UNdskyld det tog noget tid, men har simpelthen haft så travlt de seneste par dage. Her kommer loggene, det skal siges Ewido fandt 79 Inficerede filer:
HJT:
Logfile of HijackThis v1.99.1
Scan saved at 22:52:28, on 24-11-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\Programmer\ewido\security suite\ewidoctrl.exe
C:\Programmer\ewido\security suite\ewidoguard.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Programmer\Java\jre1.5.0_08\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\programmer\steam\steam.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Chris\Skrivebord\Spywarefri\alternativ.exe
C:\Programmer\Alwil Software\Avast4\setup\avast.setup
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmer\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\programmer\steam\steam.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
EWIDO:
---------------------------------------------------------
ewido anti-malware - Scanningsrapport
---------------------------------------------------------
+ Oprettet den: 22:48:01, 24-11-2006
+ Rapport-Checksum: CB06812A
+ Scanningsresultat:
HKLM\SOFTWARE\Classes\CLSID\{BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} -> Adware.WebDir : Renset med backup
C:\Documents and Settings\Administrator\Cookies\administrator@adtech[1].txt -> TrackingCookie.Adtech : Renset med backup
C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[1].txt -> TrackingCookie.Atdmt : Renset med backup
C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Renset med backup
C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
:mozilla.94:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Mediaplex : Renset med backup
:mozilla.99:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Adtech : Renset med backup
:mozilla.100:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Doubleclick : Renset med backup
:mozilla.101:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Adtech : Renset med backup
:mozilla.113:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Atdmt : Renset med backup
:mozilla.114:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
:mozilla.115:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
:mozilla.119:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Tradedoubler : Renset med backup
:mozilla.120:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Tradedoubler : Renset med backup
:mozilla.126:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Statcounter : Renset med backup
:mozilla.127:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Statcounter : Renset med backup
:mozilla.129:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Smartadserver : Renset med backup
:mozilla.130:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Smartadserver : Renset med backup
:mozilla.131:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Smartadserver : Renset med backup
:mozilla.132:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Smartadserver : Renset med backup
:mozilla.144:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
:mozilla.145:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
:mozilla.146:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
:mozilla.147:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
:mozilla.148:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
:mozilla.151:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Adbrite : Renset med backup
:mozilla.152:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Adbrite : Renset med backup
:mozilla.164:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Webtrendslive : Renset med backup
:mozilla.168:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Webtrendslive : Renset med backup
:mozilla.173:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Com : Renset med backup
:mozilla.175:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Overture : Renset med backup
:mozilla.176:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Tribalfusion : Renset med backup
:mozilla.216:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Yieldmanager : Renset med backup
:mozilla.217:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Yieldmanager : Renset med backup
:mozilla.219:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Bluestreak : Renset med backup
:mozilla.220:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
:mozilla.249:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Sexcounter : Renset med backup
:mozilla.250:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Sexcounter : Renset med backup
:mozilla.272:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Casalemedia : Renset med backup
:mozilla.278:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
:mozilla.279:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
:mozilla.280:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
:mozilla.281:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
:mozilla.282:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
:mozilla.283:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
:mozilla.306:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Liveperson : Renset med backup
:mozilla.307:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Liveperson : Renset med backup
:mozilla.308:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Liveperson : Renset med backup
:mozilla.337:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Adbrite : Renset med backup
:mozilla.389:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
:mozilla.407:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Clickbank : Renset med backup
:mozilla.528:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Reliablestats : Renset med backup
:mozilla.529:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Reliablestats : Renset med backup
:mozilla.530:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Reliablestats : Renset med backup
:mozilla.531:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Reliablestats : Renset med backup
:mozilla.532:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Reliablestats : Renset med backup
:mozilla.559:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Hitbox : Renset med backup
:mozilla.590:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Fastclick : Renset med backup
:mozilla.653:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Euroclick : Renset med backup
:mozilla.665:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Pointroll : Renset med backup
:mozilla.667:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Pointroll : Renset med backup
:mozilla.668:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Pointroll : Renset med backup
:mozilla.669:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Pointroll : Renset med backup
:mozilla.698:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\sxht650e.default\cookies.txt -> TrackingCookie.Hitbox : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@adbrite[2].txt -> TrackingCookie.Adbrite : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@adtech[2].txt -> TrackingCookie.Adtech : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@advertising[1].txt -> TrackingCookie.Advertising : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@atdmt[2].txt -> TrackingCookie.Atdmt : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@doubleclick[1].txt -> TrackingCookie.Doubleclick : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@fastclick[2].txt -> TrackingCookie.Fastclick : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@media.fastclick[1].txt -> TrackingCookie.Fastclick : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@mediaplex[1].txt -> TrackingCookie.Mediaplex : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Renset med backup
C:\Documents and Settings\Chris\Cookies\chris@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Renset med backup
C:\Downloads\PokerSuperstarsSetup-dm[1].#xe -> Adware.Trymedia : Renset med backup
C:\VundoFix Backups\efcccba.dll -> Adware.Virtumonde : Renset med backup
C:\WINDOWS\DLP.dll -> Adware.Webdir : Renset med backup
::Rapport slut
