Avatar billede mum Juniormester
03. november 2006 - 10:20 Der er 17 kommentarer og
1 løsning

Computeren bliver træt?

Jeg har et problem med min bærbare computer. Jeg sidder nogle gange og spiller nogle spil. Spillene kører perfekt i ca et kvarter. Så begynder det at køre langsommere og langsommere indtil grafikken hakker fremad ca en gang hvert andet sekund. Det bliver det så ved med i ca. 5 min. og så bliver den god igen. Det gentager sig så igen og igen. Det er lidt frustrerende at snige sig rundt i Hitman i 20 min. og lige få lagt svinet bag kornet på en sniper og så begynder den at hakke så meget at det bliver umuligt at spille.
Hvad kan problemet være?
Avatar billede mum Juniormester
03. november 2006 - 10:21 #1
Det er forresten sådan i alle spil. Også f.eks. online spil fra miniclip som ikke skulle kræve alverden at køre.
03. november 2006 - 10:54 #2
For en go' ordens skyld ->
http://www.spywareinfo.dk/index.htm#/manualer/hijackthis.htm

Eller måske en varme problem så putter skruer ned for systemet ?
Avatar billede mum Juniormester
03. november 2006 - 12:37 #3
One hijackthis log coming up.
Jeg har også tænkt på det med varmen. Det har jeg nemlig haft problemer med før.
Men dengang startede computeren med at køre langsomt omkring 55 grader. Men så højt er den slet ikke oppe. Jeg har set den gøre det på 42 grader også.

Logfile of HijackThis v1.99.1
Scan saved at 12:34:47, on 03-11-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Programmer\Launch Manager\LaunchAp.exe
C:\Programmer\Launch Manager\PowerKey.exe
C:\Programmer\Launch Manager\HotkeyApp.exe
C:\Programmer\Launch Manager\OSDCtrl.exe
C:\Programmer\Launch Manager\Wbutton.exe
C:\Programmer\Acer\eRecovery\Monitor.exe
C:\Programmer\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\acer\epm\epm-dm.exe
C:\WINDOWS\system32\MAFWTray.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\Programmer\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\programmer\seekmo\seekmo.exe
C:\Programmer\LogMeIn\LogMeInSystray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\AvidSDMService.exe
C:\Programmer\MSN Webcam Recorder\ml20gui.exe
C:\Programmer\ewido anti-malware\ewidoctrl.exe
C:\Programmer\PalickSoft\HDD Temperature\HDDTSvc.exe
C:\Programmer\PalickSoft\HDD Temperature\HDDTemperature.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Jakob Berry Hallsson\Skrivebord\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Programmer\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: Seekmo Search Assistant Helper /fleok=1D8A83A5C2E6127D98AD75760EA83FA5EF80752B94E2DE7F5F7E432D36C5 - {5929CD6E-2062-44a4-B2C5-2C7E78FBAB38} - c:\programmer\seekmo\seekmohook.dll
O2 - BHO: (no name) - {5B20194F-C69E-833C-4552-02AB3E4088B2} - C:\WINDOWS\system32\oylrovm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar2.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Programmer\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: Seekmo Toolbar - {53E0B6E8-A51D-448B-B692-40B67B285543} - C:\Program Files\Seekmo Programs\Seekmo Toolbar\SeekmoTB.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [LaunchAp] "C:\Programmer\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [PowerKey] "C:\Programmer\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [LManager] "C:\Programmer\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Programmer\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Programmer\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Programmer\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Programmer\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Programmer\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [epm-dm] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [MAFWTaskbarApp] C:\WINDOWS\system32\MAFWTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [THGuard] "C:\Programmer\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programmer\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Programmer\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [tmnmlng.dll] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\tmnmlng.dll,ksvfdhd
O4 - HKLM\..\Run: [seekmo] "c:\programmer\seekmo\seekmo.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Programmer\LogMeIn\LogMeInSystray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSN Webcam Recorder] "C:\Programmer\MSN Webcam Recorder\ml20gui.exe" -silent
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Programmer\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: HDD temperature.lnk = C:\Programmer\PalickSoft\HDD Temperature\HDDTemperature.exe
O4 - Startup: Xfire.lnk = C:\Programmer\Xfire\Xfire.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\programmer\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send til &Bluetooth - C:\Programmer\WIDCOMM\Bluetooth-software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Similar Pages - res://c:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.2.100.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} (InstallCtl Class) - http://download.redswoosh.net/Installer/rssoft.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: LMIinit - C:\WINDOWS\SYSTEM32\LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Avid SDM Service (AvidSDMService) - Avid Technology, Inc. - C:\WINDOWS\system32\AvidSDMService.exe
O23 - Service: Avid Startup (AvidStartup) - Unknown owner - C:\WINDOWS\system32\AvidStartup.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido anti-malware\ewidoctrl.exe
O23 - Service: HDD Temperature (HDDTService) - PalickSoft - C:\Programmer\PalickSoft\HDD Temperature\HDDTSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
Avatar billede mum Juniormester
03. november 2006 - 12:38 #4
Der er bestemt nogle ting i hijackthis loggen. Det er meget lang tid siden jeg har fået tjekket det. Og der er også en anden der har brugt computeren, som ikke har så meget begreb om sikkerhed på internettet.
03. november 2006 - 21:24 #5
Lige en hurtig:

Afinstaller
* seekmo
* MyGlobalSearch
via
[Start][Indstillinger][Kontrolpanel][Tilføj/fjern programmer]
Genstart for at fuldføre afinstalationen...

------------------------------------------------------------------------

Kør en scanning med Hijackthis,
Du får herunder nogle filer, som du skal fixe. Det, du skal gøre, er at sætte et flueben ud for disse filer. Når du har gjort det, så lukker du alle andre vinduer ned. Det er meget vigtigt at det eneste vindue, som er åbent er HijackThis vinduet. Husk også at lukke dette vindue, når du har markeret filerne. Nu må du fixe. Klik på Fix checked.

Det er disse, som skal fixes:

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Programmer\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: Seekmo Search Assistant Helper /fleok=1D8A83A5C2E6127D98AD75760EA83FA5EF80752B94E2DE7F5F7E432D36C5 - {5929CD6E-2062-44a4-B2C5-2C7E78FBAB38} - c:\programmer\seekmo\seekmohook.dll
O2 - BHO: (no name) - {5B20194F-C69E-833C-4552-02AB3E4088B2} - C:\WINDOWS\system32\oylrovm.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Programmer\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: Seekmo Toolbar - {53E0B6E8-A51D-448B-B692-40B67B285543} - C:\Program Files\Seekmo Programs\Seekmo Toolbar\SeekmoTB.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [tmnmlng.dll] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\tmnmlng.dll,ksvfdhd
O4 - HKLM\..\Run: [seekmo] "c:\programmer\seekmo\seekmo.exe"
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.2.100.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} (InstallCtl Class) - http://download.redswoosh.net/Installer/rssoft.cab

------------------------------------------------------------------------

Genstart i fejlsikret tilstand http://www.spywareinfo.dk/#/htm/fejlsikret_tilstand.htm
For at kunne se alle filer og mapper, så følg denne vejledning:
http://www.spywareinfo.dk/tip-og-tricks/mappeindstillinger.htm

Søg og slet de markerede filer/mapper hvis de stadig findes. Ellers fortsætter du bare vejledningen. De kan være røget i fixet.

C:\Programmer\MyGlobalSearch\ <- Hele mappen
C:\Program Files\Seekmo Programs <- Hele mappen
C:\WINDOWS\system32\tmnmlng.dll

------------------------------------------------------------------------

Genstart normalt

Gennemfør hele proceduren herfra -> http://www.eksperten.dk/artikler/954

NB: Inden næste kørsel med HiJackThis.exe skal du OMDØBE programfilen HiJackThis.exe til ALTERNATIV.exe , da visse uønskede elementer har en tendens til at skjule sig når der kører en process ved navn HiJackThis.exe !!!

------------------------------------------------------------------------
Avatar billede mum Juniormester
04. november 2006 - 11:48 #6
That did the trick. Smider du et svar?
Avatar billede mum Juniormester
04. november 2006 - 12:55 #7
Det fik jeg vist sagt for hurtigt. Problemet er der stadig.
04. november 2006 - 16:18 #8
"...Gennemfør hele proceduren herfra -> http://www.eksperten.dk/artikler/954..."
07. november 2006 - 08:09 #9
Feedback ?
Avatar billede mum Juniormester
07. november 2006 - 19:47 #10
Det må du undskylde. Jeg har været lidt væk.

