Gennemgang af SAS og HijackThis log-filer.

Hej.

Computeren har stået online et stykke tid og jeg spiller online-spil osv. osv. Efterhånden kunne LineAge2 ikke køre pga. skidt og snavs. Jeg har fulgt Fromsejs beskrivelse på:
http://www.eksperten.dk/artikler/954

og lægger hermed de to logs ind:



Først SAS:

SUPERAntiSpyware Scan Log
Generated 04/25/2007 at 08:42 PM

Application Version : 3.5.1016

Core Rules Database Version : 3224
Trace Rules Database Version: 1235

Scan type      : Complete Scan
Total Scan Time : 00:19:30

Memory items scanned      : 307
Memory threats detected  : 0
Registry items scanned    : 5279
Registry threats detected : 8
File items scanned        : 29386
File threats detected    : 240

Adware.Tracking Cookie
    C:\Documents and Settings\Midala\Cookies\midala@qksrv[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@clicksor[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@partypoker[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@targetnet[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@10286206[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad1.emediate[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@atwola[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@omusicdownloads6[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@stats1.reliablestats[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.addynamix[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@revsci[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@yadro[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@image.masterstats[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@usatoday1.112.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@scanner[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@winantivirus[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@adtech[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@revenue[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@drivecleaner[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@2006[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.freeonlinegames[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@apmebf[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@burstnet[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@toplist[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adecn[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad.text.tbn[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.pointroll[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@edge.ru4[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@server.cpmstar[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@statse.webtrendslive[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-nokiafin.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@bs.serving-sys[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@mb[6].txt
    C:\Documents and Settings\Midala\Cookies\midala@mb[3].txt
    C:\Documents and Settings\Midala\Cookies\midala@gostats[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@sitestats.tiscali.co[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@hotlog[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad.ofir[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@bannere.fyens[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-gamespot.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@as-us.falkag[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@tribalfusion[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@advertising[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-hitent.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@atdmt[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@tradedoubler[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@cgi-bin[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@2o7[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@globalstat[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad2.adecn[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adserver.banneradministration[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.realtechnetwork[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-bskyb.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@cgi-bin[3].txt
    C:\Documents and Settings\Midala\Cookies\midala@fastclick[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@doubleclick[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@adbrite[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@indextools[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@sexnoveller[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@cgi-bin[6].txt
    C:\Documents and Settings\Midala\Cookies\midala@e2.emediate[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adrevolver[3].txt
    C:\Documents and Settings\Midala\Cookies\midala@audit.median[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@weborama[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@kanoodle[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adlegend[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@as1.falkag[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@valueclick[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@bluestreak[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.cnn[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@adopt.specificclick[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@powellsbooks.122.2o7[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@perf.overture[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@tacoda[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@track.adform[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@forums.aqstats[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@maxim.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@microsoftwga.112.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@a.websponsors[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@spylog[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@zedo[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@interclick[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@data2.perf.overture[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@hypertracker[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-foundation.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@questionmarket[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@as-eu.falkag[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@adverticum[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@mediaplex[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@rambler[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adsrevenue[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@mb[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@microsofteup.112.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@msnportal.112.2o7[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@partner2profit[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@1071427968[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@serving-sys[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@adopt.euroclick[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@list[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@roi[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.burstbeacon[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad.yieldmanager[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@server.iad.liveperson[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@casalemedia[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@statcounter[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.sexylosers[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-sixapart.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@cgi-bin[5].txt
    C:\Documents and Settings\Midala\Cookies\midala@yieldmanager[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@wpni.112.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@277[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@clicktorrent[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.mediamayhemcorp[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@centrebet.advertserve[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad.zanox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@marthastewart.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.contactmusic[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@go.drivecleaner[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@a[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@pbh.adbureau[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@europages-com[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@pro-market[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@optimost[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@media.psp.ign[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@realmedia[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@adserver.adremedy[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-hollywoodmedia.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.addesktop[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@cgi-bin[4].txt
    C:\Documents and Settings\Midala\Cookies\midala@cpvfeed[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@linksynergy[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-dig.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad2.bannerbank[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-randomhouse.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@rotator.adjuggler[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@cs.sexcounter[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ww3.shoshkeles[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@netmediagroup[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@warlog[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-newscientist.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@dk.winantivirus[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@indexstats[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@devart.adbureau[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ex=1_[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.burstnet[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-warnerbrothers.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.vg.basefarm[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@74613876[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@mb[7].txt
    C:\Documents and Settings\Midala\Cookies\midala@mb[4].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.macromedia[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@enhance[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.jackpotmadness[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.w3counter[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.newgrounds[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.winantivirus[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adserver[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@webstat[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adrevolver[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@mb[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@stat.postdanmark[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@33645339[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.persianstat[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@aqstats[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@cnn.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@radaronline.advertserve[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@scholastic.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.drivecleaner[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ad1.hardware[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-globalgamingleague.hitbox[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.estart[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.dailyrush[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@chappel.pro-gmedia[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@login.tracking101[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@1063481871[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@xiti[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@trafficmp[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@mediaservices.myspace[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-gamespyinc.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adserver.easyad[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@1072386779[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adserver.mmoguru[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@edsa.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@media.fastclick[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.amaena[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads2.jubii[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ads.gamershell[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@partygaming.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@dk.drivecleaner[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@stats.adbrite[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@clickbank[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@sales.liveperson[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@1068632757[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@metacafe.122.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@ncom.banneradministration[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@overture[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@hc2.humanclick[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@findwhat[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@mediametrics.mpsa[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@maxserving[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adserver.filefront[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@www.search4click[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@klik.klikadvertising[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@realnetworks.112.2o7[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@stats.drivecleaner[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@ehg-hollywood.hitbox[1].txt
    C:\Documents and Settings\Midala\Cookies\midala@adultfriendfinder[2].txt
    C:\Documents and Settings\Midala\Cookies\midala@pulz.banneradministration[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adtech[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@mediaplex[2].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@adbrite[2].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@audit.median[1].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@casalemedia[2].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@doubleclick[1].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@fastclick[2].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@maxim.122.2o7[1].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@questionmarket[1].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@revsci[2].txt
    C:\Documents and Settings\Midala\Local Settings\Temp\Cookies\midala@statcounter[1].txt

Adware.Vundo Variant
    HKCR\CLSID\{1557B435-8242-4686-9AA3-9265BF7525A4}
    HKCR\CLSID\{1557B435-8242-4686-9AA3-9265BF7525A4}\InprocServer32
    HKCR\CLSID\{1557B435-8242-4686-9AA3-9265BF7525A4}\InprocServer32#ThreadingModel

Registry Cleaner Trial
    HKCR\Install.Install
    HKCR\Install.Install\CLSID
    HKCR\Install.Install\CurVer
    HKCR\Install.Install.1
    HKCR\Install.Install.1\CLSID

Trojan.VXGame-Gen
    C:\WINDOWS\SYSTEM32\DLH9JKD1Q2.EXE
    C:\WINDOWS\SYSTEM32\DLH9JKD1Q5.EXE
    C:\WINDOWS\SYSTEM32\DLH9JKD1Q6.EXE
    C:\WINDOWS\SYSTEM32\DLH9JKD1Q7.EXE

Trojan.Net-Jovi/DN
    C:\WINDOWS\SYSTEM32\DX8ADP.#LL

Trace.Known Threat Sources
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\C5230LEX\styles[1].css
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\2FQZMXAD\spacer[2].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\C5230LEX\ico2[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\2FQZMXAD\ico3[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\2T8TKRCN\ico4[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\2T8TKRCN\top_pic_new[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\03ETYZST\button2[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\03ETYZST\ico5[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\2FQZMXAD\checksoft[1].js
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\03ETYZST\top1[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\2T8TKRCN\logo[1].gif
    C:\Documents and Settings\Midala\Local Settings\Temporary Internet Files\Content.IE5\HABXTMCE\styles[1].css
















og så HijackThis:


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:46:40, on 25-04-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NETGEAR\NETGEAR Storage Central Manager Utility\Z-SANService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Motherboard Monitor 5\MBM5.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\BPFTP Server\bpftpserver.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Midala\Desktop\Rune\Spyware-removal med Fromsej\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {89e0d214-b939-4c5c-a2c0-c6ebd7ec9de0} - C:\WINDOWS\system32\dx8adp.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: MBM 5.lnk = C:\Program Files\Motherboard Monitor 5\MBM5.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O4 - Global Startup: Shortcut to bpftpserver.exe.lnk = C:\Program Files\BPFTP Server\bpftpserver.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2A510DC8-C9B5-4269-B9BA-E5B04D47D981} (CPlayFirstDDSonicControl Object) - http://www.shockwave.com/content/dinerdash/sis/DDSonic.1.0.0.92.cab
O16 - DPF: {87056D28-9730-4A47-B9F9-7E890B62C58A} (WildfireActiveXHost Class) - http://tv2.games.is/webgames/gamehouse/tumblebugs/axhost.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://tv2.games.is/webgames/gamehouse/SproutLauncher.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.bgbank.dk/html/activex/e-Safekey/BG/e-Safekey.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/insaniquarium/sis/popcaploader_v6.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - AppInit_DLLs: 
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: dx8adp - dx8adp.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Z-SAN Service (Z-SANService) - Zetera Corporation - C:\Program Files\NETGEAR\NETGEAR Storage Central Manager Utility\Z-SANService.exe

--
End of file - 5833 bytes






Takker for hjælpen.
/Rune