Avatar billede poulst1100 Praktikant
04. august 2009 - 16:40 Der er 15 kommentarer og
1 løsning

Noget sender email fra min pc

Der er kommet noget på min PC der sender email ud, det er nok spam. jeg opdagede at min avast post skanner kører og når pilen holdes på ikonet kommer der mærkelige addresser frem i det vindue der vises. Hvad gør jeg for at komme af med det der laver ravage jeg har prøvet med spy doctor uden hjælp og må være sluppet forbi avast. HJÆLP
04. august 2009 - 16:49 #1
Skal vi gætte:
Win98, ME, W2000, XP, Vista, Win7, ... ?
04. august 2009 - 16:49 #2
Hent og instalér CCleaner http://www.ccleaner.com/ + http://www.spywarefri.dk/manualer/manual-for-installation-og-brug-af-ccleaner/
Under installationen får du tilbudt [Yahoo Toolbar]. Du kan sige ja eller *NEJ* til den.
Lad programmet foretage en oprydning...

--------

Hent Malwarebytes Anti-Malware herfra:
http://www.besttechie.net/tools/mbam-setup.exe
Eller herfra ->
http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html

Installer programmet - når det er gjort skal du lade programmet opdatere sig. Herefter åbner et vindue, hvor du skal flytte prikken til "Kør et fuldstændigt systemscan" - klik på Skan Knappen - lad programmet arbejde. Når det er færdig (det tager lidt tid afhængig af hvor meget du har på computeren).
Derefter - Tryk på "Vis resultater" knappen efter scanningen - og herefter tryk på "Fjern det valgte" - nu åbnes log'en og du skal gemme den et sted, hvor du kan finde den igen.
Kopier indholdet herind sammen med en frisk log fra HiJackThis...

...og her er omtalte HiJackThis ->
http://www.spywareinfo.dk/index.htm#/manualer/hijackthis.htm

Bemærk at HiJackThis.exe programmet skal gemmes i en dertil oprettet mappe og IKKE køres direkte fra nettet...

PS: Brug denne version af HJT -> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

Mht.: Vista - HøjreMusseTast på *.EXE filen - Kør som Administrator...

------------------
Avatar billede poulst1100 Praktikant
04. august 2009 - 17:09 #3
Jeg har xp styresystem.
lige nu prøver jeg med Housecall og i firefox browser. scannerprogramet vil ikke starte i explore.
jeg havde noget inde på min pc for ca 2-3 uger siden ssom også blokerede for scanning gennem explore det fik jeg væk med spyware doctor men ikke denne gang
Avatar billede poulst1100 Praktikant
04. august 2009 - 17:26 #4
det der housecall fandt ikke noget. jeg kan ikke systemgendanne det er noget lort.prøver nu med malwarebytes
Avatar billede ptj_11 Forsker
05. august 2009 - 02:40 #5
Som Larry bl.a. siger: Hijackthis
Kør en hijackthis og lad os få loggen op, så vi kan se, vad der kører på din maskine.
/ptj_11
05. august 2009 - 11:56 #6
... samt nævnte [Malwarebytes] procedure ....
Avatar billede johnstigers Seniormester
05. august 2009 - 20:33 #7
Hvordan gik det?
Avatar billede poulst1100 Praktikant
05. august 2009 - 21:00 #8
jeg har kørt malwarebytes og slettet hvad den fandt og nu sendes der ikke noget mere, ihvertfald ikke noget som avast registrer så jeg regner ikke med der er noget.
loggen er det denne:
Malwarebytes' Anti-Malware 1.40
Database version: 2559
Windows 5.1.2600 Service Pack 3

04-08-2009 18:07:16
mbam-log-2009-08-04 (18-07-16).txt

Skan type: Fuldstændig skanning (C:\|D:\|E:\|F:\|G:\|H:\|)
Objekter skannet: 355614
Tid tilbagelagt: 39 minute(s), 32 second(s)

Inficerede Hukommelses Processer: 0
Inficerede Hukommelses Moduler: 1
Inficerede Registeringsdatabase Nøgler: 5
Inficerede Registeringsdatabase Værdier: 2
Inficerede Registeringsdatabase Filer: 0
Inficerede Mapper: 6
Inficerede Filer: 266

Inficerede Hukommelses Processer:
(Ingen mistænkelige filer fundet)

Inficerede Hukommelses Moduler:
C:\WINDOWS\system32\msxm192z.dll (Backdoor.Bot) -> Delete on reboot.

Inficerede Registeringsdatabase Nøgler:
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AlerterALG (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Monopod (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Inficerede Registeringsdatabase Værdier:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msxmlhpr (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ColdWare (Malware.Trace) -> Quarantined and deleted successfully.

Inficerede Registeringsdatabase Filer:
(Ingen mistænkelige filer fundet)

Inficerede Mapper:
C:\Programmer\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\Logs (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 17-34-420 (Rogue.RegTool) -> Quarantined and deleted successfully.

Inficerede Filer:
C:\WINDOWS\system32\msxm192z.dll (Backdoor.Bot) -> Delete on reboot.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\g.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\i.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\m.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\n.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\s.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\y.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Temp\z.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\resultsw.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\Logs\2009-02-01 16-51-300.log (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\Logs\2009-02-01 17-05-020.log (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\Logs\2009-02-01 17-12-060.log (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\Logs\2009-02-01 17-21-050.log (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-10.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-100.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-101.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-102.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-103.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-104.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-105.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-106.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-107.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-108.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-109.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-11.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-110.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-111.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-112.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-113.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-114.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-115.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-116.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-117.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-118.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-119.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-12.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-120.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-121.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-122.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-123.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-124.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-125.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-126.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-127.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-128.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-129.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-13.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-130.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-131.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-132.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-133.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-134.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-135.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-136.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-137.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-138.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-139.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-14.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-140.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-141.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-142.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-143.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-144.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-145.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-146.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-147.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-148.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-149.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-15.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-150.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-151.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-152.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-153.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-154.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-155.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-156.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-157.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-158.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-159.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-16.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-160.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-161.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-162.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-163.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-164.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-165.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-166.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-167.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-168.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-169.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-17.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-170.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-171.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-172.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-173.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-174.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-175.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-176.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-177.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-178.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-179.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-18.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-180.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-181.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-182.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-183.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-184.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-185.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-186.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-187.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-188.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-189.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-19.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-190.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-191.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-192.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-193.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-194.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-195.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-196.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-197.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-198.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-199.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-20.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-200.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-201.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-202.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-203.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-204.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-205.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-206.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-207.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-208.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-209.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-21.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-210.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-211.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-212.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-213.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-214.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-215.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-216.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-217.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-218.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-219.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-22.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-220.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-221.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-222.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-223.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-224.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-225.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-226.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-227.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-228.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-229.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-23.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-230.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-231.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-232.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-233.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-234.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-235.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-236.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-237.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-238.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-239.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-24.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-240.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-241.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-242.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-243.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-244.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-245.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-246.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-25.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-26.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-27.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-28.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-29.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-30.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-31.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-32.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-33.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-34.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-35.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-36.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-37.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-38.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-39.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-40.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-41.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-42.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-43.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-44.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-45.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-46.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-47.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-48.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-49.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-50.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-51.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-52.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-53.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-54.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-55.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-56.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-57.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-58.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-59.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-6.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-60.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-61.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-62.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-63.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-64.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-65.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-66.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-67.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-68.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-69.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-7.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-70.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-71.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-72.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-73.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-74.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-75.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-76.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-77.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-78.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-79.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-8.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-80.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-81.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-82.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-83.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-84.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-85.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-86.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-87.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-88.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-89.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-9.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-90.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-91.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-92.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-93.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-94.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-95.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-96.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-97.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-98.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 16-54-490\regb-99.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 17-34-420\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Poul Jørgensen\Application Data\RegTool\QuarantineW\2009-02-01 17-34-420\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\RegTool Scan.job (Rogue.RegTool) -> Quarantined and deleted successfully.
05. august 2009 - 21:21 #9
UHA - der var jo en del...

Tihi - på et tidspunkt er du blevet 'lokket' til at install [RegTool] programmet; og SÅ begynder balladen...

Hvad med HiJackThis Loggen ?
Avatar billede poulst1100 Praktikant
05. august 2009 - 22:28 #10
Dvs. det var Rogue.RegTool der var skyld i alle de mail der blev sendt ? er det væk nu ? HiJackThis log :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:26:55, on 05-08-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Lavasoft\Ad-Aware\AAWService.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\CTHELPER.EXE
C:\Programmer\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\V0230Mon.exe
C:\Programmer\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Programmer\Trend Micro\RUBotted\TMRUBottedTray.exe
C:\Programmer\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programmer\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmer\Philips\SA19XX\Philips Device Manager\Bin\DeviceManager.exe
C:\Programmer\Lavasoft\Ad-Aware\AAWTray.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\DAEMON Tools Lite\daemon.exe
C:\Programmer\PIXELA\ImageMixer 3 SE for SD\CameraMonitor.exe
C:\Programmer\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmer\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Programmer\Trend Micro\RUBotted\TMRUBotted.exe
C:\Programmer\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmer\Canon\CAL\CALMAIN.exe
C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\IEPro\MiniDM.exe
C:\Programmer\Java\jre6\bin\jusched.exe
C:\Programmer\Java\jre6\bin\jqs.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Windows Live\Toolbar\wltuser.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Poul Jørgensen\Dokumenter\My Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Programmer\IEPro\iepro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmer\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programmer\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: IESessions.Manager - {6ECF15F0-468D-4E25-8997-1C710E80F5CD} - C:\Program Files\IESessions\IESessions.dll
O2 - BHO: Fravalg af annonceringscookie - {8E425EB4-ADBD-4816-B1E8-49BB9DECF034} - C:\Programmer\Google\Advertising Cookie Opt-out\opt_out.dll
O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmer\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmer\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programmer\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmer\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmer\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programmer\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [StartCCC] "C:\Programmer\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programmer\Fælles filer\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Programmer\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Programmer\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\V0230Mon.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Programmer\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programmer\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [TMRUBottedTray] "C:\Programmer\Trend Micro\RUBotted\TMRUBottedTray.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Programmer\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PhilipsDM\SA1916] C:\Programmer\Philips\SA19XX\Philips Device Manager\Bin\DeviceManager.exe OS_STARTUP
O4 - HKLM\..\Run: [Ad-Watch] C:\Programmer\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmer\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "C:\Programmer\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programmer\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Hurtig start af Microsoft Office OneNote 2003.lnk = C:\Programmer\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Startup: Stardock ObjectDock.lnk = C:\Programmer\Stardock\Object Desktop\ObjectDock\ObjectDock.exe
O4 - Global Startup: Hurtig start af Microsoft Office OneNote 2003.lnk = C:\Programmer\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: ImageMixer 3 SE Camera Monitor for SD.lnk = C:\Programmer\PIXELA\ImageMixer 3 SE for SD\CameraMonitor.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Programmer\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Programmer\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Programmer\IEPro\iepro.dll
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Programmer\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Programmer\IEPro\iepro.dll
O9 - Extra button: Blog det - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmer\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog det i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmer\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: IESessions - {32FF09D3-2F66-4814-AA2C-835D5D2BF0FD} - C:\Program Files\IESessions\IESessions.dll
O9 - Extra 'Tools' menuitem: IESessions - {32FF09D3-2F66-4814-AA2C-835D5D2BF0FD} - C:\Program Files\IESessions\IESessions.dll
O9 - Extra button: Rip YouTube File - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Programmer\SoundTaxi\YouTubeRipper.dll
O9 - Extra 'Tools' menuitem: Rip YouTube file embedded in this page - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Programmer\SoundTaxi\YouTubeRipper.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1229794593531
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {D216644A-C6DB-49D9-BBCF-D38FE7991BF2} (Util Class) - https://danid.dk/csp/authenticode/digitalsignatur-csp.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{692EE1FB-3655-4BF5-BA54-C164096A6EDA}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Programmer\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Programmer\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programmer\Fælles filer\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c986c75aa1554a) (gupdate1c986c75aa1554a) - Google Inc. - C:\Programmer\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmer\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmer\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programmer\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Trend Micro RUBotted Service (RUBotted) - Trend Micro Inc. - C:\Programmer\Trend Micro\RUBotted\TMRUBotted.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programmer\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programmer\Spyware Doctor\pctsSvc.exe
O23 - Service: SoundMovieServer - SoundMovieServer - C:\WINDOWS\system32\snmvtsvc.exe

--
End of file - 15202 bytes
05. august 2009 - 22:36 #11
BINGO!!!

Efterfølgende oprydning:

Afinstaller (Hvis de er der?)

* Google Software Updater
* Apple Mobile Device
* iPod-tjeneste (iPod Service)
* Bonjour-tjeneste (Bonjour Service)

via
[Start][Indstilninger][Kontrolpanel][Tilføj/fjern programmer]

Genstart for at fuldføre afinstalationen...

------------------------------------------------------------------------

Kør en scanning med Hijackthis,
Du får herunder nogle filer, som du skal fixe. Det, du skal gøre, er at sætte et flueben ud for disse filer. Når du har gjort det, så lukker du alle andre vinduer ned. Det er meget vigtigt at det eneste vindue, som er åbent er HijackThis vinduet. Husk også at lukke dette vindue, når du har markeret filerne. Nu må du fixe. Klik på Fix checked.

Det er disse, som skal fixes:

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmer\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmer\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programmer\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmer\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programmer\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programmer\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmer\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Poul Jørgensen\Lokale indstillinger\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "C:\Programmer\Steam\Steam.exe" -silent (Bruger du dette ?)

O4 - Startup: Hurtig start af Microsoft Office OneNote 2003.lnk = C:\Programmer\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Hurtig start af Microsoft Office OneNote 2003.lnk = C:\Programmer\Microsoft Office\OFFICE11\ONENOTEM.EXE

O9 - Extra button: Rip YouTube File - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Programmer\SoundTaxi\YouTubeRipper.dll
O9 - Extra 'Tools' menuitem: Rip YouTube file embedded in this page - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Programmer\SoundTaxi\YouTubeRipper.dll

O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)

Genstart normalt...

------------------------------------------------------------------------

Hvordan kører PC'en så nu ?
Avatar billede poulst1100 Praktikant
06. august 2009 - 00:28 #12
Hej
det er hvis ok nu pc kører fint som jeg kan fornemme er der ikke mere ondsindet trafik. Tak for hjælpen.
er der noget med at jeg skal dele point ud? hvordan?
06. august 2009 - 10:07 #13
Der er ikke mere 'snavs' ifølge din Log...

Du er velkommen en anden gang...

Efter sådan en tur er det altid en god ide og rydde op i systemgendannelsesfilerne.
Deaktiver systemgendannelse -> http://www.spywareinfo.dk/#/tip-og-tricks/deaktiver_systemgendannelse.htm
Genstart din computer - aktiver systemgendannelse. Dette gøres samme sted, hvor du deaktiverede, denne gang skal du blot aktivere.
Det vil også være en god idé manuelt at oprette et nyt punkt, som du kan navngive, og vende tilbage til, hvis du skulle få problemer af nogen art.

Et par artikler om sikker surfing finder du her:
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=14414

Safe Surfing...

--------------

http://www.eksperten.dk/faq#faq-3-1
Avatar billede poulst1100 Praktikant
06. august 2009 - 10:49 #14
jeg har prøvet det du skrev om systemgendannelsesfilerne, Jeg kan ikke få det til at virke.
Først deaktiverer og genstart, så slå systemgendannelse til og genstart, derefter oprette et punkt, men så skriver pcen kan ikke oprette genstart først det er prøvet 2 gang uden held. Hvad er nu det ?
Avatar billede b-and Novice
06. august 2009 - 15:24 #15
Vælg det rigtige styresystem!!

[navy]Windows XP:[/navy]
1. Højreklik på > Denne Computer > Egenskaber > Systemgendannelses.
2. Sæt flueben i > Deaktiver Systemgendannelse> Anvend > OK.
3. Dobbeltklik på > Denne computer > højreklik på (C:) drevet > Egenskaber.
5. Klik på > Diskoprydning > Flere indstillinger.
6. I feltet Systemgendannelse, klik på "Ryd op".
7. Luk alle vinduer og genstart computeren.
8. Efter genstart > Aktiver Systemgendannelse på samme måde du deaktiverede det - Punkt 2 bare omvendt…

[navy]Microsofts Vista:[/navy]
1. Højreklik på >Computer >Egenskaber.
2. Klik på > Avancerede system indstillinger"> og vælg > System beskyttelses > fanen fra menuen.
3. Fjern fluebenet ved drev C og tryk OK.
4. Åben start menuen og søg på > Diskoprydning.
5. Vent på at diskoprydning får arbejdet færdig.
6. Klik på fanen > Flere indstillinger.
7. I feltet Systemgendannelse, klik på > Ryd op.
8. Luk nu vinduerne og genstart computeren.
9. Aktiver Systemgendannelse på samme måde du deaktiverede det.
Avatar billede poulst1100 Praktikant
06. august 2009 - 17:20 #16
Hej
så er det prøvet som b-and har forslået det hjalp ikke.
Kan ikke oprette gendannelsespunkt, når det prøves siger pcen genstart og prøv igen.
hvordan gør jeg så????`?
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester