Logfile of HijackThis v1.97.7
Scan saved at 21:29:52, on 16-04-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\CFGSAFE\AUTOCHK.EXE
C:\WINDOWS\System32\taskswitch.exe
C:\WINDOWS\System32\fast.exe
C:\Programmer\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\System32\SKDAEMON.EXE
C:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe
D:\Programmer\AVPersonal\AVSched32.EXE
D:\Programmer\AVPersonal\AVGUARD.EXE
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\QuickTime\qttask.exe
D:\Programmer\AVPersonal\AVGNT.EXE
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
D:\Programmer\AVPersonal\AVWUPSRV.EXE
D:\Programmer\ScanSoft\OmniPageSE\opware32.exe
C:\Programmer\Java\j2re1.4.2_04\bin\jusched.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\WINDOWS\System32\gearsec.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\FoxServ\Apache\bin\ApacheMonitor.exe
C:\WINDOWS\System32\nvsvc32.exe
D:\Programmer\Sony Ericsson\Mobile\audevicemgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\ZoneLabs\vsmon.exe
D:\Programmer\Bluetooth Software\BTTray.exe
D:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE
C:\WINDOWS\System32\SKSMAILD.EXE
C:\WINDOWS\System32\Fast.exe
D:\PROGRA~1\BLUETO~1\BTSTAC~1.EXE
C:\Programmer\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
D:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CapMan.exe
D:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\ElogErr.exe
D:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\BROADC~1.EXE
D:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\SCRFS.exe
D:\PROGRA~1\SONYER~1\MOBILE\MOBILE~1\EPMWOR~1.EXE
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\MD\Lokale indstillinger\Temporary Internet Files\Content.IE5\FV177PKW\hjt[1].exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.berlingske.dk/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\SYSTEM\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar_en_2.0.108-deleon.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: De Gule Sider - {D4003A01-9B2C-4e24-9CD2-8D7DB1BDE096} - C:\WINDOWS\Downloaded Program Files\DGSToolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar_en_2.0.108-deleon.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ConfigSafe] C:\CFGSAFE\AUTOCHK.EXE
O4 - HKLM\..\Run: [BackgroundSwitcher] C:\WINDOWS\System32\bgswitch.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\System32\taskswitch.exe
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\System32\fast.exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [Hot Key Kbd Daemon] SKDAEMON.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] C:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ZGCleanTemp] zg.exe -cleantemp
O4 - HKLM\..\Run: [AVSCHED32] D:\Programmer\AVPersonal\AVSched32.EXE /min
O4 - HKLM\..\Run: [iTunesHelper] C:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVGCtrl] D:\Programmer\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [Omnipage] D:\Programmer\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE"
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Service Manager.lnk = C:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: ApacheMonitor.lnk = D:\FoxServ\Apache\bin\ApacheMonitor.exe
O4 - Global Startup: Phone Connection Monitor.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Fremhæv - C:\WINDOWS\WEB\highlight.htm
O8 - Extra context menu item: &Google Search -
res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.108-deleon.dll/cmsearch.html
O8 - Extra context menu item: &Web-søgning - C:\WINDOWS\WEB\selsearch.htm
O8 - Extra context menu item: &Zoom ud - C:\WINDOWS\WEB\zoomout.htm
O8 - Extra context menu item: Backward &Links -
res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.108-deleon.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page -
res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.108-deleon.dll/cmcache.html
O8 - Extra context menu item: IEB: Browser: Resize Window - C:\Programmer\IE Booster\window-size.html
O8 - Extra context menu item: IEB: Frame: Open in &New Window - C:\Programmer\IE Booster\frame-open-in-new-window.html
O8 - Extra context menu item: IEB: Frame: Open in &This Window - C:\Programmer\IE Booster\frame-open-in-this-window.html
O8 - Extra context menu item: IEB: Image: Copy Path to Clipboard - C:\Programmer\IE Booster\image-copy-path-to-clipboard.html
O8 - Extra context menu item: IEB: Image: Show Image Data - C:\Programmer\IE Booster\image-view-image-data.html
O8 - Extra context menu item: IEB: Image: Show Server Response - C:\Programmer\IE Booster\link-show-server-response.html
O8 - Extra context menu item: IEB: Link: Copy as <A href="URL">caption</A> - C:\Programmer\IE Booster\link-copy.html
O8 - Extra context menu item: IEB: Link: Open in New Minimized Window - C:\Programmer\IE Booster\link-open-minimized.html
O8 - Extra context menu item: IEB: Link: Show Server Response - C:\Programmer\IE Booster\link-show-server-response.html
O8 - Extra context menu item: IEB: Page: Copy Title as <A href="URL">Title</a> - C:\Programmer\IE Booster\page-copy-title.html