Der er en SAS log her:

SUPERAntiSpyware Scan Log
Generated 11/03/2006 at 06:26 PM

Application Version : 3.3.1020

Core Rules Database Version : 3119
Trace Rules Database Version: 1142

Scan type      : Complete Scan
Total Scan Time : 00:32:30

Memory items scanned      : 486
Memory threats detected  : 0
Registry items scanned    : 5859
Registry threats detected : 230
File items scanned        : 33494
File threats detected    : 159

Adware.180solutions/ZangoSearch
    [seekmo] C:\PROGRAMMER\SEEKMO\SEEKMO.EXE
    C:\PROGRAMMER\SEEKMO\SEEKMO.EXE
    HKLM\Software\Classes\CLSID\{5929CD6E-2062-44a4-B2C5-2C7E78FBAB38}
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\Control
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\InprocServer32
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\InprocServer32#ThreadingModel
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\MiscStatus
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\MiscStatus\1
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\ProgID
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\Programmable
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\ToolboxBitmap32
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\Version
    HKCR\CLSID\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38}\VersionIndependentProgID
    C:\PROGRAMMER\SEEKMO\SEEKMOHOOK.DLL
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5929CD6E-2062-44a4-B2C5-2C7E78FBAB38}
    HKCR\ClientAX.ClientInstaller
    HKCR\ClientAX.ClientInstaller\CLSID
    HKCR\ClientAX.ClientInstaller\CurVer
    HKCR\ClientAX.ClientInstaller.1
    HKCR\ClientAX.ClientInstaller.1\CLSID
    HKCR\ClientAX.RequiredComponent
    HKCR\ClientAX.RequiredComponent\CLSID
    HKCR\ClientAX.RequiredComponent\CurVer
    HKCR\ClientAX.RequiredComponent.1
    HKCR\ClientAX.RequiredComponent.1\CLSID
    HKCR\ClientAX.ZangoClientAX
    HKCR\ClientAX.ZangoClientAX\CLSID
    HKCR\ClientAX.ZangoClientAX\CurVer
    HKCR\ClientAX.ZangoClientAX.1
    HKCR\ClientAX.ZangoClientAX.1\CLSID
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Control
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\InprocServer32
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\InprocServer32#ThreadingModel
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\MiscStatus
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\MiscStatus\1
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\ProgID
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Programmable
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\ToolboxBitmap32
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\TypeLib
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Version
    HKCR\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\VersionIndependentProgID
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\InprocServer32
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\InprocServer32#ThreadingModel
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\ProgID
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\Programmable
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\TypeLib
    HKCR\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\VersionIndependentProgID
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Control
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\InprocServer32
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\InprocServer32#ThreadingModel
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\MiscStatus
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\MiscStatus\1
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\ProgID
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Programmable
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\ToolboxBitmap32
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\TypeLib
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Version
    HKCR\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\VersionIndependentProgID
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\Control
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\InprocServer32
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\InprocServer32#ThreadingModel
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\MiscStatus
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\MiscStatus\1
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\ProgID
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\Programmable
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\ToolboxBitmap32
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\TypeLib
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\Version
    HKCR\CLSID\{99410CDE-6F16-42ce-9D49-3807F78F0287}\VersionIndependentProgID
    HKCR\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}
    HKCR\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0
    HKCR\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\0
    HKCR\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\0\win32
    HKCR\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\FLAGS
    HKCR\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\HELPDIR
    HKCR\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}
    HKCR\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}\1.0
    HKCR\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}\1.0\0
    HKCR\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}\1.0\0\win32
    HKCR\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}\1.0\FLAGS
    HKCR\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}\1.0\HELPDIR
    HKCR\Interface\{6C092742-10FE-4DB2-988D-FC71948DE70C}
    HKCR\Interface\{6C092742-10FE-4DB2-988D-FC71948DE70C}\ProxyStubClsid
    HKCR\Interface\{6C092742-10FE-4DB2-988D-FC71948DE70C}\ProxyStubClsid32
    HKCR\Interface\{6C092742-10FE-4DB2-988D-FC71948DE70C}\TypeLib
    HKCR\Interface\{6C092742-10FE-4DB2-988D-FC71948DE70C}\TypeLib#Version
    HKCR\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5}
    HKCR\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5}\ProxyStubClsid
    HKCR\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5}\ProxyStubClsid32
    HKCR\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5}\TypeLib
    HKCR\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5}\TypeLib#Version
    HKCR\Interface\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}
    HKCR\Interface\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\ProxyStubClsid
    HKCR\Interface\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\ProxyStubClsid32
    HKCR\Interface\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\TypeLib
    HKCR\Interface\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\TypeLib#Version
    C:\WINDOWS\Prefetch\SEEKMO.EXE-079CAD3C.pf

Adware.Tracking Cookie
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@partypoker[4].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@clicksor[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@eroticlick[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@counter.cnw[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads2.drivelinemedia[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@den[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@atlas.fixionmedia[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.ims[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad1.emediate[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@image.masterstats[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@web-stat[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@drivecleaner[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.cibleclick[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@burstnet[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@toplist[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@superstats[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@realmedia[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adserver.adremedy[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adv.surinter[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ebookers[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@mtr.splash.sexsearch[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@sexsearchcom[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.dk-sex[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@handbag[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@mb[6].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@mb[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@flixbanner.bearshare[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@handbag[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@cgi-bin[7].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@clickbank[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adserver.banneradministration[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@cs.sexcounter[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.tripod.lycos[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adbrite[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@indextools[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@worldsexguide[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@e2.emediate[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@usenext[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.burstnet[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@tripod.lycos[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@kanoodle[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@postclicktracking[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@mb[5].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.newgrounds[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adserver[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@campaign.indieclick[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adinterax[3].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@track.adform[4].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@stat.postdanmark[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@aff.primaryads[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@tracker.affistats[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@carasexe[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@webstat[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.beamfile[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@rambler[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@webstats4u[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.drivecleaner[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.mobygames[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.dailyrush[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@xiti[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.burstbeacon[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad.yieldmanager[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@statcounter[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@revsci[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad.zanox[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.sx[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.sexbombe[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@tacoda[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.itv[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@www.nabosex[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@www.dk-sex[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@realmedia[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@nabosex[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@ads.beamfile[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@flixbanner.bearshare[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@revsci[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@ads.sx[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@www.sexuploader[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Lokale indstillinger\Temp\Cookies\jakob berry hallsson@adultfriendfinder[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@tripod[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.dk-sex[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@belnk[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@fixionmedia[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.gamestracker.co[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@realmedia[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@gamestracker[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad1.emediate[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@xiti[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@stats1.clicktracks[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.cdfreaks[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@apmebf[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@interclick[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@superstats[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@stats[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@zedo[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.a8ww[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adserver.filefront[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@track.adform[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad.ofir[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads2.jubii[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adfair[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.tripod.jubii[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adknowledge[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@clickability[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@clicksor[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.monster[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@stat.postdanmark[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@focalex[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.as4x.tmcs[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@webpower[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@feeds.directsex[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@click.payserve[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@xml.bravenetmedianetwork[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adopt.hbmediapro[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@pacificpoker[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@cassava[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@cts.metricsdirect[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adserver.banneradministration[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.digitalmedianet[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.contactmusic[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ads.mytelus[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adinterax[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@dist.belnk[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@atwola[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@revsci[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@toplist[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@thrixxx[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@maxserving[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@partypoker[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@server.cpmstar[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@www.longxxxclips[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@adbrite[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@flixbanner.bearshare[1].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@kanoodle[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@ad.yieldmanager[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@partypoker[2].txt
    C:\Documents and Settings\Jakob Berry Hallsson\Cookies\jakob berry hallsson@track.adform[3].txt

Adware.180solutions/Search Assistant
    HKCR\LMgr180.WMDRMAx
    HKCR\LMgr180.WMDRMAx\CLSID
    HKCR\LMgr180.WMDRMAx\CurVer
    HKCR\LMgr180.WMDRMAx.1
    HKCR\LMgr180.WMDRMAx.1\CLSID
    HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}
    HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid
    HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid32
    HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib
    HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib#Version
    HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}
    HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid
    HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid32
    HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib
    HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib#Version
    HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}
    HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid
    HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid32
    HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib
    HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib#Version
    C:\WINDOWS\Downloaded Program Files\ClientAX.dll

