Hijack this

*SUK*  "vicevært" *S*

Der er også en del utøj...

------------------------------------------------------------------------

Afinstaller
* Winantiviruspro?
via
[Start][Indstilninger][Kontrolpanel][Tilføj/fjern programmer]

Genstart for at fuldføre afinstalationen...

------------------------------------------------------------------------

Kør en scanning med Hijackthis,
Du får herunder nogle filer, som du skal fixe. Det, du skal gøre, er at sætte et flueben ud for disse filer. Når du har gjort det, så lukker du alle andre vinduer ned. Det er meget vigtigt at det eneste vindue, som er åbent er HijackThis vinduet. Husk også at lukke dette vindue, når du har markeret filerne. Nu må du fixe. Klik på Fix checked.

Det er disse, som skal fixes:

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\printer.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [mav_startupmon] "C:\Programmer\Fælles filer\WinAntiVirus Pro 2007\mav_startupmon.exe"
O4 - HKCU\..\Run: [µnBlackList] F:\=Programmer=\Div Video, audio & Brænde prog\AnyDVD-6.1.0.7\Files\µnBlackList.exe

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O20 - AppInit_DLLs: C:\WINDOWS\system32\systems.txt


Genstart normalt.

------------------------------------------------------------------------

-- Hent Combofix fra et af disse links, og gem den på dit skrivebord:
http://download.bleepingcomputer.com/sUBs/combofix.exe
http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe

-- Kør så combofix.exe, som du hentede tidligere, og følg anvisningerne.
Du bør ikke klikke på vinduet imens værktøjet kører, idet det kan få din computer til at fryse.
Når combofix er færdig, og efter det har genstartet, skulle der gerne åbnes en logfil: combofix.txt
Indholdet af denne fil må du gerne lægge herind sammen med en frisk HiJackThis Log...

NB: Inden næste kørsel med HiJackThis.exe skal du OMDØBE programfilen HiJackThis.exe til ALTERNATIV.exe , da visse uønskede elementer har en tendens til at skjule sig når der kører en process ved navn HiJackThis.exe !!!

------------------------------------------------------------------------

Hunter-es- Der er en del åbne spørgsmål der trænger til at blive afsluttet.

silbidor - Jeg har flere gange prøvet at acceptere svarene, men de bliver ved med at stå åbne...Har prøvet en gang mere...

Logfile of HijackThis v1.99.1
Scan saved at 15:50:21, on 05-09-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programmer\Billionton\Bluetooth-software\bin\btwdins.exe
C:\Programmer\Fælles filer\LightScribe\LSSrvc.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmer\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\apps\ABoard\ABoard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\apps\ABoard\AOSD.exe
C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmer\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe
C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
C:\Programmer\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmer\reconserver\reconserver.exe
C:\Programmer\PC Connectivity Solution\ServiceLayer.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\Programmer\Billionton\Bluetooth-software\BTTray.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Hunter\Skrivebord\alternativ.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmer\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programmer\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programmer\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Programmer\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [reconserver] C:\Programmer\reconserver\reconserver.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AnyDVD] "C:\Programmer\SlySoft\AnyDVD\AnyDVD.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON Tools\daemon.exe" -lang 1033
O4 - Startup: HDDlife.lnk = C:\Programmer\HDDlife 3\HDDlifePro.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Send til &Bluetooth - C:\Programmer\Billionton\Bluetooth-software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\Microgaming\Poker\ladbrokesMPP\MPPoker.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\Billionton\Bluetooth-software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\Billionton\Bluetooth-software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\dan.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1169673191531
O16 - DPF: {F9043C85-F6F2-101A-A3C9-08002B2F49FB} (Microsoft Common Dialog Control, version 6.0) - ms-its:C:\Programmer\Poker\TD.lib::/comdlg32.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmer\Billionton\Bluetooth-software\bin\btwdins.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmer\Fælles filer\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programmer\CyberLink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmer\PC Connectivity Solution\ServiceLayer.exe



ComboFix 07-08-30.3 - "Hunter" 2007-09-05 15:32:17.1 - NTFSx86
Microsoft Windows XP Home Edition  5.1.2600.2.1252.1.1030.18.629 [GMT 2:00]
* Created a new restore point


(((((((((((((((((((((((((((((((((((((((  Other Deletions  )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiVirus Pro 2007


(((((((((((((((((((((((((((((((((((((((  Drivers/Services  )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_FOPN


(((((((((((((((((((((((((  Files Created from 2007-08-05 to 2007-09-05  )))))))))))))))))))))))))))))))


