Hijackthis log

Er dit Antivirus opdateret?
Ikke engang Norton burde være så ringe at det ikke snupper den.

Download og gem denne scanner på skrivebordet. Du skal ikke aktivere den endnu.
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
Se vejledningen her: http://fromsej.dk/Vejledninger/html/drweb.html
---------------------------------------
Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, genstart i fejlsikret (tryk på <F8> under opstarten), slet mapper og filer listet længere nede.

O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\Run: [msconfig] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\Run: [icq lite] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\Run: [Update Checker] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\Run: [AntiVir] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\Run: [] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\RunServices: [Windows Update] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\RunServices: [msconfig] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\RunServices: [icq lite] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\RunServices: [Update Checker] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\RunServices: [AntiVir] C:\WINDOWS\scvhost.exe
O4 - HKLM\..\RunServices: [] C:\WINDOWS\scvhost.exe

---------------------------------------
Sletning af \mapper\ og filer:
Åbn Stifinder, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".
Brug af Start->Søg.
Klik på "Skift søgefunktioner for filer og mapper"
Sæt prik i "Avanceret" og klik OK.
Klik på "Alle filer og mapper"
Klik på "Flere avancerede indstillinger"
Sæt flueben i de tre øverste.
-------------------
Mapper:

-------------------
Filer:
C:\WINDOWS\scvhost.exe << VIGTIGT du må ikke slette SVChost.exe
---------------------------------------
Dobbeltklik på drweb-cureit.exe, den vil køre en expressscan, det siger du ja til.
Når den skriver Done nederst til venstre, skal du klikke på Options->Change settings.
Skift til fanebladet Scan, fjern fluebenet ved Heuristic analysis.
Skift til fanebladet Actions, her skal alle punkter under Malware sættes til Rename.
Klik så på det eller de drev du vil have scannet, der kommer en rød prik for at vise det/de er valgt.

Klik så på den grønne pil ovre til højre på siden, så starter scanningen.
Første gang Dr.Web finder noget, klik "Yes to All", så fjerner den hvad den finder.
Når scanningen er færdig, gå op i file &#8211; Tryk på- Save Report list.
Så ligger der en en fil der her hedder "drweb.csv" på skrivebordet.
Luk Programmet.
---------------------------------------
Genstart normalt og kom med en frisk Hijackthislog, dobbeltklik på drweb.csv og kopier teksten fra den herind.

Hmmm... ->
http://www.eksperten.dk/list.phtml?sort=&order=DESC&status_1=on&status_2=on&spm_creator=blackmonday&spm_part=&spm_answer=&find=&engine=exp

OG?

Det er ikke min maskine der har et problem, hvis spørger ikke reagerer, tjaee who f...ing cares?

... så gider vi f**** heller ikke at skrive noget som helst til dig/denne bruger da der sjældent er feedback - bliver så forstået som spild af tid ...
http://expfaq.1go.dk/?id=3#behandling_af_svar

... jeg opfattede det lige som om det var <blackmonday> der havde skrevet ...
Men der går nok også en rum tid ?

Sikkert.*G*

Rolig Drenge, Skal nok afslutte mine andre emner, Den er ved at scanne på den anden maskine.. Et øjeblik,
afslutter lige mine emner.

Så er de andre lukkede, Sorry min fejl at jeg har glemt det.
Skal huskes til de næste gange,,

Logfile of HijackThis v1.99.1
Scan saved at 16:40:13, on 26-11-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Programmer\Fælles filer\Microsoft Shared\Works Shared\WkUFind.exe
C:\Programmer\Creative\Shared Files\CAMTRAY.EXE
C:\Programmer\HP\hpcoretech\hpcmpmgr.exe
C:\Programmer\SlySoft\CloneCD\CloneCDTray.exe
C:\Programmer\Java\jre1.5.0_09\bin\jusched.exe
C:\Programmer\Logitech\MouseWare\system\em_exec.exe
C:\Programmer\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmer\Winamp\winampa.exe
C:\Programmer\DAEMON ToolsNew\daemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Messenger\msmsgs.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Bo\Skrivebord\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://newz.dk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cybertape.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Programmer\Fælles filer\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programmer\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programmer\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programmer\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Programmer\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Programmer\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON ToolsNew\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "D:\spil\Steam\Steam.exe" -silent
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3D6DDD23-870A-4FC8-B3AF-5F67C935A9B7} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-1204.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/da/filesharingctrl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f012.mail.jubii.dk/app/uploader/FileUploader.cab
O16 - DPF: {D216644A-C6DB-49D9-BBCF-D38FE7991BF2} (Util Class) - https://opdatering.tdc.dk/csp/authenticode/tdccsp-0506.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

