Hijack log
Logfile of HijackThis v1.99.1Scan saved at 15:33:45, on 17-12-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\ATI Technologies\ATI.ACE\cli.exe C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\PROGRA~1\LAUNCH~1\LManager.exe C:\Acer\Empowering Technology\eRecovery\eRAgent.exe C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmer\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\Logitech\Desktop
Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Programmer\Logitech\SetPoint\SetPoint.exe
C:\Programmer\Fælles filer\Logitech\KHAL\KHALMNPR.EXE C:\Programmer\AntiVir PersonalEdition Classic\sched.exe C:\Programmer\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmer\ATI Technologies\ATI.ACE\cli.exe C:\Programmer\ATI Technologies\ATI.ACE\cli.exe C:\Programmer\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Vinnie\Skrivebord\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:
//www.aceradvantage.com/stdreg
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
- c:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ATICCC] "C:\Programmer\ATI Technologies\ATI.ACE\cli.
exe" runtime -Delay
O4 - HKLM\..\Run: [AzMixerSel] C:
\Programmer\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [RemoteControl] C:
\Programmer\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"
/Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.
exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:
\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:
\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [ntiMUI] C:\Programmer\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.
exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Programmer\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ImageItEncrypt] C:\WINDOWS\system32\ImageItEncrypt.
exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe"
/background
O4 - HKCU\..\Run: [LDM] C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:
\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:
\Programmer\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2- BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O18 - Protocol: bw+0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw+0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw-0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw-0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw00 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw00s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw10 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw10s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw20 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw20s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw30 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw30s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw40 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw40s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw50 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw50s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw60 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw60s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw70 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw70s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw80 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw80s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw90 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bw90s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwa0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwa0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwb0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwb0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwc0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwc0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwd0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwd0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwe0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwe0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwf0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwf0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80- C34B9B80B32B} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwg0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwh0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwh0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwi0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwi0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwj0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwj0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwk0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwk0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwl0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwl0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwm0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwm0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwn0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwn0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwo0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwo0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwp0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwp0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwq0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwq0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwr0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwr0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bws0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bws0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwt0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwt0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwu0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwu0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwv0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwv0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bww0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bww0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwx0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwx0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwy0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwy0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwz0 - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: bwz0s - {C862A2D2-7C06-442A-99DF-FEB55610355B} - C:
\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
8876480.dll
O18 - Protocol: offline-8876480 - {C862A2D2-7C06-442A-99DF- FEB55610355B} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler
(AntiVirScheduler) - Avira GmbH - C:\Programmer\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService)
- AVIRA GmbH - C:\Programmer\AntiVir PersonalEdition Classic\avguard.
exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:
\WINDOWS\system32\Ati2evxx.exe