Trojan.SpyFalcon
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\eiehsAphmafuj
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\InprocServer32
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\InprocServer32#ThreadingModel
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\jAyok
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\mefHoktkl
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\mhxZbariv
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\Oyfuicj
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\ProgID
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\qnxnhgb
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\uhNczkzmX
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\ukivnjEZj
    HKCR\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}\VersionIndependentProgID
    HKCR\TypeLib\{B4E17829-DACB-4320-9ABF-DCB382221FC2}
    HKCR\TypeLib\{B4E17829-DACB-4320-9ABF-DCB382221FC2}\1.0
    HKCR\TypeLib\{B4E17829-DACB-4320-9ABF-DCB382221FC2}\1.0\0
    HKCR\TypeLib\{B4E17829-DACB-4320-9ABF-DCB382221FC2}\1.0\0\win32
    HKCR\TypeLib\{B4E17829-DACB-4320-9ABF-DCB382221FC2}\1.0\FLAGS
    HKCR\TypeLib\{B4E17829-DACB-4320-9ABF-DCB382221FC2}\1.0\HELPDIR
    HKCR\Interface\{0CBD1CBA-E034-4287-9B49-5F2912E1D33B}
    HKCR\Interface\{0CBD1CBA-E034-4287-9B49-5F2912E1D33B}\ProxyStubClsid
    HKCR\Interface\{0CBD1CBA-E034-4287-9B49-5F2912E1D33B}\ProxyStubClsid32
    HKCR\Interface\{0CBD1CBA-E034-4287-9B49-5F2912E1D33B}\TypeLib
    HKCR\Interface\{0CBD1CBA-E034-4287-9B49-5F2912E1D33B}\TypeLib#Version
    HKCR\Interface\{18575620-E41D-4204-BF6F-964069D80F45}
    HKCR\Interface\{18575620-E41D-4204-BF6F-964069D80F45}\ProxyStubClsid
    HKCR\Interface\{18575620-E41D-4204-BF6F-964069D80F45}\ProxyStubClsid32
    HKCR\Interface\{18575620-E41D-4204-BF6F-964069D80F45}\TypeLib
    HKCR\Interface\{18575620-E41D-4204-BF6F-964069D80F45}\TypeLib#Version
    HKCR\Interface\{4B860BE9-5B96-4443-9714-6ACD89989D1E}
    HKCR\Interface\{4B860BE9-5B96-4443-9714-6ACD89989D1E}\ProxyStubClsid
    HKCR\Interface\{4B860BE9-5B96-4443-9714-6ACD89989D1E}\ProxyStubClsid32
    HKCR\Interface\{4B860BE9-5B96-4443-9714-6ACD89989D1E}\TypeLib
    HKCR\Interface\{4B860BE9-5B96-4443-9714-6ACD89989D1E}\TypeLib#Version
    HKCR\Interface\{597892CA-A878-4A04-978F-DBA8DC2BB2FB}
    HKCR\Interface\{597892CA-A878-4A04-978F-DBA8DC2BB2FB}\ProxyStubClsid
    HKCR\Interface\{597892CA-A878-4A04-978F-DBA8DC2BB2FB}\ProxyStubClsid32
    HKCR\Interface\{597892CA-A878-4A04-978F-DBA8DC2BB2FB}\TypeLib
    HKCR\Interface\{597892CA-A878-4A04-978F-DBA8DC2BB2FB}\TypeLib#Version
    HKCR\Interface\{673A88D4-C0E0-40D2-9B93-AE39D9A1675F}
    HKCR\Interface\{673A88D4-C0E0-40D2-9B93-AE39D9A1675F}\ProxyStubClsid
    HKCR\Interface\{673A88D4-C0E0-40D2-9B93-AE39D9A1675F}\ProxyStubClsid32
    HKCR\Interface\{673A88D4-C0E0-40D2-9B93-AE39D9A1675F}\TypeLib
    HKCR\Interface\{673A88D4-C0E0-40D2-9B93-AE39D9A1675F}\TypeLib#Version
    HKCR\Interface\{7CC220DA-D962-4935-AD3A-21F7CA4962E3}
    HKCR\Interface\{7CC220DA-D962-4935-AD3A-21F7CA4962E3}\ProxyStubClsid
    HKCR\Interface\{7CC220DA-D962-4935-AD3A-21F7CA4962E3}\ProxyStubClsid32
    HKCR\Interface\{7CC220DA-D962-4935-AD3A-21F7CA4962E3}\TypeLib
    HKCR\Interface\{7CC220DA-D962-4935-AD3A-21F7CA4962E3}\TypeLib#Version
    HKCR\Interface\{9DD57F95-DA3A-4EDA-9475-27CCF366A4FD}
    HKCR\Interface\{9DD57F95-DA3A-4EDA-9475-27CCF366A4FD}\ProxyStubClsid
    HKCR\Interface\{9DD57F95-DA3A-4EDA-9475-27CCF366A4FD}\ProxyStubClsid32
    HKCR\Interface\{9DD57F95-DA3A-4EDA-9475-27CCF366A4FD}\TypeLib
    HKCR\Interface\{9DD57F95-DA3A-4EDA-9475-27CCF366A4FD}\TypeLib#Version
    HKCR\Interface\{B4D9C59B-A091-4D79-90CC-DD92F3BACF63}
    HKCR\Interface\{B4D9C59B-A091-4D79-90CC-DD92F3BACF63}\ProxyStubClsid
    HKCR\Interface\{B4D9C59B-A091-4D79-90CC-DD92F3BACF63}\ProxyStubClsid32
    HKCR\Interface\{B4D9C59B-A091-4D79-90CC-DD92F3BACF63}\TypeLib
    HKCR\Interface\{B4D9C59B-A091-4D79-90CC-DD92F3BACF63}\TypeLib#Version
    HKCR\Interface\{B8F90F00-CF78-4431-A13F-58B979F7EE20}
    HKCR\Interface\{B8F90F00-CF78-4431-A13F-58B979F7EE20}\ProxyStubClsid
    HKCR\Interface\{B8F90F00-CF78-4431-A13F-58B979F7EE20}\ProxyStubClsid32
    HKCR\Interface\{B8F90F00-CF78-4431-A13F-58B979F7EE20}\TypeLib
    HKCR\Interface\{B8F90F00-CF78-4431-A13F-58B979F7EE20}\TypeLib#Version
    HKCR\Interface\{CDEB1FD8-0917-40A2-B915-8FB9D7FDD75C}
    HKCR\Interface\{CDEB1FD8-0917-40A2-B915-8FB9D7FDD75C}\ProxyStubClsid
    HKCR\Interface\{CDEB1FD8-0917-40A2-B915-8FB9D7FDD75C}\ProxyStubClsid32
    HKCR\Interface\{CDEB1FD8-0917-40A2-B915-8FB9D7FDD75C}\TypeLib
    HKCR\Interface\{CDEB1FD8-0917-40A2-B915-8FB9D7FDD75C}\TypeLib#Version
    HKCR\Interface\{CF277F5A-347E-40C2-BAF0-4F09D0607041}
    HKCR\Interface\{CF277F5A-347E-40C2-BAF0-4F09D0607041}\ProxyStubClsid
    HKCR\Interface\{CF277F5A-347E-40C2-BAF0-4F09D0607041}\ProxyStubClsid32
    HKCR\Interface\{CF277F5A-347E-40C2-BAF0-4F09D0607041}\TypeLib
    HKCR\Interface\{CF277F5A-347E-40C2-BAF0-4F09D0607041}\TypeLib#Version
    HKCR\Interface\{D5DE421A-4AA5-4FE3-AA43-7D2A87D6267F}
    HKCR\Interface\{D5DE421A-4AA5-4FE3-AA43-7D2A87D6267F}\ProxyStubClsid
    HKCR\Interface\{D5DE421A-4AA5-4FE3-AA43-7D2A87D6267F}\ProxyStubClsid32
    HKCR\Interface\{D5DE421A-4AA5-4FE3-AA43-7D2A87D6267F}\TypeLib
    HKCR\Interface\{D5DE421A-4AA5-4FE3-AA43-7D2A87D6267F}\TypeLib#Version
    HKCR\Interface\{DD2D402A-DE41-47A6-AAC9-0D756776203E}
    HKCR\Interface\{DD2D402A-DE41-47A6-AAC9-0D756776203E}\ProxyStubClsid
    HKCR\Interface\{DD2D402A-DE41-47A6-AAC9-0D756776203E}\ProxyStubClsid32
    HKCR\Interface\{DD2D402A-DE41-47A6-AAC9-0D756776203E}\TypeLib
    HKCR\Interface\{DD2D402A-DE41-47A6-AAC9-0D756776203E}\TypeLib#Version
    HKCR\Interface\{E2F430FD-3062-4808-B23F-4B322BFED93F}
    HKCR\Interface\{E2F430FD-3062-4808-B23F-4B322BFED93F}\ProxyStubClsid
    HKCR\Interface\{E2F430FD-3062-4808-B23F-4B322BFED93F}\ProxyStubClsid32
    HKCR\Interface\{E2F430FD-3062-4808-B23F-4B322BFED93F}\TypeLib
    HKCR\Interface\{E2F430FD-3062-4808-B23F-4B322BFED93F}\TypeLib#Version
    HKCR\Interface\{E9B91E0C-305A-4DD2-9987-B3B0C254C6DE}
    HKCR\Interface\{E9B91E0C-305A-4DD2-9987-B3B0C254C6DE}\ProxyStubClsid
    HKCR\Interface\{E9B91E0C-305A-4DD2-9987-B3B0C254C6DE}\ProxyStubClsid32
    HKCR\Interface\{E9B91E0C-305A-4DD2-9987-B3B0C254C6DE}\TypeLib
    HKCR\Interface\{E9B91E0C-305A-4DD2-9987-B3B0C254C6DE}\TypeLib#Version
    HKCR\Interface\{EFD28371-A165-4873-A158-421D208FFE5A}
    HKCR\Interface\{EFD28371-A165-4873-A158-421D208FFE5A}\ProxyStubClsid
    HKCR\Interface\{EFD28371-A165-4873-A158-421D208FFE5A}\ProxyStubClsid32
    HKCR\Interface\{EFD28371-A165-4873-A158-421D208FFE5A}\TypeLib
    HKCR\Interface\{EFD28371-A165-4873-A158-421D208FFE5A}\TypeLib#Version

