Logfile of HijackThis v1.98.2
Scan saved at 13:14:25, on 28-09-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
D:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\AppPatch\Logonvr.exe
D:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
D:\Programmer\Norton AntiVirus\navapsvc.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\r_server.exe
D:\Programmer\Norton AntiVirus\SAVScan.exe
D:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
D:\WINDOWS\System32\svchost.exe
D:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
D:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\System32\RUNDLL32.EXE
D:\Programmer\Logitech\iTouch\iTouch.exe
D:\WINDOWS\System32\CTHELPER.EXE
D:\WINDOWS\System32\LVCOMSX.EXE
D:\Programmer\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
D:\Programmer\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
D:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
D:\WINDOWS\System32\nhwdnem.exe
D:\Programmer\Nokia\Nokia PC Suite 5\DataLayer.exe
D:\Programmer\Fælles filer\Nokia\NCLTools\NclTray.exe
D:\Programmer\Messenger Plus! 3\MsgPlus.exe
D:\Programmer\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
D:\Programmer\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
D:\Programmer\Logitech\Video\LogiTray.exe
D:\WINDOWS\System32\rmctrl.exe
D:\Programmer\Logitech\MouseWare\system\em_exec.exe
D:\Programmer\PeerGuardian pr14\PeerGuardian_1.99b_pr14.exe
D:\Programmer\Fælles filer\Nokia\Services\ServiceLayer.exe
D:\Programmer\Internet Explorer\iexplore.exe
D:\Programmer\Logitech\Video\FxSvr2.exe
d:\progra~1\intern~1\iexplore.exe
D:\Programmer\MSN Messenger\msnmsgr.exe
D:\Programmer\D-Tools\daemon.exe
D:\Programmer\Internet Explorer\iexplore.exe
J:\Spil\Hidden & Dangerous 2\hd2.exe
D:\Programmer\Internet Explorer\iexplore.exe
D:\Documents and Settings\Stanley Møller\Skrivebord\hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak =
http://www.google.dk/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
O2 - BHO: MxTargetObj Class - {0000607D-D204-42C7-8E46-216055BF9918} - D:\WINDOWS\mxTarget.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [zBrowser Launcher] D:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [LVCOMSX] D:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTSysVol] D:\Programmer\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] D:\Programmer\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [SBDrvDet] D:\Programmer\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [ccApp] "D:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] D:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [aqmscictpxyrp] D:\WINDOWS\System32\nhwdnem.exe
O4 - HKLM\..\Run: [alchem] D:\WINDOWS\alchem.exe
O4 - HKLM\..\Run: [DataLayer] D:\Programmer\Nokia\Nokia PC Suite 5\DataLayer.exe
O4 - HKLM\..\Run: [Nokia Tray Application] D:\Programmer\Fælles filer\Nokia\NCLTools\NclTray.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Programmer\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [GhostStartTrayApp] D:\Programmer\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "D:\Programmer\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [RemoteControl] D:\WINDOWS\System32\rmctrl.exe
O4 - HKLM\..\Run: [NurbDashTypeTons] D:\Documents and Settings\All Users\Application Data\32 balm nurb dash\chicmeow.exe
O4 - HKCU\..\Run: [PeerGuardian] D:\Programmer\PeerGuardian pr14\PeerGuardian_1.99b_pr14.exe
O4 - HKCU\..\Run: [Steam] "d:\programmer\steam\steam.exe" -silent
O4 - HKCU\..\Run: [STYLEXP] D:\Programmer\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] D:\Programmer\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [MSMSGS] "D:\Programmer\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - D:\PROGRA~1\DAP\DAP.EXE (file missing)
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programmer\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programmer\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)
O12 - Plugin for .spop: D:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cabO16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/da/filesharingctrl.cabO16 - DPF: {53B8B406-42E4-4DD3-96E7-9DEC8CEB3DD8} (ICQVideoControl Class) -
http://xtraz.icq.com/xtraz/activex/ICQVideoControl.cab