Hej hjælpefulde HJT-log folk :D
Min computer opfører sig list underligt, og kommer engang imellem med nogle sjove beskeder om "Your computer is infected by bla bla bla". Træls, og NOD32 og spybot fatter ikke at fjerne det.
Her er min log, håber I kan finde noget:
----------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 20:43:55, on 17-08-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:ProgrammerEset
od32kui.exe
C:ProgrammerCreativeUSB SBAudigy2 NXSurround MixerCTSysVol.exe
C:WINDOWSsystem32RunDll32.exe
C:ProgrammerJavajre1.5.0_06injusched.exe
C:ProgrammerATI TechnologiesATI.ACECLI.EXE
C:ProgrammerEset
od32krn.exe
C:ProgrammerCyberLinkShared filesRichVideo.exe
C:ProgrammerATI TechnologiesATI.ACEcli.exe
C:ProgrammerATI TechnologiesATI.ACEcli.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Documents and SettingsGludSkrivebordHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://www.gooogle.com[...]
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks
O4 - HKLM..Run: [nod32kui] "C:ProgrammerEset
od32kui.exe" /WAITSERVICE
O4 - HKLM..Run: [SmcService] C:PROGRA~1SygateSPFsmc.exe -startgui
O4 - HKLM..Run: [CTSysVol] C:ProgrammerCreativeUSB SBAudigy2 NXSurround MixerCTSysVol.exe /r
O4 - HKLM..Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [Resume copy] copyfstq.exe /startup
O4 - HKLM..Run: [ATICCC] "C:ProgrammerATI TechnologiesATI.ACECLIStart.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] C:ProgrammerJavajre1.5.0_06injusched.exe
O4 - HKCU..Run: [MsnMsgr] "C:ProgrammerMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [Skype] "C:ProgrammerSkypePhoneSkype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:ProgrammerAdobeAcrobat 7.0Reader
eader_sl.exe
O4 - Global Startup: Hamachi.lnk = C:ProgrammerHamachihamachi.exe
O8 - Extra context menu item: &Download All by Gigaget - C:ProgrammerGiganologyGigagetgetallurl.htm
O8 - Extra context menu item: &Download by Gigaget - C:ProgrammerGiganologyGigagetgeturl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgrammerJavajre1.5.0_06inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgrammerJavajre1.5.0_06inssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengermsmsgs.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) -
http://webnode1.xstream.dk[...]
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:ProgrammerFælles filerAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:ProgrammerFælles filerInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:ProgrammerEset
od32krn.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:ProgrammerCyberLinkShared filesRichVideo.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:ProgrammerSygateSPFsmc.exe
--
*Asus A8N-E*AMD Athlon64 3500+*2 GB GeIL DDR PC3200*
*Audigy 2 NX*120GB + 320GB WD SATAII*ATI Radeon X850 Pro*
http://www.fuscrew.tk[...]