RSIT og Malwarebytes log. Noen som har lyst å se over?

Footy · 4. desember 2009

Da har jeg fulgt norbat sin geniale guide og kommet frem til logg delen. Noen som har lyst å se over så hadde jeg satt pris på det.

Logfile of random's system information tool 1.06 (written by random/random)

Run by Niclas at 2009-12-04 15:55:10

Microsoft® Windows Vista™ Home Premium Service Pack 1

System drive C: has 50 GB (33%) free of 150 GB

Total RAM: 4094 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:55:26, on 04.12.2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18828)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files (x86)\AVG8\avgtray.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Users\Niclas\Desktop\RSIT.exe

C:\Program Files (x86)\trend micro\Niclas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dagbladet.no/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~2\AVG8\avgtray.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo...toUploader5.cab

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resou...NPUplden-us.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~2\AVG8\avgwdsvc.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - D:\Sony Ericsson PC Suite\SupServ.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 8156 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-09-10 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-29 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]

Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-09-10 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2009-05-10 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-09-10 256112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"AVG8_TRAY"=C:\PROGRA~2\AVG8\avgtray.exe [2009-11-25 2029336]

"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1555968]

"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-01 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"EnableLUA"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=

"ForceActiveDesktopOn"=

"NoActiveDesktopChanges"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe"="C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe"="C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6b02e8de-64ee-11de-b0d5-0018f3e53644}]

shell\AutoRun\command - I:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d2a5f683-6ab2-11de-9173-0018f3e53644}]

shell\AutoRun\command - I:\Autorun.exe

======File associations======

.js - edit - C:\Windows\SysWOW64\Notepad.exe %1

.js - open - C:\Windows\SysWOW64\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2009-12-04 15:55:10 ----D---- C:\rsit

2009-12-04 15:41:09 ----D---- C:\Users\Niclas\AppData\Roaming\Malwarebytes

2009-12-04 15:41:04 ----D---- C:\ProgramData\Malwarebytes

2009-12-04 15:41:03 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2009-11-04 17:07:18 ----A---- C:\Windows\system32\unregmp2.exe

2009-11-04 17:07:17 ----A---- C:\Windows\system32\wmp.dll

2009-11-04 17:07:15 ----A---- C:\Windows\system32\wmploc.DLL

2009-11-04 17:07:02 ----A---- C:\Windows\system32\mshtml.dll

2009-11-04 16:59:05 ----A---- C:\Windows\system32\wups.dll

2009-11-04 16:59:05 ----A---- C:\Windows\system32\wudriver.dll

2009-11-04 16:59:05 ----A---- C:\Windows\system32\wuapi.dll

2009-11-04 16:59:01 ----A---- C:\Windows\system32\wuwebv.dll

2009-11-04 16:59:01 ----A---- C:\Windows\system32\wuapp.exe

2009-10-27 16:54:14 ----D---- C:\Program Files (x86)\Mozilla Firefox

2009-10-25 19:14:45 ----D---- C:\Users\Niclas\AppData\Roaming\vlc

2009-10-21 13:30:40 ----D---- C:\Program Files (x86)\Adobe

2009-10-20 21:01:21 ----D---- C:\Users\Niclas\AppData\Roaming\Mozilla

2009-10-20 20:58:56 ----D---- C:\Program Files (x86)\Common Files\Remote Control Software Common

