HJT log skal tjekkes
Har en ven, hvis computer er underlig...så han skal lige have tjekket hans comp for fejl. her er hans log:
takker på forhånd.
Ps: smid et svar, hvis du går igang
----------------
Logfile of HijackThis v1.98.2
Scan saved at 20:46:35, on 26-08-2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32RUNDLL32.EXE
C:ProgrammerFælles filerSymantec SharedccApp.exe
C:ProgrammerMotherboard Monitor 5MBM5.EXE
C:WINDOWSsystem32SFSVC32.EXE
C:ProgrammerD-Toolsdaemon.exe
C:ProgrammerFælles filerMicrosoft SharedVS7Debugmdm.exe
C:ProgrammerNorton AntiVirus avapsvc.exe
C:WINDOWSSystem32 vsvc32.exe
C:ProgrammerWinampwinampa.exe
C:ProgrammerQuickTimeqttask.exe
C:WINDOWSSystem32ctfmon.exe
C:ProgrammerSkypePhoneSkype.exe
C:ProgrammerPocketCam 3MegaICON.EXE
C:WINDOWSSystem32 undll32.exe
C:ProgrammerSpywareGuardsgmain.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammerSpywareGuardsgbhp.exe
C:ProgrammerNorton AntiVirusSAVScan.exe
C:ProgrammerSkoleKomFcc32.exe
C:ProgrammerWindows Media Playerwmplayer.exe
C:ProgrammerMessenger Plus! 3MsgPlus.exe
C:ProgrammerMSN Messengermsnmsgr.exe
c:progra~1intern~1iexplore.exe
C:ProgrammerInternet Exploreriexplore.exe
C:ProgrammerMessengermsmsgs.exe
D:DOKUMENThijackthis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.signon.stofanet.dk/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.vvummqlbufom.com/qoV/a/bnYd_YFpT6tLTg9xPi/RhIu9VuekcLaBytizNvLQCI2jJmcxygqhFVjJws.html
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,AutoConfigURL = http://www.signon.stofanet.dk/proxy.pac
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:ProgrammerSpywareGuarddlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmergooglegoogletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammerNorton AntiVirusNavShExt.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:ProgrammerTEXTwareQUICKfindPlugInsIEHelp.dll
O3 - Toolbar: @msdxmLC.dll,-1@1030,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammerNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmergooglegoogletoolbar2.dll
O4 - HKLM..Run: [SystemTray] SysTray.Exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec SharedccApp.exe"
O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe"
O4 - HKLM..Run: [MBM 5] "C:ProgrammerMotherboard Monitor 5MBM5.EXE"
O4 - HKLM..Run: [TinyDis] c:programmer iny disk tools1.0 inydisk.exe sys_auto_run C:ProgrammerTiny Disk Tools1.0
O4 - HKLM..Run: [System Monitor] C:WINDOWSsystem32SFSVC32.EXE
O4 - HKLM..Run: [NVCLOCK] rundll32 nvclock.dll,fnNvclock
O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgrammerD-Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [WinampAgent] C:ProgrammerWinampwinampa.exe
O4 - HKLM..Run: [QuickTime Task] "C:ProgrammerQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Burn Cash] C:PROGRA~1SITEON~1axishtm.exe
O4 - HKLM..Run: [knob meow eggs tons] C:Documents and SettingsAll UsersApplication DataCopyCampKnobMeowMpegMath.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [MessengerPlus3] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart
O4 - HKCU..Run: [Skype] "C:ProgrammerSkypePhoneSkype.exe" /nosplash /minimized
O4 - HKCU..Run: [MessengerPlus2] "C:ProgrammerMessenger Plus! 3MsgPlus.exe" /WinStart
O4 - HKCU..Run: [msnmsgr] "C:ProgrammerMSN Messengermsnmsgr.exe" /background
O4 - Startup: SpywareGuard.lnk = C:ProgrammerSpywareGuardsgmain.exe
O4 - Global Startup: PocketCam 3Mega Monitor.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOfficeOSA9.EXE
O8 - Extra context menu item: &Google Search - res://c:programmergoogleGoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:programmergoogleGoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:programmergoogleGoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:programmergoogleGoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:programmergoogleGoogleToolbar2.dll/cmtrans.html
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/da/filesharingctrl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab30149.cab
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:WINDOWSsystem32msc.cpl