Trojan.Security Toolbar
    C:\Documents and Settings\Jakob Berry Hallsson\Foretrukne\Antivirus Test Online.url

Adware.180solutions/Seekmo
    HKCR\seekmohook.SABHO
    HKCR\seekmohook.SABHO\CLSID
    HKCR\seekmohook.SABHO\CurVer
    HKCR\seekmohook.SABHO.1
    HKCR\seekmohook.SABHO.1\CLSID
    HKU\S-1-5-21-3196885122-317894920-3640258639-1005\Software\seekmo
    HKLM\Software\seekmo
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmo
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmo#DisplayName
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmo#UninstallString
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmo#DisplayIcon
    C:\Programmer\Seekmo\seekmo_kyf.dat
    C:\Programmer\Seekmo\seekmoau.dat
    C:\Programmer\Seekmo\seekmo_gdf.dat
    C:\Programmer\Seekmo
    C:\Documents and Settings\All Users\Menuen Start\Programmer\Seekmo Search Assistant\Seekmo.com.url
    C:\Documents and Settings\All Users\Menuen Start\Programmer\Seekmo Search Assistant\Seekmo Customer Support.url
    C:\Documents and Settings\All Users\Menuen Start\Programmer\Seekmo Search Assistant\Uninstall Seekmo Instructions.lnk
    C:\Documents and Settings\All Users\Menuen Start\Programmer\Seekmo Search Assistant

Trojan.Downloader-DoneDU
    C:\WINDOWS\SYSTEM32\TMNMLNG.DLL
    C:\WINDOWS\SYSTEM32\OYLROVM.DLL

BearShare File Sharing Client
    C:\PROGRAMMER\BEARSHARE\BEARSHARE.EXE
    C:\DOCUMENTS AND SETTINGS\ALL USERS\MENUEN START\PROGRAMMER\BEARSHARE.LNK
    C:\DOCUMENTS AND SETTINGS\JAKOB BERRY HALLSSON\SKRIVEBORD\BEARSHARE.LNK
    C:\WINDOWS\Prefetch\BEARSHARE.EXE-03D151AA.pf

Adware.WhenU
    C:\DOCUMENTS AND SETTINGS\JAKOB BERRY HALLSSON\LOKALE INDSTILLINGER\TEMP\IS-PRSGM.TMP\WHENU\VVSNINST.EXE

