Har trojaner-nod32 finn ingen problem. #Løst#

kizzykazz · 20. mars 2007

C:\WINDOWS\SECUREWIN31.DLL

C:\WINDOWS\SECUREWIN32.EXE

C:\WINDOWS\WINDOWSUPDATES.EXE

Desse har nanoscan.com funne. Eg klarer ikkje å logge inn for tida, så eg får ikkje fjerna dei. Nod32 finn heller ingen feil med filene.

Trojaneren heiter: Trj/Agent.DYH

Takk for hjelp!

Endret 30. mars 2007 av kazzkizz

Magnusha · 20. mars 2007

Tror ikke jeg ville stolt helt på den siden der, de kan bare være ute etter å selge produkter ol.

norbat · 22. mars 2007

Hei, kazzkizz

Hvordan går det med pc'n?

Når du sier at du ikke klarer å logge inn, mener du inn på pc'n?

Du kan prøve å 'logge' deg inn når du er i Sikker modus (tapp F8 under oppstart). Når du er der inne kan du også prøve å slette de tre filene du nevner manuelt. Mulig at du må sette på 'Vis skjulte filer og mapper'.

kizzykazz · 22. mars 2007

norbat: Pcen fungerer flott den!

Eg klare ikkje og logge inn på nanoscan.com , det var det eg meinte.

norbat · 22. mars 2007

Høres fint ut

Hvis du vil kan du hente Hijackthis, start programmet, velg "Do a system scan and save a logfile". Loggfilen kopierer du og poster, så ser vi om det trengs å gjøres noen grep for å få en evt. spywarefri pc.

kizzykazz · 23. mars 2007

Oki, her er ein logg:

Klikk for å se/fjerne innholdet nedenfor

Logfile of HijackThis v1.99.1

Scan saved at 17:32:02, on 23.03.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Diskeeper Corporation\Diskeeper\DkService.exe

C:\Programfiler\NetVeda\Safety.Net\ipcsvc.exe

C:\Programfiler\Fellesfiler\Microsoft Shared\VS7Debug\mdm.exe

C:\Programfiler\Eset\nod32krn.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Programfiler\Canon\CAL\CALMAIN.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Programfiler\NetVeda\Safety.Net\ipcTray.exe

C:\Programfiler\Eset\nod32kui.exe

C:\Programfiler\Microsoft Office\Office12\GrooveMonitor.exe

C:\Programfiler\DAEMON Tools\daemon.exe

C:\WINDOWS\VM_STI.EXE

C:\Programfiler\uTorrent\uTorrent.exe

C:\Programfiler\MSN Messenger\msnmsgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\BinarySense\HDDlife\HDDlifePro.exe

C:\Programfiler\MSN Messenger\usnsvc.exe

F:\Innstalert Spill\Steam\steam.exe

C:\Programfiler\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sol.no/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Internet Security Class - {A75E294E-C047-4D29-B07E-37B792881BEF} - C:\WINDOWS\SecureWin31.dll

O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programfiler\Free Download Manager\iefdmcks.dll

O4 - HKLM\..\Run: [TkBellExe] "C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe"

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [secure] C:\WINDOWS\WindowsUpdates.exe

O4 - HKLM\..\Run: [safetyNet_Notifier] "C:\Programfiler\NetVeda\Safety.Net\ipcLn.exe"

O4 - HKLM\..\Run: [safetyNet] "C:\Programfiler\NetVeda\Safety.Net\ipcTray.exe"

O4 - HKLM\..\Run: [nod32kui] "C:\Programfiler\Eset\nod32kui.exe" /WAITSERVICE

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programfiler\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Programfiler\Diskeeper Corporation\Diskeeper\DkIcon.exe"

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programfiler\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [bigDogPath] "C:\WINDOWS\VM_STI.EXE" VIMICRO USB PC Camera

O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe

O4 - HKCU\..\Run: [µTorrent] "C:\Programfiler\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Programfiler\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [steam] "F:\Innstalert Spill\Steam\Steam.exe" -silent

O4 - Startup: HDDlife.lnk = C:\Programfiler\BinarySense\HDDlife\HDDlifePro.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Hurtigstart for Adobe Reader.lnk = C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Programfiler\Free Download Manager\dlall.htm

O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Programfiler\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Download with Free Download Manager - file://C:\Programfiler\Free Download Manager\dllink.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab

O16 - DPF: {39D420B3-E0EB-424C-89AA-C24F8DE7EF79} (KooPlayer Control) - http://www.tvkoo.com/update/KooPlayer.ocx

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://kazzkizz.spaces.live.com//PhotoUpload/MsnPUpld.cab

O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - http://www.nanoscan.com/as/v1/cabs/ascinstie.cab

O16 - DPF: {5CD4310E-88FB-43C1-BE24-5F3FA9C5C9D1} (KooPlayer Control) - http://www.tvlution.com/KooPlayer.ocx

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1139517338796

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - http://www.nanoscan.com/cabs/nanoinst.cab

O16 - DPF: {BDEE1959-AB6B-4745-A29B-F492861102CC} -

O17 - HKLM\System\CCS\Services\Tcpip\..\{0E56D2AD-252F-4985-BB90-A2847896380A}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{1E1ACC40-49CB-40FE-94FF-48A27F96FF26}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{547F082E-3D8B-46DD-AE83-DFDC789FC6A4}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{578D7DEB-195A-4C3E-9117-0FF3948670CC}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{7ED89C7F-5E77-4F20-B665-95C70725E186}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{85F94426-2593-4FD5-AF4F-F62BBC39B9D5}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{902CB026-3F33-4212-B15B-563FC2444BE7}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{97BA2BC7-D5B3-424F-AB92-E42E9AC17597}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{A0A5BD70-C0F7-4B2B-9F8A-D766A13D2C9D}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{ABF1A214-7841-438B-86F6-9031248411B5}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{C8714B1F-B407-4C79-BA9A-710DCDD4DF38}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\..\{CA8CD992-EAC9-4254-9361-939593C5B68D}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.114.108 85.255.112.143

O17 - HKLM\System\CS4\Services\Tcpip\..\{0E56D2AD-252F-4985-BB90-A2847896380A}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CS5\Services\Tcpip\Parameters: NameServer = 85.255.114.108 85.255.112.143

O17 - HKLM\System\CS5\Services\Tcpip\..\{0E56D2AD-252F-4985-BB90-A2847896380A}: NameServer = 85.255.114.108,85.255.112.143

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.108 85.255.112.143

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programfiler\Fellesfiler\Microsoft Shared\Help\hxds.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FELLES~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.DLL

O20 - Winlogon Notify: RegCompact - C:\WINDOWS\SYSTEM32\RegCompact.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Unknown owner - C:\Programfiler\Fellesfiler\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Programfiler\Canon\CAL\CALMAIN.exe

O23 - Service: Diskeeper - Diskeeper Corporation - C:\Programfiler\Diskeeper Corporation\Diskeeper\DkService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NetVeda Safety.Net (ipcSvc) - NetVeda LLC - C:\Programfiler\NetVeda\Safety.Net\ipcsvc.exe

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programfiler\Eset\nod32krn.exe

norbat · 23. mars 2007

Heisann, det var litt der, ja

Hent Fixwareout

Legg filen på skrivebordet og dobbeltklikk på den. Klikk Next -> Install.

Sjekk at det er avkrysset i 'Run fixit'.

Klikk Finish og fixet vil starte. Følg instruksjonen.

Restart pc'n når du blir bedt om det. Oppstarten vil ta litt lengre tid en normalt .....

Når pc'n har restartet følger du bare instruksjonen som kommer på skjermen.

Kjør deretter HJT, sett merke framfor følgende linjer og klikk 'Fix checked':

Alle O17-linjene......

O2 - BHO: Internet Security Class - {A75E294E-C047-4D29-B07E-37B792881BEF} - C:\WINDOWS\SecureWin31.dll

O4 - HKLM\..\Run: [secure] C:\WINDOWS\WindowsUpdates.exe

O16 - DPF: {BDEE1959-AB6B-4745-A29B-F492861102CC} -

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

Restart pc'n i sikker modus (tapp F8 under oppstart)

Sørg for at du kan se skjulte filer og mapper (kontrollpanel->mappealt.->vis->"vis skjulte filer og mapper")

Bruk utforsker til å finne og slette (i fet):

C:\WINDOWS\SecureWin31.dll

C:\WINDOWS\WindowsUpdates.exe

(Du kan også se etter C:\WINDOWS\SECUREWIN32.EXE. Hvis den finnes, slett)

Restart i normal tilstand

Post en ny HJT-logg sammen med loggen fra Fixwareout (C:\fixwareout\report.txt)

Endret 23. mars 2007 av norbat

kizzykazz · 23. mars 2007

Sidan eg installerte Fedora Core 6 har eg ikkje klart å komme meg inn i sikkermodus. Fordi valga ikkje kjem fram når eg trykkjer F8. Noko tips der?

norbat · 23. mars 2007

Du kan:

Last ned Killbox

Start programmet

Velg: Delete on Reboot

Klikk: All Files-knappen

Kopier alt som står under mellom de striplete linjene (merk, høyreklikk og velg Kopier):

-------------------------------

C:\WINDOWS\SecureWin31.dll

C:\WINDOWS\WindowsUpdates.exe

C:\WINDOWS\SECUREWIN32.EXE

-------------------------------

I Killbox, gå til File-menyen og velg 'Paste from Clipboard'

Klikk den røde-og-hvite 'Delete File'-knappen.

Klikk 'Yes'

Post deretter en ny HJT-logg sammen med loggen fra Fixwareout (C:\fixwareout\report.txt)

kizzykazz · 23. mars 2007

HJT-logg :

Klikk for å se/fjerne innholdet nedenfor

Logfile of HijackThis v1.99.1

Scan saved at 22:24:13, on 23.03.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Diskeeper Corporation\Diskeeper\DkService.exe

C:\Programfiler\NetVeda\Safety.Net\ipcsvc.exe

C:\Programfiler\Fellesfiler\Microsoft Shared\VS7Debug\mdm.exe

C:\Programfiler\Eset\nod32krn.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Programfiler\Canon\CAL\CALMAIN.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Programfiler\NetVeda\Safety.Net\ipcTray.exe

C:\Programfiler\Eset\nod32kui.exe

C:\Programfiler\Microsoft Office\Office12\GrooveMonitor.exe

C:\Programfiler\DAEMON Tools\daemon.exe

C:\WINDOWS\VM_STI.EXE

C:\Programfiler\uTorrent\uTorrent.exe

C:\Programfiler\MSN Messenger\msnmsgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Programfiler\BinarySense\HDDlife\HDDlifePro.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Programfiler\MSN Messenger\usnsvc.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sol.no/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Internet Security Class - {A75E294E-C047-4D29-B07E-37B792881BEF} - C:\WINDOWS\SecureWin31.dll (file missing)