Logger fra Combofix, superantispyware, HJT og Rootkit. - Trenger hjelp.

[QveltinG]

Combofix:

 

 

ComboFix 08-01-16.4 - Sveinung 2008-01-16 11:35:42.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.0.1252.1.1044.18.175 [GMT 1:00]

Running from: C:\Documents and Settings\Sveinung\Skrivebord\ComboFix.exe

* Created a new restore point

.

 

((((((((((((((((((((((((( Files Created from 2007-12-16 to 2008-01-16 )))))))))))))))))))))))))))))))

.

 

2008-01-16 11:34 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe

2008-01-16 10:32 . 2008-01-16 11:13 <DIR> dr-h----- C:\Documents and Settings\Sveinung\Siste

2008-01-15 12:01 . 2008-01-16 10:32 <DIR> d-------- C:\Programfiler\SUPERAntiSpyware

2008-01-15 12:01 . 2008-01-15 12:01 <DIR> d-------- C:\Documents and Settings\Sveinung\Programdata\SUPERAntiSpyware.com

2008-01-15 12:01 . 2008-01-15 12:01 <DIR> d-------- C:\Documents and Settings\All Users\Programdata\SUPERAntiSpyware.com

2008-01-15 11:54 . 2008-01-15 11:54 <DIR> d-------- C:\Programfiler\CCleaner

2008-01-14 04:01 . 2008-01-14 04:01 <DIR> d-------- C:\Programfiler\uTorrent

2008-01-14 04:01 . 2008-01-15 10:20 <DIR> d-------- C:\Documents and Settings\Sveinung\Programdata\uTorrent

2008-01-03 03:12 . 2008-01-03 03:12 <DIR> d-------- C:\Programfiler\Opera

2007-12-25 14:11 . 2001-08-17 22:03 21,760 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys

2007-12-25 02:14 . 2007-12-25 02:21 139,264 --a------ C:\WINDOWS\War3Unin.exe

2007-12-25 02:14 . 2007-12-25 02:25 60,241 --a------ C:\WINDOWS\War3Unin.dat

2007-12-25 02:14 . 2007-12-25 02:21 2,829 --a------ C:\WINDOWS\War3Unin.pif

2007-12-25 00:26 . 2008-01-16 10:16 <DIR> d-------- C:\Documents and Settings\Sveinung\Programdata\skypePM

2007-12-25 00:26 . 2007-12-25 00:26 32 --a------ C:\Documents and Settings\All Users\Programdata\ezsid.dat

2007-12-25 00:24 . 2008-01-16 11:32 <DIR> d-------- C:\Documents and Settings\Sveinung\Programdata\Skype

2007-12-25 00:23 . 2007-12-25 00:23 <DIR> d-------- C:\Programfiler\Skype

2007-12-25 00:23 . 2007-12-25 00:23 <DIR> d-------- C:\Programfiler\Fellesfiler\Skype

2007-12-25 00:22 . 2007-12-25 00:23 <DIR> d-------- C:\Documents and Settings\All Users\Programdata\Skype

2007-12-16 04:40 . 2007-12-16 15:02 <DIR> d-------- C:\Programfiler\TVAnts

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-01-15 11:01 --------- d-----w C:\Programfiler\Fellesfiler\Wise Installation Wizard

2008-01-15 02:14 --------- d-----w C:\Documents and Settings\Sveinung\Programdata\LimeWire

2007-12-16 13:58 --------- d-----w C:\Programfiler\SopCast

2007-12-11 23:23 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll

2007-12-11 21:55 --------- d--h--w C:\Programfiler\InstallShield Installation Information

2007-11-27 22:18 --------- d-----w C:\Programfiler\DAEMON Tools

2007-11-27 22:15 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys

2007-11-20 11:22 --------- d-----w C:\Documents and Settings\Sveinung\Programdata\DivX

2007-11-19 23:44 --------- d-----w C:\Programfiler\DivX

2007-11-17 04:08 --------- d-----w C:\Programfiler\BitComet

2007-11-16 15:08 --------- d-----w C:\Programfiler\IEEE 802.11b WLAN Utility(USB)

