Gå til innhold

Logg fra HijackThis, SAS og Combofix: Kan noen hjelpe?

Settler

Av Settler
i IKT-drift og sikkerhet

Anbefalte innlegg

Settler

Settler

Skrevet
Skrevet (endret)

Jeg har fått så utrolig treg PC i det siste, og lurte på om det var noe galt. Legger ut logger fra HijackThis, SuperAntispyware og Combofix, og håper noen kan se på de.

 

Logg fra HijackThis:

Klikk for å se/fjerne innholdet nedenfor

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 00:23:10, on 11.03.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Norman\Npm\Bin\eLogsvc.exe

C:\Programfiler\Norman\Npm\Bin\Zanda.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Belkin\Bluetooth-programvare\bin\btwdins.exe

c:\Programfiler\Fellesfiler\LightScribe\LSSrvc.exe

C:\Programfiler\Norman\Npf\BIN\NPFSVICE.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Programfiler\Canon\CAL\CALMAIN.exe

C:\windows\system\hpsysdrv.exe

C:\WINDOWS\system32\hphmon06.exe

C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\ALCXMNTR.EXE

C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\rundll32.exe

C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

C:\HP\KBD\KBD.EXE

C:\Programfiler\Samsung\Samsung Media Studio 5\SMSTray.exe

C:\Programfiler\MarkAny\ContentSafer\MAAgent.exe

C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe

C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe

C:\Programfiler\Norman\Npm\bin\ZLH.EXE

C:\Programfiler\Messenger\msmsgs.exe

C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Norman\Nvc\BIN\NIP.EXE

C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe

C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Programfiler\Norman\Npf\BIN\npfmsg2.exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programfiler\Norman\Nvc\BIN\NVCSCHED.EXE

C:\Programfiler\Norman\Npm\bin\NJEEVES.EXE

C:\Programfiler\Norman\Nvc\bin\nvcoas.exe

C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

C:\WINDOWS\System32\alg.exe

C:\Programfiler\PC Connectivity Solution\NclBTHandler.exe

C:\Programfiler\Norman\Nvc\bin\cclaw.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Belkin\Bluetooth-programvare\BTTray.exe

C:\Programfiler\Windows Desktop Search\WindowsSearch.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Programfiler\Norman\npm\bin\niu.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\SearchFilterHost.exe

C:\Documents and Settings\HP_Eier\Skrivebord\Sjekke PC\test.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nfdomino.nfk.no/redir.nsf

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

O2 - BHO: Koblingshjelpeprogram for Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Fellesfiler\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)

O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Programfiler\Ipswitch\WS_FTP Professional\wsbho2k0.dll

O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Programfiler\Siber Systems\AI RoboForm\roboform.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programfiler\google\googletoolbar3.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programfiler\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O3 - Toolbar: HP-visning - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Programfiler\HP\Digital Imaging\bin\HPDTLK02.dll

O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Programfiler\Siber Systems\AI RoboForm\roboform.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programfiler\google\googletoolbar3.dll

O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HPHUPD06] c:\Programfiler\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [sweetIM] C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE

O4 - HKLM\..\Run: [sMSTray] C:\Programfiler\Samsung\Samsung Media Studio 5\SMSTray.exe

O4 - HKLM\..\Run: [MAAgent] C:\Programfiler\MarkAny\ContentSafer\MAAgent.exe

O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [Norman ZANDA] C:\Programfiler\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [sweetIM] C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RoboForm] "C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

O4 - HKCU\..\Run: [swg] C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: ALEPH 500 - Version 16 Version Check.lnk = C:\AL500.16\ALEPHCOM\BIN\VERSION.EXE

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: Windows Desktop Search.lnk = C:\Programfiler\Windows Desktop Search\WindowsSearch.exe

O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Fyll Skjema - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O8 - Extra context menu item: Lagre Skjema - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O8 - Extra context menu item: RoboForm Verktøylinje - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O8 - Extra context menu item: Send til &Bluetooth - C:\Programfiler\Belkin\Bluetooth-programvare\btsendto_ie_ctx.htm

O8 - Extra context menu item: Tilpass Meny - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Fyll ut skjemaer - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra 'Tools' menuitem: Fyll Skjema - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra button: Lagre - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra 'Tools' menuitem: Lagre Skjema - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra 'Tools' menuitem: RoboForm Verktøylinje - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programfiler\Belkin\Bluetooth-programvare\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programfiler\Belkin\Bluetooth-programvare\btsendto_ie.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://nfdomino.nfk.no/iNotes6W.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab

O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} (Domino Web Access 7 Control) - http://nfdomino.nfk.no/dwa7W.cab

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15026/CTPID.cab

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programfiler\Belkin\Bluetooth-programvare\bin\btwdins.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Programfiler\Canon\CAL\CALMAIN.exe

O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Programfiler\Norman\Npm\Bin\eLogsvc.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Programfiler\Fellesfiler\LightScribe\LSSrvc.exe

O23 - Service: Norman NJeeves - Unknown owner - C:\Programfiler\Norman\Npm\bin\NJEEVES.EXE

O23 - Service: Norman Type-R - Unknown owner - C:\Programfiler\Norman\Npf\BIN\NPFSVICE.EXE

O23 - Service: Norman ZANDA - Norman ASA - C:\Programfiler\Norman\Npm\Bin\Zanda.exe

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Programfiler\Norman\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Programfiler\Norman\Nvc\BIN\NVCSCHED.EXE

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: ServiceLayer - Nokia. - C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\CCPD-LC\symlcsvc.exe

 

--

End of file - 14580 bytes

 

Logg fra SuperAntispyware:

Klikk for å se/fjerne innholdet nedenfor

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

 

Generated 03/10/2008 at 11:05 PM

 

Application Version : 4.0.1154

 

Core Rules Database Version : 3416

Trace Rules Database Version: 1408

 

Scan type : Complete Scan

Total Scan Time : 00:25:49

 

Memory items scanned : 561

Memory threats detected : 0

Registry items scanned : 7232

Registry threats detected : 0

File items scanned : 23848

File threats detected : 0

 

Logg fra Combofix:

Klikk for å se/fjerne innholdet nedenfor

ComboFix 08-03-10.1 - HP_Eier 2008-03-11 0:05:40.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1044.18.193 [GMT 1:00]

Running from: C:\Documents and Settings\HP_Eier\Skrivebord\ComboFix.exe

* Created a new restore point

.

 

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

D:\Autorun.inf

 

.

((((((((((((((((((((((((( Files Created from 2008-02-10 to 2008-03-10 )))))))))))))))))))))))))))))))

.

 

2008-03-10 19:49 . 2008-03-10 19:49 <DIR> d-------- C:\Programfiler\SUPERAntiSpyware

2008-03-10 19:49 . 2008-03-10 19:49 <DIR> d-------- C:\Documents and Settings\HP_Eier\Programdata\SUPERAntiSpyware.com

2008-03-10 19:49 . 2008-03-10 19:49 <DIR> d-------- C:\Documents and Settings\All Users\Programdata\SUPERAntiSpyware.com

2008-03-10 19:47 . 2008-03-10 19:47 <DIR> d-------- C:\Programfiler\Fellesfiler\Wise Installation Wizard

2008-03-10 19:41 . 2008-03-10 20:05 <DIR> dr-h----- C:\Documents and Settings\HP_Eier\Siste

2008-03-10 19:39 . 2008-03-10 19:39 <DIR> d-------- C:\Programfiler\CCleaner

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-03-10 22:54 5 ----a-w C:\NPF_USER.DAT

2008-03-10 22:53 --------- d-----w C:\Programfiler\Norman

2008-03-10 18:16 --------- d-----w C:\Programfiler\Bit Che

2008-03-10 18:16 --------- d-----w C:\Documents and Settings\HP_Eier\Programdata\Azureus

2008-03-10 18:12 --------- d---a-w C:\Programfiler\Furnish Pro

2008-03-10 18:12 --------- d-----w C:\Programfiler\Pixie

2008-03-09 14:34 --------- d-----w C:\Programfiler\Opera

2008-03-06 22:06 --------- d-----w C:\Programfiler\Azureus

2008-02-27 21:51 --------- d-----w C:\Programfiler\DC++

2008-02-27 15:00 --------- d-----w C:\Programfiler\LimeWire

2008-02-24 22:02 --------- d-----w C:\Documents and Settings\HP_Eier\Programdata\OpenOffice.org2

2008-02-24 10:05 --------- d-----w C:\Programfiler\Fellesfiler\Adobe

2008-02-21 22:25 --------- d-----w C:\Documents and Settings\All Users\Programdata\DVD Shrink

2008-02-08 00:54 --------- d-----w C:\Documents and Settings\All Users\Programdata\Microsoft Help

2008-02-05 14:45 --------- d-----w C:\Programfiler\Microsoft CAPICOM 2.1.0.2

2008-02-04 04:33 --------- d-----w C:\Programfiler\Microsoft Works

2008-02-04 04:32 --------- d-----w C:\Programfiler\Microsoft.NET

2008-01-28 23:30 7,028 ----a-w C:\Documents and Settings\HP_Eier\Programdata\wklnhst.dat

2008-01-13 22:09 --------- d-----w C:\Documents and Settings\HP_Eier\Programdata\Nero

2008-01-13 22:04 --------- d-----w C:\Documents and Settings\All Users\Programdata\Ahead

2008-01-10 22:11 --------- d-----w C:\Programfiler\Western Digital Technologies

2006-05-24 09:26 42,960 ----a-w C:\Documents and Settings\HP_Eier\Programdata\GDIPFONTCACHEV1.DAT

2005-06-01 22:17 58,929,664 ----a-w C:\Programfiler\nis.exe

2005-05-01 13:32 0 --sha-w C:\WINDOWS\SMINST\HPCD.sys

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSMSGS"="C:\Programfiler\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]

"SweetIM"="C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe" [2006-01-01 19:57 40960]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe" [2006-02-01 16:45 98304]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 04:00 15360]

"RoboForm"="C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2006-12-13 15:58 160832]

"swg"="C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-08 22:19 68856]

"SUPERAntiSpyware"="C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-02-29 16:03 1481968]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 16:04 52736]

"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2004-08-20 22:55 155648]

"HPHUPD06"="c:\Programfiler\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 19:34 49152]

"HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 19:30 659456]

"ISUSPM Startup"="C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 13:03 221184]

"ISUSScheduler"="C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" [2004-06-16 13:03 81920]

"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 20:43 233472]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-09-29 20:23 4603904]

"nwiz"="nwiz.exe" [2004-09-29 20:23 921600 C:\WINDOWS\system32\nwiz.exe]

"VTTimer"="VTTimer.exe" []

"SiSPower"="SiSPower.dll" [2004-09-24 09:49 49152 C:\WINDOWS\system32\SiSPower.dll]

"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 20:47 57344 C:\WINDOWS\ALCXMNTR.EXE]

"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 21:54 253952]

"HP Software Update"="C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 22:11 49152]

"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 04:00 110592 C:\WINDOWS\system32\bthprops.cpl]

"SweetIM"="C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe" [2006-01-01 19:57 40960]

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40 155648]

"UserFaultCheck"="C:\WINDOWS\system32\dumprep 0 -u" [ ]

"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-02 15:44 61440]

"SMSTray"="C:\Programfiler\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-02-28 20:59 126976]

"MAAgent"="C:\Programfiler\MarkAny\ContentSafer\MAAgent.exe" [2007-02-28 20:59 57344]

"PCSuiteTrayApplication"="C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2006-11-08 13:27 222208]

"SunJavaUpdateSched"="C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00 132496]

"Norman ZANDA"="C:\Programfiler\Norman\Npm\bin\ZLH.exe" [2007-04-27 13:02 183352]

"Adobe Reader Speed Launcher"="C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"PcSync"="C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-11-09 17:15 1634304]

"Picasa Media Detector"="C:\Programfiler\Picasa2\PicasaMediaDetector.exe" [2007-10-23 22:18 443968]

 

C:\Documents and Settings\All Users\Start-meny\Programmer\Oppstart\

Adobe Gamma Loader.lnk - C:\Programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe [2007-06-24 16:28:36 110592]

ALEPH 500 - Version 16 Version Check.lnk - C:\AL500.16\ALEPHCOM\BIN\VERSION.EXE [2006-12-19 09:23:46 2019328]

BTTray.lnk - C:\Programfiler\Belkin\Bluetooth-programvare\BTTray.exe [2003-09-15 15:53:06 503869]

Windows Desktop Search.lnk - C:\Programfiler\Windows Desktop Search\WindowsSearch.exe [2007-02-05 14:40:46 118784]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{88485281-8b4b-4f8d-9ede-82e29a064277}"= C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 16:51 192512]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Programfiler\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 14:39 294400]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Programfiler\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 12:41 294912 C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Programfiler\\HP\\HP Software Update\\HPWUCli.exe"=

"C:\\Programfiler\\Messenger\\msmsgs.exe"=

"C:\\Programfiler\\Google\\Google Talk\\googletalk.exe"=

"C:\\Programfiler\\LimeWire\\LimeWire.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\WINDOWS\\system32\\muzapp.exe"=

"C:\\Programfiler\\MSN Messenger\\msnmsgr.exe"=

"C:\\Programfiler\\MSN Messenger\\livecall.exe"=

"C:\\Programfiler\\DC++\\DCPlusPlus.exe"=

"C:\\Programfiler\\Opera\\Opera.exe"=

"C:\\Programfiler\\Microsoft Office\\Office12\\ONENOTE.EXE"=

 

R0 NDIS_RD;Firewall Engine Type-R2;C:\WINDOWS\system32\drivers\NDIS_RD.sys [2004-12-06 09:18]

R0 viaagp1;VIA AGP Filter;C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2003-07-02 11:42]

R1 TDI_RD;Firewall Engine Type-R;C:\WINDOWS\system32\drivers\tdi_rd.sys [2004-10-13 21:01]

R2 Ndiskio;Ndiskio;C:\Programfiler\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 09:55]

R3 NvcMFlt;NvcMFlt;C:\WINDOWS\system32\DRIVERS\nvcw32mf.sys [2007-05-31 13:51]

R3 nvcoas;Norman Virus Control on-access component;C:\Programfiler\Norman\Nvc\bin\nvcoas.exe [2007-05-24 12:32]

R3 NVCScheduler;Norman Virus Control Scheduler;C:\Programfiler\Norman\Nvc\BIN\NVCSCHED.EXE [2007-03-15 10:48]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{96df27a6-bfc8-11dc-ad88-00112fa6797e}]

\Shell\AutoRun\command - wd_windows_tools\setup.exe

 

.

**************************************************************************

 

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-03-11 00:12:43

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Completion time: 2008-03-11 0:15:52

ComboFix-quarantined-files.txt 2008-03-10 23:15:45

.

2008-02-14 00:39:47 --- E O F ---

Endret av Settler
Lenke til kommentar

Videoannonse

Videoannonse
Annonse
snippsat

snippsat

Skrevet
Skrevet

Norton-Removal-Tool du har rester fra norton som kjører.

 

Start HijackThis finn disse linjene merk dem,så trykk fixed checked.

O2 - BHO: Koblingshjelpeprogram for Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Fellesfiler\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)

 

O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

 

O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

 

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" -start

 

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

 

O4 - Global Startup: ALEPH 500 - Version 16 Version Check.lnk = C:\AL500.16\ALEPHCOM\BIN\VERSION.EXE

 

Last ned kjør CCleaner

Gå til 'Valg'->'Avansert'. Fjern avkryssingen framfor: "bare slett midlertidige filer som er eldere xx.

Kjør register-renser og.

 

Defragmere + Pagedefrag

 

Restart og en ny HijackThis logg.

 

Si litt om pcen kjører bedere etter dette.

Lenke til kommentar
Settler

Settler

Skrevet
  • Forfatter
Skrevet (endret)

Jeg fikk ikke til å laste ned Norton Removal Tool.

 

Har trykket Fixed Checked i HJT på alle unntatt denne:

O4 - Global Startup: ALEPH 500 - Version 16 Version Check.lnk = C:\AL500.16\ALEPHCOM\BIN\VERSION.EXE

Hva gjør den? Blir programmet ALEPH borte om jeg tar bort denne?

 

Har kjørt CCleaner.

På Register - Søk etter feil kom det opp en liste med feil. Skal jeg trykke på Reparer merkede feil? Vet ikke om noen bør se på det først. Slik var listen:

Klikk for å se/fjerne innholdet nedenfor

Savnet delt DLL c:\hpqimgrc.resources.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\Programfiler\InterVideo\Common\Bin\WinCinemaMgr.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\Programfiler\InterVideo\Common\Bin\IVIPromotion.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\Programmer JT\Opera7.54\Plugins\NPSWF32.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\Programfiler\Opera 9 Beta\program\plugins\\NPSWF32.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\WINDOWS\system32\QuickTime.qts HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\WINDOWS\system32\QuickTimeVR.qtx HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\DOCUME~1\HP_Eier\LOKALE~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\FileGrp\Msvcrt10.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Savnet delt DLL C:\WINDOWS\system32\pxafs.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls

Ugyldig filutvidelse .eta - Google Earth.etafile HKCR\.eta

Ugyldig filutvidelse .jap - HKCR\.jap

Ugyldig filutvidelse .kml - Google Earth.kmlfile HKCR\.kml

Ugyldig filutvidelse .kmz - Google Earth.kmzfile HKCR\.kmz

Ugyldig filutvidelse .n64 - HKCR\.n64

Ugyldig filutvidelse .pal - HKCR\.pal

Ugyldig filutvidelse .rom - HKCR\.rom

Ugyldig filutvidelse .tvpi - tvpi_auto_file HKCR\.tvpi

Ugyldig filutvidelse .usa - HKCR\.usa

Ugyldig filutvidelse JavaPlugin.150_08 - HKCR\JavaPlugin.150_08

Ugyldig filutvidelse OISbmpfile - HKCR\OISbmpfile

Ugyldig filutvidelse OISemffile - HKCR\OISemffile

Ugyldig filutvidelse OISgiffile - HKCR\OISgiffile

Ugyldig filutvidelse OISjpegfile - HKCR\OISjpegfile

Ugyldig filutvidelse OISpngfile - HKCR\OISpngfile

Ugyldig filutvidelse OIStiffile - HKCR\OIStiffile

Ugyldig filutvidelse OISwmffile - HKCR\OISwmffile

Ugyldig filutvidelse SysmonLogManager.Snapin - HKCR\SysmonLogManager.Snapin

Ugyldig filutvidelse WMPCD - HKCR\WMPCD

Ugyldig filutvidelse . HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.

Ugyldig filutvidelse .000 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.000

Ugyldig filutvidelse .001 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.001

Ugyldig filutvidelse .003 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.003

Ugyldig filutvidelse .aux HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aux

Ugyldig filutvidelse .avg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avg

Ugyldig filutvidelse .bak HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bak

Ugyldig filutvidelse .cut HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cut

Ugyldig filutvidelse .dctmp HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dctmp

Ugyldig filutvidelse .dds HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dds

Ugyldig filutvidelse .DMP HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DMP

Ugyldig filutvidelse .doc?OpenElement HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc?OpenElement

Ugyldig filutvidelse .fxb HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fxb

Ugyldig filutvidelse .iff HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff

Ugyldig filutvidelse .ilb HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilb

Ugyldig filutvidelse .info HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.info

Ugyldig filutvidelse .itl HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itl

Ugyldig filutvidelse .itms HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itms

Ugyldig filutvidelse .itpc HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itpc

Ugyldig filutvidelse .jlr HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jlr

Ugyldig filutvidelse .jng HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jng

Ugyldig filutvidelse .jst HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jst

Ugyldig filutvidelse .koa HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.koa

Ugyldig filutvidelse .lbm HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm

Ugyldig filutvidelse .ljp HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ljp

Ugyldig filutvidelse .lng HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lng

Ugyldig filutvidelse .m4b HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b

Ugyldig filutvidelse .m4p HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p

Ugyldig filutvidelse .mng HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mng

Ugyldig filutvidelse .mp1 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp1

Ugyldig filutvidelse .mpga HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpga

Ugyldig filutvidelse .mpx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpx

Ugyldig filutvidelse .MRC HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MRC

Ugyldig filutvidelse .npl HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.npl

Ugyldig filutvidelse .obd HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.obd

Ugyldig filutvidelse .obt HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.obt

Ugyldig filutvidelse .part HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.part

Ugyldig filutvidelse .pbm HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm

Ugyldig filutvidelse .pcd HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd

Ugyldig filutvidelse .pcx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx

Ugyldig filutvidelse .psd HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd

Ugyldig filutvidelse .ra HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra

Ugyldig filutvidelse .rjs HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rjs

Ugyldig filutvidelse .rjt HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rjt

Ugyldig filutvidelse .rmvb HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb

Ugyldig filutvidelse .rnx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rnx

Ugyldig filutvidelse .rp HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rp

Ugyldig filutvidelse .RST HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.RST

Ugyldig filutvidelse .rt HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt

Ugyldig filutvidelse .rv HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rv

Ugyldig filutvidelse .sav HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sav

Ugyldig filutvidelse .sfv HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfv

Ugyldig filutvidelse .shn HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shn

Ugyldig filutvidelse .ssm HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssm

Ugyldig filutvidelse .sub HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sub

Ugyldig filutvidelse .tga HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga

Ugyldig filutvidelse .wbm HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm

Ugyldig filutvidelse .wbmp HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp

Ugyldig filutvidelse .wv HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv

Ugyldig filutvidelse .xbm HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm

Ugyldig filutvidelse .XXXXXX HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.XXXXXX

Ugyldig filutvidelse .z64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.z64

Ugyldig filutvidelse OpenWithList HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList

Ugyldig eller tom fil klasse .cdr HKCR\.cdr

Ugyldig eller tom fil klasse .mds HKCR\.mds

Ugyldig standardikon C:\Programfiler\Adobe\Reader 8.0\Acrobat\AcroRd32.exe HKCR\acrobat\DefaultIcon

ActiveX/COM-feil ADCS - {89E30300-764D-11d0-B282-00A0C90F56FC} HKCR\ADCS

Filtilordningsfeil C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe "%1" HKCR\amr_auto_file\shell\open

ActiveX/COM-feil ComPlusMetaData.MsCorHost - {727CDF4F-3BA0-11D3-8738-00C04F79ED0D} HKCR\ComPlusMetaData.MsCorHost

ActiveX/COM-feil ComPlusMetaData.MsCorHost.2 - {727CDF4F-3BA0-11D3-8738-00C04F79ED0D} HKCR\ComPlusMetaData.MsCorHost.2

Ugyldig standardikon C:\WINDOWS\system32\CMMGR32.EXE,1 HKCR\Connection Manager Profile\DefaultIcon

Filtilordningsfeil C:\WINDOWS\system32\CMMGR32.EXE "%1" HKCR\Connection Manager Profile\shell\open

Filtilordningsfeil C:\WINDOWS\system32\CMMGR32.EXE /settings "%1" HKCR\Connection Manager Profile\shell\Settings...

Ugyldig standardikon C:\Programfiler\Creative\MediaSource\CTCMS.CRL,-133 HKCR\CTAutoPL.AudioCDPlayer.1\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Creative\MediaSource\CTCMS.exe" /T=CLASSKEY_AudioCD IN %L PlayNow HKCR\CTAutoPL.AudioCDPlayer.1\shell\open

Ugyldig standardikon C:\Programfiler\Creative\MediaSource\CTCMS.CRL,-133 HKCR\CTAutoPL.MusicFilesPlayer.1\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Creative\MediaSource\CTCMS.exe" /Organizer HKCR\CTAutoPL.MusicFilesPlayer.1\shell\open

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,11 HKCR\dcsfile\DefaultIcon

ActiveX/COM-feil DirectAnimation.PathControl - {D7A7D7C3-D47F-11D0-89D3-00A0C90833E6} HKCR\DirectAnimation.PathControl

ActiveX/COM-feil DirectAnimation.Sequence - {4F241DB1-EE9F-11D0-9824-006097C99E51} HKCR\DirectAnimation.Sequence

ActiveX/COM-feil DirectAnimation.SequencerControl - {B0A6BAE2-AAF0-11D0-A152-00A0C908DB96} HKCR\DirectAnimation.SequencerControl

ActiveX/COM-feil DirectAnimation.SpriteControl - {FD179533-D86E-11D0-89D6-00A0C90833E6} HKCR\DirectAnimation.SpriteControl

ActiveX/COM-feil DirectAnimation.StructuredGraphicsControl - {369303C2-D7AC-11D0-89D5-00A0C90833E6} HKCR\DirectAnimation.StructuredGraphicsControl

ActiveX/COM-feil DSP.DSP - {9C123EA9-AEC9-4f75-BBC0-7565FA1398966} HKCR\DSP.DSP

ActiveX/COM-feil DSP.DSPDMOProp_Chorus.1 - {6F63B172-5543-4593-91CE-EDBA65B9FACDB} HKCR\DSP.DSPDMOProp_Chorus.1

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,10 HKCR\ecsfile\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,12 HKCR\fcsfile\DefaultIcon

Ugyldig standardikon "C:\Programfiler\Google\Google Desktop Search\GoogleDesktop.exe",0 HKCR\GoogleGadget\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Google\Google Desktop Search\GoogleDesktop.exe" /display /load "%1" HKCR\GoogleGadget\shell\open

Ugyldig standardikon "C:\Programfiler\Google\Google Desktop Search\GoogleDesktop.exe",0 HKCR\GoogleGadgetManifest\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Google\Google Desktop Search\GoogleDesktop.exe" /display /load "%1" HKCR\GoogleGadgetManifest\shell\open

ActiveX/COM-feil igfx.CUITestConfig.1 - c HKCR\igfx.CUITestConfig.1

Ugyldig standardikon "C:\Programfiler\Morpheus Ultra\Morpheus.exe" HKCR\itpc\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Morpheus Ultra\Morpheus.exe" "%1" HKCR\itpc\shell\open

ActiveX/COM-feil LSClient.SubscriptionInfo - {9B3A3465-FE53-11D3-9784-005004D12CC3} HKCR\LSClient.SubscriptionInfo

ActiveX/COM-feil LSClient.SubscriptionInfo.1 - {9B3A3465-FE53-11D3-9784-005004D12CC3} HKCR\LSClient.SubscriptionInfo.1

Ugyldig standardikon "C:\Programfiler\StreamCast\Morpheus Ultra\Torrent.ico HKCR\morpheustorrent\DefaultIcon

Filtilordningsfeil "C:\Programfiler\StreamCast\Morpheus Ultra\morpheus.exe" "%1" HKCR\morpheustorrent\shell\open

Ugyldig standardikon "C:\Programfiler\Morpheus Ultra\podcast_icon.ico" HKCR\morphpodcast\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Morpheus Ultra\Morpheus.exe" "%1" HKCR\morphpodcast\shell\open

Ugyldig standardikon "C:\Programfiler\Morpheus Ultra\Torrent.ico" HKCR\morphtorrent\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Morpheus Ultra\Morpheus.exe" "%1" HKCR\morphtorrent\shell\open

Ugyldig standardikon "C:\Programfiler\Morpheus Ultra\Morpheus.exe" HKCR\mpodcast\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Morpheus Ultra\Morpheus.exe" "%1" HKCR\mpodcast\shell\open

Ugyldig standardikon %SystemRoot%\system32\ntbackup.exe,10 HKCR\msbackupfile\DefaultIcon

Filtilordningsfeil %SystemRoot%\system32\ntbackup.exe HKCR\msbackupfile\shell\Open

ActiveX/COM-feil Msohelp.HtmlHelp.1 - {31E0DFD7-2621-11D2-AFD7-006097C9A284} HKCR\Msohelp.HtmlHelp.1

ActiveX/COM-feil MsohelpAWDlg.1 - {B58C2441-A1A3-11D2-B024-006097C9A284} HKCR\MsohelpAWDlg.1

ActiveX/COM-feil MsohelpKeyDlg.1 - {B58C2440-A1A3-11D2-B024-006097C9A284} HKCR\MsohelpKeyDlg.1

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,14 HKCR\ncsfile\DefaultIcon

Filtilordningsfeil C:\Programfiler\Ahead\Nero Recode\Recode.exe /New:ReAuthorNeroDigital /Drive:%L HKCR\Nero.AutoPlay2\shell\PlayDVDMovieOnArrival_DVDVideoToNeroDigital

Filtilordningsfeil C:\Programfiler\Ahead\Nero ShowTime\ShowTime.exe /Play %L HKCR\Nero.AutoPlay2\shell\PlayDVDMovieOnArrival_PlayDVD

Filtilordningsfeil C:\Programfiler\Ahead\Nero Recode\Recode.exe /New:CopyDVDVideo /Drive:%L HKCR\Nero.AutoPlay2\shell\PlayDVDMovieOnArrival_TranscodeVideo

Filtilordningsfeil C:\Programfiler\Ahead\Nero ShowTime\ShowTime.exe /Play %L HKCR\Nero.AutoPlay2\shell\PlayVideoFilesOnArrival_PlayDVD

Filtilordningsfeil C:\Programfiler\Ahead\Nero PhotoSnap\PhotoSnapViewer.exe /Drive:%L HKCR\Nero.AutoPlay2\shell\ShowPicturesOnArrival_ViewPhotos

Filtilordningsfeil C:\Programfiler\Ahead\NeroVision\NeroVision.exe /New:VideoCapture /Drive:%L HKCR\Nero.AutoPlay2\shell\VideoCameraArrival_VideoCapture

Ugyldig standardikon C:\PROGRA~1\Ahead\nero\nero.exe,18 HKCR\NeroAACType\DefaultIcon

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe "%1" HKCR\NeroAACType\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /p "%1" HKCR\NeroAACType\shell\print

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /pt "%1" "%2" "%3" "%4" HKCR\NeroAACType\shell\printto

Ugyldig standardikon C:\PROGRA~1\Ahead\nero\nero.exe,6 HKCR\NeroCopyType\DefaultIcon

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe "%1" HKCR\NeroCopyType\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /p "%1" HKCR\NeroCopyType\shell\print

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /pt "%1" "%2" "%3" "%4" HKCR\NeroCopyType\shell\printto

Ugyldig standardikon C:\PROGRA~1\Ahead\nero\nero.exe,5 HKCR\NeroCueSheetType\DefaultIcon

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe "%1" HKCR\NeroCueSheetType\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /p "%1" HKCR\NeroCueSheetType\shell\print

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /pt "%1" "%2" "%3" "%4" HKCR\NeroCueSheetType\shell\printto

Ugyldig standardikon C:\PROGRA~1\Ahead\nero\nero.exe,10 HKCR\NeroErrorType\DefaultIcon

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe "%1" HKCR\NeroErrorType\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /p "%1" HKCR\NeroErrorType\shell\print

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /pt "%1" "%2" "%3" "%4" HKCR\NeroErrorType\shell\printto

Ugyldig standardikon C:\PROGRA~1\Ahead\nero\nero.exe,14 HKCR\NeroHDBackupType\DefaultIcon

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe "%1" HKCR\NeroHDBackupType\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /p "%1" HKCR\NeroHDBackupType\shell\print

Filtilordningsfeil C:\PROGRA~1\Ahead\nero\nero.exe /pt "%1" "%2" "%3" "%4" HKCR\NeroHDBackupType\shell\printto

Ugyldig standardikon C:\Programfiler\Ahead\NeroMediaPlayer\NeroMediaPlayer.exe,1 HKCR\NeroMediaPlayer.File\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Media Player Classic\mplayerc.exe" "%1" HKCR\NeroMediaPlayer.File\shell\open

Ugyldig standardikon C:\Programfiler\Ahead\NeroMediaPlayer\NeroMediaPlayer.exe,3 HKCR\NeroMediaPlayer.Playlist\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Ahead\NeroMediaPlayer\NeroMediaPlayer.exe" "%1" HKCR\NeroMediaPlayer.Playlist\shell\open

ActiveX/COM-feil NMUIEngine.NMUIResourceLoaderHarddisk - {03DC5606-EA66-4f02-AB52-2065524B03821} HKCR\NMUIEngine.NMUIResourceLoaderHarddisk

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -n "%1" HKCR\odt_auto_file\shell\new

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -o "%1" HKCR\odt_auto_file\shell\open

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -p "%1" HKCR\odt_auto_file\shell\print

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -pt "%2" "%1" HKCR\odt_auto_file\shell\printto

Ugyldig standardikon "C:\Programfiler\Morpheus Ultra\Morpheus.exe" HKCR\podcast\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Morpheus Ultra\Morpheus.exe" "%1" HKCR\podcast\shell\open

Ugyldig standardikon C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe,-130 HKCR\QuickTime.mpg4\DefaultIcon

Filtilordningsfeil C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe "%1" HKCR\QuickTime.mpg4\shell\open

Ugyldig standardikon C:\WINDOWS\system32\QuickTime.qts,-104 HKCR\QuickTimeInstallCache\DefaultIcon

Ugyldig standardikon C:\Programfiler\QuickTime\QuickTimePlayer.exe,-140 HKCR\QuickTimePlayerExtension\DefaultIcon

Filtilordningsfeil "C:\Programfiler\Media Player Classic\mplayerc.exe" "%1" HKCR\ramfile\shell\open

Filtilordningsfeil "C:\Programfiler\Media Player Classic\mplayerc.exe" "%1" HKCR\rmfile\shell\open

Filtilordningsfeil "C:\Programfiler\Media Player Classic\mplayerc.exe" "%1" HKCR\rpmfile\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\NEROSO~1\SOUNDT~1.EXE "%1" HKCR\SoundTrax.Project\shell\open

ActiveX/COM-feil SymWriter.pdb - {520DC67A-752E-11D3-8D56-00C04F680B2B} HKCR\SymWriter.pdb

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,13 HKCR\tcsfile\DefaultIcon

ActiveX/COM-feil ToolBand.SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} HKCR\ToolBand.SWEETIE

ActiveX/COM-feil ToolBand.SWEETIE.1 - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} HKCR\ToolBand.SWEETIE.1

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,15 HKCR\urn:content-classes:catalog\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12471 HKCR\urn:content-classes:catalog-settings\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-13101 HKCR\urn:content-classes:contentclassdef\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12451 HKCR\urn:content-classes:exchange55startaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12451 HKCR\urn:content-classes:exchangestartaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12453 HKCR\urn:content-classes:filestartaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,20 HKCR\urn:content-classes:management\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12456 HKCR\urn:content-classes:notesstartaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12454 HKCR\urn:content-classes:remoteworkspacestartaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12450 HKCR\urn:content-classes:webstartaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-13100 HKCR\urn:content-classes:wizard/addcontentclass\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12461 HKCR\urn:content-classes:wizard/addsearchcontentlocation\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12472 HKCR\urn:content-classes:workspace-settings\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12476 HKCR\urn:content-classes:workspaceconfiguration\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,-12454 HKCR\urn:content-classes:workspacestartaddress\DefaultIcon

Ugyldig standardikon C:\Programfiler\Fellesfiler\Microsoft Shared\Web Folders\pkmres.dll,9 HKCR\wcsfile\DefaultIcon

ActiveX/COM-feil wdsShell.WDSCalendar - {10935444-7CC4-483B-9FDB-37560F5F3BBF2} HKCR\wdsShell.WDSCalendar

Filtilordningsfeil "C:\Programfiler\Microsoft Office\Office10\msohtmed.exe" %1 HKCR\XEV.GenericApp\shell\edit

Filtilordningsfeil "C:\Programfiler\Microsoft Office\Office10\msohtmed.exe" %1 HKCR\XEV.OriginalApp\shell\edit

Ugyldig standardikon %SystemRoot%\system32\appmgr.dll,-218 HKCR\zapfile\DefaultIcon

ActiveX/COM-feil InProcServer32\C:\WINDOWS\system32\plugin.ocx HKCR\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}

ActiveX/COM-feil InProcServer32\"C:\PROGRA~1\MSNMES~1\msgsc.dll" HKCR\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}

ActiveX/COM-feil InProcServer32\C:\PROGRA~1\FELLES~1\SYMANT~1\LiveReg\IraVcObj.dll HKCR\CLSID\{172609AA-CA57-11D2-8274-0010AD122571}

ActiveX/COM-feil InProcServer32\C:\PROGRA~1\FELLES~1\SYMANT~1\LiveReg\IraVcObj.dll HKCR\CLSID\{172609AB-CA57-11D2-8274-0010AD122571}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Fellesfiler\PCSuite\Transports\NCLRSMM.dll HKCR\CLSID\{23399C73-7D90-4EA6-BA20-5435E850F79E}

ActiveX/COM-feil LocalServer32\C:\WINDOWS\system32\CPdeSrvU.exe HKCR\CLSID\{2E65E760-B7E6-4CFB-A105-1E8891A00F82}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Fellesfiler\PCSuite\Transports\NCLIrDAMM.dll HKCR\CLSID\{45DE04A6-22B9-41A4-9883-788B692A1E1F}

ActiveX/COM-feil InProcServer32\C:\PROGRA~1\JetAudio\fldrvw60.ocx HKCR\CLSID\{4FAF7212-7314-42AF-9C1E-1F48BBD660B7}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Fellesfiler\PCSuite\Transports\NclMSBTMM.dll HKCR\CLSID\{7892EA7F-B2EB-4a8f-A52A-AFB9CFC46643}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Fellesfiler\PCSuite\Transports\NclBCBTMM.dll HKCR\CLSID\{931EAAEF-6EC9-4668-A52E-405B4030931A}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Fellesfiler\PCSuite\Transports\NCLUSBMM.dll HKCR\CLSID\{9A34CBAD-3DAB-4439-9D6E-FE717F04C224}

ActiveX/COM-feil LocalServer32\C:\Programfiler\Microsoft Office\Office10\WINWORD.EXE /IMG_WIA HKCR\CLSID\{A9FF322D-1F0C-4B79-B927-D107BC988D9B}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Google\Google Desktop Search\GoogleDesktopAPI2.dll HKCR\CLSID\{B334CA23-40EE-4556-A808-3EAA3E80517E}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll HKCR\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Creative\ShareDLL\ctnmjb2.dll HKCR\CLSID\{BD1A6357-3E9B-4F1B-8375-AEE989ED6C5E}

ActiveX/COM-feil InProcServer32\C:\Programfiler\Google\Google Desktop Search\GoogleDesktopAPI2.dll HKCR\CLSID\{D496FA5F-11C0-4EA8-A364-3A6BF8565EE6}

Filtilordningsfeil "C:\Programfiler\JetAudio\jetlyric.exe" "%1" HKCR\Applications\jetlyric.exe\shell\open

Filtilordningsfeil "C:\Programfiler\StreamCast\Morpheus Ultra\morpheus.exe" "%1" HKCR\Applications\morpheus.exe\shell\open

Filtilordningsfeil Applications\moviemk.exe\shell HKCR\Applications\moviemk.exe

Filtilordningsfeil "C:\Programfiler\Media Player Classic\mplayerc.exe" "%1" HKCR\Applications\mplayerc.exe\shell\open

Filtilordningsfeil C:\PROGRA~1\Ahead\Nero\nero.exe /p "%1" HKCR\Applications\nero.exe\shell\print

Filtilordningsfeil C:\PROGRA~1\Ahead\Nero\nero.exe /pt "%1" "%2" "%3" "%4" HKCR\Applications\nero.exe\shell\printto

Filtilordningsfeil "C:\Programfiler\Ahead\NeroMediaPlayer\NeroMediaPlayer.exe" "%1" HKCR\Applications\NeroMediaPlayer.exe\shell\open

Filtilordningsfeil C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe "%1" HKCR\Applications\QuickTimePlayer.exe\shell\open

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -n "%1" HKCR\Applications\soffice.exe\shell\new

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -o "%1" HKCR\Applications\soffice.exe\shell\open

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -p "%1" HKCR\Applications\soffice.exe\shell\print

Filtilordningsfeil "C:\Programfiler\OpenOffice.org 2.0\program\soffice.exe" -pt "%2" "%1" HKCR\Applications\soffice.exe\shell\printto

Programmappefeil AudioCvt.exe - C:\Programfiler\Creative\MediaSource\Wizard\AudioCvt\AudioCvt.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AudioCvt.exe

Programmappefeil cmmgr32.exe - C:\WINDOWS\system32\cmmgr32.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe

Programmappefeil CTCDCov.exe - C:\Programfiler\Creative\MediaSource\Wizard\CDCover\CTCDCov.EXE HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CTCDCov.exe

Programmappefeil CTEPLImp.exe - C:\Programfiler\Creative\MediaSource\Wizard\Importplaylist\CTEPLImp.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CTEPLImp.exe

Programmappefeil CTImport.exe - C:\Programfiler\Creative\MediaSource\Wizard\Import\CTImport.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CTImport.exe

Programmappefeil CTQSWiz.exe - C:\Programfiler\Creative\MediaSource\Wizard\QuickStart\CTQSWiz.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CTQSWiz.exe

Programmappefeil CTSUApp.exe - C:\Programfiler\Creative\Shared Files\CTSUApp.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CTSUApp.exe

Programmappefeil DiscLabel.exe - C:\Programfiler\InterVideo\DiscLabel\yourapp.Exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\DiscLabel.exe

Programmappefeil HijackThis.exe - C:\Documents and Settings\HP_Eier\Skrivebord\Sjekke PC\hijackthis.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe

Programmappefeil MtdAcq.exe - C:\Programfiler\Creative\Shared Files\Media Sniffer\MtdAcq.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\MtdAcq.exe

Programmappefeil ssm2005.exe - C:\Programfiler\SuperSoccerManager 2005\ssm2005.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\ssm2005.exe

Programmappefeil yourapp.Exe - C:\Programfiler\InterVideo\Home Theater\TV.exe HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\yourapp.Exe

Installasjonsreferansefeil c:\Documents and Settings\Eier\Programdata\Microsoft\Installer\{457791C5-D702-4143-A7B2-2744BE9573F2} HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\Documents and Settings\Eier\Programdata\Microsoft\Installer HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\Programfiler\Norton AntiVirus HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\Programfiler\Fellesfiler\Symantec Shared\IDS HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\Programfiler\Fellesfiler\Symantec Shared\Security Center HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\Programfiler\Norton AntiVirus\Quarantine HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\Programfiler\Norton Personal Firewall HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil c:\WINDOWS\Installer\{3BD0196C-6553-460c-A0C4-90D8AE5D60D2} HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\Decomposers HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Documents and Settings\All Users\Programdata\Symantec\Common Client HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\AntiSpam HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\AntiSpam\SpamDefs HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\Options HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\AdBlocking HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\SPBBC HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security\IDSDefs HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Documents and Settings\All Users\Start-meny\Programmer\Norton Internet Security HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\WINDOWS\Installer\{A93C9E60-29B6-49da-BA21-F70AC6AADE20} HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Documents and Settings\All Users\Programdata\Symantec\Norton Internet Security HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\WINDOWS\Installer\{77772678-817F-4401-9301-ED1D01A8DA56} HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\Script Blocking HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Fellesfiler\Symantec Shared\VirusDefs HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security\Norton AntiVirus HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Documents and Settings\All Users\Programdata\Symantec\Norton AntiVirus HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security\Norton AntiVirus\Savrt HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security\Norton AntiVirus\Quarantine HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security\Norton AntiVirus\Quarantine\Portal HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Norton Internet Security\Norton AntiVirus\Quarantine\Incoming HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Documents and Settings\All Users\Programdata\Symantec\Norton AntiVirus\Tasks HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Documents and Settings\All Users\Start-meny\Programmer\Norton Internet Security\Norton AntiVirus HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\WINDOWS\Installer\{C6F5B6CF-609C-428E-876F-CA83176C021B} HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Opera 9 Beta\program HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Installasjonsreferansefeil C:\Programfiler\Opera 9 Beta\program\plugins HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders

Avinstallasjonsreferansefeil "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\dBpowerAMP Music Converter

Avinstallasjonsreferansefeil "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Speex Codec.dat HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\dBpowerAMP Speex Codec

Avinstallasjonsreferansefeil "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9.1 Codec.dat HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\dBpowerAMP WMA V9.1 Codec

Avinstallasjonsreferansefeil "C:\Documents and Settings\HP_Eier\Skrivebord\Sjekke PC\HijackThis.exe" /uninstall HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HijackThis

Avinstallasjonsreferansefeil "C:\Programfiler\XviD\UninstXviD.exe" HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\XviD

Avinstallasjonsreferansefeil 3271E907F27C989F2C244ACB3D32020E3DD3CA6F HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\3271E907F27C989F2C244ACB3D32020E3DD3CA6F

Avinstallasjonsreferansefeil Furnish Pro HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Furnish Pro

Avinstallasjonsreferansefeil Google Desktop HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Google Desktop

Avinstallasjonsreferansefeil InstallShield_{00FC6799-866E-44A1-A60C-DCF394CF56FD} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\InstallShield_{00FC6799-866E-44A1-A60C-DCF394CF56FD}

Avinstallasjonsreferansefeil LiveReg HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LiveReg

Avinstallasjonsreferansefeil LiveUpdate HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LiveUpdate

Avinstallasjonsreferansefeil Morpheus Ultra HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Morpheus Ultra

Avinstallasjonsreferansefeil Mozilla Firefox (1.0.2) HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mozilla Firefox (1.0.2)

Avinstallasjonsreferansefeil Mozilla Firefox (2.0.0.1) HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mozilla Firefox (2.0.0.1)

Avinstallasjonsreferansefeil Mozilla Firefox (2.0.0.2) HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mozilla Firefox (2.0.0.2)

Avinstallasjonsreferansefeil NMPUninstallKey HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\NMPUninstallKey

Avinstallasjonsreferansefeil Opera HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Opera

Avinstallasjonsreferansefeil QuickTime HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuickTime

Avinstallasjonsreferansefeil SymSetup.{3BD0196C-6553-460c-A0C4-90D8AE5D60D2} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SymSetup.{3BD0196C-6553-460c-A0C4-90D8AE5D60D2}

Avinstallasjonsreferansefeil SymSetup.{A93C9E60-29B6-49da-BA21-F70AC6AADE20} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SymSetup.{A93C9E60-29B6-49da-BA21-F70AC6AADE20}

Avinstallasjonsreferansefeil {0049F6AE-4FE2-4C43-A039-60FCE98A1986} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{0049F6AE-4FE2-4C43-A039-60FCE98A1986}

Avinstallasjonsreferansefeil {0D80391C-0A72-43BB-9BC2-143F63CC111D} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{0D80391C-0A72-43BB-9BC2-143F63CC111D}

Avinstallasjonsreferansefeil {0FF1922C-B6C4-40BB-AF30-BEF75A482444} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{0FF1922C-B6C4-40BB-AF30-BEF75A482444}

Avinstallasjonsreferansefeil {1526D87C-A955-4FAB-BF18-697BA457E352} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1526D87C-A955-4FAB-BF18-697BA457E352}

Avinstallasjonsreferansefeil {1A655D51-1423-48A3-B748-8F5A0BE294C8} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1A655D51-1423-48A3-B748-8F5A0BE294C8}

Avinstallasjonsreferansefeil {1ADE23D7-7A1E-4AEC-BA5D-EB8A01BED943} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1ADE23D7-7A1E-4AEC-BA5D-EB8A01BED943}

Avinstallasjonsreferansefeil {2B257128-0B59-4A88-AFDF-BE12E5F5B9A0} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{2B257128-0B59-4A88-AFDF-BE12E5F5B9A0}

Avinstallasjonsreferansefeil {2B257128-0B59-4A88-AFDF-BE12E5F5B9A1} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{2B257128-0B59-4A88-AFDF-BE12E5F5B9A1}

Avinstallasjonsreferansefeil {39619863-8A11-4B60-A166-E6747C986EBE} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{39619863-8A11-4B60-A166-E6747C986EBE}

Avinstallasjonsreferansefeil {531317A5-586A-4E36-87C1-CA823447B375} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{531317A5-586A-4E36-87C1-CA823447B375}

Avinstallasjonsreferansefeil {6708B321-65FA-43CC-B5B7-7109D1BC246C} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{6708B321-65FA-43CC-B5B7-7109D1BC246C}

Avinstallasjonsreferansefeil {6882DD11-33B8-4DEA-8305-7E765BF74BD3} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{6882DD11-33B8-4DEA-8305-7E765BF74BD3}

Avinstallasjonsreferansefeil {74C8BF56-6618-49AA-98BA-862223900CBF} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{74C8BF56-6618-49AA-98BA-862223900CBF}

Avinstallasjonsreferansefeil {8295247E-03ED-11DA-BFBD-00065BBDC0B5} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{8295247E-03ED-11DA-BFBD-00065BBDC0B5}

Avinstallasjonsreferansefeil {89A344E4-A54B-4C5E-97BD-040B4B300311} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{89A344E4-A54B-4C5E-97BD-040B4B300311}

Avinstallasjonsreferansefeil {89A344E4-A54B-4C5E-97BD-040B4B300322} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{89A344E4-A54B-4C5E-97BD-040B4B300322}

Avinstallasjonsreferansefeil {8CEA4A05-F512-45F5-8F80-5F2FA9E7F187} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{8CEA4A05-F512-45F5-8F80-5F2FA9E7F187}

Avinstallasjonsreferansefeil {911B0414-6000-11D3-8CFE-0050048383C9} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{911B0414-6000-11D3-8CFE-0050048383C9}

Avinstallasjonsreferansefeil {9541FED0-327F-4DF0-8B96-EF57EF622F19} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{9541FED0-327F-4DF0-8B96-EF57EF622F19}

Avinstallasjonsreferansefeil {ABEB838C-A1A7-4C5D-B7E1-8B4314600777} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{ABEB838C-A1A7-4C5D-B7E1-8B4314600777}

Avinstallasjonsreferansefeil {AC76BA86-0000-0000-0000-6028747ADE01} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-0000-0000-0000-6028747ADE01}

Avinstallasjonsreferansefeil {AC76BA86-0000-7EC8-7489-000000000702} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-0000-7EC8-7489-000000000702}

Avinstallasjonsreferansefeil {AC76BA86-7AD7-1044-7B44-A00000000001} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-1044-7B44-A00000000001}

Avinstallasjonsreferansefeil {AC76BA86-7AD7-1044-7B44-A70000000000} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-1044-7B44-A70000000000}

Avinstallasjonsreferansefeil {AC76BA86-7AD7-1044-7B44-A70500000002} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-1044-7B44-A70500000002}

Avinstallasjonsreferansefeil {AC76BA86-7AD7-1044-7B44-A70900000002} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-1044-7B44-A70900000002}

Avinstallasjonsreferansefeil {FC0C72DD-A491-43FF-B377-67273E4D94D7} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{FC0C72DD-A491-43FF-B377-67273E4D94D7}

Foreldet programvarenøkkel 3rd Eye Solutions HKCU\Software\3rd Eye Solutions

Foreldet programvarenøkkel shockwave.com HKCU\Software\shockwave.com

Foreldet programvarenøkkel Wget HKCU\Software\Wget

Foreldet programvarenøkkel Pctcd HKLM\Software\Pctcd

Gammel startmenynøkkel Aleph 500.14.2 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Aleph 500.14.2

Gammel startmenynøkkel AVG Free Edition HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AVG Free Edition

Gammel startmenynøkkel BitTorrent HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\BitTorrent

Gammel startmenynøkkel COWON HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\COWON

Gammel startmenynøkkel iAUDIO X5 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\COWON\iAUDIO X5

Gammel startmenynøkkel Creative HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Creative

Gammel startmenynøkkel Creative MediaSource HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Creative\Creative MediaSource

Gammel startmenynøkkel Creative Removable Disk Manager HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Creative\Creative Removable Disk Manager

Gammel startmenynøkkel Creative Zen Micro HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Creative\Creative Zen Micro

Gammel startmenynøkkel DeepBurner HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\DeepBurner

Gammel startmenynøkkel DVD Decrypter HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\DVD Decrypter

Gammel startmenynøkkel Furnish Pro HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Furnish Pro

Gammel startmenynøkkel Google Desktop HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Google Desktop

Gammel startmenynøkkel iTunes HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\iTunes

Gammel startmenynøkkel Java Web Start HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Java Web Start

Gammel startmenynøkkel jetAudio HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\jetAudio

Gammel startmenynøkkel jetToys HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\jetAudio\jetToys

Gammel startmenynøkkel Microsoft Office-verktøy HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Microsoft Office-verktøy

Gammel startmenynøkkel Morpheus Ultra HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Morpheus Ultra

Gammel startmenynøkkel Nero HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero

Gammel startmenynøkkel Brukers guider HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\Brukers guider

Gammel startmenynøkkel Nero 6 Demo HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\Nero 6 Demo

Gammel startmenynøkkel Nero 6 Ultra Edition HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\Nero 6 Ultra Edition

Gammel startmenynøkkel Nero Media Player HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\Nero Media Player

Gammel startmenynøkkel Nero Toolkit HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\Nero Toolkit

Gammel startmenynøkkel NeroVision Express 3 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\NeroVision Express 3

Gammel startmenynøkkel Norton AntiVirus HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Norton AntiVirus

Gammel startmenynøkkel Norton Internet Security HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Norton Internet Security

Gammel startmenynøkkel Norton AntiVirus HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Norton Internet Security\Norton AntiVirus

Gammel startmenynøkkel Norton Personal Firewall HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Norton Personal Firewall

Gammel startmenynøkkel OpenOffice.org 2.0 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\OpenOffice.org 2.0

Gammel startmenynøkkel Opera HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Opera

Gammel startmenynøkkel QuickTime HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\QuickTime

Gammel startmenynøkkel QuickTime Alternative HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\QuickTime Alternative

Gammel startmenynøkkel Sonic RecordNow! HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Sonic RecordNow!

