HijackThis log
Så er den gal igen :S Jeg fatter ikke hvorfor den bliver ved med det her lort... Men hvis der er en der vil hjælpe vil jeg blive glad :DLogfile of HijackThis v1.97.7
Scan saved at 17:31:07, on 08-11-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
C:\Programmer\SlySoft\AnyDVD\AnyDVD.exe
C:\WINDOWS\System32\svdll32.exe
C:\WINDOWS\System32\DivXPlayer.exe
C:\WINDOWS\System32\module.exe
C:\Programmer\Winamp\winampa.exe
C:\Programmer\ISTsvc\istsvc.exe
C:\WINDOWS\System32\uleptrrg.exe
C:\WINDOWS\chydyrqr.exe
C:\WINDOWS\System32\spool.exe
C:\Programmer\Web_Rebates\WebRebates0.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Documents and Settings\sigurd\Application Data\dbsa.exe
C:\WINDOWS\system32\svphost.exe
C:\Documents and Settings\sigurd\mnyz.exe
C:\WINDOWS\System32\devldr32.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\bntrth\beird.exe
c:\windows\system32\bntrth\wshield.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programmer\Web_Rebates\WebRebates1.exe
C:\Documents and Settings\sigurd\Lokale indstillinger\Temp\Midlertidig mappe 3 for hijackthis.zip\HijackThis.exe
O2 - BHO: (no name) - {002EB272-2590-4693-B166-FBD5D9B6FEA6} - C:\WINDOWS\multimpp.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AnyDVD] C:\Programmer\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [Go And Start] svdll32.exe
O4 - HKLM\..\Run: [DivX Player] DivXPlayer.exe
O4 - HKLM\..\Run: [Windows Security Module] module.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [IST Service] C:\Programmer\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [mcyrnawi] C:\WINDOWS\System32\uleptrrg.exe
O4 - HKLM\..\Run: [conscorr] C:\WINDOWS\conscorr.exe
O4 - HKLM\..\Run: [chydyrqr] C:\WINDOWS\chydyrqr.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Printer Services] spool.exe
O4 - HKLM\..\Run: [WebRebates0] "C:\Programmer\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [NBT System alias] c:\windows\system32\bntrth\repcale.exe c:\windows\system32\bntrth\beird.exe
O4 - HKLM\..\RunServices: [Printer Services] spool.exe
O4 - HKLM\..\RunServices: [Go And Start] svdll32.exe
O4 - HKLM\..\RunServices: [DivX Player] DivXPlayer.exe
O4 - HKLM\..\RunServices: [Windows Security Module] module.exe
O4 - HKLM\..\RunServices: [DHCP Server] regsvr.exe
O4 - HKLM\..\RunServices: [NBT System alias] c:\windows\system32\bntrth\repcale.exe c:\windows\system32\bntrth\beird.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Printer Services] spool.exe
O4 - HKCU\..\Run: [Go And Start] svdll32.exe
O4 - HKCU\..\Run: [DivX Player] DivXPlayer.exe
O4 - HKCU\..\Run: [Windows Security Module] module.exe
O4 - HKCU\..\Run: [System Restore Data] c:\windows\system32\frbyjed\repcale.exe c:\windows\system32\frbyjed\beird.exe
O4 - HKCU\..\Run: [Assa] C:\Documents and Settings\sigurd\Application Data\dbsa.exe
O4 - HKCU\..\Run: [svphost.exe] C:\WINDOWS\system32\svphost.exe
O4 - HKCU\..\Run: [NBT System alias] c:\windows\system32\bntrth\repcale.exe c:\windows\system32\bntrth\beird.exe
O4 - HKCU\..\RunServices: [System Restore Data] c:\windows\system32\frbyjed\repcale.exe c:\windows\system32\frbyjed\beird.exe
O4 - HKCU\..\RunServices: [NBT System alias] c:\windows\system32\bntrth\repcale.exe c:\windows\system32\bntrth\beird.exe
O8 - Extra context menu item: Web Rebates - file://C:\Programmer\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: SideFind (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: v3cab - http://searchmiracle.com/cab/v3cab.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099767416153
O16 - DPF: {706F3805-27D7-478D-80E5-E25D2BB030B3} (VacPro.internazionale_ver3) - http://ocx3.advnt01.com/dialer/internazionale_ver3.CAB
O16 - DPF: {771A1334-6B08-4A6B-AEDC-CF994BA2CEBE} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
