Konstiga System Config Fel - Bra Geek Challenge! X3

GMB · #1 25 januari 2008, 17:47

Så i tråd på en annan platsJag försökte bli av med en löpare fel och fick råd att gå in i Kör och redigera Startup sak och un-klicka uppdateringarna från HP alternativ. Jag gjorde det, och det löste det problemet, men nu får jag detta:

Jag har provat en massa olika saker, men jag brukar bara göra saker värre. Här är vad startup sak ser ut nu:

och

Någon annan föreslog att det kunde vara virus-relaterad. Jag hittade en trojan, men det behandlades lätt med, men jag är fortfarande bli fel.

Jag vet att detta är mycket, men det är verkligen börjar att sakta ner i princip allt och det är bara ger mig fan när jag försöker få något gjort. Någon hjälp skulle bli mycket uppskattat.

**evilfantasy** · #2 25 januari 2008, 18:29

Gå och ändra det till alternativet Normal start.

Installera Starttuneren Tool

Öppna verktyget och högerklicka något du inte längre vill köra vid start sedan välja Ta bort.

Vad är fqvcil?

GMB · #3 25 januari 2008, 18:45

Ärligt talat har jag ingen aning. Jag är verkligen dålig med datorer, så jag inte ens vet vad de flesta av det där betyder. x3 Jag hade det på Normal innan, och det var fortfarande gör det, men låt mig kolla det verktyget och starta och se om det hjälper.

Tack själv en lott för rådgivning, förresten. :) Jag uppskattar det.

**evilfantasy** · #4 25 januari 2008, 18:50

Denna notering ser inte rätt. Låt oss ta en närmare titt.

Ladda ner och byta namn HijackThis (HJT)

Dubbelklicka på HJTInstall.
Klicka på Installera knappen.
Det kommer automatiskt plats HJT i C: \ Program \ TrendMicro \ HijackThis \ HijackThis.exe.
Efter installation, HijackThis bör öppna för dig.
- Stäng HijackThis och döp om den.
- Gå till C: \ Program Files \ Trend Micro \HijackThis.exe
- Högerklicka på HijackThis.exe och välj Byt namn.
- Skriv in sniper.exe och tryck Ange.
- Högerklicka på sniper.exe och välj Skicka till > Desktop (Skapa genväg)
Från skrivbordet öppna HiajckThis.
Om du använder Windows Vista, se till att Kör som administratör
Klicka på Har en av datorn och spara en loggfil knappen
HijackThis kommer att skanna och sedan en logg kommer att öppna i Anteckningar.
Kopiera och klistra in loggen i ditt inlägg.
- Don't har HijackThis fixa något ännu. Det mesta av vad man anser kommer att vara ofarliga eller till och med krävs.

Även om vi har bytt namn HijackThis till prickskytt vi fortfarande kallar det för HijackThis eller HJT.

GMB · #5 25 januari 2008, 19:07

Wow ... det är en massa saker.

Loggfil av Trend Micro HijackThis v2.0.2
Scan saved at 9:05:38, den 1/25/2008
Plattform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Kör processer:
C: \ WINDOWS \ System32 \ Smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ Lsass.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccProxy.exe
C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe
C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe
C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe
C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe
C: \ WINDOWS \ system32 \ Spoolsv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe
C: \ WINDOWS \ system32 \ CTsvcCDA.exe
C: \ WINDOWS \ eHome \ ehRecvr.exe
C: \ WINDOWS \ eHome \ ehSched.exe
C: \ Program Files \ ewido \ security suite \ ewidoctrl.exe
c: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
C: \ Program \ Delade filer \ Microsoft Shared \ VS7DEBUG \ MDM.EXE
C: \ Program \ Norton Internet Security \ Norton AntiVirus \ navapsvc.exe
C: \ WINDOWS \ system32 \ HPZipm12.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ Program Files \ synvinkel \ Common \ ViewpointService.exe
C: \ Program \ Webroot \ Spy Sweeper \ SpySweeper.exe
C: \ WINDOWS \ system32 \ dllhost.exe
C: \ Program Files \ Google \ Gmail Notifier \ gnotify.exe
C: \ Program \ Java \ j2re1.4.2_03 \ bin \ jusched.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe
C: \ WINDOWS \ SOUNDMAN.EXE
C: \ windows \ system \ hpsysdrv.exe
C: \ WINDOWS \ system32 \ hkcmd.exe
C: \ WINDOWS \ ehome \ ehtray.exe
C: \ WINDOWS \ ALCWZRD.EXE
C: \ WINDOWS \ ALCMTR.EXE
C: \ WINDOWS \ AGRSMMSG.exe
C: \ Program \ Microsoft IntelliType Pro \ itype.exe
C: \ Program \ Microsoft IntelliPoint \ ipoint.exe
C: \ Program \ Winamp \ winampa.exe
C: \ HP \ KBD \ KBD.EXE
C: \ Program \ QuickTime \ QTTask.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program \ Webroot \ Spy Sweeper \ SpySweeperUI.exe
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ Program \ Creative \ MediaSource \ Detector \ CTDetect.exe
C: \ PROGRA ~ 1 \ Sony \ Sonics ~ 1 \ SsAAD.exe
C: \ WINDOWS \ eHome \ ehmsas.exe
C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqtra08.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ synvinkel \ synvinkel Manager \ ViewMgr.exe
C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE
C: \ Program Files \ interMute \ SpySubtract \ SpySub.exe
C: \ Program \ Mozilla Firefox \ firefox.exe
C: \ Program Files \ AIM \ aim.exe
C: \ Program Files \ BitLord \ BitLord.exe
C: \ Program \ Winamp \ winamp.exe
C: \ Program \ Webroot \ Spy Sweeper \ SSU.EXE
C: \ Program Files \ Messenger \ msmsgs.exe
C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://netscape.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Settings, ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - (no file)
F2 - REG: system.ini: Userinit = C: \ WINDOWS \ system32 \ userinit.exe, hvtjsqo. exe
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: (inget namn) - (53707962-6F74-2D53-2644-206D7942484F) - C: \ progra ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program \ Java \ jre1.6.0_02 \ bin \ ssv.dll
O2 - BHO: Norton Internet Security 2006 - (9ECB9560-04F9-4bbc-943D-298DDF1699E1) - C: \ Program Files \ Common Files \ Symantec Shared \ AdBlocking \ NISShExt.dll
O2 - BHO: NAV Helper - (A8F38D8D-E480-4D52-B7A2-731BB6995FDD) - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ NavShExt.dll
O3 - Toolbar: HP View - (B2847E28-5D7D-4DEB-8B67-05D28BCF79F5) - C: \ Program Files \ HP \ Digital Imaging \ bin \ HPDTLK02.dll
O3 - Toolbar: Norton Internet Security 2006 - (0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7) - C: \ Program Files \ Common Files \ Symantec Shared \ AdBlocking \ NISShExt.dll
O3 - Toolbar: Norton AntiVirus - (C4069E3A-68F1-403E-B40E-20066696354B) - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ NavShExt.dll
O4 - HKLM \ .. \ Run: [(0228e555-4f9c-4e35-a3ec-b109a192b4c2)] "C: \ Program Files \ Google \ Gmail Notifier \ gnotify.exe"
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe"
O4 - HKLM \ .. \ Run: [fiasij] C: \ WINDOWS \ system32 \ fqvcil.exe reg_run
O4 - HKLM \ .. \ Run: [Symantec pif AlertEng] "C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe" / a / m " C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ AlertEng.dll "
O4 - HKLM \ .. \ Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM \ .. \ Run: [Reminder] "C: \ Windows \ Creator \ Remind_XP.exe"
O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE
O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe
O4 - HKLM \ .. \ Run: [HPHUPD06] "C: \ Program Files \ HP \ (AAC4FC36-8F89-4587-8DD3-EBC57C83374D) \ hphupd06.exe"
O4 - HKLM \ .. \ Run: [HPHmon06] C: \ WINDOWS \ system32 \ hphmon06.exe
O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ WINDOWS \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ ehome \ ehtray.exe
O4 - HKLM \ .. \ Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM \ .. \ Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM \ .. \ Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM \ .. \ Run: [itype] "C: \ Program \ Microsoft IntelliType Pro \ itype.exe"
O4 - HKLM \ .. \ Run: [IntelliPoint] "C: \ Program \ Microsoft IntelliPoint \ ipoint.exe"
O4 - HKLM \ .. \ Run: [WinampAgent] "C: \ Program \ Winamp \ winampa.exe"
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE
O4 - HKLM \ .. \ Run: [SpySweeper] C: \ Program Files \ Webroot \ Spy Sweeper \ SpySweeperUI.exe / startintray
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKCU \ .. \ Run: [Creative Detector] "C: \ Program \ Creative \ MediaSource \ Detector \ CTDetect.exe" / R
O4 - HKLM \ .. \ Run: [bfhuj] C: \ WINDOWS \ system32 \ fqvcil.exe reg_run
O4 - HKLM \ .. \ Run: [CTFMON.EXE] C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.0.720.3640 \ Go ogleToolbarNotifier.exe "
O4 - HKLM \ .. \ Run: [SsAAD.exe] C: \ PROGRA ~ 1 \ Sony \ Sonics ~ 1 \ SsAAD.exe
O4 - HKCU \ .. \ Run: [MSMSGS] "C: \ Program Files \ Messenger \ msmsgs.exe" / bakgrund
O4 - HKUS \ S-1-5-21-2639814213-3213438571-147013170-1008 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User '? ")
O4 - HKUS \ S-1-5-21-2639814213-3213438571-147013170-1008 \ .. \ Run: [Creative Detector] "C: \ Program Files \ Creative \ MediaSource \ Detector \ CTDetect.exe" / R (User '? ")
O4 - HKUS \ S-1-5-21-2639814213-3213438571-147013170-1008 \ .. \ Run: [bfhuj] C: \ WINDOWS \ system32 \ fqvcil.exe reg_run (User '? ")
O4 - HKUS \ S-1-5-21-2639814213-3213438571-147013170-1008 \ .. \ Run: [CTFMON.EXE] C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.0.720.3640 \ Go ogleToolbarNotifier.exe "(User '? ")
O4 - HKUS \ S-1-5-21-2639814213-3213438571-147013170-1008 \ .. \ Run: [SsAAD.exe] C: \ PROGRA ~ 1 \ Sony \ Sonics ~ 1 \ SsAAD.exe (User '? )
O4 - HKUS \ S-1-5-21-2639814213-3213438571-147013170-1008 \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Messenger \ MsnMsgr.Exe" / background (User '? ")
O4 - S-1-5-21-2639814213-3213438571-147013170-1008 Startup: Adobe Gamma.lnk = C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe (User '? ")
O4 - Startup: Adobe Gamma.lnk = C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqtra08.exe
O4 - Global Startup: SpySubtract.lnk = C: \ Program Files \ interMute \ SpySubtract \ sslaunch.exe
O4 - Global Startup: Uppdateringar från HP.lnk = C: \ Program Files \ Updates från HP \ 309.731 \ Program \ Updates från HP.exe
O8 - Extra sammanhang menyobjektet: E & xportera till Microsoft Excel - res: / / C: \ progra ~ 1 \ MI1933 ~ 1 \ Office11 \ EXCEL.EXE/3000
Ø9 - Extra button: (inget namn) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program \ Java \ jre1.6.0_02 \ bin \ ssv.dll
Ø9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program \ Java \ jre1.6.0_02 \ bin \ ssv.dll
Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ progra ~ 1 \ MI1933 ~ 1 \ Office11 \ REFIEBAR.DLL
Ø9 - Extra button: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program \ AIM \ aim.exe
Ø9 - Extra button: (inget namn) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O12 - Plugin för. Spop: C: \ Program \ Internet Explorer \ Plugins \ NPDocBox.dll
O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program \ Yahoo! \ Common \ yinsthelper.dll
O16 - DPF: (6A344D34-5231-452A-8A57-D064AC9B7862) (Symantec Download Manager) -- https: / / webdl.symantec.com / ActiveX / symdlmgr.cab
O16 - DPF: (DBFF771D-3F92-4C70-9978-508738536F38) (CSConn Class) -- https: / / wtiwebopt.axaonline.com / fins...ts / csagent.cab
O16 - DPF: (DF780F87-FF2B-4DF8-92D0-73DB16A1543A) (PopCapLoader Object) -- http://www.popcap.com/games/popcaploader_v6.cab
O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Common Files \ Adobe Systems Shared \ Service \ Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C: \ WINDOWS \ system32 \ CTsvcCDA.exe
O23 - Service: Ewido Security Suite kontroll - Ewido nätverk - C: \ Program Files \ ewido \ security suite \ ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1150 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C: \ progra ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ MSCSPTISRV.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C: \ Program \ Norton Internet Security \ Norton AntiVirus \ navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE
O23 - Service: PACSPTISVR - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ PACSPTISVR.exe
O23 - Service: PML Driver HPZ12 - HP - C: \ WINDOWS \ system32 \ HPZipm12.exe
O23 - Service: Symantec avscan (SAVScan) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ SSScsiSV.exe
O23 - Service: Symantec Core LC - Unknown ägaren - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe
O23 - Service: synvinkel Manager Service - synvinkel Corporation - C: \ Program Files \ synvinkel \ Common \ ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C: \ Program \ Webroot \ Spy Sweeper \ SpySweeper.exe

--
End of file - 14608 bytes

**evilfantasy** · #6 25 januari 2008, 19:33

Öppna HJT och välj Gör ett system scan bara sedan placera en bock intill:

F2 - REG: system.ini: Userinit = C: \ WINDOWS \ system32 \ userinit.exe, hvtjsqo. exe

Stäng alla fönster utom HJT klicka på Fix kontrolleras.

----------

Hämta ViewpointKiller

Packa upp programmet och alla av innehållet i ViewpointKiller.zip till en plats, t.ex. skrivbordet.
Dubbelklicka på ViewpointKiller ikonen för att köra ViewpointKiller.exe.
Välj Fil menyn och välj Kontrollera om du har synvinkel installerade.
Om ViewpointKiller tyder på att någon av de synvinkel varianter är installerat väljer du rätt Döda alternativ i Fil menyn.

Följ anvisningarna och instruktionerna mycket noga, besvara Ja eller Nej beroende på vilket alternativ du är mest bekväm med.
Den Msconfig instruktioner är mycket viktigt, så se till att läsa dem noga.

Obs! När du är klar med ViewpointKiller högerklicka och ta bort alla filer som packas upp.

----------

Ladda ner Combofix av följande från en av nedanstående länkar.
(Prova alla tre vid behov)

VIKTIGT - Combofix.exe MÅSTE sparas dina Desktop.

Stäng alla öppna webbläsare. (Firefox, Internet Explorer, osv)
Stäng / avaktivera alla anti-virus och anti malware program så att de inte stör Combofix. <- VIKTIGT
- Klicka på denna länk vill se en lista över program som ska inaktiveras och hur du inaktivera dem. Om du inte finns med och du vet inte hur man kan stänga av den, vänd.
Dubbelklicka combofix.exe & följ anvisningarna.
- Från tangentbordet väljer 1 och tryck Ange
När du är klar kommer det fram en logga åt dig.
Post att logga in din nästa replik.

Don't mouseclick combofix fönster medan den körs.
Den scan att tillfälligt inaktivera ditt skrivbord.
Om avbrytas får lämna datorn frysas.
Om detta inträffar ska du starta om för att återställa skrivbordet.

----------

Nästa post lägg till
Combofix log

**evilfantasy** · #7 25 januari 2008, 19:37

Flyttade till Virus, Spyware & Security forum.

GMB · #8 25 januari 2008, 21:15

Vi har en partiell framgång! Något jag gjorde fungerade. Inte säker på vilken det var, men det är en början. Jag startade efter ComboFix gjordes, och nu har alla andra fel är borta, men nu får jag detta:

Jag har sett det förut, men jag minns inte hur jag fixade det.

Här är loggfilen från ComboFix:

ComboFix 08-01-23.1C - HP_Administrator 2008-01-25 22:50:00.1 - NTFSx86

Running from: C: \ Documents and Settings \ HP_Administrator \ Desktop \ ComboFix.exe
.

((((((((((((((((((((((((( Files Created från 2007-12-26 till 2008-01-26 ))))))))))) ))))))))))))))))))))
.

