hjelp til analyse av HJT ++

kjetilm · 12. mai 2007

En venn har et STORT prob med pc en

Har vert igjenom Langversonen til norbat og legger ut HJT og SaS logg her

HJT

Klikk for å se/fjerne innholdet nedenfor

Logfile of HijackThis v1.99.1

Scan saved at 15:11:43, on 12.05.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.exe

C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgamsvr.exe

C:\WINDOWS\Explorer.EXE

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgupsvc.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Virtual CD v4 SDK\system\vcssecs.exe

C:\Programfiler\Java\jre1.6.0_01\bin\jusched.exe

C:\apps\ABoard\ABoard.exe

C:\apps\ABoard\AOSD.exe

C:\Programfiler\QuickTime\qttask.exe

C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\rundll32.exe

C:\Programfiler\Microsoft IntelliPoint\point32.exe

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgcc.exe

C:\WINDOWS\system32\winx86s.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Messenger\msmsgs.exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programfiler\Creative\Shared Files\CAMTRAY.EXE

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\winx86s.exe

C:\Programfiler\MSN Messenger\msnmsgr.exe

C:\Programfiler\ATI Technologies\ATI.ACE\CLI.EXE

C:\Programfiler\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgwb.dat

C:\Programfiler\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Programfiler\Internet Explorer\iexplore.exe

C:\Programfiler\ATI Technologies\ATI.ACE\cli.exe

C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Documents and Settings\Bjørn Roar\Lokale innstillinger\Temporary Internet Files\Content.IE5\BEFWN7C0\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Programfiler\BearShare applications\BearShare MediaBar\MediaBar.dll

F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDOWS\svchost.exe" "C:\WINDO

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,"C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.exe","C:\WINDOWS\svchost.ex"C:\WINDOWS\svchost.exe",

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Programfiler\BitComet\tools\BitCometBHO_1.1.3.19.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Knight Online Toolbar Helper - {9D006D63-579B-4D77-9C12-15623661ADDA} - C:\Programfiler\Knight Online Toolbar\v3.2.0.0\Knight_Online_Toolbar.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programfiler\google\googletoolbar3.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\Windows Live Toolbar\msntb.dll

O2 - BHO: (no name) - {E9FE24FA-3113-4A03-908E-FF71D5AC683C} - (no file)

O2 - BHO: XBTP02634 - {F97DA966-F09D-4cab-BF29-75A0026986EA} - C:\PROGRA~1\BEARSH~2\BEARSH~2\MediaBar.dll

O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Programfiler\BearShare applications\BearShare MediaBar\MediaBar.dll

O3 - Toolbar: Knight Online Toolbar - {E7D38ED4-2933-43B8-B0B9-52D11CE9CA10} - C:\Programfiler\Knight Online Toolbar\v3.2.0.0\Knight_Online_Toolbar.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\Windows Live Toolbar\msntb.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programfiler\google\googletoolbar3.dll

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_01\bin\jusched.exe"

O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"

O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe

O4 - HKLM\..\Run: [ClickMe] C:\apps\ClickMe\ClickMe.exe

O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Programfiler\Microsoft Works\WksSb.exe /AllUsers

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [TkBellExe] "C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programfiler\Creative\Shared Files\CAMTRAY.EXE

O4 - HKLM\..\Run: [HP Software Update] "C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe"

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"

O4 - HKLM\..\Run: [intelliPoint] "C:\Programfiler\Microsoft IntelliPoint\point32.exe"

O4 - HKLM\..\Run: [ATICCC] "C:\Programfiler\ATI Technologies\ATI.ACE\CLIStart.exe"

O4 - HKLM\..\Run: [AVG7_CC] C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [winx86s] C:\WINDOWS\system32\winx86s.exe

O4 - HKLM\..\Run: [ccApp] "C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [osCheck] "C:\Programfiler\Norton AntiVirus\osCheck.exe"

O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "C:\WINDOWS\system32\jlfctbyw.dll",realset

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Programfiler\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - Startup: Registration Brothers In Arms.LNK = D:\Support\Register\RegistrationReminder.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Programfiler\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?

O4 - Global User Startup: Microsoft Office.lnk = C:\Programfiler\Microsoft Office\Office10\OSA.EXE

O4 - Global User Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?

O8 - Extra context menu item: &Windows Live Search - res://C:\Programfiler\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Download all links using BitComet - res://C:\Programfiler\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: Download all videos using BitComet - res://C:\Programfiler\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: Download link using &BitComet - res://C:\Programfiler\BitComet\BitComet.exe/AddLink.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - C:\PROGRA~1\PACIFI~1\pacificpoker.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O10 - Broken Internet access because of LSP provider 'xfire_lsp_9028.dll' missing

O11 - Options group: [iNTERNATIONAL] International*

O12 - Plugin for .spop: C:\Programfiler\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\nor.htm

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...tup1.0.0.15.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {4445EA6A-9008-40D5-9160-035FDE5214C4} - http://www.123hjemmeside.dk/builder/pages/Mpu-dk-1-0-0-8.cab

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab

O16 - DPF: {72C9EA8F-8965-40C2-ABAD-D460A5815F86} (hostCntrlIE Class) - http://vhost.oddcast.com/admin/hostClientIE.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab

O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab

O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Programfiler\Fellesfiler\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgupsvc.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Programfiler\Fellesfiler\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Programfiler\Fellesfiler\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Programfiler\Fellesfiler\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Google Updater Service (gusvc) - Google - C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Programfiler\Norton AntiVirus\isPwdSvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Programfiler\Virtua

SaS logg

Klikk for å se/fjerne innholdet nedenfor

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

Generated 05/12/2007 at 02:30 PM

Application Version : 3.7.1018

Core Rules Database Version : 3237

Trace Rules Database Version: 1248

Scan type : Quick Scan

Total Scan Time : 00:24:03

Memory items scanned : 644

Memory threats detected : 3

Registry items scanned : 1239

Registry threats detected : 29

File items scanned : 36544

File threats detected : 18

Adware.Vundo Variant

C:\WINDOWS\SYSTEM32\MLJGH.DLL

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E2EE5C44-C66D-499d-BEAE-A2A79189A63A}

HKCR\CLSID\{E2EE5C44-C66D-499D-BEAE-A2A79189A63A}

HKCR\CLSID\{E2EE5C44-C66D-499D-BEAE-A2A79189A63A}\InprocServer32

HKCR\CLSID\{E2EE5C44-C66D-499D-BEAE-A2A79189A63A}\InprocServer32#ThreadingModel

C:\WINDOWS\SYSTEM32\PTLXUGTO.DLL

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9FE24FA-3113-4A03-908E-FF71D5AC683C}

HKCR\CLSID\{E9FE24FA-3113-4A03-908E-FF71D5AC683C}

HKCR\CLSID\{E9FE24FA-3113-4A03-908E-FF71D5AC683C}\InprocServer32

HKCR\CLSID\{E9FE24FA-3113-4A03-908E-FF71D5AC683C}\InprocServer32#ThreadingModel

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{E9FE24FA-3113-4A03-908E-FF71D5AC683C}

Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh

HKCR\CLSID\{D651AFF4-9590-424D-BD1E-8E33E090DFB3}

HKCR\CLSID\{D651AFF4-9590-424D-BD1E-8E33E090DFB3}\InprocServer32

HKCR\CLSID\{D651AFF4-9590-424D-BD1E-8E33E090DFB3}\InprocServer32#ThreadingModel

HKCR\CLSID\{E2EE5C44-C66D-499D-BEAE-A2A79189A63A}

HKCR\CLSID\{E9FE24FA-3113-4A03-908E-FF71D5AC683C}

C:\WINDOWS\SYSTEM32\GEEDE.DLL

C:\WINDOWS\SYSTEM32\MLLMN.DLL

Trojan.WinFixer

C:\WINDOWS\SYSTEM32\PMKHI.DLL

Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\pmkhi

Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\ssqrs

C:\WINDOWS\SYSTEM32\SSQRS.DLL

C:\WINDOWS\SYSTEM32\DDAYW.DLL

C:\WINDOWS\SYSTEM32\GEEBA.DLL

C:\WINDOWS\SYSTEM32\SSQPN.DLL

Trojan.Downloader-Gen/HardFall

C:\WINDOWS\SYSTEM32\WVUSQOL.DLL

Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\wvusqol

Adware.Tracking Cookie

C:\Documents and Settings\Bjørn Roar\Cookies\bjørn_roar@cpvfeed[2].txt

C:\Documents and Settings\Bjørn Roar\Cookies\bjø[email protected][2].txt

C:\Documents and Settings\Bjørn Roar\Cookies\bjø[email protected][1].txt

C:\Documents and Settings\Bj›rn Roar\Cookies\bjørn roar@tradedoubler[2].txt

C:\WINDOWS\system32\config\systemprofile\Cookies\[email protected][1].txt

C:\WINDOWS\system32\config\systemprofile\Cookies\system@cpvfeed[2].txt

C:\WINDOWS\system32\config\systemprofile\Cookies\system@mediaplex[1].txt

Adware.Media Access

HKCR\Interface\{00ADA225-EA6C-4FB3-82E8-68189201CCB9}

HKCR\Interface\{00ADA225-EA6C-4FB3-82E8-68189201CCB9}\ProxyStubClsid

HKCR\Interface\{00ADA225-EA6C-4FB3-82E8-68189201CCB9}\ProxyStubClsid32

HKCR\Interface\{00ADA225-EA6C-4FB3-82E8-68189201CCB9}\TypeLib

HKCR\Interface\{00ADA225-EA6C-4FB3-82E8-68189201CCB9}\TypeLib#Version

Trojan.Vundo

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh#Asynchronous

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh#DllName

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh#Impersonate

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh#Startup

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\mljgh#Logoff

Trojan.Downloader-Gen/LIB

C:\WINDOWS\SYSTEM32\DWCHYODB.DLL

trondki · 12. mai 2007

hei det er jeg som trenger hjelpen

norbat · 12. mai 2007

Hei,

Avinstaller, om mulig, fra legg til/fjern programmer:

Bearshare

Hent Avenger og pakk det ut.

Start programmet, sett prikk i "Input Script Manually" og klikk på lupen.