Gammel startmenynøkkel Super Soccer Manager 2005 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Super Soccer Manager 2005

Savnede MUI Referanser C:\DOCUME~1\HP_Eier\LOKALE~1\Temp\A~NSISu_.exe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\Programfiler\Furnish Pro\Furnish Pro.exe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\WINDOWS\unvise32.exe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\DOCUME~1\HP_Eier\LOKALE~1\Temp\RarSFX1\online\tn_inst.exe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\327882R2FWJFW\nircmd.com HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\WINDOWS\system32\CF8177.exe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\ComboFix\nircmd.cfexe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\DOCUME~1\HP_Eier\LOKALE~1\Temp\SSUPDATE.EXE HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\WINDOWS\system32\CF10574.exe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

Savnede MUI Referanser C:\ComboFix\ERUNT.cfexe HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

 

Jeg har særlig problemer med Opera, som henger seg opp og ikke svarer. Den vil ikke avslutte selv om jeg velger Ctrl-Alt-Delete og avslutt oppgave. Når jeg velger Slå av eller omstarte PC-en har Adobe kommet opp uten at jeg har startet den. Vet ikke om det da er fordi jeg har prøvd å gå inn på en Adobe-fil i Opera? Det skjedde blant annet da jeg skulle laste ned Norton Removal Tool.

Endret av Settler
Lenke til kommentar
snippsat

snippsat

Skrevet
Skrevet (endret)

C:\AL500.16\ALEPHCOM\BIN\VERSION.EXE

Sjekk filen her jotti

Kjenner du programet er den nok god.

 

Har kjørt CCleaner.

På Register - Søk etter feil kom det opp en liste med feil. Skal jeg trykke på Reparer merkede feil?

Ja du skal reparer alt.

 

http://service1.symantec.com/SUPPORT/tsgen...005033108162039

 

Oppdatere superantispyware som du har.

Kjør full scan.

 

Restart og en ny HijackThis logg.

Endret av SNIPPSAT
Lenke til kommentar
Settler

Settler

Skrevet
  • Forfatter
Skrevet
Defragmere + Pagedefrag

Restart og en ny HijackThis logg.

 

Jeg får ikke lastet ned Pagedefrag. Når jeg klikker på det kommer jeg til en annen side, og når jeg klikker der kommer jeg bare tilbake til den første siden. Men defragmenteringsprogrammet på PC-en sier at jeg ikke trenger å defragmentere, så vet ikke om jeg trenger det?

 

Jeg har fjernet Norman, tror den skapte en del problemer, og heller innstallert AVG antivirus og ZoneAlarm brannmur.

 

Her er en ny HijackThis logg:

Klikk for å se/fjerne innholdet nedenfor

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 01:23:00, on 17.03.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\windows\system\hpsysdrv.exe

C:\WINDOWS\system32\hphmon06.exe

C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\rundll32.exe

C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

C:\WINDOWS\system32\rundll32.exe

C:\HP\KBD\KBD.EXE

C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

C:\Programfiler\Samsung\Samsung Media Studio 5\SMSTray.exe

C:\Programfiler\MarkAny\ContentSafer\MAAgent.exe

C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe

C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe

C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe

C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

C:\Programfiler\Zone Labs\ZoneAlarm\zlclient.exe

C:\Programfiler\Messenger\msmsgs.exe

C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe

C:\Programfiler\Belkin\Bluetooth-programvare\bin\btwdins.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe

c:\Programfiler\Fellesfiler\LightScribe\LSSrvc.exe

C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\SlySoft\AnyDVD\AnyDVD.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Programfiler\Belkin\Bluetooth-programvare\BTTray.exe

C:\Programfiler\Canon\CAL\CALMAIN.exe

C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

C:\Programfiler\PC Connectivity Solution\NclBTHandler.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Windows Desktop Search\WindowsSearch.exe

C:\Documents and Settings\HP_Eier\Skrivebord\Sjekke PC\test.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nfdomino.nfk.no/redir.nsf

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)

O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Programfiler\Ipswitch\WS_FTP Professional\wsbho2k0.dll

O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Programfiler\Siber Systems\AI RoboForm\roboform.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programfiler\google\googletoolbar3.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programfiler\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Programfiler\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

O3 - Toolbar: HP-visning - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Programfiler\HP\Digital Imaging\bin\HPDTLK02.dll

O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Programfiler\Siber Systems\AI RoboForm\roboform.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programfiler\google\googletoolbar3.dll

O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Programfiler\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HPHUPD06] c:\Programfiler\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [sweetIM] C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE

O4 - HKLM\..\Run: [sMSTray] C:\Programfiler\Samsung\Samsung Media Studio 5\SMSTray.exe

O4 - HKLM\..\Run: [MAAgent] C:\Programfiler\MarkAny\ContentSafer\MAAgent.exe

O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programfiler\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [sweetIM] C:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programfiler\Fellesfiler\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RoboForm] "C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

O4 - HKCU\..\Run: [swg] C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [AnyDVD] C:\Programfiler\SlySoft\AnyDVD\AnyDVD.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: ALEPH 500 - Version 16 Version Check.lnk = C:\AL500.16\ALEPHCOM\BIN\VERSION.EXE

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: Windows Desktop Search.lnk = C:\Programfiler\Windows Desktop Search\WindowsSearch.exe

O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Fyll Skjema - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O8 - Extra context menu item: Lagre Skjema - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O8 - Extra context menu item: RoboForm Verktøylinje - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O8 - Extra context menu item: Send til &Bluetooth - C:\Programfiler\Belkin\Bluetooth-programvare\btsendto_ie_ctx.htm

O8 - Extra context menu item: Tilpass Meny - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Fyll ut skjemaer - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra 'Tools' menuitem: Fyll Skjema - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra button: Lagre - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra 'Tools' menuitem: Lagre Skjema - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra 'Tools' menuitem: RoboForm Verktøylinje - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programfiler\Belkin\Bluetooth-programvare\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programfiler\Belkin\Bluetooth-programvare\btsendto_ie.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://nfdomino.nfk.no/iNotes6W.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab

O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} (Domino Web Access 7 Control) - http://nfdomino.nfk.no/dwa7W.cab

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15026/CTPID.cab

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programfiler\Belkin\Bluetooth-programvare\bin\btwdins.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Programfiler\Canon\CAL\CALMAIN.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Programfiler\Fellesfiler\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: ServiceLayer - Nokia. - C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

--

End of file - 13490 bytes

 

Det virker som PC-en går litt bedre nå. Er det mer jeg kan gjøre?

Lenke til kommentar
snippsat

snippsat

Skrevet
Skrevet (endret)

Loggen ser fin ut :thumbup:

 

SweetIM kan godt fjerne denne.

Kan gi noe grums.

 

Du kan godt kjøre defragmering.

Søk litt det fins flere som er bedere enn windows sin.

 

PageDefrag

http://software.filefactory.com/Windows/PageDefrag_1.html

 

Kjører pc greit etter dett kan du gjøre dette.

 

Du kan fjerne combofix ved å skrive combofix /u fra kjør-vinduet. Denne kommandoen gjør at filer i karantene og backups blir slette. Systemgjenopprettingsmappa nullstilt etc.

Endret av SNIPPSAT
Lenke til kommentar

Opprett en konto eller logg inn for å kommentere

Du må være et medlem for å kunne skrive en kommentar

Opprett konto

Det er enkelt å melde seg inn for å starte en ny konto!

Start en konto

Logg inn

Har du allerede en konto? Logg inn her.

Logg inn nå
Gå til emneliste
×
×
  • Opprett ny...