2007-11-16 15:08 --------- d-----w C:\Programfiler\Fellesfiler\Adobe

2007-10-31 14:38 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll

2007-10-31 14:38 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll

2007-10-21 18:24 159,744 ----a-w C:\WINDOWS\system32\UCLiveCore.dll

2007-10-21 17:33 241,664 ----a-w C:\WINDOWS\system32\UCLiveSocket.dll

2007-10-20 00:56 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe

2007-10-20 00:56 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll

2007-10-20 00:56 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll

2007-10-20 00:56 129,784 ------w C:\WINDOWS\system32\pxafs.dll

2007-10-20 00:56 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe

2007-10-20 00:56 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe

2007-10-20 00:56 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll

2007-10-20 00:54 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll

2007-10-20 00:54 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll

2007-10-20 00:54 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll

2007-10-20 00:54 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll

2007-10-20 00:54 739,840 ----a-w C:\WINDOWS\system32\DivX.dll

2007-10-20 00:54 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll

2007-10-18 09:06 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe

2007-10-18 09:03 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll

2007-10-18 09:03 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll

2007-10-18 09:03 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll

2007-10-18 09:03 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll

2007-10-18 09:03 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll

2007-10-18 09:03 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll

2007-10-18 09:02 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll

2003-07-31 15:53 147,456 ----a-w C:\WINDOWS\inf\EL2K_XP.sys

2003-07-31 15:50 448,768 ----a-w C:\WINDOWS\inf\EL2K_N64.sys

2003-07-31 15:43 147,456 ----a-w C:\WINDOWS\inf\EL2K_2K.sys

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-10-09 13:00 13312]

"msnmsgr"="C:\Programfiler\MSN Messenger\msnmsgr.exe" [2007-01-19 12:54 5674352]

"Steam"="d:\steam\steam.exe" [2007-11-30 12:01 1266936]

"DAEMON Tools"="C:\Programfiler\DAEMON Tools\daemon.exe" [2007-11-17 12:53 171464]

"Skype"="C:\Programfiler\Skype\Phone\Skype.exe" [2007-12-07 15:08 21686568]

"SUPERAntiSpyware"="C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06 1318912]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SunJavaUpdateSched"="C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00 132496]

"SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 577536 C:\WINDOWS\soundman.exe]

"TkBellExe"="C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" [2007-10-31 15:38 185632]

"Norman ZANDA"="C:\Norman\Npm\bin\ZLH.exe" [2007-08-09 14:40 183352]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2001-10-09 13:00 13312]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Programfiler\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

 

R2 Ndiskio;Ndiskio;C:\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 10:55]

R3 nvcfsr;nvcfsr;C:\Norman\Nvc\bin\nvcfsr.sys [2007-01-09 15:25]

R3 nvcoafl51;nvcoafl51;C:\Norman\Nvc\bin\nvcoafl51.sys [2007-01-09 15:25]

R3 nvcoaft51;nvcoaft51;C:\Norman\Nvc\bin\nvcoaft51.sys [2007-01-09 15:25]

R3 nvcoarc51;nvcoarc51;C:\Norman\Nvc\bin\nvcoarc51.sys [2007-01-09 15:25]

R3 NVCScheduler;Norman Virus Control Scheduler;C:\Norman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 13:23]

S3 nvcoas;Norman Virus Control on-access component;C:\Norman\Nvc\bin\nvcoas.exe [2007-12-12 11:45]

 

*Newly Created Service* - PROCEXP90

.

**************************************************************************

 

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-01-16 11:36:57

Windows 5.1.2600 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Completion time: 2008-01-16 11:37:46

 

 

 

 

 

 

SUPERANITspyware :

 

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

 

Generated 01/16/2008 at 11:26 AM

 

Application Version : 3.9.1008

 

Core Rules Database Version : 3380

Trace Rules Database Version: 1374

 

Scan type : Complete Scan

Total Scan Time : 00:53:40

 

Memory items scanned : 351

Memory threats detected : 0

Registry items scanned : 3597

Registry threats detected : 0

File items scanned : 32034

File threats detected : 2

 

Adware.Tracking Cookie

C:\Documents and Settings\Sveinung\Cookies\[email protected][1].txt

C:\Documents and Settings\Sveinung\Cookies\sveinung@serving-sys[2].txt

 

 

 

 

 

 

Hijack this:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:53:33, on 16.01.2008

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Norman\Npm\bin\ELOGSVC.EXE

C:\Norman\Npm\Bin\Zanda.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\alg.exe

C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

C:\Norman\Npm\bin\ZLH.EXE

C:\WINDOWS\System32\ctfmon.exe

D:\steam\steam.exe

C:\Norman\Nvc\BIN\NIP.EXE

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Norman\Npm\bin\NJEEVES.EXE

C:\Norman\Nvc\BIN\NVCSCHED.EXE

C:\Norman\Nvc\bin\nvcoas.exe

C:\Norman\Nvc\bin\cclaw.exe

C:\Programfiler\Opera\Opera.exe

C:\WINDOWS\System32\wuauclt.exe

C:\Documents and Settings\Sveinung\Skrivebord\test\test.exe

C:\WINDOWS\System32\wbem\wmiprvse.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemonsearch.com/no/

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1044

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Programfiler\BitComet\tools\BitCometBHO_1.1.2.7.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [TkBellExe] "C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Programfiler\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [steam] "d:\steam\steam.exe" -silent

O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programfiler\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKCU\..\Run: [skype] "C:\Programfiler\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Download all links using BitComet - res://C:\Programfiler\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: Download all videos using BitComet - res://C:\Programfiler\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: Download link using &BitComet - res://C:\Programfiler\BitComet\BitComet.exe/AddLink.htm

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FELLES~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Norman\Npm\bin\ELOGSVC.EXE

O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\Npm\bin\NJEEVES.EXE

O23 - Service: Norman ZANDA - Norman ASA - C:\Norman\Npm\Bin\Zanda.exe

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Norman\Nvc\BIN\NVCSCHED.EXE

 

--

End of file - 4629 bytes

 

 

 

Rootkit.

 

 

 

 

 

 

********************************* ROOTCHK-(28-12-07)-LOG, by ejvindh

16.01.2008 11:54:44,34

 

The rootkits that are detected by this tool were not found.

 

********************************* ROOTCHK-LOG-end

 

 

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-01-16 11:54:47

Windows 5.1.2600

scanning hidden processes ...

 

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]

"s1"=dword:2df9c43f

"s2"=dword:110480d0

"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]

"p0"="C:\Programfiler\DAEMON Tools\"

"h0"=dword:00000000

"khjeh"=hex:34,c4,6e,e9,21,f4,59,e9,f5,3f,02,fa,01,6f,d0,18,60,a4,c4,e1,39,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001]

"a0"=hex:20,01,00,00,a1,3b,1c,f4,ce,95,dc,b6,01,f0,61,ab,bf,90,c4,06,27,..

"khjeh"=hex:fc,61,ee,70,e1,73,18,2f,1d,ba,ea,52,9a,5c,12,40,7f,3b,11,1d,b6,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf40]

"khjeh"=hex:e6,c3,52,84,fc,f5,0b,24,40,4b,2a,33,56,f9,f6,92,ff,8f,8b,f7,1a,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf41]

"khjeh"=hex:f0,46,0b,02,6d,41,32,e6,ca,5a,d1,37,4f,bd,da,ed,9d,eb,6e,48,64,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf42]

"khjeh"=hex:13,5a,00,0f,84,22,27,47,8e,5b,68,00,41,85,2f,8c,78,7b,9c,fc,81,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf43]

"khjeh"=hex:bc,5e,49,71,8c,85,12,a7,9e,de,6a,91,21,14,00,0a,4b,ea,57,fa,03,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]

"p0"="C:\Programfiler\DAEMON Tools\"

"h0"=dword:00000000

"khjeh"=hex:34,c4,6e,e9,21,f4,59,e9,f5,3f,02,fa,01,6f,d0,18,60,a4,c4,e1,39,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001]

"a0"=hex:20,01,00,00,a1,3b,1c,f4,ce,95,dc,b6,01,f0,61,ab,bf,90,c4,06,27,..

"khjeh"=hex:fc,61,ee,70,e1,73,18,2f,1d,ba,ea,52,9a,5c,12,40,7f,3b,11,1d,b6,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf40]

"khjeh"=hex:e6,c3,52,84,fc,f5,0b,24,40,4b,2a,33,56,f9,f6,92,ff,8f,8b,f7,1a,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf41]

"khjeh"=hex:f0,46,0b,02,6d,41,32,e6,ca,5a,d1,37,4f,bd,da,ed,9d,eb,6e,48,64,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf42]

"khjeh"=hex:13,5a,00,0f,84,22,27,47,8e,5b,68,00,41,85,2f,8c,78,7b,9c,fc,81,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA40000001Jf43]

"khjeh"=hex:bc,5e,49,71,8c,85,12,a7,9e,de,6a,91,21,14,00,0a,4b,ea,57,fa,03,..

 

scanning hidden registry entries ...

 

scanning hidden files ...

 

hidden processes: 0

hidden services: 0

hidden files: 0

 

 

 

 

 

 

Takk for eventuell hjelp.

[norbat]

Du kan fix disse to linjene (i HJT, sett merke framfor dem og klikk Fix checked9:

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

 

Det største problemet er imidlertid at du har en Windows som manger vesentlige oppdateringer. Du bør snarest oppdatere med de Service Pack som er tilgjengelig. Gå til Windows Update.