O8 - Extra context menu item: IEB: Page: Show Forms and Applets - C:\Programmer\IE Booster\page-show-forms.html
O8 - Extra context menu item: IEB: Page: Show Hyperlinks - C:\Programmer\IE Booster\page-view-hyperlinks.html
O8 - Extra context menu item: IEB: Page: Show Images - C:\Programmer\IE Booster\page-show-images.html
O8 - Extra context menu item: IEB: Page: Show Source - C:\Programmer\IE Booster\page-view-source.html
O8 - Extra context menu item: IEB: Page: Show Stylesheets - C:\Programmer\IE Booster\page-view-stylesheets.html
O8 - Extra context menu item: IEB: Page: Show TABLE, FORM and DIV Borders - C:\Programmer\IE Booster\page-show-table-structure.htm
O8 - Extra context menu item: IEB: Selection: Copy as plain text - C:\Programmer\IE Booster\selection-copy-plaintext.html
O8 - Extra context menu item: IEB: Selection: Open in Browser - C:\Programmer\IE Booster\selection-open-in-browser.html
O8 - Extra context menu item: IEB: Selection: Show Partial Source - C:\Programmer\IE Booster\selection-show-source.html
O8 - Extra context menu item: L&iste over billeder - C:\WINDOWS\Web\imglist.htm
O8 - Extra context menu item: Liste over h&yperlinks - C:\WINDOWS\WEB\urllist.htm
O8 - Extra context menu item: Si&milar Pages -
res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.108-deleon.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English -
res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.108-deleon.dll/cmtrans.html
O8 - Extra context menu item: Zoom &ind - C:\WINDOWS\WEB\zoomin.htm
O8 - Extra context menu item: Åbn ramme i nyt vin&due - C:\WINDOWS\WEB\frm2new.htm
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: All (HKLM)
O9 - Extra 'Tools' menuitem: Close ALL IEx's (HKLM)
O9 - Extra button: Others (HKLM)
O9 - Extra 'Tools' menuitem: Close OTHER IEx's (HKLM)
O9 - Extra button: Degulesider Toolbar (HKLM)
O9 - Extra button: TvGuide (HKLM)
O9 - Extra 'Tools' menuitem: TvGuide.dk (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: ConferenceRoom Java Client -
http://chat.telstra.com/java/cr.cabO16 - DPF: Nykredit Internetbank -
http://195.249.127.11/NykBank.cabO16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) -
http://office.microsoft.com/templates/ieawsdc.cabO16 - DPF: {1E2941E3-8E63-11D4-9D5A-00902742D6E0} (iNotes Class) -
https://wmail.mdata.dk/iNotes.cabO16 - DPF: {275E2FE0-7486-11D0-89D6-00A0C90C9B67} (MCSiMenuCtl Class) -
https://www.danskenetbank.dk/controls/mcsi/mcsimenu.cabO16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) -
http://i.a.cnn.net/cnn/resources/cult3d/cult.cabO16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) -
https://netbank.danskebank.dk/html/activex/DB/Menu.cabO16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) -
http://office.microsoft.com/officeupdate/content/opuc.cabO16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) -
http://office.microsoft.com/ProductUpdates/content/opuc.cabO16 - DPF: {59B18099-4C1D-4A08-A9F7-ED0554006749} (Select Class) -
http://foto.jubii.dk/components/photoupload.ocxO16 - DPF: {5BDBA960-6534-11D3-97C7-00500422B550} (LotusDRSControl Class) -
http://wmail.mdata.dk/download/dolcontrol.cabO16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -
http://www.geograf.com/viewer/mgaxctrl.cabO16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) -
http://www-3.ibm.com/pc/support/IbmEgath.cabO16 - DPF: {7A905C8E-85B4-11D1-9D0C-400000058483} (DNBSecure Control) -
https://www.danskenetbank.dk/netbank/activex/dnbsecure.cabO16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield Setup Player) -
http://www.installengine.com/engine/isetup.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://www.pandasoftware.com/activescan/as5/asinst.cabO16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37603.6824768518O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) -
http://fdl.msn.com/zone/Z4/heartbeat.cabO16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) -
http://carpoint.msn.com/Components/Ocx/Exterior/Outside.cabO16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Control) -
http://communities.msn.com/scr/MsnPUpld.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabO16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) -
http://130.228.2.107/speedtest/SpeedTest_2.cabO16 - DPF: {D4003A01-9B2C-4E24-9CD2-8D7DB1BDE096} (De Gule Sider) -
http://www.dgs.dk/tool/DGSCab.cabO16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey®) -
https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cabO16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) -
http://fdl.msn.com/public/investor/v9.5/ticker.cabO16 - DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} (Microsoft Office Tools on the Web Control) -
http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cabO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://sc.communities.msn.com/controls/chat/msnchat45.cabO16 - DPF: {F6A56D95-A3A3-11D2-AC26-400000058481} (Danske e-Sec) -
https://netbank.danskebank.dk/netbank/activex/DanskeSikker.cab