Hjelp til HJT-log

[drmowinckel.com]

Hei, håper noen kan være behjelpelig med å se på logg-filene mine. Har fjernet noe adware, men vil gjerne sjekke om jeg har fått vekk alt. På forhånd takk!

 

 

ComboFix-logg

 

 

 

ComboFix 07-10-23.1 - xxxxxxxxxxxx 2007-10-23 0:26:33.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1333 [GMT 2:00]

Running from: F:\Programfiler\Security\ComboFix.exe

* Created a new restore point

.

 

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\WINDOWS\system32\winsys.exe

 

.

((((((((((((((((((((((((( Files Created from 2007-09-23 to 2007-10-23 )))))))))))))))))))))))))))))))

.

 

2007-10-23 00:26 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-10-23 00:16 <DIR> d-------- C:\Program Files\CCleaner

2007-10-22 23:44 <DIR> d-------- C:\Program Files\SUPERAntiSpyware

2007-10-22 23:44 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard

2007-10-22 23:44 <DIR> d-------- C:\Documents and Settings\xxxxxxxxxxxx\Application Data\SUPERAntiSpyware.com

2007-10-22 23:39 <DIR> d-------- C:\Documents and Settings\xxxxxxxxxxxx\New Folder

2007-10-21 04:33 <DIR> d-------- C:\Program Files\Common Files\ParallelGraphics

2007-10-21 04:32 <DIR> d-------- C:\Program Files\Room Arranger

2007-10-21 01:41 <DIR> d-------- C:\Program Files\Tunatic

2007-10-15 18:32 <DIR> d-------- C:\Program Files\WinZix

2007-09-28 21:29 <DIR> d-------- C:\Program Files\Plone 3

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-10-22 22:03 --------- d-----w C:\Documents and Settings\xxxxxxxxxxxx\Application Data\OpenOffice.org2

2007-10-22 22:00 --------- d-----w C:\Program Files\Mozilla Thunderbird

2007-10-21 00:13 --------- d-----w C:\Documents and Settings\xxxxxxxxxxxx\Application Data\Canon

2007-09-26 23:00 --------- d-----w C:\Documents and Settings\xxxxxxxxxxxx\Application Data\gtk-2.0

2007-09-22 20:59 --------- d-----w C:\Program Files\Last.fm

2007-09-15 18:07 --------- d-----w C:\Program Files\Ontrack

2007-09-15 13:14 --------- d--h--w C:\Program Files\InstallShield Installation Information

2007-09-15 13:14 --------- d-----w C:\Program Files\Runtime Software

2007-09-08 16:00 --------- d-----w C:\Program Files\Rational

2007-09-08 15:57 --------- d-----w C:\Program Files\Mamut

2007-09-01 01:00 --------- d-----w C:\Program Files\MSXML 4.0

2007-08-27 16:49 --------- d-----w C:\Program Files\Real

2007-08-27 16:49 --------- d-----w C:\Program Files\Common Files\xing shared

2007-08-27 16:49 --------- d-----w C:\Program Files\Common Files\Real

2007-08-24 15:34 23,616 ----a-w C:\WINDOWS\system32\drivers\nchssvad.sys

2007-08-24 15:34 --------- d-----w C:\WINDOWS\system32\config\systemprofile\Application Data\NCH Swift Sound

2007-08-24 15:34 --------- d-----w C:\Program Files\NCH Swift Sound

2007-08-24 15:34 --------- d-----w C:\Documents and Settings\xxxxxxxxxxxx\Application Data\RecordPad

2007-08-24 15:33 --------- d-----w C:\Documents and Settings\xxxxxxxxxxxx\Application Data\NCH Swift Sound

2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll

2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll

2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll

2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe

2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll

2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll

2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll

2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll

2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll

2007-03-10 14:52 37 ----a-w C:\Documents and Settings\xxxxxxxxxxxx\inf2310.bat

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 15:43]

"nwiz"="nwiz.exe" [2006-08-11 15:43 C:\WINDOWS\system32\nwiz.exe]

"SW20"="C:\WINDOWS\system32\sw20.exe" [2006-10-27 09:11]

"SW24"="C:\WINDOWS\system32\sw24.exe" [2006-10-27 09:12]