I vinduet som kommer opp kopierer du og limer inn det som er i fet skrift under:

Files to delete:

C:\WINDOWS\system32\winx86s.exe

C:\WINDOWS\system32\jlfctbyw.dll

Folders to delete:

C:\Programfiler\BearShare applications

Klikk på Trafikklyset. Restart pc'n.

Etter restart vil det komme en loggfil som forteller hva som har skjedd. Den poster du senere.

Kjør HJT, sett merke framfor følgende linjer og klikk 'Fix checked':

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

R3 - URLSearchHook: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Programfiler\BearShare applications\BearShare MediaBar\MediaBar.dll

O2 - BHO: (no name) - {E9FE24FA-3113-4A03-908E-FF71D5AC683C} - (no file)

O2 - BHO: XBTP02634 - {F97DA966-F09D-4cab-BF29-75A0026986EA} - C:\PROGRA~1\BEARSH~2\BEARSH~2\MediaBar.dll

O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Programfiler\BearShare applications\BearShare MediaBar\MediaBar.dll

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [winx86s] C:\WINDOWS\system32\winx86s.exe

O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "C:\WINDOWS\system32\jlfctbyw.dll",realset

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...tup1.0.0.15.cab

Restart pc

Hent Combofix, og legg det på skrivebordet

Kjør combofix.exe, og følg veiledningen.

Du må ikke klikke på vinduet mens programmet kjører.

Det lage en logg som du poster senere.

Post en ny HJT-logg + loggen fra Avenger + loggen fra Combofix

kjetilm · 12. mai 2007

Ok. takker.

Han skal gjøre det når gan kommer hjem så skal vi sette ut loggene.

Takk for at du tar deg tid.

Edit: Maskinen er veldig treg også...

Endret 12. mai 2007 av kjetilm

trondki · 12. mai 2007

det kom fram noen feilmeldniger etter rebot men?

logg file...

Klikk for å se/fjerne innholdet nedenfor

Logfile of The Avenger version 1, by Swandog46

Running from registry key:

\Registry\Machine\System\CurrentControlSet\Services\pipejvrh

*******************

Script file located at: \??\C:\lxxmgwtt.txt

Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\WINDOWS\system32\winx86s.exe deleted successfully.

File C:\WINDOWS\system32\jlfctbyw.dll deleted successfully.

Folder C:\Programfiler\BearShare applications deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

norbat · 12. mai 2007

Fortsett bare med veiledningen...

trondki · 12. mai 2007

Fortsett bare med veiledningen...

8597198[/snapback]

ok

trondki · 12. mai 2007

combofix 1

Klikk for å se/fjerne innholdet nedenfor

"Bj›rn Roar" - 12.05.2007 20:35:45 Service Pack 2

ComboFix 07-05.09.V - Running from: "C:\Documents and Settings\Bj›rn Roar\Skrivebord\"

(((((((((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\system32\qndjxyks.dll

C:\WINDOWS\system32\skyxjdnq.ini

* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\DOCUME~1\BJRNRO~1\SKRIVE~1.\internet explorer.lnk

C:\install.log

((((((((((((((((((((((((((((((( Files Created from 12.0-01-07 to 12.05.2007 ))))))))))))))))))))))))))))))))))

12.05.2007 20:06 <DIR> d-------- C:\avenger

12.05.2007 19:27 <DIR> dr-h----- C:\DOCUME~1\BJRNRO~1\Siste

12.05.2007 14:26 663ÿ174 ---hs---- C:\WINDOWS\system32\hgjlm.ini2

12.05.2007 14:03 <DIR> d-------- C:\Programfiler\SUPERAntiSpyware

12.05.2007 14:03 <DIR> d-------- C:\DOCUME~1\BJRNRO~1\PROGRA~1\SUPERAntiSpyware.com

12.05.2007 14:03 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\PROGRA~1\SUPERAntiSpyware.com

12.05.2007 14:02 <DIR> d-------- C:\Programfiler\Fellesfiler\Wise Installation Wizard

12.05.2007 13:57 <DIR> d-------- C:\Programfiler\CCleaner

12.05.2006 15:50 7ÿ712 --a------ C:\WINDOWS\system32\pk.bin

12.05.2006 11:14 19ÿ526 --a------ C:\WINDOWS\system32\web.dat

12.05.2005 14:11 25ÿ856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-05-12 18:24:34 12 ----a-w C:\WINDOWS\bthservsdp.dat

2007-05-12 13:27:31 331,958 ----a-w C:\WINDOWS\system32\bpk.dat

2007-05-12 11:50:25 662,135 --sh--w C:\WINDOWS\system32\hgjlm.bak2

2007-05-12 11:39:29 -------- d-----w C:\Programfiler\SwiftSwitch

2007-05-11 17:02:40 -------- d-----w C:\Programfiler\Steam

2007-05-11 14:06:59 661,240 --sh--w C:\WINDOWS\system32\hgjlm.bak1

2007-05-11 13:48:23 661,797 --sh--w C:\WINDOWS\system32\ihkmp.bak1

2007-05-11 12:47:08 662,042 --sh--w C:\WINDOWS\system32\ihkmp.bak2

2007-05-10 15:57:27 -------- d-----w C:\Programfiler\Google

2007-05-10 15:57:24 -------- d-----w C:\Programfiler\Fellesfiler\Symantec Shared

2007-05-10 15:56:52 -------- d-----w C:\Programfiler\Symantec

2007-05-10 15:56:50 -------- d-----w C:\Programfiler\Norton AntiVirus

2007-05-10 15:55:46 -------- d-----w C:\Programfiler\Microsoft CAPICOM 2.1.0.2

2007-05-04 13:21:41 521,653 --sh--w C:\WINDOWS\system32\srqss.bak1

2007-05-04 12:59:54 353 --sh--w C:\WINDOWS\system32\sttss.ini2

2007-05-01 16:05:49 60,326 ----a-w C:\WINDOWS\system32\perfc014.dat

2007-05-01 16:05:49 384,784 ----a-w C:\WINDOWS\system32\perfh014.dat

2007-05-01 08:37:01 48,776 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL

2007-05-01 08:37:01 115,000 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS

2007-04-30 16:44:42 -------- d-----w C:\Programfiler\SCAR 3.04

2007-04-30 16:37:22 -------- d-----w C:\Programfiler\AutoFighter

2007-04-24 15:52:17 -------- d-----w C:\Programfiler\FishInSight

2007-04-24 15:49:15 796,672 ----a-w C:\WINDOWS\GPInstall.exe

2007-04-22 09:15:50 -------- d-----w C:\Programfiler\Windows Live Safety Center

2007-04-21 08:24:35 -------- d--h--w C:\Programfiler\InstallShield Installation Information

2007-04-21 08:24:34 -------- d-----w C:\Programfiler\Knight Online

2007-04-19 19:32:16 -------- d-----w C:\Programfiler\mIRC

2007-04-14 06:56:11 -------- d-----w C:\Programfiler\GameSpy Arcade

2007-04-04 18:12:22 -------- d-----w C:\Programfiler\NCH Swift Sound

2007-04-02 16:20:26 -------- d-----w C:\Programfiler\EA GAMES

2007-04-02 07:44:45 -------- d-----w C:\Programfiler\BitComet

2007-04-01 20:06:48 2,560 ----a-w C:\WINDOWS\system32\BitCometRes.dll

2007-03-27 19:28:09 -------- d-----w C:\Programfiler\PacificPoker

2007-03-27 19:18:40 -------- d-----w C:\Programfiler\Electronic Arts

2007-03-27 05:49:57 -------- d-----w C:\Programfiler\Microsoft ActiveSync

2007-03-25 18:31:18 -------- d-----w C:\Programfiler\Ubisoft

2007-03-24 15:34:03 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll

2007-03-22 13:41:42 -------- d-----w C:\Programfiler\Eidos

2007-03-22 06:30:34 -------- d-----w C:\Programfiler\Codec Pack - All In 1

2007-03-17 13:45:38 292,864 ----a-w C:\WINDOWS\system32\winsrv.dll

2007-03-16 20:00:22 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Xfire

2007-03-16 19:58:33 -------- d-s---w C:\Programfiler\Xfire

2007-03-16 19:49:02 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\GetRightToGo

2007-03-08 15:39:11 577,536 ----a-w C:\WINDOWS\system32\user32.dll

2007-03-08 15:39:11 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll

2007-03-08 15:39:11 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll

2007-03-08 15:38:06 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys

2007-03-06 17:27:12 -------- d-----w C:\Programfiler\RegCure

2007-03-06 14:53:10 -------- d-----w C:\Programfiler\Activision

2007-03-04 08:13:37 -------- d-----w C:\Programfiler\Valve

2007-03-03 19:57:20 -------- d-----w C:\Programfiler\Windows Live Toolbar

2007-03-03 19:55:10 -------- d-----w C:\Programfiler\MSN Messenger

2007-03-03 19:24:40 231,241 ----a-w C:\WINDOWS\Knight_Online_Toolbar_Uninstaller_8625.exe

2007-03-03 19:24:40 -------- d-----w C:\Programfiler\Knight Online Toolbar

2007-03-01 21:54:35 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Gearbox Software

2007-03-01 15:14:19 -------- d-----w C:\Programfiler\BearShare

2007-02-24 12:01:22 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll

2007-02-24 11:56:12 -------- d-----w C:\Programfiler\Paradox Interactive

2007-02-18 16:21:38 -------- d-----w C:\Programfiler\Ruttensoft

2007-02-18 15:40:12 -------- d-----w C:\Programfiler\AIM Productions

2007-02-18 15:32:35 -------- d-----w C:\Programfiler\JAMDAT Mobile

2007-02-18 15:32:32 -------- d-----w C:\Programfiler\Hexacto Games

2007-02-12 14:47:03 -------- d-----w C:\Programfiler\CarbonPoker

2007-02-10 20:51:40 -------- d-----w C:\Programfiler\Poker.com

2007-02-10 15:27:08 -------- d-----w C:\Programfiler\Creative

2007-02-10 09:33:47 -------- d-----w C:\Programfiler\Windows Media Connect 2

2007-02-09 11:10:35 574,464 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys

2007-02-05 20:19:38 185,344 ----a-w C:\WINDOWS\system32\upnphost.dll

2007-01-26 17:28:52 -------- d-----w C:\Programfiler\GameSpy

2007-01-25 14:23:10 12,255,406 ------w C:\AVG7QT.DAT

2007-01-24 16:27:45 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\dvdcss

2007-01-24 16:27:25 -------- d-----w C:\Programfiler\EasyDVDClone

2007-01-24 16:17:55 -------- d-----w C:\Programfiler\Wolfenstein - Enemy Territory

2007-01-24 14:27:30 255,848 ----a-w C:\WINDOWS\system32\xactengine2_6.dll

2007-01-20 23:37:55 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\ATI

2007-01-20 23:31:26 -------- d-----w C:\Programfiler\ATI Technologies

2007-01-19 11:53:04 51,056 ----a-w C:\WINDOWS\system32\sirenacm.dll

2007-01-10 21:06:08 -------- d-----w C:\Programfiler\NETGEAR

2007-01-08 18:01:14 17,408 ----a-w C:\WINDOWS\system32\corpol.dll

2007-01-08 14:30:42 15,128 ----a-w C:\WINDOWS\system32\x3daudio1_1.dll

2007-01-08 12:52:32 -------- d-----w C:\Programfiler\Blender Foundation

2007-01-08 12:32:31 -------- d-----w C:\Programfiler\America's Army Server Manager

2007-01-07 00:48:24 20,480 ----a-w C:\WINDOWS\system32\copytodevice.exe

2007-01-06 22:21:39 -------- d-----w C:\Programfiler\MTA San Andreas

2006-12-26 10:50:04 -------- d-----w C:\Programfiler\Opera Software

2006-12-25 10:43:01 -------- d-----w C:\Programfiler\DVD Region+CSS Free

2006-12-24 12:15:54 -------- d-----w C:\Programfiler\WinMPG VideoConvert

2006-12-24 12:14:06 -------- d-----w C:\Programfiler\Amadis Software

2006-12-22 16:38:14 -------- d-----w C:\Programfiler\Handmark

2006-12-22 10:34:13 737,280 ----a-w C:\WINDOWS\iun6002.exe

2006-12-22 10:06:20 -------- d-----w C:\Programfiler\Blade Client V1.6

2006-12-22 10:03:41 -------- d-----w C:\Programfiler\Runescape Apocalypse Client

2006-12-20 20:05:00 520,192 ------w C:\WINDOWS\system32\ati2sgag.exe

2006-12-17 02:50:46 263,168 ----a-w C:\WINDOWS\system32\ati2dvag.dll

2006-12-17 02:50:29 1,918,464 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys

2006-12-17 02:44:38 118,784 ----a-w C:\WINDOWS\system32\atipdlxx.dll

2006-12-17 02:44:27 102,400 ----a-w C:\WINDOWS\system32\Oemdspif.dll

2006-12-17 02:44:20 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe

2006-12-17 02:44:13 42,496 ----a-w C:\WINDOWS\system32\ati2edxx.dll

2006-12-17 02:44:03 110,592 ----a-w C:\WINDOWS\system32\ati2evxx.dll

2006-12-17 02:42:46 434,176 ----a-w C:\WINDOWS\system32\ati2evxx.exe

2006-12-17 02:42:03 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL

2006-12-17 02:41:46 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll

2006-12-17 02:35:43 2,676,672 ----a-w C:\WINDOWS\system32\ati3duag.dll

2006-12-17 02:30:42 1,289,472 ----a-w C:\WINDOWS\system32\ativvaxx.dll

2006-12-17 02:30:22 3,107,788 ----a-w C:\WINDOWS\system32\ativvaxx.dat

2006-12-17 02:23:32 6,684,672 ----a-w C:\WINDOWS\system32\atioglx1.dll

2006-12-17 02:21:02 5,304,320 ----a-w C:\WINDOWS\system32\atioglxx.dll

2006-12-17 02:17:16 241,664 ----a-w C:\WINDOWS\system32\atikvmag.dll

2006-12-17 02:16:06 303,104 ----a-w C:\WINDOWS\system32\ATIDEMGR.dll

2006-12-17 02:16:00 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll

2006-12-17 02:10:56 315,392 ----a-w C:\WINDOWS\system32\ati2cqag.dll

2006-12-13 09:31:20 -------- d-----w C:\Programfiler\Red Storm Entertainment

2006-12-08 11:02:00 251,672 ----a-w C:\WINDOWS\system32\xactengine2_5.dll

2006-12-04 14:21:50 414,720 ----a-w C:\WINDOWS\system32\msscp.dll

2006-11-29 12:06:18 3,426,072 ----a-w C:\WINDOWS\system32\d3dx9_32.dll

2006-11-28 19:55:40 142,347 ----a-w C:\WINDOWS\system32\atiicdxx.dat

2006-11-18 13:44:12 -------- d-----w C:\Programfiler\Microsoft IntelliPoint

2006-11-16 13:15:39 -------- d-----w C:\Programfiler\MSXML 4.0

2006-11-15 10:07:16 8,247,296 ----a-w C:\WINDOWS\system32\wmploc.dll

2006-11-15 09:46:10 99,840 ----a-w C:\WINDOWS\system32\wmpshell.dll

2006-11-15 09:45:40 225,280 ----a-w C:\WINDOWS\system32\wmerror.dll

2006-11-15 09:43:34 7,168 ----a-w C:\WINDOWS\system32\asferror.dll

2006-11-11 21:42:02 -------- d-----w C:\Programfiler\Rockstar Games

2006-11-11 10:52:45 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Elaborate Bytes

2006-11-08 05:08:23 679,424 ----a-w C:\WINDOWS\system32\inetcomm.dll

2006-11-07 20:03:36 413,696 ----a-w C:\WINDOWS\system32\vbscript.dll

2006-11-07 20:03:36 156,160 ----a-w C:\WINDOWS\system32\msls31.dll

2006-11-07 15:21:20 -------- d-----w C:\Programfiler\America's Army

2006-11-07 02:26:44 71,680 ----a-w C:\WINDOWS\system32\admparse.dll

2006-11-07 02:26:42 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll

2006-11-05 16:45:38 -------- d-----w C:\Programfiler\Managed DirectX (0901)

2006-11-04 13:14:00 1,245,696 ----a-w C:\WINDOWS\system32\msxml4.dll

2006-11-02 10:52:42 38,912 ------w C:\WINDOWS\system32\wpdshextres.dll

2006-11-01 19:19:13 927,504 ----a-w C:\WINDOWS\system32\mfc40u.dll

2006-10-22 16:52:35 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Google

2006-10-20 01:39:57 713,728 ----a-w C:\WINDOWS\system32\sxs.dll

2006-10-18 20:58:00 8,704 ----a-w C:\WINDOWS\system32\wdfmgr.exe

2006-10-18 20:58:00 8,704 ----a-w C:\WINDOWS\system32\uwdf.exe

2006-10-18 20:47:22 767,488 ------w C:\WINDOWS\system32\WMVSENCD.dll

2006-10-18 20:47:22 656,896 ------w C:\WINDOWS\system32\WMVXENCD.dll

2006-10-18 20:47:22 63,488 ----a-w C:\WINDOWS\system32\wpdmtpus.dll

2006-10-18 20:47:22 629,760 ----a-w C:\WINDOWS\system32\wpd_ci.dll

2006-10-18 20:47:22 603,648 ----a-w C:\WINDOWS\system32\WMSPDMOD.dll

2006-10-18 20:47:22 4,096 ----a-w C:\WINDOWS\system32\wmvdmoe2.dll

2006-10-18 20:47:22 4,096 ----a-w C:\WINDOWS\system32\wmvdmod.dll

2006-10-18 20:47:22 4,096 ----a-w C:\WINDOWS\system32\WMVADVE.DLL

2006-10-18 20:47:22 4,096 ----a-w C:\WINDOWS\system32\WMVADVD.dll

2006-10-18 20:47:22 4,096 ----a-w C:\WINDOWS\system32\wmsdmoe2.dll

2006-10-18 20:47:22 4,096 ----a-w C:\WINDOWS\system32\wmsdmod.dll

2006-10-18 20:47:22 356,352 ----a-w C:\WINDOWS\system32\wpdsp.dll

2006-10-18 20:47:22 35,840 ----a-w C:\WINDOWS\system32\wpdconns.dll

2006-10-18 20:47:22 2,603,008 ------w C:\WINDOWS\system32\WpdShext.dll

2006-10-18 20:47:22 154,624 ----a-w C:\WINDOWS\system32\wpdmtp.dll

2006-10-18 20:47:22 133,632 ------w C:\WINDOWS\system32\WPDShServiceObj.dll

2006-10-18 20:47:22 1,574,912 ------w C:\WINDOWS\system32\WMVENCOD.dll

2006-10-18 20:47:22 1,543,680 ------w C:\WINDOWS\system32\WMVDECOD.dll

2006-10-18 20:47:22 1,382,912 ------w C:\WINDOWS\system32\WMVSDECD.dll

2006-10-18 20:47:22 1,329,152 ----a-w C:\WINDOWS\system32\WMSPDMOE.dll

2006-10-18 20:47:20 937,984 ----a-w C:\WINDOWS\system32\WMNetMgr.dll

2006-10-18 20:47:20 613,376 ------w C:\WINDOWS\system32\wmpmde.dll

2006-10-18 20:47:20 535,040 ------w C:\WINDOWS\system32\wmdrmsdk.dll

2006-10-18 20:47:20 348,672 ----a-w C:\WINDOWS\system32\wmdrmnet.dll

2006-10-18 20:47:20 314,880 ----a-w C:\WINDOWS\system32\wmpdxm.dll

2006-10-18 20:47:20 295,936 ------w C:\WINDOWS\system32\wmpeffects.dll

2006-10-18 20:47:20 242,688 ----a-w C:\WINDOWS\system32\wmpasf.dll

2006-10-18 20:47:20 204,288 ----a-w C:\WINDOWS\system32\wmpsrcwp.dll

2006-10-18 20:47:20 157,184 ----a-w C:\WINDOWS\system32\wmidx.dll

2006-10-18 20:47:20 130,048 ------w C:\WINDOWS\system32\wmpps.dll

2006-10-18 20:47:20 1,661,440 ----a-w C:\WINDOWS\system32\wmpencen.dll

2006-10-18 20:47:18 757,248 ----a-w C:\WINDOWS\system32\WMADMOD.dll

2006-10-18 20:47:18 429,056 ----a-w C:\WINDOWS\system32\wmdrmdev.dll

2006-10-18 20:47:18 4,096 ----a-w C:\WINDOWS\system32\wdfapi.dll

2006-10-18 20:47:18 37,376 ----a-w C:\WINDOWS\system32\wmdmps.dll

2006-10-18 20:47:18 33,792 ----a-w C:\WINDOWS\system32\wmdmlog.dll

2006-10-18 20:47:18 284,160 ------w C:\WINDOWS\system32\PortableDeviceApi.dll

2006-10-18 20:47:18 222,208 ----a-w C:\WINDOWS\system32\wmasf.dll

2006-10-18 20:47:18 211,456 ----a-w C:\WINDOWS\system32\qasf.dll

2006-10-18 20:47:18 199,168 ------w C:\WINDOWS\system32\PortableDeviceWMDRM.dll

2006-10-18 20:47:18 166,912 ------w C:\WINDOWS\system32\PortableDeviceTypes.dll

2006-10-18 20:47:18 132,096 ------w C:\WINDOWS\system32\PortableDeviceWiaCompat.dll

