Er der nogen der vil tjekke min Hijackthis logfile

Logfile of HijackThis v1.97.7
Scan saved at 01:01:15, on 19-12-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Avast Antivirus\aswUpdSv.exe
C:\Programmer\Avast Antivirus\ashServ.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Programmer\Avast Antivirus\ashMaiSv.exe
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\AVASTA~1\ashDisp.exe
C:\Programmer\Qurb\QSP-2.1.213.0\QOELoader.exe
C:\WINDOWS\system32\starter.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\QuickTime\qttask.exe
C:\Freeware Programmer\Winamp\winampa.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\FREEWA~1\POPUPS~1\POP-UP~1\PSFREE.EXE
C:\Freeware Programmer\NoAds 2002\NoAds.exe
C:\Freeware Programmer\Free Download Manager\Free Download Manager\fdm.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\System32\dllhost.exe
C:\Programmer\Webroot\Spy Sweeper\SpySweeper.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Freeware Programmer\HiJackThis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ni.dk
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ni.dk
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\AVASTA~1\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [QOELOADER] C:\Programmer\Qurb\QSP-2.1.213.0\QOELoader.exe
O4 - HKLM\..\Run: [EnsoniqMixer] C:\WINDOWS\system32\starter.exe
O4 - HKLM\..\Run: [Windows AdControl] C:\Program Files\Windows AdControl\WinAdCtl.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Freeware Programmer\Winamp\winampa.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\FREEWA~1\POPUPS~1\POP-UP~1\PSFREE.EXE"
O4 - HKCU\..\Run: [NoAds] "C:\Freeware Programmer\NoAds 2002\NoAds.exe"
O4 - HKCU\..\Run: [Free Download Manager] C:\Freeware Programmer\Free Download Manager\Free Download Manager\fdm.exe -autorun
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Documents and Settings\Tom & Betina\Dokumenter\Modtagne filer\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Documents and Settings\Tom & Betina\Dokumenter\Modtagne filer\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Documents and Settings\Tom & Betina\Dokumenter\Modtagne filer\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Documents and Settings\Tom & Betina\Dokumenter\Modtagne filer\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Overfør med Star Downloader - C:\Freeware Programmer\StarDownloader\Star Downloader\sdie.htm
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=d49aa369925200d9234ab94188877111d6df480fc41f2bf9e510b4d9b3a1edd54b60171b9a1e9569f3bbba3d4f00438632c1943297ffffc9902459fe64b5f6bb:d7ee939701f108344f46b8ac2d5414a6
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Programmer\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - http://www.kortal.dk/ecwplugins/ncs.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38056.3367013889
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Programmer\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Programmer\AutoCAD 2002\InstFred.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Programmer\AutoCAD 2002\AcPreview.ocx
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab

Den ser fint ud. Ser ud til at være helt optimal imo.

Følg vejledningen her: http://www.spywarefri.dk/hjtanv.htm (punkt 6). Fix disse med HijackThis:


O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=d49aa369925200d9234ab94188877111d6df480fc41f2bf9e510b4d9b3a1edd54b60171b9a1e9569f3bbba3d4f00438632c1943297ffffc9902459fe64b5f6bb


Kør så programmet Ad-aware, fjern alt hvad den finder.


Hent den her scanner:
http://www.spywareinfo.dk/download/mwav.exe

Sæt flueben i følgende:
Memory, Startup folders, drive, Registry, System folders og Services.
Sæt prik i følgende:
All local drives og Scan all files
Og så trykker du på Scan Clean
Den skanner nu, og dette kan godt tage et par timer.

Derefter genstarter du og sender en ny log ind til check

Hov spørgsmålet er jo grøn, Den får du sq madsass

Madsass' svar var nu ellers ikke særlig fyldestgørende. Dels har andersenph påpeget at der var en o16-entry der skulle fixes. Men dels burde du også fixe den her:
O4 - HKLM\..\Run: [Windows AdControl] C:\Program Files\Windows AdControl\WinAdCtl.exe

Da andersenph i mellemtiden har forladt Eksperten, synes jeg derfor du skulle lægge et svar selv, som du godkender (for at få lukket).