Adware.MyGlobalSearchBar
    C:\PROGRAMMER\UNINSTALL MY GLOBAL SEARCH BAR.DLL


Og her er der en Hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 19:47:06, on 07-11-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\eManager\anbmServ.exe
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Programmer\Launch Manager\LaunchAp.exe
C:\Programmer\Launch Manager\PowerKey.exe
C:\Programmer\Launch Manager\HotkeyApp.exe
C:\Programmer\Launch Manager\OSDCtrl.exe
C:\Programmer\Launch Manager\Wbutton.exe
C:\Programmer\Acer\eRecovery\Monitor.exe
C:\Programmer\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\acer\epm\epm-dm.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\MAFWTray.exe
C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmer\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\system32\AvidSDMService.exe
C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\ewido anti-malware\ewidoctrl.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\LogMeIn\LogMeInSystray.exe
C:\Programmer\PalickSoft\HDD Temperature\HDDTSvc.exe
C:\Programmer\DrWeb\spiderml.exe
C:\Programmer\DrWeb\DRWEBSCD.EXE
C:\PROGRA~1\DrWeb\spidernt.exe
C:\PROGRA~1\DrWeb\SpiderNT.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\MSN Webcam Recorder\ml20gui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\PalickSoft\HDD Temperature\HDDTemperature.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Jakob Berry Hallsson\Skrivebord\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {5B20194F-C69E-833C-4552-02AB3E4088B2} - C:\WINDOWS\system32\oylrovm.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar2.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [LaunchAp] "C:\Programmer\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [PowerKey] "C:\Programmer\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [LManager] "C:\Programmer\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Programmer\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Programmer\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Programmer\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Programmer\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Programmer\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [epm-dm] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [MAFWTaskbarApp] C:\WINDOWS\system32\MAFWTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [THGuard] "C:\Programmer\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programmer\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Programmer\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Programmer\LogMeIn\LogMeInSystray.exe"
O4 - HKLM\..\Run: [SpIDerMail] "C:\Programmer\DrWeb\spiderml.exe"
O4 - HKLM\..\Run: [DrWebScheduler] "C:\Programmer\DrWeb\DRWEBSCD.EXE"
O4 - HKLM\..\Run: [SpIDerNT] C:\PROGRA~1\DrWeb\spidernt.exe /agent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSN Webcam Recorder] "C:\Programmer\MSN Webcam Recorder\ml20gui.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Programmer\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: HDD temperature.lnk = C:\Programmer\PalickSoft\HDD Temperature\HDDTemperature.exe
O4 - Startup: Xfire.lnk = C:\Programmer\Xfire\Xfire.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\programmer\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send til &Bluetooth - C:\Programmer\WIDCOMM\Bluetooth-software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Similar Pages - res://c:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: LMIinit - C:\WINDOWS\SYSTEM32\LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Avid SDM Service (AvidSDMService) - Avid Technology, Inc. - C:\WINDOWS\system32\AvidSDMService.exe
O23 - Service: Avid Startup (AvidStartup) - Unknown owner - C:\WINDOWS\system32\AvidStartup.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido anti-malware\ewidoctrl.exe
O23 - Service: HDD Temperature (HDDTService) - PalickSoft - C:\Programmer\PalickSoft\HDD Temperature\HDDTSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SpIDer Guard for Windows NT (spidernt) - Doctor Web, Ltd. - C:\PROGRA~1\DrWeb\SpiderNT.exe

Håber det kan hjælpe med en løsning.
14. november 2006 - 22:35 #11
Undskyld - 'tabte' denne tråd ...

Du skal lige 'fixe' enne linie ->
O2 - BHO: (no name) - {5B20194F-C69E-833C-4552-02AB3E4088B2} - C:\WINDOWS\system32\oylrovm.dll (file missing)
efter samme princip som tidl nævnt...
14. november 2006 - 22:36 #12
Du er velkommen en anden gang...

Åbn en mappe, klik på Funktioner >Mappeindstillinger >Vis.
Sæt flueben ved "Skjul beskyttede operativsystemfiler".
Sæt prik i "Vis ikke skjulte filer og mapper".

Du skal rense temp med denne fil, det tager kun få sek.
http://www.spywareinfo.dk/download/cleantempxp2k.bat

Efter sådan en tur er det altid en god ide og rydde op i systemgendannelsesfilerne.
Deaktiver systemgendannelse -> http://www.spywareinfo.dk/#/tip-og-tricks/deaktiver_systemgendannelse.htm
Genstart din computer - aktiver systemgendannelse. Dette gøres samme sted, hvor du deaktiverede, denne gang skal du blot aktivere.
Det vil også være en god idé manuelt at oprette et nyt punkt, som du kan navngive, og vende tilbage til, hvis du skulle få problemer af nogen art.

Et par artikler om sikker surfing finder du her:
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=14414

Safe Surfing...
Avatar billede mum Juniormester
17. november 2006 - 23:09 #13
Tusind tak for hjælpen. Jeg vil meget gerne give dig point for rensningen. Jeg kan se det var tiltrængt. Men jeg har nu stadig mit problem. Yderligere hjælp ville være højt værdsat.
Avatar billede mum Juniormester
26. januar 2007 - 16:39 #15
Jeg venter lige på at få min computer tilbage fra reparation. De vil ikke af med den. Men jeg vender stærkt tilbage. Og tusind tak for al hjælpen endnu engang.
17. marts 2007 - 12:41 #16
(Er PC'en kommet tilbage?)
Avatar billede mum Juniormester
25. oktober 2009 - 00:54 #17
Tak for hjælpen selv om det er længe siden
25. oktober 2009 - 10:08 #18
Ping...
(Det var et [svar]...)
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester