Pilen i proceslinjen

Højreklik på Proceslinien, vælg Egenskaber, sæt flueben i Skjul inaktive ikoner.

der er flueben

den hold op med det igår

har jeg mon fået virus?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:29, on 01-08-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\5020\SAService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [cnfgCav] "C:\Program Files\Comodo\Comodo AntiVirus\CMain.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: SUPERAntiSpyware Free Edition.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Hurtig start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted IP range: http://80.167.151.136
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1182269489125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182269429593
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O18 - Protocol: bw+0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BroadWave Service (BroadWaveService) - Unknown owner - C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - C:\Program Files\Xampp\filezillaftp\filezillaserver.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\5020\SAService.exe
O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - C:\Program Files\WinClamAVShield\sp_clamsrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - C:\Program Files\Xampp\service.exe (file missing)

Loggen er ren.
Fjern fluebenet, genstart og sæt det igen.
Det kan drille noget så læsterligt, så hvis det ikke irriterer dig alt for meget, så ignorer det.

Eller prøv evt. med en systemgendannelse:

Start -> Alle programmer -> Tilbehør -> Systemværktøjer -> Systemgendannelse -> Følg guiden og vælg et tidspunkt fra før problemet opstod.

Det bruger jeg ofte hvis noget ændrer sig i min opsætning.
Som oftest virker det.  :-)

desværre drenge, ikke noget hjælp har I andre forslag (de grimme måder at gør tingene på) ?

hej igen

jeg har lige kørt microworld anti virus og spyware og har fundet
Object "video activex access Trojan" found in File System! Action Taken: No Action Taken.
Object "video activex access Trojan" found in File System! Action Taken: No Action Taken.
Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "trojan-downloader.bat.ftp.ab Trojan-Downloader" found in File System! Action Taken: No Action Taken.
Object "trojan-downloader.bat.ftp.ab Trojan-Downloader" found in File System! Action Taken: No Action Taken.
Object "universal searchbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "toolbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "universal searchbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "universal searchbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "spypal Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKCR\VisualStudio.Launcher.sln" refers to invalid object "{1B2EEDD6-C203-4d04-BD59-78906E3E8AAB}". Action Taken: No Action Taken.
Entry "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" refers to invalid object "C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\PrvCnt.exe". Action Taken: No Action Taken.



hvordan sletter jeg dem?

Det var en ordentlig portion l.rt du har skrabet sammen der.
Bruger du fildeling?

Nå, det er allesammen gamle kendinge, som vi burde kunne snuppe.
Følg vejledningen i denne artikel:
http://www.eksperten.dk/artikler/1123

her kommer de


ComboFix 07-07-30.2 - "user" 2007-08-02 17:49:35.1 [GMT 2:00] - NTFS
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.Sand
* Created a new restore point


(((((((((((((((((((((((((((((((((((((((  Other Deletions  )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\regedit.com
C:\WINDOWS\system32\taskmgr.com


(((((((((((((((((((((((((  Files Created from 2007-07-02 to 2007-08-02  )))))))))))))))))))))))))))))))


2007-08-02 16:40    <DIR>    d--------    C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOC424
2007-08-02 16:39    <DIR>    d-a------    C:\WINDOWS\zts2.exe
2007-08-02 16:39    <DIR>    d-a------    C:\WINDOWS\system32\vcmgcd32.dll
2007-08-02 16:39    <DIR>    d-a------    C:\WINDOWS\system32\iifgfgf.dll
2007-08-02 16:39    <DIR>    d-a------    C:\WINDOWS\rundll16.exe
2007-08-02 16:39    <DIR>    d-a------    C:\WINDOWS\rundl132.dll
2007-08-02 16:39    <DIR>    d-a------    C:\WINDOWS\logo1_.exe
2007-07-28 20:49    <DIR>    d--------    C:\DOCUME~1\user\APPLIC~1\FileZilla
2007-07-28 20:48    <DIR>    d--------    C:\Program Files\FileZilla Client
2007-07-28 12:55    51,200    --a------    C:\WINDOWS\nircmd.exe
2007-07-22 20:47    <DIR>    d--------    C:\DOCUME~1\user\Shared
2007-07-15 14:29    434,252    --a------    C:\WINDOWS\system32\MSVCRTD.DLL
2007-07-15 14:29    216,576    --a------    C:\WINDOWS\system32\monln.dll
2007-07-14 12:15    <DIR>    d--------    C:\Program Files\Trend Micro
2007-07-11 15:21    <DIR>    d--------    C:\Program Files\OTRS
2007-07-11 09:03    9,437,184    --a------    C:\DOCUME~1\user\ntuser.dat
2007-07-10 13:17    <DIR>    d--------    C:\Program Files\Picasa
2007-07-08 14:28    <DIR>    d--------    C:\Program Files\Ahead
2007-07-07 16:18    102,800    --a------    C:\WINDOWS\system32\drivers\tmcomm.sys
2007-07-07 12:49    <DIR>    dr-------    C:\DOCUME~1\user\APPLIC~1\SpaceTime 3D
2007-07-06 17:20    <DIR>    d--------    C:\Program Files\MRU-Blaster
2007-07-06 12:15    <DIR>    d--------    C:\Program Files\MP3 To CD Burner
2007-07-06 12:12    <DIR>    d--------    C:\DOCUME~1\user\APPLIC~1\COWON
2007-07-06 09:34    <DIR>    d--------    C:\DOCUME~1\user\APPLIC~1\dBpoweramp
2007-07-06 00:26    <DIR>    d--------    C:\DOCUME~1\user\APPLIC~1\AccurateRip
2007-07-06 00:19    130,048    --a------    C:\WINDOWS\system32\SpoonUninstall.exe
2007-07-05 23:14    <DIR>    d--------    C:\Program Files\CDBurnerXP Pro 3
2007-07-05 11:55    <DIR>    d--------    C:\Program Files\Recuva
2007-07-05 10:19    <DIR>    d--------    C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-07-04 13:35    62    --a------    C:\WINDOWS\BricoPackFoldersDelete.cmd


((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-08-02 17:42    ---------    d--------    C:\Program Files\SUPERAntiSpyware
2007-08-02 16:29    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\Skype
2007-08-02 16:25    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\OpenOffice.org2
2007-08-01 21:42    ---------    d--------    C:\Program Files\SpywareGuard
2007-08-01 21:12    ---------    d--------    C:\Program Files\TYPO3_4.1.1
2007-08-01 15:53    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\SiteAdvisor
2007-07-31 21:18    ---------    d--------    C:\Program Files\Paint.NET
2007-07-28 20:51    ---------    d--------    C:\Program Files\FileZilla
2007-07-28 14:23    ---------    d--------    C:\Program Files\Notepad++
2007-07-28 12:47    ---------    d--------    C:\Program Files\Common Files\Wise Installation Wizard
2007-07-27 20:40    ---------    d--------    C:\Program Files\SpywareBlaster
2007-07-27 20:37    ---------    d--------    C:\Program Files\WinClamAVShield
2007-07-27 20:37    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\Spyware Terminator
2007-07-27 13:58    ---------    d--------    C:\Program Files\Spyware Terminator
2007-07-24 18:23    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\LimeWire
2007-07-23 16:11    ---------    d--------    C:\Program Files\Mozilla Thunderbird
2007-07-20 22:08    ---------    d--------    C:\Program Files\Opera
2007-07-18 21:31    138368    --a------    C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2007-07-15 15:16    499712    --a------    C:\WINDOWS\system32\msvcp71.dll
2007-07-15 15:16    348160    --a------    C:\WINDOWS\system32\msvcr71.dll
2007-07-15 15:16    1060864    --a------    C:\WINDOWS\system32\MFC71.dll
2007-07-15 14:29    ---------    d--------    C:\Program Files\Comodo
2007-07-14 13:37    ---------    d--------    C:\Program Files\Safer Networking
2007-07-10 13:17    ---------    d--------    C:\Program Files\Google
2007-07-07 17:59    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\Comodo
2007-07-07 12:28    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\Apple Computer
2007-07-06 17:09    ---------    d--h-----    C:\Program Files\InstallShield Installation Information
2007-07-05 10:19    ---------    d--------    C:\Program Files\Lavasoft
2007-07-04 14:29    664    --a------    C:\WINDOWS\system32\d3d9caps.dat
2007-06-24 21:14    ---------    d--------    C:\Program Files\Motherboard Monitor 5
2007-06-21 22:55    ---------    d--------    C:\Program Files\BACKUP PAINT
2007-06-20 00:00    ---------    d--------    C:\Program Files\RegSupreme
2007-06-19 18:25    0    --ah-----    C:\WINDOWS\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2007-06-19 18:24    0    --ah-----    C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2007-06-19 18:23    ---------    d--------    C:\Program Files\Common Files\Logitech
2007-06-19 17:23    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\Logitech
2007-06-19 17:16    118784    -r-------    C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
2007-06-19 17:14    ---------    d--------    C:\Program Files\Logitech
2007-06-19 17:14    ---------    d--------    C:\Program Files\Common Files\InstallShield
2007-06-15 21:13    41    --a------    C:\WINDOWS\system32\ae2_g.dll
2007-06-14 09:29    241904    --a------    C:\WINDOWS\UNBOC.EXE
2007-06-10 22:27    ---------    d--------    C:\Program Files\InterActual
2007-06-04 15:18    9344    --a------    C:\WINDOWS\system32\drivers\NSDriver.sys
2007-06-04 15:17    8320    --a------    C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-06-04 15:14    6272    --a------    C:\WINDOWS\system32\drivers\AWRTPD.sys
2007-06-03 10:37    ---------    d--------    C:\DOCUME~1\user\APPLIC~1\Audacity
2007-05-30 08:25    4212    ---h-----    C:\WINDOWS\system32\zllictbl.dat
2007-05-16 17:12    683520    --a------    C:\WINDOWS\system32\inetcomm.dll
2007-05-08 17:01    208896    --a------    C:\WINDOWS\CMDLIC.DLL
2006-11-07 22:55    774144    --a------    C:\Program Files\RngInterstitial.dll


(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{00000000-623A-11D4-BCDB-005004131777}    REG_SZ            ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 03:11]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2005-09-08 00:35]
"nwiz"="nwiz.exe" [2006-08-12 06:43 C:\WINDOWS\system32\nwiz.exe]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 15:24]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 15:14]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2007-04-22 11:10]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-11-07 23:03]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\5020\SiteAdv.exe" [2006-11-18 14:46]
"Zone Labs Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-03-09 01:02]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" [2006-11-09 16:07]
"WinPatrol"="C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe" [2007-02-12 09:17]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 19:19]
"SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2007-07-18 21:31]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-03-09 01:02]
"Launch LGDCore"="C:\Program Files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 17:31]
"Launch LCDMon"="C:\Program Files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 17:14]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 15:44 C:\WINDOWS\KHALMNPR.Exe]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 15:44 C:\WINDOWS\KHALMNPR.Exe]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"Picasa Media Detector"="C:\Program Files\Picasa\PicasaMediaDetector.exe" [2007-06-16 01:15]
"cnfgCav"="C:\Program Files\Comodo\Comodo AntiVirus\CMain.exe" []
"BOC-424"="C:\PROGRA~1\Comodo\CBOClean\BOC424.exe" [2007-06-14 09:28]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE" [2007-06-26 22:05]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-07-02 17:10]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2005-05-31 10:04]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-06-19 17:16]

C:\Documents and Settings\user\Start Menu\Programs\Startup\
Alienware Dock.lnk - C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe [2007-03-10 01:21:15]
OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe [2006-09-28 20:47:52]
SpywareGuard.lnk - C:\Program Files\SpywareGuard\sgmain.exe [2003-08-30 04:05:35]
SUPERAntiSpyware Free Edition.lnk - C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF1.exe [2006-10-02 21:44:03]

C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 04:21:22]
HP Photosmart Premier Hurtig start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 07:56:20]
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-06-19 17:16:44]
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-06-19 18:23:07]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2007-01-19 15:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL 2007-04-28 09:53 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
C:\Program Files\AlienGUIse\fastload.dll 2001-12-21 00:34 24576 C:\Program Files\AlienGUIse\fastload.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=wbsys.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"=  :\WINDOWS\syste

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup"