2006-10-18 20:47:18 101,888 ------w C:\WINDOWS\system32\PortableDeviceClassExtension.dll

2006-10-18 20:47:18 1,117,696 ----a-w C:\WINDOWS\system32\WMADMOE.dll

2006-10-18 20:47:16 321,536 ----a-w C:\WINDOWS\system32\mswmdm.dll

2006-10-18 20:47:16 27,136 ----a-w C:\WINDOWS\system32\mspmsnsv.dll

2006-10-18 20:47:16 179,712 ----a-w C:\WINDOWS\system32\msnetobj.dll

2006-10-18 20:47:16 175,616 ----a-w C:\WINDOWS\system32\mspmsp.dll

2006-10-18 20:47:14 4,096 ----a-w C:\WINDOWS\system32\MPG4DMOD.dll

2006-10-18 20:47:14 4,096 ----a-w C:\WINDOWS\system32\MP4SDMOD.dll

2006-10-18 20:47:14 4,096 ----a-w C:\WINDOWS\system32\MP43DMOD.dll

2006-10-18 20:47:14 317,440 ------w C:\WINDOWS\system32\MP4SDECD.dll

2006-10-18 20:47:14 259,072 ------w C:\WINDOWS\system32\MPG4DECD.dll

2006-10-18 20:47:14 259,072 ------w C:\WINDOWS\system32\MP43DECD.dll

2006-10-18 20:47:14 212,992 ------w C:\WINDOWS\system32\MFPLAT.dll

2006-10-18 20:47:14 11,264 ----a-w C:\WINDOWS\system32\LAPRXY.dll

2006-10-18 20:47:10 991,744 ----a-w C:\WINDOWS\system32\drmv2clt.dll

2006-10-18 20:47:10 542,720 ----a-w C:\WINDOWS\system32\blackbox.dll

2006-10-18 20:47:10 229,376 ----a-w C:\WINDOWS\system32\cewmdm.dll

2006-10-18 20:47:08 276,992 ----a-w C:\WINDOWS\system32\audiodev.dll

2006-10-18 19:03:58 100,864 ----a-w C:\WINDOWS\system32\logagent.exe

2006-10-18 19:00:46 249,856 ------w C:\WINDOWS\system32\drmupgds.exe

2006-10-18 19:00:14 17,408 ------w C:\WINDOWS\system32\wpdshextautoplay.exe

2006-10-18 19:00:00 38,528 ----a-w C:\WINDOWS\system32\drivers\wpdusb.sys

2006-10-17 11:06:00 78,336 ----a-w C:\WINDOWS\system32\ieencode.dll

2006-10-17 11:05:10 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll

2006-10-17 10:57:58 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll

2006-10-17 10:56:10 45,568 ----a-w C:\WINDOWS\system32\mshta.exe

2006-10-17 10:28:56 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll

2006-10-16 16:16:24 122,880 ----a-w C:\WINDOWS\system32\oledlg.dll

2006-10-14 08:13:25 981,760 ----a-w C:\WINDOWS\system32\mfc42u.dll

2006-10-13 12:41:29 141,824 ----a-w C:\WINDOWS\system32\nwprovau.dll

2006-10-06 19:34:45 166 ----a-w C:\run_studiomdl.bat

2006-10-06 19:34:45 161 ----a-w C:\run_hlmv.bat

2006-10-06 19:34:45 152 ----a-w C:\run_mod.bat

2006-10-06 19:34:45 106 ----a-w C:\run_hammer.bat

2006-10-05 18:35:37 -------- d-----w C:\Programfiler\Webzen

2006-10-05 12:50:37 -------- d-----w C:\Programfiler\Peer Impact

2006-10-02 14:28:42 312,128 ------w C:\WINDOWS\system32\msdelta.dll

2006-09-28 19:13:26 95,344 ------w C:\WINDOWS\system32\WUDFCoinstaller.dll

2006-09-28 18:00:34 82,944 ------w C:\WINDOWS\system32\drivers\WudfRd.sys

2006-09-28 17:56:38 316,416 ------w C:\WINDOWS\system32\WUDFx.dll

2006-09-28 17:56:38 146,432 ------w C:\WINDOWS\system32\WudfHost.exe

2006-09-28 17:56:16 165,376 ------w C:\WINDOWS\system32\WudfPlatform.dll

2006-09-28 17:56:14 55,808 ------w C:\WINDOWS\system32\WudfSvc.dll

2006-09-28 17:55:50 77,568 ------w C:\WINDOWS\system32\drivers\WudfPf.sys

2006-09-28 15:05:56 237,848 ----a-w C:\WINDOWS\system32\xactengine2_4.dll

2006-09-28 15:05:20 2,414,360 ----a-w C:\WINDOWS\system32\d3dx9_31.dll

2006-09-28 15:04:02 68,888 ----a-w C:\WINDOWS\system32\xinput1_3.dll

2006-09-25 16:58:48 23,856 ----a-w C:\WINDOWS\system32\spupdsvc.exe

2006-09-13 05:07:08 1,084,416 ----a-w C:\WINDOWS\system32\msxml3.dll

2006-08-27 10:02:53 -------- d-----w C:\Programfiler\AviSynth 2.5

2006-08-27 10:02:46 -------- d-----w C:\Programfiler\Avi2Dvd

2006-08-27 10:02:18 -------- d-----w C:\Programfiler\Audible

2006-08-27 10:01:22 -------- d-----w C:\Programfiler\4Musics OGG to MP3 Converter

2006-08-25 15:54:00 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll

2006-08-24 12:19:52 246,814 ----a-w C:\WINDOWS\system32\strmdll.dll

2006-08-24 12:18:20 498,742 ----a-w C:\WINDOWS\system32\dxmasf.dll

2006-08-21 12:28:02 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll

2006-08-21 09:14:58 23,040 ----a-w C:\WINDOWS\system32\fltmc.exe

2006-08-21 09:14:58 128,896 ----a-w C:\WINDOWS\system32\drivers\fltmgr.sys

2006-08-17 12:30:01 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll

2006-08-17 12:30:01 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll

2006-08-17 10:30:36 91,136 ----a-w C:\WINDOWS\system32\drivers\susbser.sys

2006-08-16 12:00:08 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll

2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys

2006-08-14 10:34:41 332,928 ----a-w C:\WINDOWS\system32\drivers\srv.sys

2006-08-09 00:32:10 -------- d-----w C:\Programfiler\PriceList

2006-07-28 08:30:32 236,824 ----a-w C:\WINDOWS\system32\xactengine2_3.dll

2006-07-28 08:30:14 62,744 ----a-w C:\WINDOWS\system32\xinput1_2.dll

2006-07-21 08:29:04 72,704 ----a-w C:\WINDOWS\system32\hlink.dll

2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys

2006-07-09 17:13:59 -------- d-----w C:\Programfiler\Xilisoft

2006-06-29 07:05:44 26,112 ------w C:\WINDOWS\system32\idndl.dll

2006-06-29 07:05:44 23,552 ------w C:\WINDOWS\system32\normaliz.dll

2006-06-28 16:59:26 24,576 ------w C:\WINDOWS\system32\nlsdl.dll

2006-06-25 10:27:17 -------- d-----w C:\Programfiler\Ahead

2006-06-25 10:27:11 -------- d-----w C:\Programfiler\Fellesfiler\Ahead

2006-06-22 05:17:18 1,436,672 ----a-w C:\WINDOWS\system32\query.dll

2006-06-22 05:17:17 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll

2006-06-21 14:12:45 -------- d-----w C:\Programfiler\Cucusoft

2006-06-14 09:00:45 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys

2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys

2006-06-14 08:47:45 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys

2006-06-03 15:50:03 -------- d-----w C:\Programfiler\Ground Control II

2006-05-26 14:41:46 1,228 ----a-w C:\WINDOWS\eReg.dat

2006-05-13 14:32:59 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys

2006-05-05 09:47:57 174,592 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys

2006-05-05 09:41:45 453,120 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys

2006-05-02 05:56:59 23,040 ----a-w C:\WINDOWS\system32\rinst.exe

2006-05-02 05:56:59 200 ----a-w C:\WINDOWS\system32\mc.dat

2006-05-02 05:56:59 1,376 ----a-w C:\WINDOWS\system32\inst.dat

2006-05-01 19:24:47 81,920 ----a-w C:\WINDOWS\system32\ElbyCDIO.dll

2006-04-30 18:38:34 22,016 ----a-w C:\WINDOWS\system32\winx86shk.dll

2006-04-30 16:46:43 22,016 ----a-w C:\WINDOWS\system32\RUNDLL32hk.dll

2006-04-29 19:24:29 23,040 ----a-w C:\WINDOWS\system32\winx86sr.exe

2006-04-28 05:57:08 -------- d-----w C:\Programfiler\Diablo II

2006-04-28 05:55:03 -------- d-----w C:\Programfiler\Mollys Musikkmaskin

2006-04-22 01:44:39 8,064 ----a-w C:\WINDOWS\system32\drivers\ElbyCDIO.sys

2006-04-20 11:51:50 359,808 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys

2006-04-14 18:47:36 68,766 ----a-w C:\WINDOWS\hpoins05.dat

2006-04-14 18:45:26 -------- d-----w C:\Programfiler\Fellesfiler\HP

2006-04-14 18:43:04 -------- d-----w C:\Programfiler\HP

2006-04-14 18:42:58 -------- d-----w C:\Programfiler\Hewlett-Packard

2006-04-14 18:41:51 -------- d-----w C:\Programfiler\Fellesfiler\Hewlett-Packard

2006-04-12 07:43:03 21,840 ----atw C:\WINDOWS\system32\SIntfNT.dll

2006-04-12 07:43:03 17,212 ----atw C:\WINDOWS\system32\SIntf32.dll

2006-04-12 07:43:03 12,067 ----atw C:\WINDOWS\system32\SIntf16.dll

2006-04-10 15:49:44 -------- d-----w C:\Programfiler\Elaborate Bytes

2006-04-07 11:45:30 192,512 ----a-w C:\WINDOWS\system32\srkey.exe

2006-03-24 04:39:58 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll

2006-03-23 20:42:12 -------- d-----w C:\Programfiler\SigmaTel

2006-03-21 15:06:27 -------- d--h--w C:\Programfiler\Zero G Registry

2006-03-21 15:02:53 -------- d-----w C:\Programfiler\LimeWire

2006-03-19 17:30:19 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Media Player Classic

2006-03-19 17:28:54 -------- d-----w C:\Programfiler\K-Lite Codec Pack

2006-03-17 00:38:01 28,672 ------w C:\WINDOWS\system32\verclsid.exe

2006-03-17 00:33:10 262,784 ----a-w C:\WINDOWS\system32\drivers\http.sys

2006-03-01 19:44:40 956,416 ----a-w C:\WINDOWS\system32\msdtctm.dll

2006-03-01 19:44:40 91,136 ----a-w C:\WINDOWS\system32\mtxoci.dll

2006-03-01 19:44:40 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll

2006-03-01 19:44:40 426,496 ----a-w C:\WINDOWS\system32\msdtcprx.dll

2006-03-01 19:44:40 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll

2006-03-01 19:44:40 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll

2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys

2006-01-04 03:36:31 68,096 ----a-w C:\WINDOWS\system32\webclnt.dll

2005-12-23 15:08:42 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\LimeWire

2005-12-18 08:08:07 -------- d-----w C:\Programfiler\CAPCOM

2005-12-02 17:37:33 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\ubi.com

2005-12-02 17:37:28 -------- d-----w C:\Programfiler\ubi.com

2005-12-02 17:37:28 -------- d-----w C:\Programfiler\Fellesfiler\PocketSoft

2005-11-19 10:39:21 -------- d-----w C:\Programfiler\FunWebProducts

2005-11-15 18:42:50 13,312 ----a-w C:\WINDOWS\system32\ceutil.dll

2005-11-15 18:42:24 122,880 ----a-w C:\WINDOWS\system32\rapi.dll

2005-11-03 14:40:07 63,488 ----a-w C:\WINDOWS\system32\drivers\sfvfs02.sys

2005-10-21 01:47:05 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys

2005-10-21 01:47:05 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys

2005-10-21 01:47:04 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys

2005-10-21 01:47:04 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys

2005-10-20 22:31:12 1,082,368 ----a-w C:\WINDOWS\system32\esent.dll

2005-10-20 07:58:52 -------- d-----w C:\Programfiler\Series_60_Theme_Studio

2005-10-17 21:21:56 80,896 ----a-w C:\WINDOWS\system32\fontsub.dll

2005-10-17 21:21:56 118,272 ----a-w C:\WINDOWS\system32\t2embed.dll

2005-10-01 13:59:57 -------- d-----w C:\Programfiler\Codemasters

2005-09-18 15:50:57 -------- d-----w C:\Programfiler\Release notes

2005-09-18 15:50:49 -------- d-----w C:\Programfiler\Instlsrc

2005-09-17 17:59:02 -------- d-----w C:\Programfiler\Ligos

2005-09-17 17:54:45 -------- d-----w C:\Programfiler\DelphineSoft

2005-09-17 15:19:03 -------- d-----w C:\Programfiler\Illusion Softworks

2005-09-10 01:55:35 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll

2005-09-01 02:28:08 19,968 ----a-w C:\WINDOWS\system32\linkinfo.dll

2005-08-30 03:56:39 1,290,240 ----a-w C:\WINDOWS\system32\quartz.dll

2005-08-27 12:20:41 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\ArcSoft

2005-08-26 08:03:35 -------- d-----w C:\Programfiler\The Learning Company

2005-08-23 03:40:32 123,904 ----a-w C:\WINDOWS\system32\umpnpmgr.dll

2005-08-22 18:36:19 197,632 ----a-w C:\WINDOWS\system32\netman.dll

2005-08-18 19:44:42 6,881,915 ----a-w C:\SpySweeperTrialSetup3682_EN_FD.exe

2005-08-18 19:02:59 2,718 ----a-w C:\WINDOWS\system32\4qrtmqk7.dat

2005-08-17 11:26:36 4,152 ----a-w C:\WINDOWS\system32\sdanmgal.dat

2005-08-15 09:18:38 1,499,283 ----a-w C:\WINDOWS\Black Hawk Down.exe

2005-08-15 09:18:37 401,184 ----a-w C:\WINDOWS\Black Hawk Down.scr

2005-08-15 09:18:37 40,960 ----a-w C:\WINDOWS\Black Hawk Down.dll

2005-08-15 09:18:37 18,192 ----a-w C:\WINDOWS\Black Hawk Down.dat

2005-08-10 12:44:04 50,688 ----a-w C:\WINDOWS\system32\drivers\sfdrv01.sys

2005-08-10 10:32:29 34,064 ----a-w C:\WINDOWS\system32\pnhk7cms.dat

2005-08-10 10:32:29 186,632 ----a-w C:\WINDOWS\system32\l0ohn712.dat

2005-08-09 16:36:30 -------- d-----w C:\Programfiler\SiS162u

2005-08-07 12:10:31 -------- d-----w C:\Programfiler\ArcSoft

2005-08-07 12:09:34 -------- d-----w C:\Programfiler\Ulead Systems

2005-08-07 12:03:00 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Creative

2005-08-05 17:04:23 -------- d-----w C:\Programfiler\Ubi Soft

2005-08-02 23:36:10 424,960 ----a-w C:\WINDOWS\WRServices.dll

2005-07-26 04:43:13 74,752 ----a-w C:\WINDOWS\system32\olecli32.dll

2005-07-26 04:43:13 397,824 ----a-w C:\WINDOWS\system32\rpcss.dll

2005-07-26 04:43:13 37,888 ----a-w C:\WINDOWS\system32\olecnv32.dll

2005-07-26 04:43:13 101,376 ----a-w C:\WINDOWS\system32\txflog.dll

2005-07-26 04:43:13 1,284,608 ----a-w C:\WINDOWS\system32\ole32.dll

2005-07-26 04:43:11 540,160 ----a-w C:\WINDOWS\system32\comuid.dll

2005-07-26 04:43:11 243,200 ----a-w C:\WINDOWS\system32\es.dll

2005-07-26 04:43:11 1,267,200 ----a-w C:\WINDOWS\system32\comsvcs.dll

2005-07-26 04:43:10 97,792 ----a-w C:\WINDOWS\system32\comrepl.dll

2005-07-26 04:43:10 625,152 ----a-w C:\WINDOWS\system32\catsrvut.dll

2005-07-26 04:43:10 60,416 ----a-w C:\WINDOWS\system32\colbact.dll

2005-07-26 04:43:10 498,688 ----a-w C:\WINDOWS\system32\clbcatq.dll

2005-07-26 04:43:10 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll

2005-07-26 04:43:09 225,792 ----a-w C:\WINDOWS\system32\catsrv.dll

2005-07-08 16:29:43 249,344 ----a-w C:\WINDOWS\system32\tapisrv.dll

2005-06-29 01:53:12 74,240 ----a-w C:\WINDOWS\system32\mscms.dll

2005-06-29 01:53:12 254,976 ----a-w C:\WINDOWS\system32\icm32.dll

2005-06-19 17:35:14 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\InterTrust

2005-06-19 12:29:21 -------- d-----w C:\Programfiler\StreamCast

2005-06-19 12:06:41 0 -c--a-w C:\WINDOWS\system32\042q6lve.dat

2005-06-15 17:51:09 295,936 ----a-w C:\WINDOWS\system32\kerberos.dll

2005-06-15 13:34:23 -------- d-----w C:\Programfiler\directx

2005-06-15 13:33:56 4,608 ----a-w C:\WINDOWS\system32\w95inf32.dll

2005-06-15 13:33:56 2,272 ----a-w C:\WINDOWS\system32\w95inf16.dll

2005-06-15 13:33:34 -------- d-----w C:\Programfiler\Sierra On-Line

2005-06-14 17:12:58 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll

2005-06-10 23:53:32 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe

2005-06-10 11:35:34 -------- d-----w C:\Programfiler\Microsoft.NET

2005-06-10 11:06:30 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\.BitTornado

2005-06-10 11:06:17 -------- d-----w C:\Programfiler\BitTornado

2005-06-10 04:12:06 139,528 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys

2005-06-09 09:44:24 -------- d-----w C:\Programfiler\datax

2005-06-09 09:42:02 -------- d-----w C:\Programfiler\Mamut

2005-05-27 02:09:00 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dll

2005-05-27 02:09:00 155,136 ----a-w C:\WINDOWS\system32\itircl.dll

2005-05-27 02:09:00 137,216 ----a-w C:\WINDOWS\system32\itss.dll

2005-05-26 23:22:01 10,752 ----a-w C:\WINDOWS\hh.exe

2005-05-26 14:34:52 2,297,552 ----a-w C:\WINDOWS\system32\d3dx9_26.dll

2005-05-26 03:16:34 127,720 ----a-w C:\WINDOWS\system32\mucltui.dll

2005-05-26 03:16:24 178,408 ----a-w C:\WINDOWS\system32\muweb.dll

2005-05-26 02:16:34 465,176 ----a-w C:\WINDOWS\system32\wuapi.dll

2005-05-26 02:16:34 194,840 ----a-w C:\WINDOWS\system32\wuaueng1.dll

2005-05-26 02:16:34 174,360 ----a-w C:\WINDOWS\system32\wuauclt1.exe

2005-05-26 02:16:34 127,768 ----a-w C:\WINDOWS\system32\wucltui.dll

2005-05-26 02:16:34 124,696 ----a-w C:\WINDOWS\system32\wuauclt.exe

2005-05-26 02:16:30 41,240 ----a-w C:\WINDOWS\system32\wups.dll

2005-05-26 02:16:30 18,200 ----a-w C:\WINDOWS\system32\wups2.dll

2005-05-26 02:16:30 173,536 ----a-w C:\WINDOWS\system32\wuweb.dll

2005-05-26 02:16:30 1,343,768 ----a-w C:\WINDOWS\system32\wuaueng.dll

2005-05-26 02:16:24 75,544 ----a-w C:\WINDOWS\system32\cdm.dll

2005-05-26 02:16:24 198,424 ----a-w C:\WINDOWS\system32\iuengine.dll

2005-05-16 13:20:39 6,656 ----a-w C:\WINDOWS\system32\drivers\sfhlp02.sys

2005-05-13 13:00:00 68,204 ------w C:\WINDOWS\system32\drivers\StMp3Rec.sys

2005-05-12 15:39:21 -------- d-----w C:\Programfiler\Fellesfiler\SureThing Shared

2005-05-11 02:31:42 76,288 ----a-w C:\WINDOWS\system32\telnet.exe

2005-05-04 12:45:32 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll

2005-04-21 12:33:12 112,384 ----a-w C:\WINDOWS\system32\drivers\wg111v2.sys

2005-04-18 13:55:56 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\AdobeUM

2005-04-12 08:41:20 4,608 ----a-w C:\WINDOWS\system32\drivers\ElbyDelay.sys

2005-04-07 19:34:29 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Real

2005-04-07 14:15:34 -------- d-----w C:\Programfiler\Fellesfiler\Adobe Systems Shared

2005-04-07 14:10:36 -------- d-----w C:\Programfiler\Fellesfiler\InstallShield

2005-04-06 20:42:42 196,608 ----a-w C:\WINDOWS\system32\RtlLib.dll

2005-04-01 09:42:20 66,048 ----a-w C:\WINDOWS\system32\drivers\EAPPkt.sys

2005-03-25 04:27:00 89,088 ----a-w C:\WINDOWS\system32\atl71.dll

2005-03-25 04:27:00 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll

2005-03-25 04:27:00 1,060,864 ----a-w C:\WINDOWS\system32\mfc71.dll

2005-03-25 04:27:00 1,047,552 ----a-w C:\WINDOWS\system32\mfc71u.dll

2005-03-21 13:00:22 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll

2005-03-21 13:00:22 78,848 ----a-w C:\WINDOWS\system32\msiexec.exe

2005-03-21 13:00:22 271,360 ----a-w C:\WINDOWS\system32\msihnd.dll

2005-03-21 13:00:22 15,360 ----a-w C:\WINDOWS\system32\msisip.dll

2005-03-17 12:39:58 1,146,320 ----a-w C:\WINDOWS\system32\FM20.DLL

2005-03-15 09:45:20 94,208 ----a-w C:\WINDOWS\system32\ipcoin5.dll

2005-03-15 09:45:20 20,352 ----a-w C:\WINDOWS\system32\drivers\point32.sys

2005-03-07 18:58:22 126,976 ----a-w C:\WINDOWS\system32\EnumDevLib.dll

2005-03-02 18:19:19 56,832 ----a-w C:\WINDOWS\system32\authz.dll

2005-02-28 15:23:26 -------- d-----w C:\Programfiler\Common Files

2005-02-23 17:06:49 -------- d-----w C:\Programfiler\Microsoft Works

2005-02-23 17:03:32 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Microsoft Web Folders

2005-02-23 12:45:15 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Help

2005-02-22 15:21:50 -------- d-----w C:\Programfiler\Fellesfiler\Logitech

2005-02-22 15:21:24 -------- d-----w C:\Programfiler\Logitech

2005-02-20 13:57:44 324,608 ----a-w C:\WINDOWS\system32\BMGGeoTIFF.dll

2005-02-20 13:53:38 596,992 ----a-w C:\WINDOWS\system32\BMGLib.dll

2005-02-19 13:24:48 -------- d-----w C:\Programfiler\Maxis

2005-02-19 12:35:54 -------- d-----w C:\Programfiler\Bullfrog

2005-02-18 09:31:31 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Sonic

2005-02-18 09:30:49 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Leadertech

2005-02-11 10:52:33 -------- d-----w C:\Programfiler\Messenger

2005-02-03 10:18:14 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\CyberLink

2005-02-03 06:05:23 320,512 ----a-w C:\WINDOWS\Tele2Uninstall.exe

2005-02-03 05:11:41 -------- d-----w C:\Programfiler\Windows NT

2005-02-03 05:11:21 -------- d-----w C:\Programfiler\QuickTime

2005-02-03 05:10:57 -------- d-----w C:\Programfiler\Movie Maker

2005-02-03 05:09:34 -------- d-----w C:\Programfiler\Fellesfiler\Tjenester

2005-02-03 05:09:26 -------- d-----w C:\Programfiler\Fellesfiler\Sonic Shared

2005-02-03 05:09:19 -------- d--h--w C:\Programfiler\WindowsUpdate

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Virtual CD v4 SDK

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Sonic

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Real

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\MSN Gaming Zone

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\microsoft frontpage

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Fellesfiler\xing shared

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Fellesfiler\SpeechEngines

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Fellesfiler\Real

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Fellesfiler\ODBC

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Fellesfiler\MSSoap

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\Elektroniske tjenester

2005-02-03 05:09:19 -------- d-----w C:\Programfiler\CyberLink

2005-02-03 05:09:18 -------- d-----w C:\DOCUME~1\BJRNRO~1\PROGRA~1\Symantec

2005-02-02 21:36:48 -------- d-----w C:\Programfiler\philips

2005-01-28 11:32:44 258,296 ----a-w C:\WINDOWS\system32\drmclien.dll

2005-01-28 06:53:22 96,768 ----a-w C:\WINDOWS\system32\drmstor.dll

2005-01-28 06:52:52 20,480 ----a-w C:\WINDOWS\system32\wmpui.dll

2005-01-28 06:52:52 20,480 ----a-w C:\WINDOWS\system32\wmpcore.dll

2005-01-28 06:52:52 20,480 ----a-w C:\WINDOWS\system32\wmpcd.dll

2005-01-27 23:36:26 331,776 ----a-w C:\WINDOWS\system32\wpdmtpdr.dll

2005-01-27 23:36:16 10,752 ----a-w C:\WINDOWS\system32\wpdtrace.dll

2005-01-04 09:43:08 4,682 ----a-w C:\WINDOWS\system32\npptNT2.sys

2004-12-23 11:04:15 0 --sha-r C:\MSDOS.SYS

2004-12-23 11:04:15 0 --sha-r C:\IO.SYS

2004-12-20 10:08:28 155,648 ----a-w C:\WINDOWS\system32\xvidvfw.dll

2004-12-20 10:03:26 679,936 ----a-w C:\WINDOWS\system32\xvidcore.dll

2004-12-14 16:35:42 708,608 ----a-w C:\WINDOWS\system32\hpotiop.dll

2004-12-14 16:35:42 51,120 ----a-r C:\WINDOWS\system32\drivers\HPZid412.sys

2004-12-14 16:35:42 278,528 ----a-w C:\WINDOWS\system32\hpgwiamd.dll

2004-12-14 16:35:42 229,376 ----a-w C:\WINDOWS\system32\hpovst08.dll

2004-12-14 16:35:42 21,744 ----a-r C:\WINDOWS\system32\drivers\HPZius12.sys

2004-12-14 16:35:42 16,496 ----a-r C:\WINDOWS\system32\drivers\HPZipr12.sys

2004-12-14 16:35:40 393,216 ----a-w C:\WINDOWS\system32\hpzcon12.dll

2004-12-14 16:35:40 196,608 ----a-w C:\WINDOWS\system32\hpzcoi12.dll

2004-12-14 16:35:40 139,345 ----a-w C:\WINDOWS\system32\hpzlnt12.dll

2004-12-14 16:35:38 274,432 ----a-w C:\WINDOWS\system32\HPZc3212.dll

2004-12-14 16:35:38 19,696 ------w C:\WINDOWS\hpomdl05.dat

2004-12-07 19:34:23 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll

2004-12-03 08:26:26 356,352 ----a-w C:\WINDOWS\eSellerateEngine.dll

2004-11-17 17:43:32 348,672 ----a-w C:\WINDOWS\system32\hypertrm.dll

2004-10-26 21:38:18 94,208 ----a-w C:\WINDOWS\system32\divxdec_0411.dll

2004-10-26 21:38:18 94,208 ----a-w C:\WINDOWS\system32\divxdec_040c.dll

2004-10-26 21:38:18 94,208 ----a-w C:\WINDOWS\system32\divxdec_0407.dll

2004-10-14 07:33:46 2,024,448 ----a-w C:\WINDOWS\system32\divx.dll

2004-10-12 14:42:30 262,144 ----a-w C:\WINDOWS\system32\TomsMoComp_ff.dll

2004-10-12 14:40:58 2,255,360 ----a-w C:\WINDOWS\system32\libavcodec.dll

2004-10-08 02:01:58 82,432 ----a-w C:\WINDOWS\system32\msxml4r.dll

2004-10-08 02:01:58 44,544 ----a-w C:\WINDOWS\system32\msxml4a.dll

2004-10-08 01:58:24 5,396 ----a-w C:\WINDOWS\system32\drivers\ASIOMI.sys

2004-10-05 16:16:08 395,776 ----a-w C:\WINDOWS\system32\libmplayer.dll

2004-10-04 01:50:26 112,640 ----a-w C:\WINDOWS\system32\libmpeg2_ff.dll

2004-09-29 22:28:37 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys

2004-09-29 10:15:16 204,800 ----a-w C:\WINDOWS\system32\HPZipr12.dll

2004-09-29 10:14:36 69,632 ----a-w C:\WINDOWS\system32\HPZipm12.exe

2004-09-29 10:12:48 278,584 ----a-w C:\WINDOWS\system32\HPZidr12.dll

2004-09-29 10:09:32 57,344 ----a-w C:\WINDOWS\system32\HPZisn12.dll

2004-09-29 10:09:26 94,208 ----a-w C:\WINDOWS\system32\HPZipt12.dll

2004-09-29 10:08:08 61,440 ----a-w C:\WINDOWS\system32\HPZinw12.exe

2004-09-20 09:22:20 21,704 ----a-w C:\WINDOWS\system32\emptyregdb.dat

2004-09-17 17:28:02 276,272 ----a-w C:\WINDOWS\system32\xaudio.dll

2004-09-08 19:40:08 22,528 ----a-w C:\WINDOWS\system32\exeshl.dll

2004-09-08 19:40:08 22,528 ----a-w C:\WINDOWS\exeshl.dll

2004-09-02 02:33:56 45,056 ----a-w C:\WINDOWS\system32\xfire_lsp_9028.dll

2004-08-19 21:26:54 1,216 ----a-w C:\WINDOWS\Twunk_32.dll

2004-08-19 21:26:54 1,216 ----a-w C:\WINDOWS\Twunk_16.dll

2004-08-18 03:14:36 442,368 ----a-r C:\WINDOWS\system32\vp6vfw.dll

2004-08-04 13:00:00 993,280 ----a-w C:\WINDOWS\system32\msgina.dll

2004-08-04 13:00:00 99,840 ----a-w C:\WINDOWS\system32\mprmsg.dll

2004-08-04 13:00:00 985,600 ----a-w C:\WINDOWS\system32\setupapi.dll

2004-08-04 13:00:00 984,576 ----a-w C:\WINDOWS\system32\syssetup.dll

2004-08-04 13:00:00 98,816 ----a-w C:\WINDOWS\system32\winscard.dll

2004-08-04 13:00:00 98,304 ----a-w C:\WINDOWS\system32\slbiop.dll

2004-08-04 13:00:00 98,304 ----a-w C:\WINDOWS\system32\rtm.dll

2004-08-04 13:00:00 98,304 ----a-w C:\WINDOWS\system32\msir3jp.dll

2004-08-04 13:00:00 98,304 ----a-w C:\WINDOWS\system32\cscript.exe

2004-08-04 13:00:00 98,304 ----a-w C:\WINDOWS\system32\ahui.exe

2004-08-04 13:00:00 97,280 ----a-w C:\WINDOWS\system32\loadperf.dll

2004-08-04 13:00:00 97,280 ----a-w C:\WINDOWS\system32\dpcdll.dll

2004-08-04 13:00:00 96,768 ----a-w C:\WINDOWS\system32\psbase.dll

2004-08-04 13:00:00 96,256 ----a-w C:\WINDOWS\system32\drivers\scsiport.sys

2004-08-04 13:00:00 95,744 ----a-w C:\WINDOWS\system32\scardsvr.exe

2004-08-04 13:00:00 94,800 ----a-w C:\WINDOWS\twain.dll

2004-08-04 13:00:00 94,282 ----a-w C:\WINDOWS\system32\msencode.dll

2004-08-04 13:00:00 94,208 ----a-w C:\WINDOWS\system32\odbcint.dll

2004-08-04 13:00:00 937,984 ----a-w C:\WINDOWS\system32\winbrand.dll

2004-08-04 13:00:00 93,696 ----a-w C:\WINDOWS\system32\tscfgwmi.dll

2004-08-04 13:00:00 93,184 ----a-w C:\WINDOWS\system32\dskquota.dll

2004-08-04 13:00:00 924,432 ----a-w C:\WINDOWS\system32\mfc40.dll

2004-08-04 13:00:00 92,672 ----a-w C:\WINDOWS\system32\wlnotify.dll

2004-08-04 13:00:00 92,224 ----a-w C:\WINDOWS\system32\krnl386.exe

2004-08-04 13:00:00 92,168 ----a-w C:\WINDOWS\system32\rdpdd.dll

2004-08-04 13:00:00 92,032 ----a-w C:\WINDOWS\system32\drivers\ksecdd.sys

2004-08-04 13:00:00 91,776 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys

2004-08-04 13:00:00 91,648 ----a-w C:\WINDOWS\system32\xactsrv.dll

2004-08-04 13:00:00 91,136 ----a-w C:\WINDOWS\system32\ntprint.dll

2004-08-04 13:00:00 90,624 ----a-w C:\WINDOWS\system32\trkwks.dll

2004-08-04 13:00:00 90,624 ----a-w C:\WINDOWS\system32\mydocs.dll

2004-08-04 13:00:00 90,112 ----a-w C:\WINDOWS\system32\smlogsvc.exe

2004-08-04 13:00:00 90,112 ----a-w C:\WINDOWS\system32\rsvpsp.dll

2004-08-04 13:00:00 90,112 ----a-w C:\WINDOWS\system32\mycomput.dll

2004-08-04 13:00:00 9,936 ----a-w C:\WINDOWS\system32\lzexpand.dll

2004-08-04 13:00:00 9,728 ----a-w C:\WINDOWS\system32\sprestrt.exe

2004-08-04 13:00:00 9,728 ----a-w C:\WINDOWS\system32\sfc.exe

2004-08-04 13:00:00 9,728 ----a-w C:\WINDOWS\system32\rsvpperf.dll

2004-08-04 13:00:00 9,728 ----a-w C:\WINDOWS\system32\reset.exe

2004-08-04 13:00:00 9,728 ----a-w C:\WINDOWS\system32\label.exe

2004-08-04 13:00:00 9,728 ----a-w C:\WINDOWS\system32\gpkrsrc.dll

2004-08-04 13:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys

2004-08-04 13:00:00 9,344 ----a-w C:\WINDOWS\system32\vga.dll

2004-08-04 13:00:00 9,344 ----a-w C:\WINDOWS\system32\framebuf.dll

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\wshatm.dll

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\winfax.dll

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\wifeman.dll

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\subst.exe

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\scrnsave.scr

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\proxycfg.exe

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\print.exe

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\lprmonui.dll

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\kbdnecAT.dll

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\finger.exe

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\find.exe

2004-08-04 13:00:00 9,216 ----a-w C:\WINDOWS\system32\diskcomp.com

2004-08-04 13:00:00 9,024 ----a-w C:\WINDOWS\system32\ansi.sys

2004-08-04 13:00:00 9,008 ----a-w C:\WINDOWS\system32\ver.dll

2004-08-04 13:00:00 89,600 ----a-w C:\WINDOWS\system32\langwrbk.dll

2004-08-04 13:00:00 89,088 ----a-w C:\WINDOWS\system32\rasauto.dll

2004-08-04 13:00:00 89,088 ----a-w C:\WINDOWS\system32\ipxmontr.dll

2004-08-04 13:00:00 882 ----a-w C:\WINDOWS\system32\share.exe

2004-08-04 13:00:00 882 ----a-w C:\WINDOWS\system32\fastopen.exe

2004-08-04 13:00:00 88,448 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys

2004-08-04 13:00:00 88,064 ----a-w C:\WINDOWS\system32\p2pnetsh.dll

2004-08-04 13:00:00 88,064 ----a-w C:\WINDOWS\system32\fldrclnr.dll

2004-08-04 13:00:00 875,520 ----a-w C:\WINDOWS\system32\netplwiz.dll

2004-08-04 13:00:00 87,176 ----a-w C:\WINDOWS\system32\rdpwsx.dll

2004-08-04 13:00:00 87,040 ----a-w C:\WINDOWS\system32\mprapi.dll

2004-08-04 13:00:00 86,528 ----a-w C:\WINDOWS\system32\netsh.exe

2004-08-04 13:00:00 86,528 ----a-w C:\WINDOWS\system32\iassam.dll

2004-08-04 13:00:00 86,073 ----a-w C:\WINDOWS\system32\usrfaxa.dll

2004-08-04 13:00:00 86,016 ----a-w C:\WINDOWS\system32\p2pgasvc.dll

2004-08-04 13:00:00 86,016 ----a-w C:\WINDOWS\system32\msapsspc.dll

2004-08-04 13:00:00 858,624 ----a-w C:\WINDOWS\system32\tapi3.dll

2004-08-04 13:00:00 85,504 ----a-w C:\WINDOWS\system32\makecab.exe

2004-08-04 13:00:00 85,504 ----a-w C:\WINDOWS\system32\diantz.exe

2004-08-04 13:00:00 85,504 ----a-w C:\WINDOWS\system32\catsrvps.dll

2004-08-04 13:00:00 85,020 ----a-w C:\WINDOWS\system32\dgsetup.dll

2004-08-04 13:00:00 847,872 ----a-w C:\WINDOWS\system32\dbgeng.dll

2004-08-04 13:00:00 84,992 ----a-w C:\WINDOWS\system32\mciavi32.dll

2004-08-04 13:00:00 84,992 ----a-w C:\WINDOWS\system32\avifil32.dll

2004-08-04 13:00:00 84,480 ----a-w C:\WINDOWS\system32\cabview.dll

2004-08-04 13:00:00 838,144 ----a-w C:\WINDOWS\system32\chtbrkr.dll

2004-08-04 13:00:00 831,519 ----a-w C:\WINDOWS\system32\mswdat10.dll

2004-08-04 13:00:00 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe

2004-08-04 13:00:00 83,456 ------w C:\WINDOWS\system32\olepro32.dll

2004-08-04 13:00:00 825,344 ----a-w C:\WINDOWS\system32\d3dim700.dll

2004-08-04 13:00:00 82,944 ----a-w C:\WINDOWS\system32\ws2_32.dll

2004-08-04 13:00:00 82,944 ----a-w C:\WINDOWS\system32\olecli.dll

2004-08-04 13:00:00 82,432 ----a-w C:\WINDOWS\system32\ufat.dll

2004-08-04 13:00:00 82,432 ----a-w C:\WINDOWS\system32\dmscript.dll

2004-08-04 13:00:00 82,432 ----a-w C:\WINDOWS\system32\dfrgfat.exe

2004-08-04 13:00:00 817 ----a-w C:\WINDOWS\system32\mscdexnt.exe

2004-08-04 13:00:00 815,104 ----a-w C:\WINDOWS\system32\mmc.exe

2004-08-04 13:00:00 811,064 ----a-w C:\WINDOWS\system32\imjp81k.dll

2004-08-04 13:00:00 81,920 ----a-w C:\WINDOWS\system32\isign32.dll

2004-08-04 13:00:00 81,920 ----a-w C:\WINDOWS\system32\ils.dll

2004-08-04 13:00:00 81,408 ----a-w C:\WINDOWS\system32\wscsvc.dll

2004-08-04 13:00:00 81,408 ----a-w C:\WINDOWS\system32\fsusd.dll

2004-08-04 13:00:00 80,896 ----a-w C:\WINDOWS\system32\netui0.dll

2004-08-04 13:00:00 80,384 ----a-w C:\WINDOWS\system32\iccvid.dll

2004-08-04 13:00:00 80,384 ----a-w C:\WINDOWS\system32\faultrep.dll

2004-08-04 13:00:00 80,384 ----a-w C:\WINDOWS\system32\charmap.exe

2004-08-04 13:00:00 80,384 ----a-w C:\WINDOWS\system32\autodisc.dll

2004-08-04 13:00:00 80,000 ----a-w C:\WINDOWS\system32\drivers\parport.sys

2004-08-04 13:00:00 8,832 ----a-w C:\WINDOWS\system32\drivers\rasacd.sys

2004-08-04 13:00:00 8,704 ----a-w C:\WINDOWS\system32\eventvwr.exe

2004-08-04 13:00:00 8,704 ----a-w C:\WINDOWS\system32\dciman32.dll

2004-08-04 13:00:00 8,704 ----a-w C:\WINDOWS\system32\batt.dll

2004-08-04 13:00:00 8,424 ----a-w C:\WINDOWS\system32\exe2bin.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\winhlp32.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\tsbyuv.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\smbinst.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\qosname.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\psnppagn.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\ntlsapi.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\mountvol.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\mciole16.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\mag_hook.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\lpr.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\kbdhept.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\igmpagnt.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\hostname.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\d3d8thk.dll

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\control.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\cidaemon.exe

2004-08-04 13:00:00 8,192 ----a-w C:\WINDOWS\system32\bitsprx2.dll

2004-08-04 13:00:00 799,872 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys

2004-08-04 13:00:00 798,208 ----a-w C:\WINDOWS\system32\comres.dll

2004-08-04 13:00:00 79,872 ----a-w C:\WINDOWS\system32\tapiui.dll

2004-08-04 13:00:00 79,744 ----a-w C:\WINDOWS\system32\drivers\videoprt.sys

2004-08-04 13:00:00 78,336 ----a-w C:\WINDOWS\system32\browsewm.dll

2004-08-04 13:00:00 77,891 ----a-w C:\WINDOWS\system32\usrmlnka.exe

2004-08-04 13:00:00 77,890 ----a-w C:\WINDOWS\system32\usrdpa.dll

2004-08-04 13:00:00 77,883 ----a-w C:\WINDOWS\system32\usrrtosa.dll

2004-08-04 13:00:00 77,824 ----a-w C:\WINDOWS\system32\shrpubw.exe

2004-08-04 13:00:00 77,824 ----a-w C:\WINDOWS\system32\cliconfg.dll

2004-08-04 13:00:00 77,312 ----a-w C:\WINDOWS\system32\sdbinst.exe

2004-08-04 13:00:00 77,312 ----a-w C:\WINDOWS\system32\rtcshare.exe

2004-08-04 13:00:00 77,312 ----a-w C:\WINDOWS\system32\nslookup.exe

2004-08-04 13:00:00 77,312 ----a-w C:\WINDOWS\system32\browser.dll

2004-08-04 13:00:00 766,976 ----a-w C:\WINDOWS\system32\winntbbu.dll

2004-08-04 13:00:00 76,800 ----a-w C:\WINDOWS\system32\gcdef.dll

2004-08-04 13:00:00 76,288 ----a-w C:\WINDOWS\system32\uniime.dll

2004-08-04 13:00:00 75,776 ----a-w C:\WINDOWS\system32\wiascr.dll

2004-08-04 13:00:00 75,776 ----a-w C:\WINDOWS\system32\unimdmat.dll

2004-08-04 13:00:00 75,776 ----a-w C:\WINDOWS\system32\strmfilt.dll

2004-08-04 13:00:00 75,264 ----a-w C:\WINDOWS\system32\locator.exe

2004-08-04 13:00:00 75,264 ----a-w C:\WINDOWS\system32\inetpp.dll

2004-08-04 13:00:00 75,264 ----a-w C:\WINDOWS\system32\cryptdlg.dll

2004-08-04 13:00:00 741 ----a-w C:\WINDOWS\system32\noise.dat

2004-08-04 13:00:00 74,752 ----a-w C:\WINDOWS\system32\spoolss.dll

2004-08-04 13:00:00 74,752 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys

2004-08-04 13:00:00 74,240 ----a-w C:\WINDOWS\system32\dhcpsapi.dll

2004-08-04 13:00:00 733,696 ----a-w C:\WINDOWS\system32\qedwipes.dll

2004-08-04 13:00:00 73,802 ----a-w C:\WINDOWS\system32\msrclr40.dll

2004-08-04 13:00:00 73,728 ----a-w C:\WINDOWS\system32\icwdial.dll

2004-08-04 13:00:00 73,728 ----a-w C:\WINDOWS\system32\csseqchk.dll

2004-08-04 13:00:00 73,344 ----a-w C:\WINDOWS\system32\drivers\sr.sys

2004-08-04 13:00:00 73,216 ----a-w C:\WINDOWS\system32\avwav.dll

2004-08-04 13:00:00 724,992 ----a-w C:\WINDOWS\system32\userenv.dll

2004-08-04 13:00:00 72,704 ----a-w C:\WINDOWS\system32\msw3prt.dll

2004-08-04 13:00:00 72,704 ----a-w C:\WINDOWS\system32\mmcbase.dll

2004-08-04 13:00:00 72,704 ----a-w C:\WINDOWS\system32\magnify.exe

2004-08-04 13:00:00 72,192 ----a-w C:\WINDOWS\system32\sprio800.dll

2004-08-04 13:00:00 72,192 ----a-w C:\WINDOWS\system32\ipxpromn.dll

2004-08-04 13:00:00 713,728 ----a-w C:\WINDOWS\system32\opengl32.dll

2004-08-04 13:00:00 71,680 ----a-w C:\WINDOWS\system32\ssdpsrv.dll

2004-08-04 13:00:00 71,680 ----a-w C:\WINDOWS\system32\msacm32.dll

2004-08-04 13:00:00 71,680 ----a-w C:\WINDOWS\system32\dsdmoprp.dll

2004-08-04 13:00:00 71,680 ----a-w C:\WINDOWS\system32\blastcln.exe

2004-08-04 13:00:00 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys

2004-08-04 13:00:00 71,040 ----a-w C:\WINDOWS\system32\drivers\dxg.sys

2004-08-04 13:00:00 708,608 ----a-w C:\WINDOWS\system32\ss3dfo.scr

2004-08-04 13:00:00 707 ----a-w C:\WINDOWS\_default.pif

2004-08-04 13:00:00 704,000 ----a-w C:\WINDOWS\system32\ntdll.dll

2004-08-04 13:00:00 701,440 ----a-w C:\WINDOWS\system32\msxml2.dll

2004-08-04 13:00:00 70,656 ----a-w C:\WINDOWS\system32\sprio600.dll

2004-08-04 13:00:00 70,656 ----a-w C:\WINDOWS\system32\korwbrkr.dll

2004-08-04 13:00:00 70,656 ----a-w C:\WINDOWS\system32\ifsutil.dll

2004-08-04 13:00:00 70,656 ----a-w C:\WINDOWS\system32\amstream.dll

2004-08-04 13:00:00 70,446 ----a-w C:\WINDOWS\system32\edit.com

2004-08-04 13:00:00 70,144 ----a-w C:\WINDOWS\system32\sigverif.exe

2004-08-04 13:00:00 7,936 ----a-w C:\WINDOWS\system32\drivers\fs_rec.sys

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\vcdex.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\ncxpnt.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\mll_mtf.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\mciole32.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdsmsno.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdsmsfi.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdnecNT.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdcan.dll

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\drivers\mcd.sys

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\ckcnv.exe

2004-08-04 13:00:00 7,680 ----a-w C:\WINDOWS\system32\chcp.com

2004-08-04 13:00:00 7,424 ----a-w C:\WINDOWS\system32\kd1394.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\wshnetbs.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\recover.exe

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\msr2cenu.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\mscat32.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdukx.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdno1.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdnec95.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdnec.dll

2004-08-04 13:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdibm02.dll

2004-08-04

Endret 12. mai 2007 av trondki

trondki · 12. mai 2007

FOR IKKE MED ALLT I COMBOFIX

trondki · 12. mai 2007

HJT

Klikk for å se/fjerne innholdet nedenfor

Logfile of HijackThis v1.99.1

Scan saved at 20:49:58, on 12.05.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.exe

C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgamsvr.exe

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgupsvc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Virtual CD v4 SDK\system\vcssecs.exe

C:\Programfiler\Java\jre1.6.0_01\bin\jusched.exe

C:\apps\ABoard\ABoard.exe

C:\apps\ABoard\AOSD.exe

C:\Programfiler\QuickTime\qttask.exe

C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

C:\Apps\Powercinema\PCMService.exe

C:\Programfiler\Creative\Shared Files\CAMTRAY.EXE

C:\WINDOWS\system32\rundll32.exe

C:\Programfiler\Microsoft IntelliPoint\point32.exe

C:\Programfiler\ATI Technologies\ATI.ACE\CLI.EXE

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgcc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Messenger\msmsgs.exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programfiler\MSN Messenger\msnmsgr.exe

C:\Programfiler\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe

C:\DOCUME~1\BJRNRO~1\SKRIVE~1\avg\avgwb.dat

C:\Programfiler\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Programfiler\ATI Technologies\ATI.ACE\cli.exe

C:\WINDOWS\system32\notepad.exe

C:\Programfiler\internet explorer\iexplore.exe

C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Programfiler\internet explorer\iexplore.exe

C:\Programfiler\BitComet\BitComet.exe

C:\Documents and Settings\Bjørn Roar\Skrivebord\test.exe