2007-09-05 15:28    51,200    --a------    C:\WINDOWS\nircmd.exe
2007-09-04 23:45    <DIR>    d--------    C:\Programmer\WinPcap
2007-09-04 23:45    <DIR>    d--------    C:\Programmer\reconserver
2007-09-04 23:12    <DIR>    d--------    C:\WINDOWS\system32\XMLEXT
2007-09-04 08:21    8,704    --a------    C:\WINDOWS\system32\SpOrder.dll
2007-09-04 07:28    39,424    --a------    C:\WINDOWS\system32\vtr.dll
2007-08-28 21:35    <DIR>    d--------    C:\Programmer\Cerberus
2007-08-20 17:20    <DIR>    d--------    C:\Programmer\GameShadow
2007-08-20 16:57    <DIR>    d--------    C:\DOCUME~1\Hunter\APPLIC~1\InstallShield
2007-08-15 18:37    356,352    --a------    C:\WINDOWS\system32\nvudisp.exe
2007-08-15 18:37    <DIR>    d--------    C:\WINDOWS\nview
2007-08-15 18:36    356,352    --a------    C:\WINDOWS\system32\NVUNINST.EXE
2007-08-15 18:36    <DIR>    d--------    C:\NVIDIA
2007-08-10 22:38    <DIR>    d--------    C:\Programmer\Selectsoft
2007-08-10 12:13    <DIR>    d--------    C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
2007-08-08 18:04    <DIR>    d--------    C:\DOCUME~1\Hunter\APPLIC~1\Template
2007-08-05 11:45    <DIR>    d--hs----    C:\$RECYCLE.BIN
2007-08-05 10:37    <DIR>    d--hs----    C:\Boot


