HiJackThis Log nogen der vil tjekke den? mange tak på forhånd
Logfile of HijackThis v1.99.1Scan saved at 16:33:41, on 23-08-2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Programmer\GogoTools\Gogoware\GogoLaunch.exe
C:\Programmer\AnalogX\POW\pow.exe
C:\PROGRA~1\GOGOTO~1\Gogoware\GOGOTO~1.EXE
C:\WINNT\system32\wuauclt.exe
C:\Programmer\GogoTools\Gogoware\gogoFileShare.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Liv Lærke\Skrivebord\Maa Ikke Slettes\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.rpxnclrzomsirsfcz.us/l2aEuuYOHMjWTfzxxe8U/Ced/5QVg4KolCLLQpBmlLMrLaGq1MYBAUyPVGnNF/pz.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmer\Need2Find\bar\1.bin\ND2FNBAR.DLL
O2 - BHO: InstaFinderK - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - C:\Programmer\INSTAFINK\instafink.dll
O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINNT\system32\sfg_5f55.dll
O2 - BHO: Init SearchGogo - {8066D3A1-D93D-4A0E-978C-C192FBE7BCE7} - C:\PROGRA~1\GOGOTO~1\GOGOAD~1\samp.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: GoGoTools - {76532682-A5C9-11d8-AE07-00D0591AB78A} - C:\PROGRA~1\GOGOTO~1\SEARCH~1\SEARCH~1.DLL (file missing)
O3 - Toolbar: GoGoToolBar - {AD6865DE-43AE-42C7-89A6-F6F834A5DCE2} - C:\PROGRA~1\GOGOTO~1\GOGOAD~1\Address.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [RUNGogoTools] C:\Programmer\GogoTools\Gogoware\GogoLaunch.exe
O4 - HKLM\..\Run: [RUNFilePC] C:\Programmer\GogoTools\SearchGogo\PictureShare.exe
O4 - HKLM\..\Run: [PCShield] regsvr32 /s "C:\WINNT\system32\sfg_5f55.dll"
O4 - HKLM\..\Run: [P2P Networking] C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\RunOnce: [MessengerPlusUninstall] C:\WINNT\system32\cmd.exe /C "C:\DOCUME~1\LIVLRK~1\LOKALE~1\Temp\MsgPlusUninst.bat"
O4 - HKCU\..\Run: [PCShield] regsvr32 /s "C:\WINNT\system32\sfg_5f55.dll"
O4 - HKCU\..\Run: [Kazaa All-In-One] C:\Programmer\Kazaa-All-in-One\Kazaa-All-in-One.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: POW!.lnk = C:\Programmer\AnalogX\POW\pow.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Search - http://kc.bar.need2find.com/KC/menusearch.html?p=KC
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Print Page - {0BB77965-73BB-41DE-9DDB-D09F0770E89E} - C:\PROGRA~1\GOGOTO~1\SEARCH~1\Print.dll
O9 - Extra button: Picture Share! - {0BB77965-73BB-41DE-9DDB-D09F0770E89F} - %SystemDrive%/Program Files/GogoTools/SearchGogo/Menu.exe (file missing)
O9 - Extra button: GoGoTools - {76532683-A5C9-11d8-AE07-00D0591AB78A} - C:\PROGRA~1\GOGOTO~1\SEARCH~1\SEARCH~1.DLL (file missing)
O9 - Extra 'Tools' menuitem: GoGoTools - {76532683-A5C9-11d8-AE07-00D0591AB78A} - C:\PROGRA~1\GOGOTO~1\SEARCH~1\SEARCH~1.DLL (file missing)
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe

