En af mine venner har et problem med noget spyware. Er der en der kan hjælpe??
Logfile of HijackThis v1.99.1
Scan saved at 19:07:41, on 01-06-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesASUSProbeAsusProb.exe
C:ProgrammerFælles filerSymantec SharedccApp.exe
C:ProgrammerQuickTimeqttask.exe
C:ProgrammerFælles filerSymantec SharedccProxy.exe
C:ProgrammerD-Toolsdaemon.exe
C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:ProgrammerGoogleGmail Notifiergnotify.exe
C:WINDOWSSOUNDMAN.EXE
C:WINDOWSsystem32
undll32.exe
C:ProgrammerMSN AppsUpdater 1.02.3000.1001damsnappau.exe
C:ProgrammeriTunesiTunesHelper.exe
C:WINDOWSsystem32ctfmon.exe
C:ProgrammerLogitechDesktop Messenger8876480ProgramBackWeb-8876480.exe
C:ProgrammerMSN MessengerMsnMsgr.Exe
C:WINDOWSsystem32winnook.exe
C:ProgrammerLightSurfCommonIconMgr.exe
C:ProgrammerLogitechSetPointKEM.exe
C:ProgrammerLogitechSetPointKHALMNPR.EXE
C:ProgrammerNorton Internet SecurityISSVC.exe
C:ProgrammerLightSurfColorifichgcctl95.exe
C:ProgrammerFælles filerMicrosoft SharedVS7Debugmdm.exe
C:ProgrammerNorton Internet SecurityNorton AntiVirus
avapsvc.exe
C:ProgrammerLightSurfColor IndicatorTICIcon.exe
C:WINDOWSsystem32
vsvc32.exe
C:ProgrammerFælles filerSymantec SharedSNDSrvc.exe
C:ProgrammerFælles filerSymantec SharedSPBBCSPBBCSvc.exe
C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
C:ProgrammerMessengermsmsgs.exe
C:ProgrammeriPodiniPodService.exe
C:WINDOWSsystem32wuauclt.exe
C:Documents and SettingsJonas1SkrivebordhijackthisHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar =
http://g.msn.dk[...]
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://www.google.dk[...]
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = localhost
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: AzEntretien Class - {0d2def3a-f4f1-42ec-ac4f-132e7ba6e292} - %SystemRoot%azentretien.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:ProgrammerMSN AppsST 1.03.0000.1005en-xustmain.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:ProgrammerFælles filerSymantec SharedAdBlockingNISShExt.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN AppsMSN Toolbar 1.02.4000.1001damsntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammerNorton Internet SecurityNorton AntiVirusNavShExt.dll
O4 - HKLM..Run: [ASUS Probe] C:Program FilesASUSProbeAsusProb.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec SharedccApp.exe"
O4 - HKLM..Run: [QuickTime Task] "C:ProgrammerQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgrammerD-Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe /Consumer
O4 - HKLM..Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:ProgrammerGoogleGmail Notifiergnotify.exe
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM..Run: [CloneCDTray] "C:ProgrammerSlySoftCloneCDCloneCDTray.exe" /s
O4 - HKLM..Run: [msnappau] "C:ProgrammerMSN AppsUpdater 1.02.3000.1001damsnappau.exe"
O4 - HKLM..Run: [iTunesHelper] "C:ProgrammeriTunesiTunesHelper.exe"
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [LDM] C:ProgrammerLogitechDesktop Messenger8876480ProgramBackWeb-8876480.exe
O4 - HKCU..Run: [MsnMsgr] "C:ProgrammerMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [Intel system tool] C:WINDOWSsystem32winnook.exe
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:ProgrammerAdobeAcrobat 7.0Reader
eader_sl.exe
O4 - Global Startup: LightSurf.lnk = C:ProgrammerLightSurfCommonIconMgr.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:ProgrammerLogitechDesktop Messenger8876480ProgramLDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:ProgrammerLogitechSetPointKEM.exe
O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOffice10OSA.EXE
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O9 - Extra button: Expekt.com Poker - {3852AC86-965F-4abe-A75F-3DCB7E81A4B2} - C:ProgrammerexpektMPPMPPoker.exe
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:ProgrammerladbrokesMPPMPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengermsmsgs.exe
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} -
http://static.windupdates.com[...]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.com[...]
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com[...]
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) -
https://netbank.danskebank.dk[...]
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:ProgrammeriPodiniPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:ProgrammerNorton Internet SecurityISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:ProgrammerNorton Internet SecurityNorton AntiVirus
avapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:ProgrammerNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:PROGRA~1FLLESF~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedSNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedSPBBCSPBBCSvc.exe
--
Asus A8V Deluxe|Amd64 3000+@3400+ (939)|1024mb Kingston PC3200|S3 Virge 2mb|