R0 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms;C:\WINDOWS\system32\DRIVERS\gagp30kx.sys
R1 ewido security suite driver;ewido security suite driver;\??\C:\Program Files\ewido\security suite\guard.sys
R1 SASDIFSV;SASDIFSV;\??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
R1 SASKUTIL;SASKUTIL;\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
R1 sp_rsdrv2;Spyware Terminator Driver 2;\??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
R2 ehRecvr;Media Center-modtagertjeneste;C:\WINDOWS\eHome\ehRecvr.exe
R2 ehSched;Tjenesten Media Center-planl‘gning;C:\WINDOWS\eHome\ehSched.exe
R2 LBeepKE;LBeepKE;C:\WINDOWS\system32\Drivers\LBeepKE.sys
R2 mbmiodrvr;mbmiodrvr;\??\C:\WINDOWS\system32\mbmiodrvr.sys
R2 McrdSvc;Media Center Extender Service;C:\WINDOWS\ehome\mcrdsvc.exe
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service;C:\WINDOWS\system32\drivers\ADIHdAud.sys
R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys
R3 BOCDRIVE;BOClean Kernel Monitor.;\??\C:\Program Files\Comodo\CBOClean\BOCDRIVE.sys
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys
R3 L8042mou;SetPoint PS/2 Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\L8042mou.Sys
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver;C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
R3 LMouKE;SetPoint Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver;C:\WINDOWS\system32\drivers\msmpu401.sys
R3 MTsensor;ATK0110 ACPI UTILITY;C:\WINDOWS\system32\DRIVERS\ASACPI.sys
R3 ndiscm;Motorola SURFboard USB Cable Modem Windows Driver;C:\WINDOWS\system32\DRIVERS\NetMotCM.sys
R3 QCMerced;Logitech QuickCam Communicate;C:\WINDOWS\system32\DRIVERS\LVCM.sys
R3 SASENUM;SASENUM;\??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
R3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys
R3 SenFiltService;SenFilt Service;C:\WINDOWS\system32\drivers\Senfilt.sys
R3 Wdf01000;Wdf01000;C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
S2 BroadWaveService;BroadWave Service;"C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe" -service
S2 XAMPP;XAMPP Service;C:\Program Files\Xampp\service.exe
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\fetnd5.sys
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0;C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service;C:\WINDOWS\system32\drivers\HdAudio.sys
S3 idsvc;Windows CardSpace;"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
S3 L8042Kbd;Logitech SetPoint Keyboard Driver;C:\WINDOWS\system32\Drivers\L8042Kbd.sys
S3 LHidKe;Logitech SetPoint HID Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\LHidKE.Sys
S3 MHN;MHN;C:\WINDOWS\System32\svchost.exe -k netsvcs
S3 MHNDRV;MHN driver;C:\WINDOWS\system32\DRIVERS\mhndrv.sys
S3 NCHSSVAD;SoundTap Recorder;C:\WINDOWS\system32\drivers\nchssvad.sys
S3 nm;Network Monitor Driver;C:\WINDOWS\system32\DRIVERS\NMnt.sys
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service;"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"

*Newly Created Service* - BOCORE

Contents of the 'Scheduled Tasks' folder
2007-08-02 14:43:54 C:\WINDOWS\Tasks\MP Scheduled Scan.job - C:\Program Files\Windows Defender\MpCmdRun.exe
2007-07-14 11:01:07 C:\WINDOWS\Tasks\Spybot - Search & Destroy -  Scheduled Task.job - C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-02 17:56:43
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\aawservice]
"ImagePath"="\"C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe\""

Completion time: 2007-08-02 17:58:42
C:\ComboFix-quarantined-files.txt ... 2007-08-02 17:57
C:\ComboFix2.txt ... 2007-04-14 18:56

    --- E O F ---


********************************* ROOTCHK-(21-07-07)-LOG, by ejvindh
02-08-2007 18:13:31,93

Something prevents the detection of hidden drivers. This may have two causes:
(1) Security-software prevents creation of dummy drivers.
(2) You have rootkit that prevents writing and/or reading the registry.
If you cannot rule out (1), a rootkit scan is recommended.
Rootchk will not check further for hidden drivers.

..................................................................