((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-09-03 22:27    ---------    d--------    C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
2007-08-20 19:22    ---------    d--h-----    C:\Programmer\InstallShield Installation Information
2007-08-10 19:22    ---------    d--------    C:\Programmer\NovaLogic
2007-08-07 17:32    ---------    d--------    C:\Programmer\Google
2007-08-06 19:11    ---------    d--------    C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
2007-07-30 19:19    92504    --a------    C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 19:19    92504    --a------    C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19    549720    --a------    C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19    549720    --a------    C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 19:19    53080    --a------    C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19    53080    --a------    C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 19:19    43352    --a------    C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19    325976    --a------    C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19    325976    --a------    C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 19:19    203096    --a------    C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19    203096    --a------    C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 19:19    1712984    --a------    C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:19    1712984    --a------    C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 19:18    33624    --a------    C:\WINDOWS\system32\wups.dll
2007-07-30 19:18    33624    --a------    C:\WINDOWS\system32\dllcache\wups.dll
2007-07-19 08:58    3583488    --a------    C:\WINDOWS\system32\dllcache\mshtml.dll
2007-07-13 01:31    765952    --a------    C:\WINDOWS\system32\dllcache\vgx.dll
2007-07-07 10:55    ---------    d-a------    C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
2007-06-29 00:43    8466432    --a------    C:\WINDOWS\system32\nvcpl.dll
2007-06-29 00:43    81920    --a------    C:\WINDOWS\system32\nvwddi.dll
2007-06-29 00:43    81920    --a------    C:\WINDOWS\system32\nvmctray.dll
2007-06-29 00:43    753664    --a------    C:\WINDOWS\system32\nvcplui.exe
2007-06-29 00:43    6807328    --a------    C:\WINDOWS\system32\dllcache\nv4_mini.sys
2007-06-29 00:43    6729728    --a------    C:\WINDOWS\system32\nvoglnt.dll
2007-06-29 00:43    6234112    --a------    C:\WINDOWS\system32\nvdisps.dll
2007-06-29 00:43    5690624    --a------    C:\WINDOWS\system32\nv4_disp.dll
2007-06-29 00:43    5455872    --a------    C:\WINDOWS\system32\nvdispsr.dll
2007-06-29 00:43    466944    --a------    C:\WINDOWS\system32\nvshell.dll
2007-06-29 00:43    458752    --a------    C:\WINDOWS\system32\nvmccssr.dll
2007-06-29 00:43    45056    --a------    C:\WINDOWS\system32\nvmccsrs.dll
2007-06-29 00:43    442368    --a------    C:\WINDOWS\system32\nvappbar.exe
2007-06-29 00:43    425984    --a------    C:\WINDOWS\system32\keystone.exe
2007-06-29 00:43    37376    --a------    C:\WINDOWS\system32\nvcodins.dll
2007-06-29 00:43    37376    --a------    C:\WINDOWS\system32\nvcod.dll
2007-06-29 00:43    360448    --a------    C:\WINDOWS\system32\nvapi.dll
2007-06-29 00:43    3600384    --a------    C:\WINDOWS\system32\nvvitvsr.dll
2007-06-29 00:43    3518464    --a------    C:\WINDOWS\system32\nvvitvs.dll
2007-06-29 00:43    3321856    --a------    C:\WINDOWS\system32\nvgames.dll
2007-06-29 00:43    3072000    --a------    C:\WINDOWS\system32\nvgamesr.dll
2007-06-29 00:43    307200    --a------    C:\WINDOWS\system32\nvexpbar.dll
2007-06-29 00:43    286720    --a------    C:\WINDOWS\system32\nvnt4cpl.dll
2007-06-29 00:43    2854912    --a------    C:\WINDOWS\system32\nvmoblsr.dll
2007-06-29 00:43    2416640    --a------    C:\WINDOWS\system32\nvwssr.dll
2007-06-29 00:43    2330624    --a------    C:\WINDOWS\system32\nvwss.dll
2007-06-29 00:43    229376    --a------    C:\WINDOWS\system32\nvmccs.dll
2007-06-29 00:43    188416    --a------    C:\WINDOWS\system32\nvmccss.dll
2007-06-29 00:43    1703936    --a------    C:\WINDOWS\system32\nvwdmcpl.dll
2007-06-29 00:43    1626112    --a------    C:\WINDOWS\system32\nwiz.exe
2007-06-29 00:43    155716    --a------    C:\WINDOWS\system32\nvsvc32.exe
2007-06-29 00:43    1474560    --a------    C:\WINDOWS\system32\nview.dll
2007-06-29 00:43    147456    --a------    C:\WINDOWS\system32\nvcolor.exe
2007-06-29 00:43    1339392    --a------    C:\WINDOWS\system32\nvdspsch.exe
2007-06-29 00:43    1142784    --a------    C:\WINDOWS\system32\nvmobls.dll
2007-06-29 00:43    1073152    --a------    C:\WINDOWS\system32\nvcpluir.dll
2007-06-29 00:43    1019904    --a------    C:\WINDOWS\system32\nvwimg.dll
2007-06-29 00:43    1018772    --a------    C:\WINDOWS\system32\nvucode.bin
2007-06-27 16:05    823808    --a------    C:\WINDOWS\system32\dllcache\wininet.dll
2007-06-27 16:05    671232    --a------    C:\WINDOWS\system32\dllcache\mstime.dll
2007-06-27 16:05    6058496    ---------    C:\WINDOWS\system32\dllcache\ieframe.dll
2007-06-27 16:05    52224    ---------    C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-06-27 16:05    477696    --a------    C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-06-27 16:05    459264    ---------    C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-06-27 16:05    44544    ---------    C:\WINDOWS\system32\dllcache\iernonce.dll
2007-06-27 16:05    27648    --a------    C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-06-27 16:05    267776    ---------    C:\WINDOWS\system32\dllcache\iertutil.dll
2007-06-27 16:05    232960    ---------    C:\WINDOWS\system32\dllcache\webcheck.dll
2007-06-27 16:05    193024    --a------    C:\WINDOWS\system32\dllcache\msrating.dll
2007-06-27 16:05    1152000    --a------    C:\WINDOWS\system32\dllcache\urlmon.dll
2007-06-27 16:05    105984    ---------    C:\WINDOWS\system32\dllcache\url.dll
2007-06-27 16:05    102400    ---------    C:\WINDOWS\system32\dllcache\occache.dll
2007-06-27 16:04    384512    ---------    C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-06-27 16:04    383488    ---------    C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-06-27 16:04    230400    ---------    C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-06-27 16:04    153088    ---------    C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-06-27 16:04    132608    --a------    C:\WINDOWS\system32\dllcache\extmgr.dll
2007-06-27 16:04    124928    ---------    C:\WINDOWS\system32\dllcache\advpack.dll
2007-06-27 15:34    317952    --a------    C:\WINDOWS\system32\dllcache\unregmp2.exe
2007-06-27 10:27    63488    ---------    C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-06-27 10:27    13824    ---------    C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-06-27 10:25    625152    ---------    C:\WINDOWS\system32\dllcache\iexplore.exe
2007-06-27 09:00    161792    ---------    C:\WINDOWS\system32\dllcache\ieakui.dll
2007-06-26 08:10    1104896    --a------    C:\WINDOWS\system32\msxml3.dll
2007-06-26 08:10    1104896    ---------    C:\WINDOWS\system32\dllcache\msxml3.dll
2007-06-19 15:32    282112    --a------    C:\WINDOWS\system32\gdi32.dll
2007-06-19 15:32    282112    ---------    C:\WINDOWS\system32\dllcache\gdi32.dll
2007-06-13 15:22    1034240    --a------    C:\WINDOWS\explorer.exe
2007-06-13 15:22    1034240    ---------    C:\WINDOWS\system32\dllcache\explorer.exe
2007-06-11 23:51    10834944    --a------    C:\WINDOWS\system32\dllcache\wmp.dll
2007-06-09 12:01    108144    --a------    C:\WINDOWS\system32\CmdLineExt.dll
    ---------        C:\Programmer\Fælles filer\Microsoft Shared
    ---------        C:\Programmer\Fælles filer


