Hijackthis log fra vens pc
hey gidder nogen lige at tjekke denne log? den er lidt for stor en mundfuld for mig...:--------------------------------------------------------------
Logfile of HijackThis v1.97.7
Scan saved at 16:37:27, on 11-10-2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\NTEL32.EXE
C:\WINDOWS\SYSTEM\WINYC32.EXE
C:\WINDOWS\SYSTEM\NTGU32.EXE
C:\WINDOWS\SYSTEM\NETHC.EXE
C:\WINDOWS\ATLYJ32.EXE
C:\WINDOWS\SYSTEM\MFCEM.EXE
C:\WINDOWS\CRUU.EXE
C:\WINDOWS\APPPQ.EXE
C:\WINDOWS\SYSTEM\APPPS.EXE
C:\WINDOWS\JAVAYG.EXE
C:\WINDOWS\SYSTEM\APISK32.EXE
C:\WINDOWS\SYSTEM\MSPT32.EXE
C:\WINDOWS\SYSTEM\ADDQQ.EXE
C:\WINDOWS\SYSTEM\IEZS32.EXE
C:\WINDOWS\ATLFE.EXE
C:\WINDOWS\SYSTEM\NETFZ32.EXE
C:\WINDOWS\SYSIZ32.EXE
C:\WINDOWS\SYSTEM\APPRT.EXE
C:\WINDOWS\JAVAVG32.EXE
C:\WINDOWS\IESE.EXE
C:\WINDOWS\SYSTEM\CRPA32.EXE
C:\WINDOWS\APITW.EXE
C:\WINDOWS\SYSTEM\APIRF32.EXE
C:\WINDOWS\SYSTEM\SYSQN32.EXE
C:\WINDOWS\ADDMF32.EXE
C:\WINDOWS\IETE.EXE
C:\WINDOWS\ADDNR.EXE
C:\WINDOWS\SYSTEM\IEJV32.EXE
C:\WINDOWS\NETDW32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\IPTU.EXE
C:\WINDOWS\SYSTEM\D3UX.EXE
C:\WINDOWS\ATLHD.EXE
C:\WINDOWS\D3SQ.EXE
C:\WINDOWS\SYSTEM\SDKTJ32.EXE
C:\WINDOWS\CRON32.EXE
C:\WINDOWS\SYSTEM\D3ND.EXE
C:\WINDOWS\SYSWZ32.EXE
C:\WINDOWS\SYSTEM\IEHJ.EXE
C:\WINDOWS\SYSTEM\ADDOV32.EXE
C:\WINDOWS\SYSTEM\APIDO.EXE
C:\WINDOWS\SYSEA32.EXE
C:\WINDOWS\WINZP32.EXE
C:\WINDOWS\SYSTEM\ATLWL32.EXE
C:\WINDOWS\SYSTEM\D3UZ32.EXE
C:\WINDOWS\SYSTEM\MFCOS32.EXE
C:\WINDOWS\SYSTEM\IPDE32.EXE
C:\WINDOWS\SYSTEM\NTQF32.EXE
C:\WINDOWS\SYSTEM\IEIP32.EXE
C:\WINDOWS\MFCVV.EXE
C:\WINDOWS\SYSTEM\ATLUR32.EXE
C:\WINDOWS\SYSTEM\CRBM32.EXE
C:\WINDOWS\SYSTEM\IEMC.EXE
C:\WINDOWS\WINHX32.EXE
C:\WINDOWS\ATLGF.EXE
C:\WINDOWS\SYSTEM\NETCL.EXE
C:\WINDOWS\APPZN32.EXE
C:\WINDOWS\SYSTEM\WINZJ32.EXE
C:\WINDOWS\SYSTEM\CRWL32.EXE
C:\WINDOWS\SYSTEM\APPCC32.EXE
C:\WINDOWS\ADDDJ.EXE
C:\WINDOWS\ADDCD32.EXE
C:\WINDOWS\NETKV32.EXE
C:\WINDOWS\MSQA32.EXE
C:\WINDOWS\SYSTEM\NTAT32.EXE
C:\WINDOWS\JAVASX32.EXE
C:\WINDOWS\SYSTEM\JAVAXS.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\APPJK.EXE
C:\WINDOWS\ADDLJ.EXE
C:\KEYPAD\WINKP.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LTSMMSG.EXE
C:\PROGRAMMER\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\WINDOWS\SYSTEM\KEYMAP.EXE
C:\WINDOWS\SYSTEM\USBTAPNP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\E_S10IC2.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAMMER\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\GOLUM\SERVICES.EXE
