spyware og lop menu problemer efter install ag messengerplus 3.0
Ja så kom jeg til at ionstallere messenger 3 plus og det skulle jeg aldrig have gjort.Min browser er sovset ind i en lop.com menu (tror jeg det er) og min browser er blevet rigtig langsomt.
jeg har kørt spybot, miscrosoft antispyware beta og ad-aware, det løser også nogle problemer men de opstår igen efter reboot.
jeg har lavet en hijackthis log håber der er nogend er vil kigge på den og komme med en anbefaling.
Logfile of HijackThis v1.99.1
Scan saved at 09:28:05, on 20-04-2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINNT\system32\CCM\CcmExec.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\igfxtray.exe
C:\WINNT\system32\hkcmd.exe
C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEAKSYSTEMTRAY.EXE
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Microsoft Firewall Client\ISATRAY.EXE
C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://medarbejderportalen.tdk.dk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://medarbejderportalen.tdk.dk/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://tdintra.tdb.dk/tdintra/Default.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by TDC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://sltarray01.tdk.dk:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.tdk.dk;*.tdb.dk;<local>
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7EDA4EB0-3C6B-47EA-2433-647093187519} - C:\DOCUME~1\m01348\APPLIC~1\OKAYSH~1\RegsSend.exe (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DelTemp] C:\WINNT\system32\DelTemp.Exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [DVDTray] C:\Program Files\HP DVD\Umbrella\DVDTray.exe
O4 - HKLM\..\Run: [DVDBitSet] C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe /NOUI
O4 - HKLM\..\Run: [Udskudt systemvedligeholdelse] C:\WINNT\system32\WIPDom.exe tdk.dk start "" C:\WINNT\system32\auexntde.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: AdwareFilter Background Protection.lnk = C:\Program Files\AdwareFilter\adwarefilter.exe
O4 - Global Startup: Firewall Client Connectivity Monitor.LNK = C:\Program Files\Microsoft Firewall Client\ISATRAY.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .rx: C:\Program Files\Internet Explorer\Plugins\iewrqxrx.dll
O12 - Plugin for .rxc: C:\Program Files\Internet Explorer\Plugins\iewrqxrx.dll
O15 - Trusted Zone: http://*.dcsymsrv01 (HKLM)
O15 - Trusted Zone: http://*.mapinfosrv02 (HKLM)
O15 - Trusted Zone: http://*.pacmobsrv01 (HKLM)
O15 - Trusted Zone: http://*.pacmobtst01 (HKLM)
O15 - Trusted Zone: http://mobiltjek.tdb.dk (HKLM)
O15 - Trusted Zone: http://redning.tdb.dk (HKLM)
O15 - Trusted Zone: http://cdm-e.tdk.dk (HKLM)
O15 - Trusted Zone: http://cdm-eedu.tdk.dk (HKLM)
O15 - Trusted Zone: http://cdm-etst.tdk.dk (HKLM)
O15 - Trusted Zone: http://cdm-eudv.tdk.dk (HKLM)
O15 - Trusted Zone: http://chatten.tdk.dk (HKLM)
O15 - Trusted Zone: http://cmsprodsrv02.tdk.dk (HKLM)
O15 - Trusted Zone: http://cmstestsrv02.tdk.dk (HKLM)
O15 - Trusted Zone: http://dawissolutions.tdk.dk (HKLM)
O15 - Trusted Zone: http://dawissolutionstst.tdk.dk (HKLM)
O15 - Trusted Zone: http://dawissolutionsudv.tdk.dk (HKLM)
O15 - Trusted Zone: http://dcsymsrv01.tdk.dk (HKLM)
O15 - Trusted Zone: http://erppdsrv01.tdk.dk (HKLM)
O15 - Trusted Zone: http://erpsrv01.tdk.dk (HKLM)
O15 - Trusted Zone: http://mapinfosrv02.tdk.dk (HKLM)
O15 - Trusted Zone: http://markedsunivers.tdk.dk (HKLM)
O15 - Trusted Zone: http://mobiltjek.tdk.dk (HKLM)
O15 - Trusted Zone: http://mobiltjektst.tdk.dk (HKLM)
O15 - Trusted Zone: http://mpskolestaging.tdk.dk (HKLM)
O15 - Trusted Zone: http://mpstaging.tdk.dk (HKLM)
O15 - Trusted Zone: http://oek.tdk.dk (HKLM)
O15 - Trusted Zone: http://partnersalg.tdk.dk (HKLM)
O15 - Trusted Zone: http://partnersalgtst.tdk.dk (HKLM)
O15 - Trusted Zone: http://partnersalgudv.tdk.dk (HKLM)
O15 - Trusted Zone: http://redning.tdk.dk (HKLM)
O15 - Trusted Zone: http://redningstst.tdk.dk (HKLM)
O15 - Trusted Zone: http://skoll.tdk.dk (HKLM)
O15 - Trusted Zone: http://sox.tdk.dk (HKLM)
O15 - Trusted Zone: http://surt.tdk.dk (HKLM)
O15 - Trusted Zone: http://sympweb01.tdk.dk (HKLM)
O15 - Trusted Zone: http://tdintra.tdk.dk (HKLM)
O15 - Trusted Zone: http://tridevwebstaging.tdk.dk (HKLM)
O16 - DPF: {039397C0-46DF-11D0-99CB-00C04FD64497} (MsChatPr Class) - http://chatten.tdk.dk/webchatit/CABs/BIKChat.CAB
O16 - DPF: {1533A74E-B073-11D2-8F7E-0080C7852DA3} (ExConf Class) - http://confsrv01/ConferencingBin/xipcctl.cab
O16 - DPF: {18D9C485-7EEC-4395-95DA-DC3875B10E81} (TEInstallPlugIn) - http://www.skylinesoft.com/interactive/TerraExplorer/Install/TEInstallPlugIn.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.3.1_01) -
O16 - DPF: {9A04E3F0-3BB2-11D2-91E2-00C04FAEC46B} (NMClient Class) - http://confsrv01/ConferencingBin/xcliacc.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.3.1_01) -
O16 - DPF: {CDD9447C-AA77-4A06-B002-6A34C3C90145} (FileManMain Control) - http://orbit.tdk.dk/web/ocx/fileman.cab
O16 - DPF: {EA97933E-CF1E-11D3-A297-00104BDBF2F5} (ClearLogonCredentials.LogOff) - http://chatten.tdk.dk/webchatit/CABs/ClearLogonCredentials.CAB
O16 - DPF: {ED324F9E-715D-4BE2-B6DF-44FCB674AADF} (DDSC Class) - http://itdrift.tdk.dk/SBD/Portal/resources/msddsc.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = tdk.dk
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = tdk.dk
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = tdk.dk
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: AutoExNT - Unknown owner - C:\WINNT\system32\AutoExNT.Exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
