Kan noen se på Hijack this loggen min?

[strikkepinne]

Ting har plutselig begynt å gå veldig tregt her og jeg frykter noe er galt. Kan noen hjelpe meg litt ved å ta en titt på loggen min?

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 17:11:02, on 09.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\Symantec AntiVirus\DefWatch.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Symantec AntiVirus\Rtvscan.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe

C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe

C:\Program Files\Rainlendar2\Rainlendar2.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\BitComet\BitComet.exe

C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

C:\Program Files\Webroot\Spy Sweeper\SSU.EXE

C:\PROGRA~1\MOZILL~2\THUNDE~1.EXE

C:\Documents and Settings\Astrid\Desktop\Sikkerhet\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.no/

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime

O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"

O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [adwarealert] C:\Program Files\AdwareAlert\AdwareAlert.exe -boot

O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY

O4 - HKCU\..\Run: [sUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"

O4 - HKCU\..\Run: [More 01] C:\DOCUME~1\Astrid\APPLIC~1\BATLIC~1\wma axis.exe

O4 - HKCU\..\Run: [Rainlendar2] "C:\Program Files\Rainlendar2\Rainlendar2.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

O16 - DPF: {5CF549B1-E178-4D8C-ADEF-73F226644F12} - http://designer.room328.com/app/WebVDSetUp.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1164320369291

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {A0F3DE0D-9308-4650-82A0-53F0C17D7D65} (Web2D Control) - http://designer.room328.com/app/WebVD.cab

O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

[norbat]

Last ned kaazabegone og pakk det ut på skrivebordet

 

Kjør HJT og fix:

O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY

O4 - HKCU\..\Run: [More 01] C:\DOCUME~1\Astrid\APPLIC~1\BATLIC~1\wma axis.exe

 

Sørg for at du ser skjulte filer og mapper (kontrollpanel->mappealt.->vis->"vis skjulte filer og mapper")

 

Oppdater superantispyware (SAS)

 

Restart i sikker modus (tapp f8 under oppstart)

 

Kjør Kaazabegone

Bruk utforsker og slett mappa (i bold):

C:\DOCUME~1\Astrid\APPLIC~1\BATLIC~1\

Kjør en complete scan med SAS

 

Legg ut en ny HJT og loggen fra SAS (preferences->statistics/logs)

[strikkepinne]

Da har jeg slettet Kazaa med kaazabegone. Dette har jeg gjort før en gang også, men det dukker opp igjen.

 

C:\DOCUME~1\Astrid\APPLIC~1\BATLIC~1\

 

Denne finner jeg ikke.

 

Ellers har jeg gjort alt du skrev og her er resultatet:

 

Logfile of HijackThis v1.99.1

Scan saved at 07:06:09, on 13.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\Symantec AntiVirus\DefWatch.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Symantec AntiVirus\Rtvscan.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe

C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Rainlendar2\Rainlendar2.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SSU.EXE

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Astrid\Desktop\Sikkerhet\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.no/

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime

O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"

O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [adwarealert] C:\Program Files\AdwareAlert\AdwareAlert.exe -boot

O4 - HKLM\..\Run: [H2O] "C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe"

O4 - HKCU\..\Run: [sUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"

O4 - HKCU\..\Run: [Rainlendar2] "C:\Program Files\Rainlendar2\Rainlendar2.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

O16 - DPF: {5CF549B1-E178-4D8C-ADEF-73F226644F12} - http://designer.room328.com/app/WebVDSetUp.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1164320369291

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {A0F3DE0D-9308-4650-82A0-53F0C17D7D65} (Web2D Control) - http://designer.room328.com/app/WebVD.cab

O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

 

 

 

SAS logg

SUPERAntiSpyware Scan Log

Generated 12/10/2006 at 04:02 AM

 

Application Version : 3.3.1020

 

Core Rules Database Version : 3144

Trace Rules Database Version: 1160

 

Scan type : Complete Scan

Total Scan Time : 00:04:34

 

Memory items scanned : 191

Memory threats detected : 0

Registry items scanned : 5390

Registry threats detected : 0

File items scanned : 1551

File threats detected : 0

 

 

Ellers har jeg problemer med at Windows hele tiden skal oppdatere. Det gule lille skjoldet nede i hjørnet. Av og til oppdaterer den ferdig og vil at jeg skal restarte, mens noen ganger bare slutter den og oppdatere. Det er snakk og hver dag den siste uken.... Irriterende.

 

Takk for all hjelp! Setter veldig stor pris på det!

[norbat]

Last ned Combofix og kjør programmet.

 

Legg ut loggen fra combofix samt en ny HJT-logg (før du kjører HJT forandrer du navnet fra hijackthis.exe til noe annet, eks. test.exe)

[strikkepinne]

Hei igjen!

 

Astrid - 06-12-13 14:23:50.85 Service Pack 2

ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Astrid"

 

((((((((((((((((((((((((((((((( Files Created from 2006-11-13 to 2006-12-13 ))))))))))))))))))))))))))))))))))

 

 

2006-12-11 21:42 <DIR> d-------- C:\Program Files\Steinberg

2006-12-11 21:41 704,512 --a------ C:\WINDOWS\system32\SYNSOACC.dll

2006-12-11 21:41 45,056 --a------ C:\WINDOWS\system32\Synsopos.exe

2006-12-11 21:41 33,792 --a------ C:\WINDOWS\system32\drivers\cledx.sys

2006-12-11 21:41 147,456 --a------ C:\WINDOWS\system32\SynsoLChk.dll

2006-12-09 16:38 0 --a------ C:\WINDOWS\system32\CMMGR32.EXE

2006-12-09 00:22 <DIR> d-------- C:\Program Files\Windows Media Connect 2

2006-12-09 00:19 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF

2006-12-08 23:55 <DIR> d-------- C:\Documents and Settings\Astrid\Application Data\Steinberg

2006-12-08 23:49 87,040 --a------ C:\WINDOWS\system32\ra32sipr.dll

2006-12-08 23:49 85,504 --a------ C:\WINDOWS\system32\encdnet.dll

2006-12-08 23:49 81,920 --a------ C:\WINDOWS\system32\ra3214_4.dll

2006-12-08 23:49 72,704 --a------ C:\WINDOWS\system32\ra3228_8.dll

2006-12-08 23:49 61,952 --a------ C:\WINDOWS\system32\decdnet.dll

2006-12-08 23:49 487,936 --a------ C:\WINDOWS\system32\rmbe3260.dll

2006-12-08 23:49 352,768 --a------ C:\WINDOWS\system32\pngu3263.dll

2006-12-08 23:49 21,504 --a------ C:\WINDOWS\system32\ra32dnet.dll

2006-12-08 23:49 131,072 --a------ C:\WINDOWS\system32\pneng50.dll

2006-12-08 23:49 130,560 --a------ C:\WINDOWS\system32\pnc3250.dll

2006-12-08 22:50 <DIR> d-------- C:\Program Files\Syncrosoft

2006-11-27 14:36 <DIR> d-------- C:\Program Files\IrfanView

2006-11-24 09:50 127,208 --a------ C:\WINDOWS\system32\mucltui.dll

2006-11-19 22:23 684,032 --a------ C:\WINDOWS\system32\libeay32.dll

2006-11-19 22:23 155,648 --a------ C:\WINDOWS\system32\ssleay32.dll

2006-11-17 19:15 <DIR> d-------- C:\Program Files\MSXML 4.0

2006-11-17 13:45 <DIR> d-------- C:\Program Files\Common Files\DirectX

2006-11-17 13:18 <DIR> d-------- C:\Program Files\Aspyr Media, Inc

2006-11-16 14:20 <DIR> d-------- C:\Program Files\IKEA HomePlanner

 

 

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

 

 

2006-12-13 14:22 -------- d-------- C:\Program Files\Mozilla Firefox

2006-12-13 07:09 -------- d-------- C:\Program Files\SUPERAntiSpyware

2006-12-13 06:24 -------- d-------- C:\Program Files\Mozilla Thunderbird

2006-12-13 06:12 -------- d-------- C:\Program Files\Symantec AntiVirus

2006-12-13 06:12 -------- d-------- C:\Program Files\Common Files

2006-12-09 19:07 -------- d-------- C:\Program Files\Common Files\Microsoft Shared

2006-12-09 16:38 -------- d-------- C:\Program Files\SmartDraw 7

2006-12-09 00:22 -------- d-------- C:\Program Files\Windows Media Player

2006-12-08 14:59 -------- d-------- C:\Program Files\Java

2006-12-08 14:57 -------- d-------- C:\Program Files\Common Files\Java

2006-12-03 16:09 -------- d-------- C:\Program Files\QuickTime

2006-11-22 19:39 -------- d---s---- C:\Documents and Settings\Astrid\Application Data\Microsoft

2006-11-19 18:40 -------- d-------- C:\Program Files\Furnish Lite

2006-11-17 19:07 -------- d-------- C:\Program Files\Internet Explorer

2006-11-17 16:05 15872 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys

2006-11-17 16:05 15360 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys

2006-11-17 16:05 14848 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys

2006-11-17 16:05 122368 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys

2006-11-17 15:12 -------- d-------- C:\Program Files\BitComet

2006-11-17 13:18 -------- d--h----- C:\Program Files\InstallShield Installation Information

2006-11-16 14:19 -------- d-------- C:\Program Files\Common Files\Wise Installation Wizard

2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll

2006-11-02 21:23 -------- d-------- C:\Program Files\EA GAMES

2006-10-31 19:31 -------- d-------- C:\Program Files\DesignWorkshop Lite

2006-10-31 19:31 -------- d-------- C:\Program Files\CDBurnerXP Pro 3

2006-10-31 03:15 -------- d-------- C:\Program Files\Windows Resource Kits

2006-10-31 03:01 -------- d-------- C:\Program Files\CureROM

2006-10-31 02:15 -------- d-------- C:\Program Files\GameShadow

2006-10-31 02:03 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll

2006-10-29 14:11 -------- d-------- C:\Program Files\directx

2006-10-29 14:10 -------- d-------- C:\Program Files\Eidos Interactive

2006-10-29 00:45 -------- d-------- C:\Program Files\DAEMON Tools

2006-10-28 23:56 -------- d-------- C:\Program Files\Microsoft Games

2006-10-27 13:28 -------- d-------- C:\Program Files\InterActual

2006-10-24 14:38 -------- d-------- C:\Documents and Settings\Astrid\Application Data\dvdcss

2006-10-18 21:58 8704 --a------ C:\WINDOWS\system32\wdfmgr.exe

2006-10-18 21:58 8704 --a------ C:\WINDOWS\system32\uwdf.exe

2006-10-18 21:47 99840 --a------ C:\WINDOWS\system32\wmpshell.dll

2006-10-18 21:47 991744 --a------ C:\WINDOWS\system32\drmv2clt.dll

2006-10-18 21:47 937984 --a------ C:\WINDOWS\system32\wmnetmgr.dll

2006-10-18 21:47 8231936 --a------ C:\WINDOWS\system32\wmploc.dll

2006-10-18 21:47 767488 --------- C:\WINDOWS\system32\WMVSENCD.dll

2006-10-18 21:47 757248 --a------ C:\WINDOWS\system32\WMADMOD.dll

2006-10-18 21:47 7168 --a------ C:\WINDOWS\system32\asferror.dll

2006-10-18 21:47 656896 --------- C:\WINDOWS\system32\WMVXENCD.dll

2006-10-18 21:47 63488 --a------ C:\WINDOWS\system32\wpdmtpus.dll

2006-10-18 21:47 629760 --a------ C:\WINDOWS\system32\wpd_ci.dll

2006-10-18 21:47 613376 --------- C:\WINDOWS\system32\wmpmde.dll

2006-10-18 21:47 603648 --a------ C:\WINDOWS\system32\WMSPDMOD.dll

2006-10-18 21:47 542720 --a------ C:\WINDOWS\system32\blackbox.dll

2006-10-18 21:47 535040 --------- C:\WINDOWS\system32\wmdrmsdk.dll

2006-10-18 21:47 429056 --a------ C:\WINDOWS\system32\wmdrmdev.dll

2006-10-18 21:47 414208 --a------ C:\WINDOWS\system32\msscp.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\wmvdmoe2.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\wmvdmod.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\WMVADVE.DLL

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\WMVADVD.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\wmsdmoe2.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\wmsdmod.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\wdfapi.dll

