HiJackThis eksperter kig her!
Har efterhånden en del problemer med min computer. popups og trojans i guess. Har lavet en HTJ Log men kan ikke gennemskue den. Kan du ?Logfile of HijackThis v1.98.2
Scan saved at 17:47:50, on 01-09-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\D-Tools\daemon.exe
D:\Program Files\Messenger Plus! 3\MsgPlus.exe
d:\progra~1\intern~1\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\WINDOWS\System32\RUNDLL32.EXE
D:\Program Files\Sygic\mobile\mobile.exe
D:\Program Files\MSN Messenger\msnmsgr.exe
D:\Program Files\Bluetooth-software\bin\btwdins.exe
D:\Program Files\DeviceLock\DLService.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Web_Rebates\WebRebates1.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Web_Rebates\WebRebates0.exe
D:\Documents and Settings\joNazbabz\Desktop\HJT\hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\JONAZB~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\JONAZB~1\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bwgwpqmblrgjgnjpnpdc.com/I/KMiH6l6C4HOzCtkjVsqor_DxKD2ZU/j3rwV/kBs5zmsBleHvME9WdVPtCVBD__.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=D:\Windows\System32\wsaupdater.exe,
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: HomepageProtector.Protector - {7D6BEC01-15E2-46F0-8ED3-D715DE09A8F9} - C:\HomepageProtector\986\HomepageProtector.dll
O2 - BHO: Fizzlebar.clsFwBar - {9056A11F-5EA6-4A67-BDE9-8D3C7C453DAC} - c:\sysfwb\1921138596\iefwbar.dll
O2 - BHO: (no name) - {997BAE4B-F48F-40FB-B7DD-2AFA0DFB1296} - D:\WINDOWS\System32\aec.dll
O2 - BHO: (no name) - {CA5F1C4F-F871-1C61-3800-73CBD5F180E0} - D:\PROGRA~1\GRAMAM~1\pollbone.exe
O2 - BHO: (no name) - {D566D616-FD4D-FFF7-A0FF-B9D9A2B2AD2C} - D:\PROGRA~1\GRAMAM~1\pollbone.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NetLimiter] D:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Soft Dog] D:\PROGRA~1\DVDDUP~1\64 real.exe
O4 - HKLM\..\Run: [Overnet] D:\Program Files\Overnet\eDonkey2000.exe -t
O4 - HKLM\..\Run: [WebRebates0] "D:\Program Files\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "D:\WINDOWS\Downloaded Program Files\bridge.dll",Load
O4 - HKLM\..\Run: [MapiLiteCakeIdol] D:\Documents and Settings\All Users\Application Data\chic spam mapi lite\mix 4.exe
O4 - HKLM\..\Run: [software bait bags defy] D:\Documents and Settings\All Users\Application Data\Heck Hold Software Bait\FILM DEAD.exe
O4 - HKCU\..\Run: [Steam] "c:\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [MessengerPlus3] "D:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: .mobile.lnk = D:\Program Files\Sygic\mobile\mobile.exe
O4 - Startup: Virtual Bouncer.lnk = D:\Program Files\VBouncer\VirtualBouncer.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send til &Bluetooth - D:\Program Files\Bluetooth-software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Web Rebates - file://D:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: (no name) - {7D6BEC01-15E2-46F0-8ED3-D715DE09A8F9} - C:\HomepageProtector\986\HomepageProtector.dll
O9 - Extra 'Tools' menuitem: Homepage Protector - {7D6BEC01-15E2-46F0-8ED3-D715DE09A8F9} - C:\HomepageProtector\986\HomepageProtector.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\Bluetooth-software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\Bluetooth-software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {9076A11F-5EA6-4A67-BDE9-8D3C7C453DAC} - http://www.fizzlewizzle.com/installfiles/popblocker.cab
O16 - DPF: {92F02779-6D88-4958-8AD3-83C12A16ADC7} - file://D:\WINDOWS\system32\SearchBar\zpprf1sh.exe
O18 - Filter: text/html - {EF89B996-EB2D-4639-99C1-7CDA76E60C6C} - D:\WINDOWS\System32\aec.dll
O18 - Filter: text/plain - {EF89B996-EB2D-4639-99C1-7CDA76E60C6C} - D:\WINDOWS\System32\aec.dll