C:\WINDOWS\SYSTEM\TWINK64.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\WINOKY32.EXE
C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
C:\PROGRAM FILES\WINDOWS SYNCROAD\WINSYNC.EXE
C:\PROGRAMMER\WLAN\802.11 WIRELESS LAN\WWLANMONITOR.EXE
C:\HIJACKTHIS!\HJT.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.jetsearch.org
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.jetsearch.org
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\vszgm.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer leveret af Opasia
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.iwantsearch.com/to.php?ID1=575&ID2=29906295&ID3=38717545385&ID4=0&ID5={A5AECE48-B690-4C89-A966-E8C37233C66F}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
F1 - win.ini: run=C:\KEYPAD\winkp.exe
O2 - BHO: (no name) - {83B52CD0-256C-8513-8464-52089B4AA143} - C:\WINDOWS\SYSTEM\MFCGO32.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VolKey] C:\WINDOWS\SYSTEM\Keymap.exe
O4 - HKLM\..\Run: [USBTA] C:\WINDOWS\system\usbtapnp.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3200] C:\WINDOWS\SYSTEM\E_S10IC2.EXE /P19 "EPSON Stylus CX3200" /O5 "LPT1:" /M "Stylus CX3200"
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
O4 - HKLM\..\Run: [Golum] C:\WINDOWS\SYSTEM\golum\services.exe
O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\SYSTEM\twink64.exe internat.dll,LoadKeyboardProfile
O4 - HKLM\..\Run: [Sys29] C:\WINDOWS\SYSTEM\WINOKY32.EXE
O4 - HKLM\..\Run: [Windows SyncroAd] C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Programmer\Fælles filer\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [NTGU32.EXE] C:\WINDOWS\SYSTEM\NTGU32.EXE
O4 - HKLM\..\RunServices: [NTEL32.EXE] C:\WINDOWS\NTEL32.EXE
O4 - HKLM\..\RunServices: [NETHC.EXE] C:\WINDOWS\SYSTEM\NETHC.EXE
O4 - HKLM\..\RunServices: [WINYC32.EXE] C:\WINDOWS\SYSTEM\WINYC32.EXE
O4 - HKLM\..\RunServices: [ATLYJ32.EXE] C:\WINDOWS\ATLYJ32.EXE
O4 - HKLM\..\RunServices: [CRUU.EXE] C:\WINDOWS\CRUU.EXE
O4 - HKLM\..\RunServices: [MFCEM.EXE] C:\WINDOWS\SYSTEM\MFCEM.EXE
O4 - HKLM\..\RunServices: [APPPQ.EXE] C:\WINDOWS\APPPQ.EXE
O4 - HKLM\..\RunServices: [APPPS.EXE] C:\WINDOWS\SYSTEM\APPPS.EXE
O4 - HKLM\..\RunServices: [APISK32.EXE] C:\WINDOWS\SYSTEM\APISK32.EXE
O4 - HKLM\..\RunServices: [JAVAYG.EXE] C:\WINDOWS\JAVAYG.EXE
O4 - HKLM\..\RunServices: [MSPT32.EXE] C:\WINDOWS\SYSTEM\MSPT32.EXE