2006-10-18 21:47 4096 --a------ C:\WINDOWS\system32\MPG4DMOD.dll

2006-10-18 21:47 4096 --------- C:\WINDOWS\system32\MP4SDMOD.dll

2006-10-18 21:47 4096 --------- C:\WINDOWS\system32\MP43DMOD.dll

2006-10-18 21:47 38400 --------- C:\WINDOWS\system32\wpdshextres.dll

2006-10-18 21:47 37376 --a------ C:\WINDOWS\system32\wmdmps.dll

2006-10-18 21:47 35840 --a------ C:\WINDOWS\system32\wpdconns.dll

2006-10-18 21:47 356352 --a------ C:\WINDOWS\system32\wpdsp.dll

2006-10-18 21:47 348672 --a------ C:\WINDOWS\system32\wmdrmnet.dll

2006-10-18 21:47 33792 --a------ C:\WINDOWS\system32\wmdmlog.dll

2006-10-18 21:47 321536 --a------ C:\WINDOWS\system32\mswmdm.dll

2006-10-18 21:47 317440 --------- C:\WINDOWS\system32\MP4SDECD.dll

2006-10-18 21:47 314880 --a------ C:\WINDOWS\system32\wmpdxm.dll

2006-10-18 21:47 295936 --------- C:\WINDOWS\system32\wmpeffects.dll

2006-10-18 21:47 284160 --------- C:\WINDOWS\system32\PortableDeviceApi.dll

2006-10-18 21:47 276992 --a------ C:\WINDOWS\system32\audiodev.dll

2006-10-18 21:47 27136 --a------ C:\WINDOWS\system32\mspmsnsv.dll

2006-10-18 21:47 2603008 --------- C:\WINDOWS\system32\WpdShext.dll

2006-10-18 21:47 259072 --------- C:\WINDOWS\system32\MPG4DECD.dll

2006-10-18 21:47 259072 --------- C:\WINDOWS\system32\MP43DECD.dll

2006-10-18 21:47 2450944 --a------ C:\WINDOWS\system32\wmvcore.dll

2006-10-18 21:47 242688 --a------ C:\WINDOWS\system32\wmpasf.dll

2006-10-18 21:47 229376 --a------ C:\WINDOWS\system32\cewmdm.dll

2006-10-18 21:47 227328 --a------ C:\WINDOWS\system32\wmerror.dll

2006-10-18 21:47 222208 --a------ C:\WINDOWS\system32\wmasf.dll

2006-10-18 21:47 212992 --------- C:\WINDOWS\system32\MFPLAT.dll

2006-10-18 21:47 211456 --a------ C:\WINDOWS\system32\qasf.dll

2006-10-18 21:47 204288 --a------ C:\WINDOWS\system32\wmpsrcwp.dll

2006-10-18 21:47 199168 --------- C:\WINDOWS\system32\PortableDeviceWMDRM.dll

2006-10-18 21:47 179712 --a------ C:\WINDOWS\system32\msnetobj.dll

2006-10-18 21:47 175616 --a------ C:\WINDOWS\system32\mspmsp.dll

2006-10-18 21:47 166912 --------- C:\WINDOWS\system32\PortableDeviceTypes.dll

2006-10-18 21:47 1661440 --a------ C:\WINDOWS\system32\wmpencen.dll

2006-10-18 21:47 1574912 --------- C:\WINDOWS\system32\WMVENCOD.dll

2006-10-18 21:47 157184 --a------ C:\WINDOWS\system32\wmidx.dll

2006-10-18 21:47 154624 --a------ C:\WINDOWS\system32\wpdmtp.dll

2006-10-18 21:47 1543680 --------- C:\WINDOWS\system32\WMVDECOD.dll

2006-10-18 21:47 1382912 --------- C:\WINDOWS\system32\WMVSDECD.dll

2006-10-18 21:47 133632 --------- C:\WINDOWS\system32\WPDShServiceObj.dll

2006-10-18 21:47 1329152 --a------ C:\WINDOWS\system32\WMSPDMOE.dll

2006-10-18 21:47 132096 --------- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll

2006-10-18 21:47 130048 --------- C:\WINDOWS\system32\wmpps.dll

2006-10-18 21:47 11264 --a------ C:\WINDOWS\system32\LAPRXY.dll

2006-10-18 21:47 1117696 --a------ C:\WINDOWS\system32\WMADMOE.dll

2006-10-18 21:47 101888 --------- C:\WINDOWS\system32\PortableDeviceClassExtension.dll