2009-10-20 20:58:55 ----D---- C:\Program Files (x86)\Logitech

2009-10-18 12:25:29 ----A---- C:\Windows\system32\tzres.dll

2009-10-18 12:18:59 ----A---- C:\Windows\system32\netiohlp.dll

2009-10-18 12:18:58 ----A---- C:\Windows\system32\TCPSVCS.EXE

2009-10-18 12:18:58 ----A---- C:\Windows\system32\ROUTE.EXE

2009-10-18 12:18:58 ----A---- C:\Windows\system32\NETSTAT.EXE

2009-10-18 12:18:58 ----A---- C:\Windows\system32\netevent.dll

2009-10-18 12:18:58 ----A---- C:\Windows\system32\MRINFO.EXE

2009-10-18 12:18:58 ----A---- C:\Windows\system32\HOSTNAME.EXE

2009-10-18 12:18:58 ----A---- C:\Windows\system32\finger.exe

2009-10-18 12:18:58 ----A---- C:\Windows\system32\ARP.EXE

2009-10-18 12:18:18 ----A---- C:\Windows\system32\WMVCORE.DLL

2009-10-18 12:18:18 ----A---- C:\Windows\system32\mf.dll

2009-10-18 12:18:06 ----A---- C:\Windows\system32\wmpdxm.dll

2009-10-18 12:18:05 ----A---- C:\Windows\system32\spwmp.dll

2009-10-18 12:18:05 ----A---- C:\Windows\system32\dxmasf.dll

2009-10-18 12:17:55 ----A---- C:\Windows\system32\iertutil.dll

2009-10-18 12:17:55 ----A---- C:\Windows\system32\ieframe.dll

2009-10-18 12:17:54 ----A---- C:\Windows\system32\wininet.dll

2009-10-18 12:17:54 ----A---- C:\Windows\system32\urlmon.dll

2009-10-18 12:17:54 ----A---- C:\Windows\system32\occache.dll

2009-10-18 12:17:54 ----A---- C:\Windows\system32\msfeeds.dll

2009-10-18 12:17:54 ----A---- C:\Windows\system32\iedkcs32.dll

2009-10-18 12:17:53 ----A---- C:\Windows\system32\msfeedsbs.dll

2009-10-18 12:17:53 ----A---- C:\Windows\system32\jsproxy.dll

2009-10-18 12:17:53 ----A---- C:\Windows\system32\ieUnatt.exe

2009-10-18 12:17:53 ----A---- C:\Windows\system32\ieui.dll

2009-10-18 12:17:53 ----A---- C:\Windows\system32\iesysprep.dll

2009-10-18 12:17:53 ----A---- C:\Windows\system32\iepeers.dll

2009-10-18 12:17:52 ----A---- C:\Windows\system32\msfeedssync.exe

2009-10-18 12:17:52 ----A---- C:\Windows\system32\iesetup.dll

2009-10-18 12:17:52 ----A---- C:\Windows\system32\iernonce.dll

2009-10-18 12:17:52 ----A---- C:\Windows\system32\ie4uinit.exe

2009-10-18 12:17:44 ----A---- C:\Windows\system32\Apphlpdm.dll

2009-10-18 12:17:41 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

2009-10-18 12:17:31 ----A---- C:\Windows\system32\kerberos.dll

2009-10-18 12:17:30 ----A---- C:\Windows\system32\schannel.dll

2009-10-18 12:17:22 ----A---- C:\Windows\system32\EncDec.dll

2009-10-18 12:17:19 ----A---- C:\Windows\system32\psisdecd.dll

2009-10-18 12:17:13 ----A---- C:\Windows\system32\t2embed.dll

2009-10-18 12:17:13 ----A---- C:\Windows\system32\fontsub.dll

2009-10-18 12:17:13 ----A---- C:\Windows\system32\atmfd.dll

2009-10-18 12:17:12 ----A---- C:\Windows\system32\dciman32.dll

2009-10-18 12:17:10 ----A---- C:\Windows\system32\wdigest.dll

2009-10-18 12:17:10 ----A---- C:\Windows\system32\secur32.dll

2009-10-18 12:17:10 ----A---- C:\Windows\system32\msv1_0.dll

2009-10-18 12:17:05 ----A---- C:\Windows\system32\mstscax.dll

2009-10-18 12:17:03 ----A---- C:\Windows\system32\atl.dll

2009-10-18 12:17:01 ----A---- C:\Windows\system32\avifil32.dll

2009-10-18 12:16:19 ----A---- C:\Windows\system32\WMSPDMOD.DLL

2009-10-18 12:16:17 ----A---- C:\Windows\system32\msasn1.dll

2009-10-18 12:15:44 ----A---- C:\Windows\system32\jscript.dll

2009-10-18 12:12:34 ----A---- C:\Windows\system32\wlansec.dll

2009-10-18 12:12:34 ----A---- C:\Windows\system32\wlanmsm.dll

2009-10-18 12:12:34 ----A---- C:\Windows\system32\L2SecHC.dll

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvwgf2um.dll

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvoglv32.dll

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvcuvid.dll

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvcuvenc.dll

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvcuda.dll

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvapi.dll

2009-09-22 16:19:28 ----D---- C:\Program Files (x86)\Microsoft

2009-09-22 16:19:19 ----D---- C:\Program Files (x86)\Windows Live SkyDrive

======List of files/folders modified in the last 3 months======

2009-12-04 15:55:26 ----D---- C:\Program Files (x86)\Trend Micro

2009-12-04 15:55:24 ----D---- C:\Windows\Prefetch

2009-12-04 15:55:15 ----D---- C:\Windows\Temp

2009-12-04 15:41:05 ----D---- C:\Windows\system32\drivers

2009-12-04 15:41:04 ----HD---- C:\ProgramData

2009-12-04 15:41:03 ----RD---- C:\Program Files (x86)

2009-12-04 15:38:49 ----SHD---- C:\Windows\Installer

2009-12-04 15:38:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2009-12-04 15:38:28 ----D---- C:\Program Files (x86)\Common Files