O4 - HKLM\..\RunServices: [NETFZ32.EXE] C:\WINDOWS\SYSTEM\NETFZ32.EXE
O4 - HKLM\..\RunServices: [ADDQQ.EXE] C:\WINDOWS\SYSTEM\ADDQQ.EXE
O4 - HKLM\..\RunServices: [IEZS32.EXE] C:\WINDOWS\SYSTEM\IEZS32.EXE
O4 - HKLM\..\RunServices: [ATLFE.EXE] C:\WINDOWS\ATLFE.EXE
O4 - HKLM\..\RunServices: [APPRT.EXE] C:\WINDOWS\SYSTEM\APPRT.EXE
O4 - HKLM\..\RunServices: [CRPA32.EXE] C:\WINDOWS\SYSTEM\CRPA32.EXE
O4 - HKLM\..\RunServices: [SYSIZ32.EXE] C:\WINDOWS\SYSIZ32.EXE
O4 - HKLM\..\RunServices: [JAVAVG32.EXE] C:\WINDOWS\JAVAVG32.EXE
O4 - HKLM\..\RunServices: [IESE.EXE] C:\WINDOWS\IESE.EXE
O4 - HKLM\..\RunServices: [APITW.EXE] C:\WINDOWS\APITW.EXE
O4 - HKLM\..\RunServices: [IETE.EXE] C:\WINDOWS\IETE.EXE
O4 - HKLM\..\RunServices: [APIRF32.EXE] C:\WINDOWS\SYSTEM\APIRF32.EXE
O4 - HKLM\..\RunServices: [SYSQN32.EXE] C:\WINDOWS\SYSTEM\SYSQN32.EXE
O4 - HKLM\..\RunServices: [ADDMF32.EXE] C:\WINDOWS\ADDMF32.EXE
O4 - HKLM\..\RunServices: [IPTU.EXE] C:\WINDOWS\IPTU.EXE
O4 - HKLM\..\RunServices: [IEJV32.EXE] C:\WINDOWS\SYSTEM\IEJV32.EXE
O4 - HKLM\..\RunServices: [ADDNR.EXE] C:\WINDOWS\ADDNR.EXE
O4 - HKLM\..\RunServices: [NETDW32.EXE] C:\WINDOWS\NETDW32.EXE
O4 - HKLM\..\RunServices: [D3UX.EXE] C:\WINDOWS\SYSTEM\D3UX.EXE
O4 - HKLM\..\RunServices: [ATLHD.EXE] C:\WINDOWS\ATLHD.EXE
O4 - HKLM\..\RunServices: [D3SQ.EXE] C:\WINDOWS\D3SQ.EXE
O4 - HKLM\..\RunServices: [SDKTJ32.EXE] C:\WINDOWS\SYSTEM\SDKTJ32.EXE
O4 - HKLM\..\RunServices: [D3ND.EXE] C:\WINDOWS\SYSTEM\D3ND.EXE
O4 - HKLM\..\RunServices: [CRON32.EXE] C:\WINDOWS\CRON32.EXE
O4 - HKLM\..\RunServices: [SYSWZ32.EXE] C:\WINDOWS\SYSWZ32.EXE
O4 - HKLM\..\RunServices: [IEHJ.EXE] C:\WINDOWS\SYSTEM\IEHJ.EXE
O4 - HKLM\..\RunServices: [ADDOV32.EXE] C:\WINDOWS\SYSTEM\ADDOV32.EXE
O4 - HKLM\..\RunServices: [APIDO.EXE] C:\WINDOWS\SYSTEM\APIDO.EXE
O4 - HKLM\..\RunServices: [SYSEA32.EXE] C:\WINDOWS\SYSEA32.EXE
O4 - HKLM\..\RunServices: [ATLWL32.EXE] C:\WINDOWS\SYSTEM\ATLWL32.EXE
O4 - HKLM\..\RunServices: [WINZP32.EXE] C:\WINDOWS\WINZP32.EXE
O4 - HKLM\..\RunServices: [MFCOS32.EXE] C:\WINDOWS\SYSTEM\MFCOS32.EXE
O4 - HKLM\..\RunServices: [D3UZ32.EXE] C:\WINDOWS\SYSTEM\D3UZ32.EXE
O4 - HKLM\..\RunServices: [NTQF32.EXE] C:\WINDOWS\SYSTEM\NTQF32.EXE
O4 - HKLM\..\RunServices: [IEIP32.EXE] C:\WINDOWS\SYSTEM\IEIP32.EXE
O4 - HKLM\..\RunServices: [IPDE32.EXE] C:\WINDOWS\SYSTEM\IPDE32.EXE
O4 - HKLM\..\RunServices: [MFCVV.EXE] C:\WINDOWS\MFCVV.EXE
O4 - HKLM\..\RunServices: [IEMC.EXE] C:\WINDOWS\SYSTEM\IEMC.EXE