2006-10-18 20:03 100864 --a------ C:\WINDOWS\system32\logagent.exe

2006-10-18 20:00 38528 --a------ C:\WINDOWS\system32\drivers\wpdusb.sys

2006-10-18 20:00 249856 --------- C:\WINDOWS\system32\drmupgds.exe

2006-10-18 20:00 17408 --------- C:\WINDOWS\system32\wpdshextautoplay.exe

2006-10-18 01:16 611064 --a------ C:\WINDOWS\system32\drivers\sptd.sys

2006-10-18 00:54 -------- d-------- C:\Program Files\IZArc

2006-10-17 23:54 -------- d-------- C:\Program Files\Smart Projects

2006-10-17 17:05 -------- d-------- C:\Program Files\Common Files\InstallShield

2006-10-16 14:50 -------- d-------- C:\Documents and Settings\Astrid\Application Data\uTorrent

2006-10-16 13:17 -------- d-------- C:\Program Files\Rainlendar2

2006-10-16 13:01 -------- d-------- C:\Program Files\JAM Software

2006-10-15 18:03 -------- d-------- C:\Program Files\CCleaner

2006-10-15 18:00 -------- d-------- C:\Documents and Settings\Astrid\Application Data\SUPERAntiSpyware.com

2006-10-14 14:42 -------- d-------- C:\Program Files\Grisoft

2006-10-13 15:17 21840 --a----t- C:\WINDOWS\system32\SIntfNT.dll

2006-10-13 15:17 17212 --a----t- C:\WINDOWS\system32\SIntf32.dll

2006-10-13 15:17 12067 --a----t- C:\WINDOWS\system32\SIntf16.dll

2006-10-13 13:35 65536 --a------ C:\WINDOWS\system32\nwwks.dll

2006-10-13 13:35 64000 --a------ C:\WINDOWS\system32\nwapi32.dll

2006-10-13 13:35 142336 --a------ C:\WINDOWS\system32\nwprovau.dll

2006-10-13 11:23 163584 --a------ C:\WINDOWS\system32\drivers\nwrdr.sys

2006-10-02 15:28 312128 --------- C:\WINDOWS\system32\msdelta.dll

2006-09-28 20:13 95344 --------- C:\WINDOWS\system32\WUDFCoinstaller.dll

2006-09-28 18:56 55808 --------- C:\WINDOWS\system32\WudfSvc.dll

2006-09-28 18:56 316416 --------- C:\WINDOWS\system32\WUDFx.dll

2006-09-28 18:56 165376 --------- C:\WINDOWS\system32\WudfPlatform.dll

2006-09-28 18:56 146432 --------- C:\WINDOWS\system32\WudfHost.exe

2006-09-25 17:58 23856 --a------ C:\WINDOWS\system32\spupdsvc.exe

2006-09-13 06:01 1084416 --a------ C:\WINDOWS\system32\msxml3.dll

 

 

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

 

*Note* empty entries are not shown

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]

"SUPERAntiSpyware"="\"C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe\""

"Rainlendar2"="\"C:\\Program Files\\Rainlendar2\\Rainlendar2.exe\""

"updateMgr"="C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]

"ATIPTA"="\"C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe\""

"ATICCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\cli.exe\" runtime"

"SpySweeper"="\"C:\\Program Files\\Webroot\\Spy Sweeper\\SpySweeperUI.exe\" /startintray"

"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe"

"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""

"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"

"adwarealert"="C:\\Program Files\\AdwareAlert\\AdwareAlert.exe -boot"

"H2O"="\"C:\\Program Files\\SyncroSoft\\Pos\\H2O\\cledx.exe\""

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]

"Installed"="1"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]

"Installed"="1"

"NoChange"="1"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]

"Installed"="1"

 

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]

"DeskHtmlVersion"=dword:00000110

"DeskHtmlMinorVersion"=dword:00000005

"Settings"=dword:00000001

"GeneralFlags"=dword:00000005

 

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]

"Source"="About:Home"

"SubscribedURL"="About:Home"

"FriendlyName"="My Current Home Page"

"Flags"=dword:00000002

"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\

00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00

"CurrentState"=hex:04,00,00,40

"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\

ff,ff,04,00,00,00

"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\

00,00,01,00,00,00

 

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

 

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]

"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]

"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"

"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"

"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=""

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"NoDispAppearancePage"=dword:00000000

"NoColorChoice"=dword:00000000

"NoSizeChoice"=dword:00000000

"NoDispBackgroundPage"=dword:00000000

"NoDispScrSavPage"=dword:00000000

"NoDispCPL"=dword:00000000

"NoVisualStyleChoice"=dword:00000000

"NoDispSettingsPage"=dword:00000000

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoDriveTypeAutoRun"=dword:00000000

"NoActiveDesktop"=dword:00000000

"NoSaveSettings"=dword:00000000

"ClassicShell"=dword:00000000

"NoThemesTab"=dword:00000000

"ForceActiveDesktopOn"=dword:00000000

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"dontdisplaylastusername"=dword:00000000

"legalnoticecaption"=""

"legalnoticetext"=""

"shutdownwithoutlogon"=dword:00000001

"undockwithoutlogon"=dword:00000001

"DisableTaskMgr"=dword:00000000

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoActiveDesktopChanges"=dword:00000000

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

 

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]

"NoDriveTypeAutoRun"=dword:00000091

 

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]

"NoDriveTypeAutoRun"=dword:00000091

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]

"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"

"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"

"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"

"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\More 01]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="wma axis"

"hkey"="HKCU"

"command"="C:\\DOCUME~1\\Astrid\\APPLIC~1\\BATLIC~1\\wma axis.exe"

"inimapping"="0"

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="SOUNDMAN"

"hkey"="HKLM"

"command"="SOUNDMAN.EXE"

"inimapping"="0"

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

 

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService

 

Contents of the 'Scheduled Tasks' folder

C:\WINDOWS\tasks\ABB57AB3918AEE97.job

C:\WINDOWS\tasks\MP Scheduled Scan.job

C:\WINDOWS\tasks\wrSpySweeper20051223171407.job

C:\WINDOWS\tasks\wrSpySweeper20051223171417.job

C:\WINDOWS\tasks\wrSpySweeperTrialSweep.job

 

Completion time: 06-12-13 14:24:58.42

C:\ComboFix.txt ... 06-12-13 14:24

C:\ComboFix2.txt ... 06-12-13 10:26

 

 

 

Hijackthis loggen:

Logfile of HijackThis v1.99.1

Scan saved at 15:47:59, on 13.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\Symantec AntiVirus\DefWatch.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Symantec AntiVirus\Rtvscan.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe

C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Rainlendar2\Rainlendar2.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SSU.EXE

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\PROGRA~1\MOZILL~2\THUNDE~1.EXE

C:\Documents and Settings\Astrid\Desktop\Sikkerhet\hijackthis\test.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.no/

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime

O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"

O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [adwarealert] C:\Program Files\AdwareAlert\AdwareAlert.exe -boot

O4 - HKLM\..\Run: [H2O] "C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe"

O4 - HKCU\..\Run: [sUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"

O4 - HKCU\..\Run: [Rainlendar2] "C:\Program Files\Rainlendar2\Rainlendar2.exe"

O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

O16 - DPF: {5CF549B1-E178-4D8C-ADEF-73F226644F12} - http://designer.room328.com/app/WebVDSetUp.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1164320369291

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {A0F3DE0D-9308-4650-82A0-53F0C17D7D65} (Web2D Control) - http://designer.room328.com/app/WebVD.cab

O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

[norbat]

Loggen ser fin ut

 

Ang. oppdateringsiveren til winxp: Du kan sjekke manuelt om det er noen oppdateringer som _er_ nødvendig.

 

Du kan også fra start->kjør, skrive: sfc /scannow (husk mellomrom mellom sfc og / ). Du trenger antakelig winXP cd'n. Du vil ikke får noen melding om det er fikset noe da vinduet som kommer opp lukkes når det er ferdig uten å gi noen meldinger.

 

Du kan også laste ned CCleaner. Kjør rens + 'saker' noen ganger.

Endret 13. desember 2006 av norbat

[strikkepinne]

Ok det var godt å høre! Hmm... WinXp cd'en ligger nok antakeligvis dypt inni ett flyttelass så den kan være vanskelig å få tak i. Typisk.

CCleaner tror jeg at jeg har så den kan jeg bruke nå. Takk for hjelpen!