Driver __o (hidden) is present. Run COMBOFIX by sUBs.
Driver $DRVNAM$ (hidden) is present. Run COMBOFIX by sUBs.
Driver $sys$aries (hidden) is present. Run RKPRFGUI by Sophos.
Driver {2188bad5-efbe-47e7-a92b-7144f44f9be5} (hidden) is present. Run COMBOFIX by sUBs.
Driver 000031BE (hidden) is present. Run COMBOFIX by sUBs.
Driver 15AnRegProt (hidden) is present. Run COMBOFIX by sUBs.
Driver 15MSOFFTDI (hidden) is present. Run COMBOFIX by sUBs.
Driver 2D49A3E8 (hidden) is present. Run COMBOFIX by sUBs.
Driver 45MSOFFTDI (hidden) is present. Run COMBOFIX by sUBs.
Driver 47MSOFFTDI (hidden) is present. Run COMBOFIX by sUBs.
Driver 50MSOFFTDI (hidden) is present. Run COMBOFIX by sUBs.
Driver 51ANREGPROT (hidden) is present. Run COMBOFIX by sUBs.
Driver 51MSOFFTDI (hidden) is present. Run COMBOFIX by sUBs.
Driver 67388760 (hidden) is present. Run COMBOFIX by sUBs.
Driver 7753E06A (hidden) is present. Run COMBOFIX by sUBs.
Driver ABHCOP (hidden) is present. Run COMBOFIX by sUBs.
Driver acpidisk (hidden) is present. Run COMBOFIX by sUBs.
Driver AdServer (hidden) is present. Run COMBOFIX by sUBs.
Driver adsrsvc (hidden) is present. Run COMBOFIX by sUBs.
Driver agpbrdg5 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver albus (hidden) is present. Run COMBOFIX by sUBs.
Driver allowcontinue (hidden) is present. Run COMBOFIX by sUBs.
Driver amdk5 (hidden) is present. Run COMBOFIX by sUBs.
Driver ANFAD (hidden) is present. Run COMBOFIX by sUBs.
Driver armdvc (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver armrfc (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver arprmdg5 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver asc3550u (hidden) is present. Run COMBOFIX by sUBs.
Driver aspwstate (hidden) is present. Run COMBOFIX by sUBs.
Driver ast (hidden) is present. Run COMBOFIX by sUBs.
Driver asusrx25 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver atiddbxx (hidden) is present. Run HAXFIX by Marckie.
Driver atmsig (hidden) is present. Run COMBOFIX by sUBs.
Driver axdebugld (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver BDGUARD (hidden) is present. Run COMBOFIX by sUBs.
Driver bdt11 (hidden) is present. Run COMBOFIX by sUBs.
Driver bflytsat (hidden) is present. Run COMBOFIX by sUBs.
Driver bingdu (hidden) is present. Run COMBOFIX by sUBs.
Driver BITS32 (hidden) is present. Run COMBOFIX by sUBs.
Driver bjo12 (hidden) is present. Run COMBOFIX by sUBs.
Driver BNESS (hidden) is present. Run COMBOFIX by sUBs.
Driver BRGNS (hidden) is present. Run COMBOFIX by sUBs.
Driver cdnprot (hidden) is present. Run COMBOFIX by sUBs.
Driver CDNTRAN (hidden) is present. Run COMBOFIX by sUBs.
Driver cdscsix3r (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver CelInDrv (hidden) is present. Run COMBOFIX by sUBs.
Driver CELINDRV (hidden) is present. Run COMBOFIX by sUBs.
Driver ckptrqor (hidden) is present. Run COMBOFIX by sUBs.
Driver ClipArt (hidden) is present. Run COMBOFIX by sUBs.
Driver cnprov (hidden) is present. Run COMBOFIX by sUBs.
Driver CNSMINKP (hidden) is present. Run COMBOFIX by sUBs.
Driver com+_messages (hidden) is present. Run COMBOFIX by sUBs.
Driver combofix (hidden) is present. Run COMBOFIX by sUBs.
Driver Core (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver cpudev (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver CsdDriver (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver daming (hidden) is present. Run COMBOFIX by sUBs.
Driver ddirectxt (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver dglp13 (hidden) is present. Run COMBOFIX by sUBs.
Driver directout (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver directprt (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver directx (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver directxclicks (hidden) is present. Run SDFIX by AndyManchesta.
Driver directxclks (hidden) is present. Run SDFIX by AndyManchesta.
Driver dmtd (hidden) is present. Run COMBOFIX by sUBs.
Driver docentd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver DP1112 (hidden) is present. Run SDFIX by AndyManchesta.
Driver drivemngr (hidden) is present. Run SDFIX by AndyManchesta.
Driver Driver (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver driverpp (hidden) is present. Run COMBOFIX by sUBs.
Driver dvdkernl (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver eps32sys (hidden) is present. HAXFIX by Marckie.
Driver epsn2sys (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver epsonsys (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver estsprt (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver EXAMPLE (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver EXAMPLE1 (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver explorer (hidden) is present. Run SDFIX by AndyManchesta.
Driver FAD (hidden) is present. Run COMBOFIX by sUBs.
Driver fanxctrld (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver Fast (hidden) is present. Run COMBOFIX by sUBs.
Driver ffpbek (hidden) is present. Run COMBOFIX by sUBs.
Driver file_replication (hidden) is present. Run COMBOFIX by sUBs.
Driver Filter (hidden) is present. Run COMBOFIX by sUBs.
Driver fkot15 (hidden) is present. Run SDFIX by AndyManchesta.
Driver fkwld (hidden) is present. Run COMBOFIX by sUBs.
Driver flashdrv3 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver FOPF (hidden) is present. Run COMBOFIX by sUBs.
Driver fpuext (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver front (hidden) is present. Run COMBOFIX by sUBs.
Driver FSPROT (hidden) is present. Run COMBOFIX by sUBs.
Driver fwdrv.sys (hidden) is present. Run COMBOFIX by sUBs.
Driver gb (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver gdiw2k (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver gdow2k.sys (hidden) is present. HAXFIX by Marckie.
Driver GuartServ (hidden) is present. Run SDFIX by AndyManchesta.
Driver guhvj (hidden) is present. Run COMBOFIX by sUBs.
Driver h1dd3n (hidden) is present. Run SDFIX by AndyManchesta.
Driver haxdrv (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver HCALWAY (hidden) is present. Run COMBOFIX by sUBs.
Driver hdfs (hidden) is present. Run COMBOFIX by sUBs.
Driver hdusb (hidden) is present. Run COMBOFIX by sUBs.
Driver hflt_ipf (hidden) is present. Run COMBOFIX by sUBs.
Driver hide_evr2 (hidden) is present. Run SDFIX by AndyManchesta.
Driver hidport (hidden) is present. Run COMBOFIX by sUBs.
Driver hidproc (hidden) is present. Run COMBOFIX by sUBs.
Driver HidServf (hidden) is present. Run COMBOFIX by sUBs.
Driver Hpdriver (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver hpprintdrv (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver huy32 (hidden) is present. Run RUSTBFIX by ejvindh, COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver HWRegProt (hidden) is present. Run COMBOFIX by sUBs.
Driver i82440bx (hidden) is present. Run COMBOFIX by sUBs.
Driver ICF (hidden) is present. Run COMBOFIX by sUBs.
Driver idersrvc (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver idnaux (hidden) is present. Run COMBOFIX by sUBs.
Driver ies4service (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver iesprt (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver iesservice4 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver iexplor (hidden) is present. Run COMBOFIX by sUBs.
Driver ipudpb2 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver ispvcr (hidden) is present. Run COMBOFIX by sUBs.
Driver jr (hidden) is present. Run COMBOFIX by sUBs.
Driver k53lock (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver kcp (hidden) is present. Run SDFIX by AndyManchesta.
Driver ke7dnl (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver kednld (hidden) is present. Run COMBOFIX by sUBs.
Driver kprof (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver KWatch1 (hidden) is present. Run SDFIX by AndyManchesta.
Driver KXSMP (hidden) is present. Run COMBOFIX by sUBs.
Driver lanfs (hidden) is present. Run COMBOFIX by sUBs.
Driver lanmandrv (hidden) is present. Run COMBOFIX by sUBs.
Driver LanPort (hidden) is present. Run COMBOFIX by sUBs.
Driver linksrvd (hidden) is present. Run HAXFIX by Marckie.
Driver lsass (hidden) is present. Run SDFIX by AndyManchesta.