2009-12-04 15:38:27 ----D---- C:\Windows\inf

2009-12-04 15:38:27 ----D---- C:\Windows

2009-12-04 15:34:38 ----D---- C:\Users\Niclas\AppData\Roaming\Azureus

2009-12-04 15:27:09 ----D---- C:\Windows\System32

2009-12-02 21:56:01 ----A---- C:\Windows\NeroDigital.ini

2009-11-30 18:42:53 ----HD---- C:\$AVG8.VAULT$

2009-11-29 19:14:08 ----D---- C:\Users\Niclas\AppData\Roaming\Skype

2009-11-29 11:19:31 ----D---- C:\Windows\Debug

2009-11-25 18:00:59 ----D---- C:\Program Files (x86)\AVG8

2009-11-10 17:14:15 ----D---- C:\Windows\SysWOW64

2009-11-09 19:54:46 ----D---- C:\Program Files (x86)\Common Files\Steam

2009-11-04 18:05:12 ----D---- C:\ProgramData\NVIDIA

2009-11-04 18:03:39 ----D---- C:\Windows\system32\en-US

2009-11-04 18:03:32 ----D---- C:\Program Files (x86)\Windows Media Player

2009-11-04 17:12:19 ----D---- C:\Windows\winsxs

2009-11-04 17:09:36 ----D---- C:\Program Files (x86)\Internet Explorer

2009-10-21 17:28:18 ----D---- C:\ProgramData\Adobe

2009-10-21 13:30:46 ----D---- C:\Program Files (x86)\Common Files\Adobe

2009-10-18 13:58:00 ----D---- C:\Windows\Microsoft.NET

2009-10-18 13:57:55 ----RSD---- C:\Windows\assembly

2009-10-18 13:20:49 ----D---- C:\Windows\ehome

2009-10-18 13:20:43 ----D---- C:\Windows\AppPatch

2009-10-18 13:20:43 ----D---- C:\Program Files (x86)\Windows Mail

2009-10-18 13:20:42 ----D---- C:\Windows\system32\migration

2009-10-18 12:26:26 ----D---- C:\ProgramData\Microsoft Help

2009-09-27 23:12:22 ----A---- C:\Windows\system32\nvd3dum.dll

2009-09-22 16:19:24 ----D---- C:\Program Files (x86)\Windows Live

2009-09-13 17:29:50 ----D---- C:\Windows\LiveKernelReports

2009-09-12 11:11:34 ----RD---- C:\Program Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx64;AVG AVI Loader Driver x64; C:\Windows\System32\Drivers\avgldx64.sys []

R1 AvgMfx64;AVG On-access Scanner Minifilter Driver x64; C:\Windows\System32\Drivers\avgmfx64.sys []

R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys []

R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys []

R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys []

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys []

R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys []

R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys []

R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys []

R3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x64.sys []

S3 a6sgw1ax;a6sgw1ax; C:\Windows\system32\drivers\a6sgw1ax.sys []

S3 CamDrL64;Logitech QuickCam Pro 3000(PID_08B0); C:\Windows\system32\DRIVERS\CamDrL64.sys []

S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys []

S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys []

S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys []

S3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys []

S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys []

S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys []

S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys []

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys []

S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []

S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys []

S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys []

S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys []

S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys []

S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys []

S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys []

S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys []

S3 scsiscan;SCSI Scanner Driver; C:\Windows\system32\DRIVERS\scsiscan.sys []

S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []

S3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys []

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys []

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []

S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE []

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]

R2 avg8wd;AVG8 WatchDog; C:\PROGRA~2\AVG8\avgwdsvc.exe [2009-08-21 297752]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []

R2 OMSI download service;Sony Ericsson OMSI download service; D:\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]

S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2008-07-27 93184]

S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-17 182768]

S3 iPod Service;iPod-tjeneste; C:\Program Files (x86)\iPod\bin\iPodService.exe [2009-07-13 542496]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]

S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-19 19968]

S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2008-05-30 572416]

S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-11-01 320760]

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.42

Databaseversjon: 3292

Windows 6.0.6001 Service Pack 1

Internet Explorer 8.0.6001.18828

04.12.2009 15:47:50

mbam-log-2009-12-04 (15-47-50).txt

Skanntype: Rask Skann

Objekter skannet: 91398

Tid tilbakelagt: 4 minute(s), 39 second(s)

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 0

Registerverdier infisert: 0

Registerfiler infisert: 1

Mapper infisert: 0

Filer infisert: 1

Minneprosesser infisert: