imaging = C: \ Programmer \ HP \ Digital Imaging \ bin \ hpqtra08.exe
O4 - Global Startup: Windows Search.lnk = C: \ Programmer \ Windows Desktop Search \ WindowsSearch.exe
O8 - Extra context menu item: Tilføj til Anti-Banner - C: \ Programmer \ Kaspersky Lab \ Kaspersky Internet Security 7.0 \ ie_banner_deny.htm
O9 - Extra button: Web Anti-Virus-statistik - (1F460357-8A94-4D71-9CA3-AA4ACF32ED8E) - C: \ Programmer \ Kaspersky Lab \ Kaspersky Internet Security 7.0 \ SCIEPlgn.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL
O9 - Extra button: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C: \ WINDOWS \ system32 \ Shdocvw.dll
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ Programmer \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ Programmer \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Programmer \ Messenger \ MsnMsgr.Exe
O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Programmer \ Messenger \ MsnMsgr.Exe
O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130613540786
O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1225827182712
O16 - DPF: (7DFDB8FD-B498-4958-B930-38021B94351D) (imlUCID Class) - http://imlive.com/chatsource/ImlCID.cab
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: (E06E2E99-0AA1-11D4-ABA6-0060082AA75C) --
O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ KASPER ~ 1 \ KASPER ~ 2.0 \ adialhk.dll
O22 - SharedTaskScheduler: AutoDisc Ware - (89aef01d-d237-49c7-84dc-4e1904c1fd31) - (no file)
O22 - SharedTaskScheduler: (210b4043-35ca-4AA0-8796-191f9663dfb3) - altmannsberger - (no file)
O23 - Service: Ati HotKey Poller - Unknown owner - C: \ WINDOWS \ system32 \ Ati2evxx.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C: \ Programmer \ Kaspersky Lab \ Kaspersky Internet Security 7.0 \ avp.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C: \ Programmer \ Common Files \ Symantec Shared \ ccEvtMgr.exe (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C: \ Programmer \ Common Files \ Symantec Shared \ ccSetMgr.exe (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C: \ Programmer \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Programmer \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C: \ Programmer \ iPod \ bin \ iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Programmer \ Java \ jre6 \ bin \ jqs.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C: \ Programmer \ Linksys \ Linksys Updater \ bin \ LinksysUpdater.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C: \ Programmer \ Common Files \ Pure Networks Shared \ Platform \ nmsrvc.exe
O23 - Service: PML Driver HPZ12 - HP - C: \ WINDOWS \ system32 \ HPZipm12.exe
--
End of file - 7841 bytes