Crowt.a in Hasnot.a

Pozdrav,

potrebujem pomoč pri odstranitvi črvov Crowt.a in Hasnot.a (pripeta slika najdenih s ScanSpyware). Nod32, Adaware in ScanSpyware mi jih ne zbrišejo. Prilagam še Hijack

ogfile of HijackThis v1.99.1
Scan saved at 21:23:47, on 15.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
I:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\SYSTEM32\taskmgr.exe
I:\Avant Browser5\avant.exe
C:\Program Files\WinRAR1\WinRAR.exe
C:\DOCUME~1\Matak\LOCALS~1\Temp\Rar$EX00.062\HijackThis.exe

O4 – HKLM\..\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE
O4 – HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 – HKCU\..\Run: [AWMON] “I:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe”
O4 – HKCU\..\Run: [ScanSpyware] “I:\ScanSpyware v3.8.0.4\Scanner.exe” /rb
O23 – Service: C-DillaSrv – C-Dilla Ltd – C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 – Service: Creative Service for CDROM Access – Creative Technology Ltd – C:\WINDOWS\system32\CTsvcCDA.exe
O23 – Service: InstallDriver Table Manager (IDriverT) – Macrovision Corporation – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 – Service: NOD32 Kernel Service (NOD32krn) – Eset – C:\Program Files\Eset\nod32krn.exe
O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA Corporation – C:\WINDOWS\system32\nvsvc32.exe
O23 – Service: ServiceLayer – Nokia. – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

Hvala za pomoč.

lp

O4 – HKCU\..\Run: [ScanSpyware] “I:\ScanSpyware v3.8.0.4\Scanner.exe” /rb
to sigurno zbriši, ostalo BP. Te prog. za čiščenje si zagnal v varnem zagonu
in potem probal brisati?

Bom probal zbrisat ko pridem do domačega računalnika. Ja v varnem zagonu sem zagnal vse programe in ni bilo nič bolje. Problem je, da mi programi nočejo brisati črvov zaradi tegale delujočega procesa C:\WINDOWS\system32\services.exe, ka ga pa nemorem prekinit. Bom obvestil, če bo po brisanju O4 – HKCU\..\Run: [ScanSpyware] “I:\ScanSpyware v3.8.0.4\Scanner.exe” /rb kaj bolje.

Tudi v varnem zagonu se ne zbrišejo.
Kaj predlagate?

lp.

Pojdi še v registre in v iskalno okence vpiši ime te zalege, ampak pazi,
brisati samo to.