O4 - HKLM\..\RunServices: [ATLUR32.EXE] C:\WINDOWS\SYSTEM\ATLUR32.EXE
O4 - HKLM\..\RunServices: [CRBM32.EXE] C:\WINDOWS\SYSTEM\CRBM32.EXE
O4 - HKLM\..\RunServices: [WINHX32.EXE] C:\WINDOWS\WINHX32.EXE
O4 - HKLM\..\RunServices: [ATLGF.EXE] C:\WINDOWS\ATLGF.EXE
O4 - HKLM\..\RunServices: [NETCL.EXE] C:\WINDOWS\SYSTEM\NETCL.EXE
O4 - HKLM\..\RunServices: [WINZJ32.EXE] C:\WINDOWS\SYSTEM\WINZJ32.EXE
O4 - HKLM\..\RunServices: [APPZN32.EXE] C:\WINDOWS\APPZN32.EXE
O4 - HKLM\..\RunServices: [CRWL32.EXE] C:\WINDOWS\SYSTEM\CRWL32.EXE
O4 - HKLM\..\RunServices: [APPCC32.EXE] C:\WINDOWS\SYSTEM\APPCC32.EXE
O4 - HKLM\..\RunServices: [ADDDJ.EXE] C:\WINDOWS\ADDDJ.EXE
O4 - HKLM\..\RunServices: [ADDCD32.EXE] C:\WINDOWS\ADDCD32.EXE
O4 - HKLM\..\RunServices: [NETKV32.EXE] C:\WINDOWS\NETKV32.EXE
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [MSQA32.EXE] C:\WINDOWS\MSQA32.EXE
O4 - HKLM\..\RunServices: [NTAT32.EXE] C:\WINDOWS\SYSTEM\NTAT32.EXE
O4 - HKLM\..\RunServices: [JAVASX32.EXE] C:\WINDOWS\JAVASX32.EXE
O4 - HKLM\..\RunServices: [JAVAXS.EXE] C:\WINDOWS\SYSTEM\JAVAXS.EXE
O4 - HKLM\..\RunServices: [ADDLJ.EXE] C:\WINDOWS\ADDLJ.EXE
O4 - HKLM\..\RunServices: [APPJK.EXE] C:\WINDOWS\SYSTEM\APPJK.EXE
O4 - Startup: WLAN Monitor Utility.lnk = C:\Programmer\WLAN\802.11 Wireless LAN\WWlanMonitor.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.scoobidoo.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {11111111-1111-1111-1111-111111113457} - file://c:\explorer.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=230270dab455d0e176941480ba0fc85f2978d245429f93809c10f10b815c8a96c9ba5c54063f7603d4945ab86ee97ff22322f046:375a82d108ec2e9d584f880889783bc3
O16 - DPF: {18E3D300-FDFA-6CF5-F97D-34C36763DFF4} - http://63.219.176.203/1/rdgDK1115.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: v2cab - http://17588.searchmiracle.com/cab/v2cab.cab
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.scoobidoo.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {11111111-1111-1111-1111-111111113457} - file://c:\explorer.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=230270dab455d0e176941480ba0fc85f2978d245429f93809c10f10b815c8a96c9ba5c54063f7603d4945ab86ee97ff22322f046:375a82d108ec2e9d584f880889783bc3
O16 - DPF: {18E3D300-FDFA-6CF5-F97D-34C36763DFF4} - http://63.219.176.203/1/rdgDK1115.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: v2cab - http://17588.searchmiracle.com/cab/v2cab.cab