Driver lzx32 (hidden) is present. Run RUSTBFIX by ejvindh, COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver m_hook (hidden) is present. Run COMBOFIX by sUBs.
Driver m32lock (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver m5 (hidden) is present. Run SDFIX by AndyManchesta.
Driver main1 (hidden) is present. Run SDFIX by AndyManchesta.
Driver mcfdrv (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver MEDIADRVER (hidden) is present. Run COMBOFIX by sUBs.
Driver mediaply (hidden) is present. Run SDFIX by AndyManchesta.
Driver mfbx (hidden) is present. Run COMBOFIX by sUBs.
Driver mfstcpip (hidden) is present. HAXFIX by Marckie.
Driver mi5035a5 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver mm77lgn (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver mmc (hidden) is present. Run COMBOFIX by sUBs.
Driver mmccrd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver mmlogon (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver MOPROT (hidden) is present. Run COMBOFIX by sUBs.
Driver mpsmp (hidden) is present. Run COMBOFIX by sUBs.
Driver msdirect (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver msdirectx (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver msdirectxclicks (hidden) is present. Run SDFIX by AndyManchesta.
Driver msdirectxclks (hidden) is present. Run SDFIX by AndyManchesta.
Driver MSDLOBJDRV (hidden) is present. Run COMBOFIX by sUBs.
Driver msdndr (hidden) is present. Run SDFIX by AndyManchesta.
Driver msfsr (hidden) is present. Run SDFIX by AndyManchesta.
Driver msftcpip (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver msgegh (hidden) is present. Run SDFIX by AndyManchesta.
Driver msguard (hidden) is present. Run RUSTBFIX by ejvindh, COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver mspcidrv (hidden) is present. Run COMBOFIX by sUBs.
Driver msprotect (hidden) is present. Run COMBOFIX by sUBs.
Driver msqmx (hidden) is present. Run COMBOFIX by sUBs.
Driver msrdr2 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver mssync2020 (hidden) is present. Run SDFIX by AndyManchesta.
Driver msudp4 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver msusbbux (hidden) is present. Run COMBOFIX by sUBs.
Driver MZU_RK (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver ncio (hidden) is present. Run COMBOFIX by sUBs.
Driver nclaby (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver ndcia (hidden) is present. Run COMBOFIX by sUBs.
Driver NDnet1 (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver ne (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver new_drv (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver nkgfs (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver nodantivir (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver ntio256 (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver ntkrnl (hidden) is present. Run COMBOFIX by sUBs.
Driver ntldr.sys (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver NtmlSvc (hidden) is present. Run COMBOFIX BY sUBs.
Driver ntndis (hidden) is present. Run COMBOFIX BY sUBs or SDFIX by AndyManchesta.
Driver NtTf (hidden) is present. Run COMBOFIX BY sUBs.
Driver nucdrv (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver nuclab (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver obbf117 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver obbn13rt (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver Oddysee (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver openglssd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver openglwxd (hidden) is present. HAXFIX by Marckie.
Driver p4p_service (hidden) is present. Run COMBOFIX by sUBs.
Driver p76xxsks (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver p79bsksb (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver p81eskse (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver paraudio (hidden) is present. Run COMBOFIX by sUBs.
Driver parcls (hidden) is present. Run COMBOFIX by sUBs.
Driver PartMsg (hidden) is present. Run COMBOFIX by sUBs.
Driver Partner (hidden) is present. Run COMBOFIX by sUBs.
Driver PATTERNS (hidden) is present. Run COMBOFIX by sUBs.
Driver pcmmup (hidden) is present. Run COMBOFIX by sUBs.
Driver pe386 (hidden) is present. Run RUSTBFIX by ejvindh, COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver performance_monitor (hidden) is present. Run COMBOFIX by sUBs.
Driver pnpdrv (hidden) is present. Run SDFIX by AndyManchesta.
Driver poof (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver PopWinIe (hidden) is present. Run COMBOFIX by sUBs.
Driver PROCSERV (hidden) is present. Run COMBOFIX by sUBs.
Driver PROT (hidden) is present. Run COMBOFIX by sUBs.
Driver prt21sks (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver prt47sys (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver prw76sks (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver ramvxt (hidden) is present. HAXFIX by Marckie.
Driver rdriv (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver regepsrvc (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver ReIISAdmin (hidden) is present. Run COMBOFIX by sUBs.
Driver Relations (hidden) is present. Run COMBOFIX by sUBs.
Driver remon (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver RGwatch (hidden) is present. Run COMBOFIX by sUBs.
Driver RioDrvs (hidden) is present. Run COMBOFIX by sUBs.
Driver RKBYPASS (hidden) is present. Run COMBOFIX by sUBs.
Driver rlx66dob (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver rofl (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver romman (hidden) is present. Run COMBOFIX by sUBs.
Driver roreg (hidden) is present. Run COMBOFIX by sUBs.
Driver rosa (hidden) is present. Run COMBOFIX by sUBs.
Driver RpcApi (hidden) is present. Run COMBOFIX by sUBs.
Driver Runtime (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver Runtime2 (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver satad645 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver satau325 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver scce4 (hidden) is present. Run COMBOFIX by sUBs.
Driver Scripts (hidden) is present. Run COMBOFIX by sUBs.
Driver scsipsrvc (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver sdcardX2 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver se500mdmd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver se633mxxd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver security (hidden) is present. Run COMBOFIX by sUBs.
Driver SecurityMonitoringDriver (hidden) is present. Run COMBOFIX by sUBs.
Driver SHIPING (hidden) is present. Run COMBOFIX by sUBs.
Driver Simple (hidden) is present. Run COMBOFIX by sUBs.
Driver sks2drvr (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver SMONITOR (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver Sndsystem (hidden) is present. Run SDFIX by AndyManchesta.
Driver socket573 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver socketx113 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver squell (hidden) is present. Run COMBOFIX by sUBs.
Driver ssipod1 (hidden) is present. Run HAXFIX by Marckie.
Driver suhdlog.sys (hidden) is present. Run SDFIX by AndyManchesta.
Driver SystemInspect (hidden) is present. Run COMBOFIX by sUBs.
Driver systemm (hidden) is present. Run COMBOFIX by sUBs.
Driver szr_droiver (hidden) is present. Run SDFIX by AndyManchesta.
Driver Tech (hidden) is present. Run COMBOFIX by sUBs.
Driver templates (hidden) is present. Run COMBOFIX by sUBs.
Driver test (hidden) is present. Run COMBOFIX by sUBs.
Driver test1 (hidden) is present. Run COMBOFIX by sUBs.
Driver TIME (hidden) is present. Run SDFIX by AndyManchesta.
Driver timedrv26 (hidden) is present. Run COMBOFIX by sUBs.
Driver trojans (hidden) is present. Run SDFIX by AndyManchesta.
Driver umk8 (hidden) is present. Run COMBOFIX by sUBs.
Driver Uninterruptible (hidden) is present. Run COMBOFIX by sUBs.
Driver UPE (hidden) is present. Run COMBOFIX by sUBs.
Driver usb8028 (hidden) is present. Run COMBOFIX by sUBs.
Driver usb8028x (hidden) is present. Run COMBOFIX by sUBs.
Driver VideoAti0 (hidden) is present. A rootkit scan is recommended.
Driver vissv (hidden) is present. Run SDFIX by AndyManchesta.
Driver voodoo (hidden) is present. Run COMBOFIX by sUBs.
Driver vspf (hidden) is present. Run COMBOFIX by sUBs.
Driver vxdgfx (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver vxvgfv (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver w3a9 (hidden) is present. Run COMBOFIX by sUBs.
Driver wartamd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver WFSVL (hidden) is present. Run COMBOFIX by sUBs.
Driver wincom32 (hidden) is present. Run COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver windbg48 (hidden) is present. Run COMBOFIX by sUBs.
Driver winlogin (hidden) is present. Run COMBOFIX by sUBs.
Driver winmon (hidden) is present. Run COMBOFIX by sUBs.
Driver wizca (hidden) is present. Run COMBOFIX by sUBs.
Driver WLMSVS (hidden) is present. Run SDFIX by AndyManchesta.
Driver wnlogon (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver wnlogow (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver wrmdrv (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver wsfit32 (hidden) is present. Run COMBOFIX by sUBs.
Driver wspipe (hidden) is present. Run COMBOFIX by sUBs.
Driver WTIME (hidden) is present. Run SDFIX by AndyManchesta.
Driver xartcd7 (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver xcdkernl (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver xkeyshd (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver xpdt (hidden) is present. Run RUSTBFIX by Ejvindh, COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver xpdx (hidden) is present. Run RUSTBFIX by Ejvindh, COMBOFIX by sUBs or SDFIX by AndyManchesta.
Driver xpsp2reg (hidden) is present. Run COMBOFIX by sUBs.
Driver xpsp2tdi (hidden) is present. Run COMBOFIX by sUBs.
Driver Zloguwzp (hidden) is present. Run COMBOFIX by sUBs.
Driver zopenssld (hidden) is present. Run HAXFIX by Marckie or COMBOFIX by sUBs.
Driver zpzbwbhu (hidden) is present. Run COMBOFIX by sUBs.
Driver ZSTDP (hidden) is present. Run COMBOFIX by sUBs.
Driver npf (hidden) is present. Run COMBOFIX by sUBs.
Driver npf (visible) is present. Run COMBOFIX by sUBs.
Driver IPRIP (hidden) is present. Run COMBOFIX by sUBs.
Driver IPRIP (visible) is present. Run COMBOFIX by sUBs.
Driver #BadRKDemo# (hidden) is present. A rootkit scan is recommended.
Driver _tdiserv_HOOK (hidden) is present. A rootkit scan is recommended.
Driver adpsSvc (hidden) is present. A rootkit scan is recommended.
Driver ALGCL (hidden) is present. A rootkit scan is recommended.
Driver ati12k (hidden) is present. A rootkit scan is recommended.
Driver BLUEO (hidden) is present. A rootkit scan is recommended.
Driver bridges (hidden) is present. A rootkit scan is recommended.
Driver chgsprt (hidden) is present. A rootkit scan is recommended.
Driver cmdriver (hidden) is present. A rootkit scan is recommended.
Driver delphi (hidden) is present. A rootkit scan is recommended.
Driver DER005 (hidden) is present. A rootkit scan is recommended.
Driver DeviceMap (hidden) is present. A rootkit scan is recommended.
Driver directdll (hidden) is present. A rootkit scan is recommended.
Driver dsniff (hidden) is present. A rootkit scan is recommended.
Driver DVDrealm (hidden) is present. A rootkit scan is recommended.
Driver elpow_spy (hidden) is present. A rootkit scan is recommended.
Driver et54fg (hidden) is present. A rootkit scan is recommended.
Driver GUI30svr (hidden) is present. A rootkit scan is recommended.
Driver guowaaayu (hidden) is present. A rootkit scan is recommended.
Driver GxNdisHook (hidden) is present. A rootkit scan is recommended.
Driver hpr34k8 (hidden) is present. A rootkit scan is recommended.
Driver i386p (hidden) is present. A rootkit scan is recommended.
Driver imaslip (hidden) is present. A rootkit scan is recommended.
Driver isa32 (hidden) is present. A rootkit scan is recommended.
Driver kbdrv64 (hidden) is present. A rootkit scan is recommended.
Driver KSDT1983 (hidden) is present. A rootkit scan is recommended.
Driver KSM (hidden) is present. A rootkit scan is recommended.
Driver mcemgr (hidden) is present. A rootkit scan is recommended.
Driver MdeRy (hidden) is present. A rootkit scan is recommended.
Driver mdojtgmr (hidden) is present. A rootkit scan is recommended.
Driver mhvl (hidden) is present. A rootkit scan is recommended.
Driver minipci (hidden) is present. A rootkit scan is recommended.
Driver MONDRV (hidden) is present. A rootkit scan is recommended.
Driver mrfckdll (hidden) is present. A rootkit scan is recommended.
Driver msiisdrv (hidden) is present. A rootkit scan is recommended.
Driver msiishlp (hidden) is present. A rootkit scan is recommended.
Driver msinfmgr (hidden) is present. A rootkit scan is recommended.
Driver MSMAPDEVICE (hidden) is present. A rootkit scan is recommended.
Driver msriv1 (hidden) is present. A rootkit scan is recommended.
Driver msvnc (hidden) is present. A rootkit scan is recommended.
Driver NdisFilter (hidden) is present. A rootkit scan is recommended.
Driver NetCN (hidden) is present. A rootkit scan is recommended.
Driver netpt (hidden) is present. A rootkit scan is recommended.
Driver NetSTrSvc (hidden) is present. A rootkit scan is recommended.
Driver ntload (hidden) is present. A rootkit scan is recommended.
Driver nuidflnt (hidden) is present. A rootkit scan is recommended.
Driver nvmini (hidden) is present. A rootkit scan is recommended.
Driver NvVideoCenter (hidden) is present. A rootkit scan is recommended.
Driver oran (hidden) is present. A rootkit scan is recommended.
Driver ORANS (hidden) is present. A rootkit scan is recommended.
Driver phde32 (hidden) is present. A rootkit scan is recommended.
Driver phide_ex.sys (hidden) is present. A rootkit scan is recommended.
Driver raid (hidden) is present. A rootkit scan is recommended.
Driver rstk (hidden) is present. A rootkit scan is recommended.
Driver Rtkit (hidden) is present. A rootkit scan is recommended.
Driver rudll (hidden) is present. A rootkit scan is recommended.
Driver SCService (hidden) is present. A rootkit scan is recommended.
Driver sdqgvqcm (hidden) is present. A rootkit scan is recommended.
Driver SLMDriver (hidden) is present. A rootkit scan is recommended.
Driver soundwav (hidden) is present. A rootkit scan is recommended.
Driver spoolv (hidden) is present. A rootkit scan is recommended.
Driver streamex (hidden) is present. A rootkit scan is recommended.
Driver sysbus32 (hidden) is present. A rootkit scan is recommended.
Driver SysDrver (hidden) is present. A rootkit scan is recommended.
Driver syswav (hidden) is present. A rootkit scan is recommended.
Driver TestUSB (hidden) is present. A rootkit scan is recommended.
Driver Unreal (hidden) is present. A rootkit scan is recommended.
Driver usbehcl (hidden) is present. A rootkit scan is recommended.
Driver usbine (hidden) is present. A rootkit scan is recommended.
Driver usbmini (hidden) is present. A rootkit scan is recommended.
Driver USBTest (hidden) is present. A rootkit scan is recommended.
Driver VANTI (hidden) is present. A rootkit scan is recommended.
Driver VideoAti0 (hidden) is present. A rootkit scan is recommended.
Driver virdr (hidden) is present. A rootkit scan is recommended.
Driver virdrv (hidden) is present. A rootkit scan is recommended.
Driver VKTServ (hidden) is present. A rootkit scan is recommended.
Driver vmsdrv (hidden) is present. A rootkit scan is recommended.
Driver VolMapDev (hidden) is present. A rootkit scan is recommended.
Driver vvcxqgpq (hidden) is present. A rootkit scan is recommended.
Driver winntbaken (hidden) is present. A rootkit scan is recommended.
Driver winrpcpp (hidden) is present. A rootkit scan is recommended.
Driver wuam (hidden) is present. A rootkit scan is recommended.
Driver xHide (hidden) is present. A rootkit scan is recommended.
Driver XRW005 (hidden) is present. A rootkit scan is recommended.
Driver Ygyfrmrh (hidden) is present. A rootkit scan is recommended.
Driver Yjbplcow (hidden) is present. A rootkit scan is recommended.
Driver Yndbybmh (hidden) is present. A rootkit scan is recommended.
Driver Yxgunlzu (hidden) is present. A rootkit scan is recommended.
Driver Zrwchrhu (hidden) is present. A rootkit scan is recommended.
Driver Zxbnredm (hidden) is present. A rootkit scan is recommended.
Driver Zxftajzo (hidden) is present. A rootkit scan is recommended.
Driver Zykheptd (hidden) is present. A rootkit scan is recommended.
Driver irmon (hidden) is present. A rootkit scan is recommended.
Driver irmon (visible) is present. A rootkit scan is recommended.

********************************* ROOTCHK-LOG-end


catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-02 18:13:32
Windows 5.1.2600 Service Pack 2
scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:00000bd6

scanning hidden files ...

hidden processes: 0
hidden files: 0






Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:14:54, on 02-08-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\5020\SAService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Comodo\CBOClean\BOCORE.exe
C:\Program Files\Comodo\CBOClean\BOC424.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [cnfgCav] "C:\Program Files\Comodo\Comodo AntiVirus\CMain.exe"
O4 - HKLM\..\Run: [BOC-424] C:\PROGRA~1\Comodo\CBOClean\BOC424.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: SUPERAntiSpyware Free Edition.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Hurtig start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://www.adobe.com
O15 - Trusted Zone: *.adobe.com
O15 - Trusted Zone: *.dansk-it.dk
O15 - Trusted Zone: http://www.danskebank.dk
O15 - Trusted Zone: *.danskebank.dk
O15 - Trusted Zone: http://www.eksperten.dk
O15 - Trusted Zone: http://chat.forum.dk
O15 - Trusted Zone: http://www.forum.dk
O15 - Trusted Zone: http://*.forum.dk
O15 - Trusted Zone: http://safety.live.com
O15 - Trusted Zone: *.live.com
O15 - Trusted Zone: http://movies.msn.com
O15 - Trusted Zone: http://chatb.ofir.dk
O15 - Trusted Zone: *.sol.dk
O15 - Trusted Zone: *.streetracersonline.com
O15 - Trusted Zone: http://sdlc-esd.sun.com
O15 - Trusted Zone: http://*.tdc.dk
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted IP range: http://80.167.151.136
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1182269489125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182269429593
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O18 - Protocol: bw+0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Des

jeg fik vist ikke det hele med af hijack log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:24:52, on 02-08-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\5020\SAService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Comodo\CBOClean\BOCORE.exe
C:\Program Files\Comodo\CBOClean\BOC424.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\DOCUME~1\user\LOCALS~1\Temp\mexe.com
C:\DOCUME~1\user\LOCALS~1\Temp\ScanningProcess.exe
C:\DOCUME~1\user\LOCALS~1\Temp\ScanningProcess.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [cnfgCav] "C:\Program Files\Comodo\Comodo AntiVirus\CMain.exe"
O4 - HKLM\..\Run: [BOC-424] C:\PROGRA~1\Comodo\CBOClean\BOC424.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: SUPERAntiSpyware Free Edition.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Hurtig start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://www.adobe.com
O15 - Trusted Zone: *.adobe.com
O15 - Trusted Zone: *.dansk-it.dk
O15 - Trusted Zone: http://www.danskebank.dk
O15 - Trusted Zone: *.danskebank.dk
O15 - Trusted Zone: http://www.eksperten.dk
O15 - Trusted Zone: http://chat.forum.dk
O15 - Trusted Zone: http://www.forum.dk
O15 - Trusted Zone: http://*.forum.dk
O15 - Trusted Zone: http://safety.live.com
O15 - Trusted Zone: *.live.com
O15 - Trusted Zone: http://movies.msn.com
O15 - Trusted Zone: http://chatb.ofir.dk
O15 - Trusted Zone: *.sol.dk
O15 - Trusted Zone: *.streetracersonline.com
O15 - Trusted Zone: http://sdlc-esd.sun.com
O15 - Trusted Zone: http://*.tdc.dk
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted IP range: http://80.167.151.136
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1182269489125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182269429593
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O18 - Protocol: bw+0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: BroadWave Service (BroadWaveService) - Unknown owner - C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - C:\Program Files\Xampp\filezillaftp\filezillaserver.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\5020\SAService.exe
O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - C:\Program Files\WinClamAVShield\sp_clamsrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - C:\Program Files\Xampp\service.exe (file missing)

--
End of file - 25552 bytes

sidste nye log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:32:12, on 02-08-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\5020\SAService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Comodo\CBOClean\BOCORE.exe
C:\Program Files\Comodo\CBOClean\BOC424.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\explorer.exe
C:\DOCUME~1\user\LOCALS~1\Temp\mexe.com
C:\DOCUME~1\user\LOCALS~1\Temp\ScanningProcess.exe
C:\DOCUME~1\user\LOCALS~1\Temp\ScanningProcess.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\5020\SiteAdv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\5020\SiteAdv.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [cnfgCav] "C:\Program Files\Comodo\Comodo AntiVirus\CMain.exe"
O4 - HKLM\..\Run: [BOC-424] C:\PROGRA~1\Comodo\CBOClean\BOC424.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: SUPERAntiSpyware Free Edition.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Hurtig start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://www.adobe.com
O15 - Trusted Zone: *.adobe.com
O15 - Trusted Zone: *.dansk-it.dk
O15 - Trusted Zone: http://www.danskebank.dk
O15 - Trusted Zone: *.danskebank.dk
O15 - Trusted Zone: http://www.eksperten.dk
O15 - Trusted Zone: http://chat.forum.dk
O15 - Trusted Zone: http://www.forum.dk
O15 - Trusted Zone: http://*.forum.dk
O15 - Trusted Zone: http://safety.live.com
O15 - Trusted Zone: *.live.com
O15 - Trusted Zone: http://movies.msn.com
O15 - Trusted Zone: http://chatb.ofir.dk
O15 - Trusted Zone: *.sol.dk
O15 - Trusted Zone: *.streetracersonline.com
O15 - Trusted Zone: http://sdlc-esd.sun.com
O15 - Trusted Zone: http://*.tdc.dk
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted IP range: http://80.167.151.136
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1182269489125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182269429593
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O18 - Protocol: bw+0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {622D44F0-5044-48CC-9860-462D8325F89D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: BroadWave Service (BroadWaveService) - Unknown owner - C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - C:\Program Files\Xampp\filezillaftp\filezillaserver.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\5020\SAService.exe
O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - C:\Program Files\WinClamAVShield\sp_clamsrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - C:\Program Files\Xampp\service.exe (file missing)

--
End of file - 25538 bytes

ny microworld anti virus log


Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "universal searchbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Object "toolbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "go'zilla Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "wareout Adware" found in File System! Action Taken: No Action Taken.
Object "universal searchbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "universal searchbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKCR\VisualStudio.Launcher.sln" refers to invalid object "{1B2EEDD6-C203-4d04-BD59-78906E3E8AAB}". Action Taken: No Action Taken.
Entry "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" refers to invalid object "C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\PrvCnt.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{0496D9E8-224B-4AFA-8F37-23B98D52F1EB}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{20D4A895-748C-4D88-871C-FDB1695B0169}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{21A127AE-2DAF-40B7-8374-34C3E629521C}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{22B3CC30-77B8-419C-AA4B-F571FDF5D66D}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{3248F0A8-6813-11D6-A77B-00B0D0150060}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{3C662203-292F-4E9D-AE02-281071C06903}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{5E57A8C5-BCD3-4AA6-A20E-A78CC55BE610}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{973F8409-F8DA-4A40-ACB4-12B02F3399D7}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{A06275F4-324B-4E85-95E6-87B2CD729401}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{A797D552-D80F-4EE1-8806-C2EB397A1E52}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{AC76BA86-7AD7-1030-7B44-A70800000002}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{BDCF27CA-BFC4-4F49-8D24-A925C9505AB8}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{D792A069-B96B-40BA-BCB4-E5651A6E5926}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{E47BA573-BBC4-40C1-8A7D-B25F2F2B0DAE}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{EC905264-BCFE-423B-9C42-C3A106266790}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{EE8592F6-FC2B-4AFD-B527-109D127C039F}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}". Action Taken: No Action Taken.

Jeg har aldrig set noget lignende.
Mit bedste råd er http://www.killdisk.com og forfra.
Jeg nægter at tro på at alle de rootkits kan fjernes, uden at smadre Windows fuldstændigt, men jeg prøver lige at få fat i ejvindh, det kan være han har mod på at rense den.
Men det kommer til at tage mange gange den tid som en tur med Killdisk og en nyinstallation vil gøre.

jeg troede ellers at jeg var god til at passe på min computer??

er der et program evt købeprogram du vil anbefale mig?

((Denne PC er indenfor min top5 rekorden mht inficeret; også selvom den tilsyneladende er med fuld WindowsUpdate (SP2) + AVG mm.))
Enig med Fromsej!!!

er der et program I vil anbefale mig til at fjerne der skidt?

og de programmer jeg har til at beskytte min computer med, er det sådan at de slet ikke hjælper?

For mig at se er det fuldstændig helt og aldeles dødfødt at prøve at rense den maskine, men vi kan da gøre et forsøg.
Jeg vil bare en gang til påpege at langt det hurtigste er Killdisk og forfra, det kan tage uger at rense den, og der gives ingen garanti fra min side af at alle rootkits er væk efterfølgende.

Afinstaller Logitech Desktop Messenger i Tilføj/fjern programmer, genstart.

Hent denne fil, og pak den ud til en mappe på skrivebordet:
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Dobbeltklik på filen, og lad den pakke sig ud til en mappe i roden af din harddisk (typisk: c:\SDfix)

Hent haxfix, og gem den på skrivebordet:
http://users.telenet.be/marcvn/tools/haxfix.exe

Dobbeltklik på haxfix.exe og installér haxfix (standard installations-stien er c:\programmer\haxfix eller c:\program files\haxfix). Når installationen er færdig, skal du sikre dig, at der er flueben i "Launch HaxFix". Klik på "Finish"

Et rødt dos-vindue vil åbne, med følgende muligheder:
1. Make logfile
2. Run auto fix
3. Run manual fix
E. Exit Haxfix

Vælg punkt 1, og tryk Enter. Haxfix vil nu scanne computeren. Når den er færdig, vil logfilen åbne. Kopiér indholdet af denne fil herind i tråden (c:\haxfix.txt)

Genstart i fejlsikret, hvis du ikke ved hvordan så kig her:
http://www.ctrlaltdel.dk/forum/forum_posts.asp?TID=23&PN=1

Gå så ind i mappen SDFix, som du fik oprettet tidligere. Dobbeltklik på filen RunThis.bat, for at starte værktøjet. Tryk "y" for at bekræfte, at du kører værktøjet på egen risiko. Så vil værktøjet gå i gang med at fjerne trojanservicen, og lave et par reparationer af registreringsdatabasen. På et tidspunkt vil det bede dig om at trykke en taste for at genstarte computeren. Det skal du gøre, hvorefter computeren vil genstarte efter 15 sekunder.

Genstarten vil tage lidt længere end sædvanligt, idet værktøjet skal have tid til at udføre sit arbejde. Når skrivebordet dukker op, vil værktøjet skrive "Finished". Tryk herefter en taste for at indlæse dine skrivebordsikoner igen.

Genstart, kør Combofix igen.

Åben så SDFix-mappen, find filen Report.txt, og kopier indholdet af denne fil herind, sammen med en ny log fra Hijackthis, husk også C:\haxfix.txt.

@xvid: Er du der stadig, eller har du formateret computeren?

jeg er her man den driller mig ligt jeg vender tilbage

hej igen

jeg har kørt flere programmer man de kan ikke finde noget, er min computer så ren tro I?

... vi bør (=skal) se omtalte Logs fra Fromsej!

Jeg tror at din computer er rimelig ren. Men vi bør have et ekstra check på rootchk-loggen, for at være helt sikker. Jeg vil derfor anbefale dig følgende:

Tag netstikket ud af computeren, deaktiver alle dine sikkerhedsprogrammer, og lav en ny scanning med rootchk.

Genaktiver så sikkerhedsprogrammerne, sæt netstikket i igen, og læg resultatet fra rootchk herind til gennemsyn.

hej igen :-)

hvilken program skal jeg bruge til rootchk-loggen?

Dette:
http://www.uploads.ejvindh.net/rootchk.exe

lukket snart