Check af HiJackThis log og ewido log

Hejsa Eksperter :-)

Jeg vil gerne have checkket denne log, hvis nogle ville være flinke at gøre det ;-)

HiJackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 12:24:43, on 16-10-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\VIAudioi\SBADeck\ADeck.exe
C:\Programmer\Java\jre1.5.0_03\bin\jusched.exe
C:\Programmer\Java\jre1.5.0_03\bin\jucheck.exe
C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmer\QuickTime\qttask.exe
C:\WINDOWS\system32\CWPro\cwmsn32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\CWPro\cwpro.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmer\EasyPHP1-8\EasyPHP.exe
C:\PROGRA~1\EASYPH~1\Apache\apache.exe
C:\Documents and Settings\Ejer\Skrivebord\noobizM@hackerz.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\Programmer\Adobe\Adobe Photoshop CS2\Photoshop.exe
C:\DOCUME~1\Ejer\LOKALE~1\Temp\Adobelm_Cleanup.0001
C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\Ejer\LOKALE~1\Temp\Adobelm_Cleanup.0001
C:\Programmer\Red5\wrapper\wrapper.exe
C:\Programmer\Java\jre1.5.0_03\bin\java.exe
C:\Programmer\Macromedia\Flash 8\Flash.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\Programmer\LimeWire\LimeWire.exe
C:\PROGRA~1\EASYPH~1\Apache\apache.exe
C:\PROGRA~1\EASYPH~1\MySql\bin\mysqld.exe
C:\Programmer\Winamp\winamp.exe
C:\Programmer\Macromedia\Dreamweaver 8\Dreamweaver.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmer\Mozilla Firefox\firefox.exe
C:\Programmer\WinRAR\WinRAR.exe
C:\DOCUME~1\Ejer\LOKALE~1\Temp\Rar$EX00.890\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.65.127.163:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [AudioDeck] C:\Programmer\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [CWMSN32] "C:\WINDOWS\system32\CWPro\cwmsn32.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Programmer\TrojanHunter 4.6\THGuard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ArtoNotifier] C:\Programmer\Arto\Notifier\ArtoNotifier.exe
O4 - Startup: Adobe Gamma.lnk = ?
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: IEWatch Professional - {78E5BB46-9A20-402F-BA66-B5634D177D77} - C:\Programmer\IEWatch\IEWatch.dll
O9 - Extra 'Tools' menuitem: IEWatch - {78E5BB46-9A20-402F-BA66-B5634D177D77} - C:\Programmer\IEWatch\IEWatch.dll
O9 - Extra button: IE HTTPAnalyzer V2 - {85F4A88D-5FA7-40BB-8BD3-AF7E24C0BF4A} - C:\Programmer\IEInspector\HTTPAnalyzerFullV2\IEHTTPAnalyzerV2.dll
O9 - Extra 'Tools' menuitem: IE HTTPAnalyzer V2 - {85F4A88D-5FA7-40BB-8BD3-AF7E24C0BF4A} - C:\Programmer\IEInspector\HTTPAnalyzerFullV2\IEHTTPAnalyzerV2.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {05E0D4E9-A832-4886-B443-3729E04B3704} (Living Picture Player) - http://www.gamewaredevelopment.co.uk/cab/livingpicturex.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Chat Watch Professional - Zemerick Software Inc - C:\WINDOWS\System32\CWPro\cwpro.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: HttpAnalyzer CodeHook service (HttpAnalyzer DllInjectService) - Unknown owner - C:\Programmer\IEInspector\HTTPAnalyzerFullV2\InjectWinSockServiceV2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Programmer\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: Red5 - Unknown owner - C:\Programmer\Red5\wrapper\wrapper.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)








Ewido log:

---------------------------------------------------------
ewido anti-malware - Scanningsrapport
---------------------------------------------------------

+ Oprettet den:            12:02:44, 16-10-2006
+ Rapport-Checksum:        8A0D3433

+ Scanningsresultat:
    :mozilla.9:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Adtech : Renset med backup
    :mozilla.10:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Adtech : Renset med backup
    :mozilla.20:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Tradedoubler : Renset med backup
    :mozilla.21:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Tradedoubler : Renset med backup
    :mozilla.25:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Doubleclick : Renset med backup
    :mozilla.26:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.27:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.29:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.30:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.31:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.32:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.42:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.43:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.44:C:\Documents and Settings\Ejer\Application Data\Mozilla\Firefox\Profiles\u1ncak4m.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@adbrite[2].txt -> TrackingCookie.Adbrite : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@adtech[2].txt -> TrackingCookie.Adtech : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@advertising[2].txt -> TrackingCookie.Advertising : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@as1.falkag[2].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@atdmt[2].txt -> TrackingCookie.Atdmt : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@bluestreak[2].txt -> TrackingCookie.Bluestreak : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@casalemedia[2].txt -> TrackingCookie.Casalemedia : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@citi.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@data2.perf.overture[1].txt -> TrackingCookie.Overture : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@doubleclick[2].txt -> TrackingCookie.Doubleclick : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@ehg-sonyesolutions.hitbox[2].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@fastclick[1].txt -> TrackingCookie.Fastclick : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@hitbox[2].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@ilead.itrack[1].txt -> TrackingCookie.Itrack : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@mediaplex[1].txt -> TrackingCookie.Mediaplex : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@overture[2].txt -> TrackingCookie.Overture : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@perf.overture[1].txt -> TrackingCookie.Overture : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@sonygs.122.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@statcounter[2].txt -> TrackingCookie.Statcounter : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Renset med backup
    C:\Documents and Settings\Ejer\Cookies\Ejer@www.burstnet[1].txt -> TrackingCookie.Burstnet : Renset med backup
    C:\Documents and Settings\Ejer\Dokumenter\mm\msnhack\msnhack\msnhack209.exe -> Not-A-Virus.IMFlooder.Win32.VB.au : Renset med backup
    C:\Documents and Settings\Ejer\Dokumenter\mm\msnhack.zip/msnhack/msnhack209.exe -> Not-A-Virus.IMFlooder.Win32.VB.au : Renset med backup
    C:\Programmer\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Renset med backup
    C:\Programmer\EtherDetect\EtherD.exe -> Not-A-Virus.NetTool.Win32.EtherDetect : Renset med backup
    C:\~WRF0409.tmp -> Downloader.Zlob.agf : Renset med backup


::Rapport slut