[d0od]

Hei, meg helt å være en panicky weirdo, RAM som blir spist mye igjen senere .... finner ikke noe untoward via min virus program eller spyware .. oppgave kundebehandlerens chucking opp svchost med spise forstyrrelse, men vil bare være sikker!

--

Logfile of Trend Micro HijackThis v2.0.2
Scan lagret 2:48:21 PM, on 8/4/2008
Plattform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Kjører prosesser:
C: \ Program Files (x86) \ RocketDock \ RocketDock.exe
C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccWarden.exe
C: \ Program Files (x86) \ Google \ Web Accelerator \ googlewebaccclient.exe
C: \ Program Files (x86) \ Trend Micro \ HijackThis \ Sniper.exe

R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://d0od.blogspot.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Innstillinger, AutoConfigURL = http://localhost:9100/proxy.pac
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
O1 - Hosts::: 1 localhost
O2 - BHO: Google Update Helper - (25D596E9-BD03-4D4A-8310-5DF3B31E8D26) - C: \ Program Files (x86) \ Google \ Update \ 1.2.121.17 \ GoopdateBho.dll
O2 - BHO: Google Web Accelerator Helper - (69A87B7D-DE56-4136-9655-716BA50C19C7) - C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccToolbar.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files (x86) \ Fellesfiler \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files (x86) \ Google \ GoogleToolbarNotifier \ 2.1.1119.1736 \ s wg.dll
O3 - Toolbar: Google Web Accelerator - (DB87BFA2-A2E3-451E-8E5A-C89982D87CBF) - C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccToolbar.dll
O4 - HKLM \ .. \ Run: [amd_dc_opt] C: \ Program Files (x86) \ AMD \ Dual-Core Optimizer \ amd_dc_opt.exe
O4 - HKCU \ .. \ Run: [Sidebar] C: \ Program Files \ Windows Sidebar \ sidebar.exe / autorun
O4 - HKCU \ .. \ Run: [RocketDock] "C: \ Program Files (x86) \ RocketDock \ RocketDock.exe"
O4 - HKCU \ .. \ Run: [uTorrent] "C: \ Program Files (x86) \ uTorrent2 \ uTorrent.exe"
O4 - HKCU \ .. \ Run: [WMPNSCFG] C: \ Program Files (x86) \ Windows Media Player \ WMPNSCFG.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Kjør Google Web Accelerator.lnk = C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccWarden.exe
O8 - Extra sammenheng menyelement: & D & ownload & med BitComet - res: / / C: \ Program Files (x86) \ BitComet \ BitComet.exe / AddLink.htm
O8 - Extra sammenheng menyelement: & D & ownload all video med BitComet - res: / / C: \ Program Files (x86) \ BitComet \ BitComet.exe / AddVideo.htm
O8 - Extra sammenheng menyelement: & D & ownload all with BitComet - res: / / C: \ Program Files (x86) \ BitComet \ BitComet.exe / AddAllLink.htm
O9 - Extra knappen: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O9 - Extra "Verktøy" MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O9 - Extra knappen: Bonjour - (7F9DB11C-E358-4ca6-A83D-ACC663939424) - C: \ Program Files (x86) \ Bonjour \ ExplorerPlugin.dll
O13 - Gopher Prefix:
O16 - DPF: (0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75) (CKAVWebScan Object) -- http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files (x86) \ Yahoo! \ Common \ Yinsthelper.dll
O16 - DPF: (4A85DBE0-BFB2-4119-8401-186A7C6EB653) -- http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx1.hotmail.com/mail/w2/reso...PUplden-gb.cab
O16 - DPF: (B8BE5E93-A60C-4D26-A2DC-220313175592) (MSN Games - Installer) -- http://messenger.zone.msn.com/binary...o.cab56649.cab
O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Klassifikasjon) -- http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...nt/swflash.cab
O16 - DPF: (E6187999-9FEC-46A1-A20F-F4CA977D5643) (ZoneChess Object) -- http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: (F6ACF75C-C32C-447B-9BEF-46B766368D29) (Creative Software AutoUpdate Support Package) -- http://www.creative.com/softwareupda...5102/CTPID.cab
O16 - DPF: (F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8) (GoPetsWeb Control) -- https: / / secure.gopetslive.com / dev / GoPetsWeb.cab
O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ (BF0DBBE6-E088-4418-8A2D-4B9788FFCACC): NameServer = 192.168.2.1
O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - c: \ progra ~ 2 \ COMMON ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O23 - Service: @% SystemRoot% \ system32 \ Alg.exe, -112 (alg) - Unknown owner - C: \ Windows \ System32 \ alg.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C: \ Program Files (x86) \ iPod \ bin \ iPodService.exe
O23 - Service: @ keyiso.dll, -100 (KeyIso) - Unknown owner - C: \ Windows \ system32 \ Lsass.exe (fil mangler)
O23 - Service: @ comres.dll, -2797 (MSDTC) - Unknown owner - C: \ Windows \ System32 \ msdtc.exe (fil mangler)
O23 - Service: @% SystemRoot% \ System32 \ Netlogon.dll, -102 (Netlogon) - Unknown owner - C: \ Windows \ system32 \ Lsass.exe (fil mangler)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C: \ Windows \ system32 \ nvvsvc.exe (fil mangler)
O23 - Service: @% systemroot% \ system32 \ psbase.dll, -300 (ProtectedStorage) - Unknown owner - C: \ Windows \ system32 \ Lsass.exe (fil mangler)
O23 - Service: @% systemroot% \ system32 \ Locator.exe, -2 (RpcLocator) - Unknown owner - C: \ Windows \ system32 \ Locator.exe (fil mangler)
O23 - Service: @% SystemRoot% \ system32 \ samsrv.dll, -1 (SamSs) - Unknown owner - C: \ Windows \ system32 \ Lsass.exe (fil mangler)
O23 - Service: @% SystemRoot% \ system32 \ SLsvc.exe, -101 (slsvc) - Unknown owner - C: \ Windows \ system32 \ SLsvc.exe (fil mangler)
O23 - Service: @% SystemRoot% \ system32 \ snmptrap.exe, -3 (SNMPTRAP) - Unknown owner - C: \ Windows \ System32 \ snmptrap.exe (fil mangler)
O23 - Service: @% systemroot% \ system32 \ Spoolsv.exe, -1 (Spooler) - Unknown owner - C: \ Windows \ System32 \ Spoolsv.exe (fil mangler)
O23 - Service: @% SystemRoot% \ system32 \ ui0detect.exe, -101 (UI0Detect) - Unknown owner - C: \ Windows \ system32 \ UI0Detect.exe (fil mangler)
O23 - Service: @% SystemRoot% \ system32 \ vds.exe, -100 (vds) - Unknown owner - C: \ Windows \ System32 \ vds.exe (fil mangler)
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C: \ Windows \ system32 \ vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C: \ Windows \ system32 \ vmnat.exe
O23 - Service: @% systemroot% \ system32 \ vssvc.exe, -102 (VSS) - Unknown owner - C: \ Windows \ system32 \ vssvc.exe (fil mangler)
O23 - Service: @% systemroot% \ system32 \ wbem \ wmiapsrv.exe, -110 (wmiApSrv) - Unknown owner - C: \ Windows \ system32 \ wbem \ WmiApSrv.exe (fil mangler)
O23 - Service: @% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe, -101 (WMPNetworkSvc) - Unknown owner - C: \ Program Files (x86) \ Windows Media Player \ wmpnetwk.exe (fil mangler)

--
End of file - 7922 bytes

[evilfantasy]

Ser fine.