og combofix-loggen, en ny en

[xzzy]

her er hjt-loggen

 

 

Klikk for å se/fjerne innholdet nedenfor

Klikk for å se/fjerne innholdet nedenfor

 

Logfile of HijackThis v1.99.1

Scan saved at 17:19:15, on 02.10.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16512)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccProxy.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccSetMgr.exe

C:\Programfiler\Norton Internet Security\ISSVC.exe

C:\Programfiler\Fellesfiler\Symantec Shared\SNDSrvc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe

C:\Programfiler\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Fellesfiler\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Programfiler\Norton Internet Security\Norton AntiVirus\navapsvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\Security Center\SymWSC.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Programfiler\Analog Devices\Core\smax4pnp.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Java\j2re1.4.2_03\bin\jusched.exe

C:\Programfiler\filer\CyberLink\PowerDVD\DVDLauncher.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe

C:\Programfiler\SPAMfighter\SFAgent.exe

C:\Programfiler\iTunes\iTunesHelper.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\FinePixViewer\QuickDCF.exe

C:\Programfiler\RegistrySmart\RegistrySmart.exe

C:\Programfiler\iPod\bin\iPodService.exe

C:\WINDOWS\explorer.exe

C:\Programfiler\Messenger\msmsgs.exe

C:\Documents and Settings\Christian Bjørgsvik\Skrivebord\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.euro.dell.com/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programfiler\Fellesfiler\Symantec Shared\AdBlocking\NISShExt.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programfiler\Norton Internet Security\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programfiler\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programfiler\google\googletoolbar3.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [soundMAXPnP] C:\Programfiler\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Programfiler\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM\..\Run: [DVDLauncher] "C:\Programfiler\filer\CyberLink\PowerDVD\DVDLauncher.exe"

O4 - HKLM\..\Run: [ccApp] "C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

O4 - HKLM\..\Run: [REGSHAVE] C:\Programfiler\REGSHAVE\REGSHAVE.EXE /AUTORUN

O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [sPAMfighter Agent] "C:\Programfiler\SPAMfighter\SFAgent.exe" update delay 60

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programfiler\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [RegistrySmart] C:\Programfiler\RegistrySmart\RegistrySmart.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - Global Startup: Exif Launcher.lnk = ?

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: &Windows Live Search - res://C:\Programfiler\Windows Live Toolbar\msntb.dll/search.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://CD-en.scan.onecare.live.com/resourc...lscbase8300.cab

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programfiler\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programfiler\Fellesfiler\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Automatisk LiveUpdate-planlegging - Symantec Corporation - C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\ccProxy.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\ccSetMgr.exe

O23 - Service: dlbt_device - Dell - C:\WINDOWS\system32\dlbtcoms.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programfiler\iPod\bin\iPodService.exe

O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Programfiler\Norton Internet Security\ISSVC.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - C:\Programfiler\Norton Internet Security\Norton AntiVirus\navapsvc.exe

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Programfiler\Intel\PROSetWired\NCS\Sync\NetSvc.exe

O23 - Service: SAVScan - Symantec Corporation - C:\Programfiler\Norton Internet Security\Norton AntiVirus\SAVScan.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FELLES~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\Security Center\SymWSC.exe

Endret 2. oktober 2007 av xzzy

[xzzy]

Her er cf-logg:

 

 

Klikk for å se/fjerne innholdet nedenfor

ComboFix 07-09-14.2 - "Christian Bj›rgsvik" 2007-10-02 17:13:02.38 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.47.1044.18.330 [GMT 2:00]

.

 

((((((((((((((((((((((((( Files Created from 2007-09-02 to 2007-10-02 )))))))))))))))))))))))))))))))

.

 

2007-10-02 01:35 53,248 --a------ C:\WINDOWS\system32\Process.exe

2007-10-02 01:35 51,200 --a------ C:\WINDOWS\system32\dumphive.exe

2007-10-02 01:35 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe

2007-10-02 01:35 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe

2007-10-02 01:35 25,088 --a------ C:\WINDOWS\system32\WS2Fix.exe

2007-10-02 01:30 0 --a------ C:\SDFix.exe

2007-10-02 00:59 <DIR> d-------- C:\WINDOWS\ERUNT

2007-10-01 23:49 2,464 --a------ C:\WINDOWS\system32\tmp.reg

2007-09-29 20:49 <DIR> d-------- C:\Programfiler\RegistrySmart

2007-09-29 20:34 <DIR> d-------- C:\Programfiler\Browser Hijack Recover

2007-09-29 15:25 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys

2007-09-29 15:21 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\PROGRA~1\TEMP

2007-09-29 15:21 <DIR> d-------- C:\Programfiler\Ace Utilities

2007-09-27 19:57 <DIR> d-------- C:\Programfiler\Lavasoft

2007-09-27 19:57 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\PROGRA~1\Lavasoft

2007-09-27 19:35 <DIR> d-------- C:\Programfiler\Fellesfiler\Wise Installation Wizard

2007-09-27 19:15 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Siste

2007-09-27 19:15 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Programdata

2007-09-27 19:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Start-meny

2007-09-27 19:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Mine dokumenter

2007-09-27 19:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Favoritter

2007-09-27 19:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Skrivere

2007-09-27 19:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Maler

2007-09-27 19:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Lokale innstillinger

2007-09-27 19:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\AndrMask

2007-09-27 19:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Skrivebord

2007-09-27 19:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\PROGRA~1\Symantec

2007-09-27 19:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\PROGRA~1\Jasc Software Inc

2007-09-27 16:25 <DIR> d-------- C:\Programfiler\iTunes

2007-09-27 16:25 <DIR> d-------- C:\Programfiler\iPod

2007-09-17 13:28 <DIR> d-------- C:\{8001B0CA-0000-0000-8C31-6DB1C70CB606}

2007-09-17 13:28 <DIR> d-------- C:\{80018607-0000-0000-1CA5-229BF23F62E3}

2007-09-17 12:32 <DIR> d-------- C:\{8001B683-0000-0000-A5E7-F6D0CCE0F7BF}

2007-09-17 11:35 <DIR> d-------- C:\Programfiler\Windows Live Safety Center

2007-09-17 10:40 <DIR> d-------- C:\Programfiler\RogueRemover FREE

2007-09-17 10:29 <DIR> d-------- C:\WINDOWS\pss

2007-09-17 09:40 <DIR> d-------- C:\!KillBox

2007-09-16 11:46 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-09-16 10:07 28,672 --a------ C:\WINDOWS\system32\drivers\CO_Mon.sys

2007-09-03 11:58 <DIR> d-------- C:\Programfiler\PKR

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-10-02 01:28 --------- d-------- C:\Programfiler\Fellesfiler\Symantec Shared

2007-09-28 15:56 --------- d-------- C:\Programfiler\Norton Security Scan

2007-09-27 16:19 --------- d-------- C:\Programfiler\Apple Software Update

2007-09-27 08:02 --------- d-------- C:\Programfiler\Norton Internet Security

2007-09-27 08:00 --------- d-------- C:\Programfiler\Symantec

2007-09-03 17:44 --------- d-------- C:\Programfiler\Google

2007-08-07 13:58 8320 --a------ C:\WINDOWS\system32\drivers\AWRTRD.sys

2007-08-07 13:56 9344 --a------ C:\WINDOWS\system32\drivers\NSDriver.sys

2007-08-02 15:09 --------- d-------- C:\Programfiler\DivX

2007-08-02 14:35 --------- d--h----- C:\Programfiler\InstallShield Installation Information

2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\dllcache\cdm.dll

2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll

2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll

2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\dllcache\wuapi.dll

2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe

2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\dllcache\wuauclt.exe

2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll

2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll

2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\dllcache\wucltui.dll

2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll

2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll

2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll

2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\dllcache\wuweb.dll

2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll

2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\dllcache\wuaueng.dll

2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll

2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\dllcache\wups.dll

2007-07-27 01:06 200704 --a------ C:\WINDOWS\system32\ssldivx.dll

2007-07-27 01:06 1044480 --a------ C:\WINDOWS\system32\libdivx.dll

2007-07-19 08:58 3583488 --a------ C:\WINDOWS\system32\dllcache\mshtml.dll

2007-07-13 01:32 765952 --a------ C:\WINDOWS\system32\dllcache\vgx.dll

.

 

((((((((((((((((((((((((((((( snapshot_2007-09-30_200004,81 )))))))))))))))))))))))))))))))))))))))))

.