(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIModeChange"="Ati2mdxx.exe" []
"ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" []
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 12:31]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2007-08-17 09:33]
"SunJavaUpdateSched"="C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-26 18:53 C:\WINDOWS\system32\bthprops.cpl]
"PCSuiteTrayApplication"="C:\Programmer\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-03-23 13:20]
"TkBellExe"="C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe" []
"RemoteControl"="C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe" [2005-12-07 22:57]
"LanguageShortcut"="C:\Programmer\CyberLink\PowerDVD\Language\Language.exe" [2006-09-29 21:58]
"OpwareSE2"="C:\Programmer\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 11:00]
"RegistryMechanic"="" []
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-29 00:43]
"nwiz"="nwiz.exe" [2007-06-29 00:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-29 00:43]
"reconserver"="C:\Programmer\reconserver\reconserver.exe" [2007-08-27 03:21]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Programmer\MSN Messenger\MsnMsgr.exe" [2007-01-19 13:55]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-26 18:53]
"MSMSGS"="C:\Programmer\Messenger\msmsgs.exe" [2004-10-13 18:24]
"AnyDVD"="C:\Programmer\SlySoft\AnyDVD\AnyDVD.exe" [2007-05-08 21:41]
"DAEMON Tools"="C:\Programmer\DAEMON Tools\daemon.exe" [2006-11-12 12:48]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Nokia.PCSync"=C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"NoDispBackgroundPage"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"=0 (0x0)
"NoPropertiesMyComputer"=0 (0x0)
"NoFileAssociate"=0 (0x0)
"NoRun"=0 (0x0)
"NoSMHelp"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsHistory"=0 (0x0)
"NoTrayItemsDisplay"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NI.UWA7PK_0001_N96M0507]

"c:\documents and settings\hunter\application data\winantiviruspro2007freeinstall_dk[2].exe" -nag

R0 viaagp;VIA AGP-busfilter;C:\WINDOWS\system32\DRIVERS\viaagp.sys
R3 NPF;WinPcap Packet Driver (NPF);C:\WINDOWS\system32\drivers\NPF.sys
R3 STAC97NA;SigmaTel 3D Environmental Audio;C:\WINDOWS\system32\drivers\stac97na.sys
R3 STAC97NH;STAC97NH;C:\WINDOWS\system32\drivers\stac97nh.sys


**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-05 15:46:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\viaagp]
"ImagePath"="System32\DRIVERS\viaagp.sys"

Completion time: 2007-09-05 15:49:25 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-09-05 15:49

    --- E O F ---

Hijack er nu kørt omdøbt..

Ved du selv hvad dette er :
C:\Programmer\reconserver\reconserver.exe

http://expfaq.1go.dk/?id=3#behandling_af_svar

Ja, den ved jeg hvad er.. En overvågning til ungernes netttrafik...

Hmmm... Hvad vil du få ud af det ???

----------
Slet denne manuelt:
c:\documents and settings\hunter\application data\winantiviruspro2007freeinstall_dk[2].exe

----------

Der er ikke mere 'snavs' ifølge din Log...

Du er velkommen en anden gang...

Du bør rense temp med denne fil, det tager kun få sek.
http://www.spywareinfo.dk/download/cleantempxp2k.bat

Efter sådan en tur er det altid en god ide og rydde op i systemgendannelsesfilerne.
Deaktiver systemgendannelse -> http://www.spywareinfo.dk/#/tip-og-tricks/deaktiver_systemgendannelse.htm
Genstart din computer - aktiver systemgendannelse. Dette gøres samme sted, hvor du deaktiverede, denne gang skal du blot aktivere.
Det vil også være en god idé manuelt at oprette et nyt punkt, som du kan navngive, og vende tilbage til, hvis du skulle få problemer af nogen art.

Et par artikler om sikker surfing finder du her:
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=14414

Safe Surfing...

Mange tak....