555555[1].htm\Script.0;C:\Documents and Settings\Bjarne\Lokale indstillinger\Temporary Internet Files\Content.IE5\HZGPN0CL\555555[1].htm;Exploit.MhtRedir;;
555555[1].htm\JavaScript.1;C:\Documents and Settings\Bjarne\Lokale indstillinger\Temporary Internet Files\Content.IE5\HZGPN0CL\555555[1].htm;VBS.Psyme.194;;
555555[1].htm\JavaScript.2;C:\Documents and Settings\Bjarne\Lokale indstillinger\Temporary Internet Files\Content.IE5\HZGPN0CL\555555[1].htm;VBS.Psyme.193;;
555555[1].htm;C:\Documents and Settings\Bjarne\Lokale indstillinger\Temporary Internet Files\Content.IE5\HZGPN0CL;Archive contains infected objects;Moved.;
WinAntiVirusPro2006FreeInstall_dk[1].exe;C:\Documents and Settings\Bo\Lokale indstillinger\Temporary Internet Files\Content.IE5\RA8MKMJW;Trojan.DownLoader.10963;Deleted.;
mIRC.exe;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\#vzz\vzzmirc;Program.mIRC.616;Renamed.;
mirc.exe;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\mirv\backup;Program.mIRC.616;Renamed.;
ZaiIRC.exe;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\Ny mappe\ZaiIRC54;Program.mIRC.603;Renamed.;
moo.dll;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\Ny mappe\ZaiIRC54\sys\dlls;Program.MotherboardMonitor;Renamed.;
mirc.exe;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\ZaiIRC54;Program.mIRC.615;Renamed.;
ZaiIRC.exe;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\ZaiIRC54;Program.mIRC.603;Renamed.;
moo.dll;C:\Documents and Settings\Bo\Skrivebord\Alle mapper\Den Store mIRC mappe\ZaiIRC54\sys\dlls;Program.MotherboardMonitor;Renamed.;
Process.exe;C:\Documents and Settings\Bo\Skrivebord\fix\smitRem;Tool.Prockill;Renamed.;
mIRC.exe;C:\Documents and Settings\Bo\Skrivebord\fix\vzzmirc;Program.mIRC.616;Renamed.;
mirc.exe;C:\Programmer\mIRC;Program.mIRC.617;Renamed.;
A0203986.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.616;Renamed.;
A0203987.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.616;Renamed.;
A0203988.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.603;Renamed.;
A0203989.dll;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.MotherboardMonitor;Renamed.;
A0203990.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.615;Renamed.;
A0203991.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.603;Renamed.;
A0203992.dll;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.MotherboardMonitor;Renamed.;
A0203993.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Tool.Prockill;Renamed.;
A0203994.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.616;Renamed.;
A0203995.exe;C:\System Volume Information\_restore{C698BD27-026A-46B0-BF43-2B87D3B258CA}\RP707;Program.mIRC.617;Renamed.;
H@tKeysH@@k.DLL;C:\WINDOWS\system32;Tool.Hatkeys;Renamed.;
DWH1091.tmp\javascript.0;C:\WINDOWS\Temp\DWH1091.tmp;Exploit.MhtRedir;;
DWH1091.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH1132.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWH12B4.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH12E3.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH1317.tmp\Script.0;C:\WINDOWS\Temp\DWH1317.tmp;Exploit.MhtRedir;;
DWH1317.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH1346.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWH142B.tmp;C:\WINDOWS\Temp;Trojan.Popuper;Incurable.Moved.;
DWH150B.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH153A.tmp\javascript.0;C:\WINDOWS\Temp\DWH153A.tmp;Exploit.MhtRedir;;
DWH153A.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH1545.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH169C.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH171E.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH17F9.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH18A0.tmp\javascript.0;C:\WINDOWS\Temp\DWH18A0.tmp;Exploit.MhtRedir;;
DWH18A0.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH1B.tmp\Javascript.0;C:\WINDOWS\Temp\DWH1B.tmp;Exploit.DialogArg;;
DWH1B.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH1DE0.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWH1F37.tmp\javascript.0;C:\WINDOWS\Temp\DWH1F37.tmp;Exploit.MhtRedir;;
DWH1F37.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH21AD.tmp\Javascript.0;C:\WINDOWS\Temp\DWH21AD.tmp;Exploit.DialogArg;;
DWH21AD.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH21CC.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWH2334.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWH23FA.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH2429.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH28FB.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH2CB.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWH2E4B.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWH2FC2.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWH2FF1.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWH32EE.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH3465.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWH3494.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH3502.tmp;C:\WINDOWS\Temp;IRC.Flood;Deleted.;
DWH357F.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWH366E.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWH3AD3.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH3B5F.tmp\Javascript.0;C:\WINDOWS\Temp\DWH3B5F.tmp;Exploit.DialogArg;;
DWH3B5F.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH3BDC.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH3CF6.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH3D7D.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH47C.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH4AB.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH4CA.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWH58BB.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH5AED.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH5C16.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH5D9D.tmp\javascript.0;C:\WINDOWS\Temp\DWH5D9D.tmp;Exploit.MhtRedir;;
DWH5D9D.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH602.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH631B.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH636.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH63B7.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWH654E.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH657D.tmp\Javascript.0;C:\WINDOWS\Temp\DWH657D.tmp;Exploit.DialogArg;;
DWH657D.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH6628.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWH6742.tmp\Javascript.0;C:\WINDOWS\Temp\DWH6742.tmp;Exploit.DialogArg;;
DWH6742.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH6771.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWH6A3.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWH6B2A.tmp\Javascript.0;C:\WINDOWS\Temp\DWH6B2A.tmp;Exploit.DialogArg;;
DWH6B2A.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH6DD.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH6E47.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWH704A.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH7098.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWH7A8.tmp\javascript.0;C:\WINDOWS\Temp\DWH7A8.tmp;Exploit.MhtRedir;;
DWH7A8.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH87F9.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
"DWH93C0.tmp\\\\""javascript\\\"".1";C:\WINDOWS\Temp\DWH93C0.tmp;Exploit.Helpxsite;;
DWH93C0.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH941E.tmp\javascript.0;C:\WINDOWS\Temp\DWH941E.tmp;Exploit.MhtRedir;;
DWH941E.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWH943D.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWH946C.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWH991F.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHA564.tmp\javascript.0;C:\WINDOWS\Temp\DWHA564.tmp;Exploit.MhtRedir;;
DWHA564.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHA574.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHA63F.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHA682.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWHA719.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHA8EE.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHAA65.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWHAAE2.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHAB25.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWHAB7E.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHAC2A.tmp\javascript.0;C:\WINDOWS\Temp\DWHAC2A.tmp;Exploit.MhtRedir;;
DWHAC2A.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHAC78.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHAC88.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHACA7.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHAD58.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHAD63.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHAD92.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHAEAB.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHAEB0.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWHB041.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHB060.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHB1BD.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWHB310.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHB32F.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHB477.tmp\javascript.0;C:\WINDOWS\Temp\DWHB477.tmp;Exploit.MhtRedir;;
DWHB477.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHB497.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHB509.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHB5B5.tmp\javascript.0;C:\WINDOWS\Temp\DWHB5B5.tmp;Exploit.MhtRedir;;
DWHB5B5.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHB632.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWHB6AF.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHB7B3.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHB89E.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWHB9EB.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHBAF4.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWHBC47.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWHBDF2.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHC129.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHC1D5.tmp\javascript.0;C:\WINDOWS\Temp\DWHC1D5.tmp;Exploit.MhtRedir;;
DWHC1D5.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHC204.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHC744.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHC7A2.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHC7F0.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
"DWHC8FE.tmp\\\\""javascript\\\"".1";C:\WINDOWS\Temp\DWHC8FE.tmp;Exploit.Helpxsite;;
DWHC8FE.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHC9F3.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWHCA70.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCB02.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHCB2C.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCB5B.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHCB6F.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHCB9E.tmp\javascript.0;C:\WINDOWS\Temp\DWHCB9E.tmp;Exploit.MhtRedir;;
DWHCB9E.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHCBBD.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHCC1B.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCD7E.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCD8.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCDF0.tmp\javascript.0;C:\WINDOWS\Temp\DWHCDF0.tmp;Exploit.MhtRedir;;
DWHCDF0.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHCE2E.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCEB6.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHCFCF.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHD080.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHD15B.tmp\Javascript.0;C:\WINDOWS\Temp\DWHD15B.tmp;Exploit.DialogArg;;
DWHD15B.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHD2.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHD2EC.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHD56D.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
"DWHD581.tmp\\\\""javascript\\\"".1";C:\WINDOWS\Temp\DWHD581.tmp;Exploit.Helpxsite;;
DWHD581.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHD5AB.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHD5EF.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWHD63D.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWHD657.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHD6AA.tmp;C:\WINDOWS\Temp;Exploit.Helpxsite;Deleted.;
DWHD6C5.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWHD7AF.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHD80D.tmp\Javascript.0;C:\WINDOWS\Temp\DWHD80D.tmp;Exploit.DialogArg;;
DWHD80D.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHD88E.tmp\Script.0;C:\WINDOWS\Temp\DWHD88E.tmp;Exploit.MhtRedir;;
DWHD88E.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHDC43.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHDD90.tmp\javascript.0;C:\WINDOWS\Temp\DWHDD90.tmp;Exploit.MhtRedir;;
DWHDD90.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHDDE9.tmp\javascript.0;C:\WINDOWS\Temp\DWHDDE9.tmp;Exploit.MhtRedir;;
DWHDDE9.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHDE75.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHDEA4.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHDF74.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHE183.tmp\Javascript.0;C:\WINDOWS\Temp\DWHE183.tmp;Exploit.DialogArg;;
DWHE183.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHE1C6.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHE3D9.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHE52C.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWHE5A9.tmp\Script.0;C:\WINDOWS\Temp\DWHE5A9.tmp;Exploit.Helpxsite;;
DWHE5A9.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHE636.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWHE715.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHE73.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.240;Deleted.;
DWHE730.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHE86D.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWHE914.tmp;C:\WINDOWS\Temp;Trojan.Fakealert;Deleted.;
DWHE938.tmp\Script.0;C:\WINDOWS\Temp\DWHE938.tmp;Exploit.Helpxsite;;
DWHE938.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHF156.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHF1F.tmp;C:\WINDOWS\Temp;Trojan.NoCheat.24564;Deleted.;
DWHF28A.tmp;C:\WINDOWS\Temp;Trojan.DownLoader.5769;Deleted.;
DWHF435.tmp\Script.0;C:\WINDOWS\Temp\DWHF435.tmp;Exploit.MhtRedir;;
DWHF435.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHF643.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHF672.tmp\Javascript.0;C:\WINDOWS\Temp\DWHF672.tmp;Exploit.DialogArg;;
DWHF672.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHF76C.tmp\javascript.0;C:\WINDOWS\Temp\DWHF76C.tmp;Exploit.MhtRedir;;
DWHF76C.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHF84B.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHF960.tmp;C:\WINDOWS\Temp;Exploit.ObjectData;Deleted.;
DWHF965.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHF9AE.tmp\javascript.0;C:\WINDOWS\Temp\DWHF9AE.tmp;Exploit.MhtRedir;;
DWHF9AE.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHF9DD.tmp\Script.0;C:\WINDOWS\Temp\DWHF9DD.tmp;Exploit.MhtRedir;;
DWHF9DD.tmp;C:\WINDOWS\Temp;Archive contains infected objects;Moved.;
DWHFA5A.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHFA89.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHFB25.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHFBF0.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHFD48.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHFDA6.tmp;C:\WINDOWS\Temp;Exploit.MhtRedir;Deleted.;
DWHFEBF.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;
DWHFEC4.tmp;C:\WINDOWS\Temp;Win32.HLLM.Netsky.35328;Deleted.;
DWHFF9A.tmp;C:\WINDOWS\Temp;Exploit.ByteVerify;Deleted.;

Så er din log ren, vi behøver ikke at se flere.
Du bør lige deaktivere systemgendannelse, genstarte og genaktivere samt sætte filvisning til normal.
http://spywarefri.dk/virusscannere.htm#alle - Systemgendannelse.
Åbn en mappe, klik på Funktioner >Mappeindstillinger >Vis.
Sæt flueben ved "Skjul beskyttede operativsystemfiler".
Sæt flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis ikke skjulte filer og mapper".

For at holde den ren kan du kigge på vores pakke til formålet.
http://www.spywarefri.dk/manualer/sikkerhedspakke.htm
Som minimum anbefaler jeg Spywareguard, Spywareblaster, IE-Spyad og IE Privacy Keeper.
Et par artikler om sikker surfing finder du her:
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=14414
http://fromsej.dk/html/avoid.html
Mvh:
Fromsej/Team Spywarefri.

Tak for hjælpen..
Har et enkelt spørgsmål mere, Ved ikke om jeg skal bruge Norton Eller NOD32?

Det er da verdens nemmeste valg.
Det eneste antivirus der er ringere end Norton er intet antivirus.
For ikke at tale om deres "support".
http://fromsej.dk/html/norton.html

Tak for point. :-)