----a-w 163,328 2007-09-27 20:03:23 C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE

----a-w 2,940,928 2007-10-01 22:59:34 C:\WINDOWS\ERUNT\SDFIX\Users\00000001\NTUSER.DAT

----a-w 8,192 2007-10-01 22:59:34 C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat

----a-w 163,328 2007-09-27 20:03:23 C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE

----a-w 2,940,928 2007-10-01 22:59:24 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\NTUSER.DAT

----a-w 8,192 2007-10-01 22:59:24 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat

----a-w 40,960 2006-01-09 08:36:06 C:\WINDOWS\system32\swsc.exe

----a-w 79,360 2006-12-01 04:20:32 C:\WINDOWS\system32\swxcacls.exe

.

----a-w 370,688 2006-11-29 15:21:29 C:\WINDOWS\system32\swsc.exe

----a-w 212,480 2006-12-01 03:20:32 C:\WINDOWS\system32\swxcacls.exe

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

 

*Note* empty entries & legit default entries are not shown

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SoundMAXPnP"="C:\Programfiler\Analog Devices\Core\smax4pnp.exe" [2004-10-14 20:42]

"SunJavaUpdateSched"="C:\Programfiler\Java\j2re1.4.2_03\bin\jusched.exe" [2003-11-19 18:48]

"DVDLauncher"="C:\Programfiler\filer\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 17:19]

"ccApp"="C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe" [2007-02-21 17:24]

"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-12-06 02:05]

"ISUSPM Startup"="C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 17:50]

"ISUSScheduler"="C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" [2004-07-27 17:50]

"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2007-09-27 08:00]

"REGSHAVE"="C:\Programfiler\REGSHAVE\REGSHAVE.exe" [2002-02-04 23:32]

"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-09-20 10:35]

"SPAMfighter Agent"="C:\Programfiler\SPAMfighter\SFAgent.exe" [2006-11-15 18:02]

"QuickTime Task"="C:\Programfiler\QuickTime\QTTask.exe" [2007-06-29 06:24]

"iTunesHelper"="C:\Programfiler\iTunes\iTunesHelper.exe" [2007-09-14 10:00]

"!AVG Anti-Spyware"="C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25]

"RegistrySmart"="C:\Programfiler\RegistrySmart\RegistrySmart.exe" [2007-08-07 21:59]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00]

"swg"="C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-14 10:59]

 

C:\DOCUME~1\ALLUSE~1\START-~1\PROGRA~1\Oppstart\

Exif Launcher.lnk - C:\Program Files\FinePixViewer\QuickDCF.exe [2005-12-24 12:39:26]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoBandCustomize"=0 (0x0)

"NoToolbarCustomize"=0 (0x0)

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoBandCustomize"=0 (0x0)

"NoToolbarCustomize"=0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"System"=" "

 

R2 Automatisk LiveUpdate-planlegging;Automatisk LiveUpdate-planlegging;"C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe"

S4 viaagp;VIA AGP-bussfilter;C:\WINDOWS\system32\DRIVERS\viaagp.sys

 

.

Contents of the 'Scheduled Tasks' folder

"2007-09-27 14:19:46 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"

- C:\Programfiler\Apple Software Update\SoftwareUpdate.exe

"2007-09-28 19:24:38 C:\WINDOWS\Tasks\Norton AntiVirus - Søk på min datamaskin - Christian Bjørgsvik.job"

"2007-10-02 01:30:05 C:\WINDOWS\Tasks\RegistrySmart Scheduled Scan.job"

"2007-10-02 14:35:00 C:\WINDOWS\Tasks\Se etter oppdateringer for Windows Live Toolbar.job"

"2007-10-02 15:18:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"

- C:\Programfiler\Symantec\LiveUpdate\NDetect.exe

.

**************************************************************************

 

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-10-02 17:16:29

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

 

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\aawservice]

"ImagePath"="\"C:\Programfiler\Lavasoft\Ad-Aware 2007\aawservice.exe\""

 

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\viaagp]

"ImagePath"="\SystemRoot\system32\DRIVERS\viaagp.sys"

.

Completion time: 2007-10-02 17:18:30

C:\ComboFix-quarantined-files.txt ... 2007-10-02 17:18

C:\ComboFix2.txt ... 2007-10-02 01:56

C:\ComboFix3.txt ... 2007-10-02 01:24

.

--- E O F ---

[norbat]

Fortell så hvordan PC-en kjører (plages du med popup, er det noe annet som ikke virker slik det skal etc....)