"WinSys2"="C:\WINDOWS\system32\winsys2.exe" [2006-10-03 08:37]

"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-05-01 04:07]

"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2006-04-10 10:19]

"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-11 15:43]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]

"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 10:54]

"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-03-14 19:05]

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40]

"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 11:00]

"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-08-27 18:49]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

 

R0 HPT302;HPT302;C:\WINDOWS\system32\DRIVERS\HPT302.sys

R0 hptpro;hptpro;C:\WINDOWS\system32\DRIVERS\hptpro.sys

R0 Pnp680;SiI 680 ATA Controller;C:\WINDOWS\system32\DRIVERS\pnp680.sys

R2 Zope_1313807186;Zope instance at C:\Program Files\Plone 3\Data;"C:\Program Files\Plone 3\Python\PythonService.exe"

S3 BroadWaveService;BroadWave Service;"C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe" -service

S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers\npf.sys

PlayDVD_PlayVideoFilesOnArrival\command - C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe /Play /Drive:%L

 

*Newly Created Service* - CATCHME

.

Contents of the 'Scheduled Tasks' folder

"2007-03-30 07:01:37 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"

- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

.

**************************************************************************

 

catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-10-23 00:29:31

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

C:\WINDOWS\erdnt

**************************************************************************

.

Completion time: 2007-10-23 0:30:26

.

--- E O F ---

 

 

 

 

SAS-logg

 

 

 

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

 

Generated 10/22/2007 at 11:55 PM

 

Application Version : 3.9.1008

 

Core Rules Database Version : 3328

Trace Rules Database Version: 1329

 

Scan type : Quick Scan

Total Scan Time : 00:09:34

 

Memory items scanned : 518

Memory threats detected : 0

Registry items scanned : 683

Registry threats detected : 0

File items scanned : 11452

File threats detected : 39

 

Adware.Tracking Cookie

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@clicksor[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@cassava[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@advertising[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@2o7[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@statcounter[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@partypoker[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@zedo[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@mediaplex[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@888[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@adtech[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@adbrite[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@tradedoubler[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@questionmarket[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@serving-sys[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@new-pcp[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@doubleclick[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@indextools[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@cgi-bin[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@pacificpoker[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\[email protected][1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@adultfriendfinder[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@atdmt[2].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@xiti[1].txt

C:\Documents and Settings\xxxxxxxxxx\Cookies\xxxxxxxxxx@fastclick[1].txt

 

Adware.Lop-Variant

C:\DOCUMENTS AND SETTINGS\xxxxxxxxxx\LOCAL SETTINGS\TEMP\BIS502.EXE

 

 

 

 

 

HJT-logg

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 00:07:54, on 23.10.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Plone 3\Python\PythonService.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

C:\Program Files\Plone 3\Python\python.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\winsys2.exe

C:\Program Files\Analog Devices\Core\smax4pnp.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Program Files\Last.fm\LastFMHelper.exe

C:\Program Files\OpenOffice.org 2.1\program\soffice.exe

C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

F:\Programfiler\Security\hijackthis_sfx.exe

C:\Program Files\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [sW20] C:\WINDOWS\system32\sw20.exe

O4 - HKLM\..\Run: [sW24] C:\WINDOWS\system32\sw24.exe

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [soundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Hurtigstart for Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe

O4 - Global Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe

O4 - Global Startup: VPN Client.lnk = ?

O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll

O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/ru...cat-no-eula.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: BroadWave Service (BroadWaveService) - Unknown owner - C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe" -service (file missing)

O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

O23 - Service: Zope instance at C:\Program Files\Plone 3\Data (Zope_1313807186) - Unknown owner - C:\Program Files\Plone 3\Python\PythonService.exe

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

[norbat]

Ser greit ut dette.

 

For sikkerhets skyld kan du sjekke følgende fil på nettstedet: http://virusscan.jotti.org/

 

C:\WINDOWS\system32\winsys2.exe

 

Øverst på siden kan du laste opp fila. Hvis du ikke finner fila, må du antakelig slå på 'Vis skjulte filer og mapper' (kontrollpanel->mappealt->vis->"vis skjultefiler........")

 

Gi gjerne tilbakemelding på om det ble funnet noe.