2008-01-25 22:48. 2000-08-31 08:00 51.200 - a ------ C: \ WINDOWS \ Nircmd.exe
2008-01-25 21:01. 2008-01-25 21:01 <KAT> d -------- C: \ Program Files \ Trend Micro
2008-01-23 18:27. 2008-01-23 18:27 <KAT> d -------- C: \ Program Files \ DivX
2008-01-21 01:48. 2008-01-21 01:48 <KAT> d -------- C: \ WINDOWS \ «aOz O'-ø
2008-01-21 01:48. 2008-01-21 01:48 <KAT> d -------- C: \ MOON PARROT
2008-01-04 00:51. 2008-01-04 00:53 <KAT> d -------- C: \ Program Files \ Winamp
2008-01-04 00:50. 2008-01-04 00:50 8.759.168 - a ------ C: \ Program Files \ winamp551_full_emusic-7plus_en-se.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))) ))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-26 03:38 --------- d ----- w C: \ Program Files \ Viewpoint
2008-01-26 03:06 --------- d ----- w C: \ Program Files \ Hewlett-Packard
2008-01-25 16:55 --------- d ----- w C: \ Program Files \ Norton Internet Security
2008-01-25 12:16 --------- d ----- w C: \ Program Files \ Common Files \ Symantec Shared
2008-01-22 03:23 --------- d ----- w C: \ Program Files \ LimeWire
2008-01-19 23:36 164 ---- aw C: \ install.dat
2008-01-19 23:35 --------- d ----- w C: \ Program Files \ Webroot
2008-01-05 01:56 1.526.640 ---- aw C: \ WINDOWS \ WRSetup.dll
2008-01-05 01:34 23.920 ---- aw C: \ WINDOWS \ system32 \ drivers \ sskbfd.sys
2008-01-05 01:34 21.872 ---- aw C: \ WINDOWS \ system32 \ drivers \ sshrmd.sys
2008-01-05 01:34 20.336 ---- aw C: \ WINDOWS \ system32 \ drivers \ SSFS0BB9.sys
2008-01-05 01:34 163.696 ---- aw C: \ WINDOWS \ system32 \ drivers \ ssidrv.sys
2007-12-26 04:47 --------- d ----- w C: \ Program Files \ AIM
2007-12-17 00:44 --------- d ----- w C: \ Program Files \ QuickTime
2007-12-16 18:36 805 ---- aw C: \ WINDOWS \ system32 \ drivers \ SYMEVENT.INF
2007-12-16 18:36 60.800 ---- aw C: \ WINDOWS \ system32 \ S32EVNT1.DLL
2007-12-16 18:36 123.952 ---- aw C: \ WINDOWS \ system32 \ drivers \ SYMEVENT.SYS
2007-12-16 18:36 10.740 ---- aw C: \ WINDOWS \ system32 \ drivers \ SYMEVENT.CAT
2007-12-16 18:36 --------- d ----- w C: \ Program Files \ Symantec
2007-12-02 23:38 --------- d ----- w C: \ Program Files \ Plant Tycoon
2007-11-29 22:30 200,704 ---- aw C: \ WINDOWS \ system32 \ ssldivx.dll
2007-11-29 22:30 1,044,480 ---- aw C: \ WINDOWS \ system32 \ libdivx.dll
2007-11-07 09:26 721,920 ---- aw C: \ WINDOWS \ system32 \ lsasrv.dll
2007-11-07 09:26 721.920 ---- aw C: \ WINDOWS \ system32 \ dllcache \ Lsasrv.dll
2007-10-30 23:42 3.590.656 ---- aw C: \ WINDOWS \ system32 \ dllcache \ mshtml.dll
2007-10-30 17:20 360.064 ---- aw C: \ WINDOWS \ system32 \ dllcache \ tcpip.sys
2007-10-29 22:35 1.287.680 ---- aw C: \ WINDOWS \ system32 \ Quartz.dll
2007-10-29 22:35 1.287.680 ---- aw C: \ WINDOWS \ system32 \ dllcache \ Quartz.dll
2007-10-27 22:40 222.720 ---- aw C: \ WINDOWS \ system32 \ wmasf.dll
2007-10-27 22:40 222.720 ---- aw C: \ WINDOWS \ system32 \ dllcache \ wmasf.dll
2007-06-27 20:23 318.904-c - aw C: \ Program Files \ wmpfirefoxplugin.exe
2007-02-19 21:57 12.887.872-c - aw C: \ Program Files \ sspsetup1_.exe
2007-02-10 23:31 2.599.088-c - aw C: \ Program Files \ Shockwave_Installer_Slim.exe
2007-02-10 23:26 12.711.440-c - aw C: \ Program Files \ RealPlayer10-5GOLD.exe
2007-02-10 23:20 19.666.504-c - aw C: \ Program Files \ QuickTimeInstaller.exe
2007-02-10 23:08 1.410.680-c - aw C: \ Program Files \ install_flash_player.exe
2007-02-10 17:58 25.755.448-c - aw C: \ Program Files \ wmp11-fönstren-x86-sve.exe
2006-10-11 00:51 774.144-c - aw C: \ Program Files \ RngInterstitial.dll
2006-09-16 02:12 811.584-c - aw C: \ Program Files \ GoogleToolbarInstaller.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))) ))))))))))))))))))))))))))))))))))))))))
.
.
* Not * tomma poster & legit default poster visas inte
REGEDIT4

[HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Run]
"CTFMON.EXE" = "C: \ WINDOWS \ system32 \ CTFMON.EXE" [2004-08-09 23:00 15360]
"Creative Detector" = "C: \ Program Files \ Creative \ MediaSource \ Detector \ CTDetect.exe" [2004-12-02 17:23 102400]
"swg" = "C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.0.720.3640 \ Go ogleToolbarNotifier.exe" []
"SsAAD.exe" = "C: \ PROGRA ~ 1 \ Sony \ Sonics ~ 1 \ SsAAD.e xe" [2006-11-02 13:43 472632]
"MSMSGS" = "C: \ Program Files \ Messenger \ msmsgs.exe" [2004-10-13 11:24 1694208]

[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run]
"(0228e555-4f9c-4e35-a3ec-b109a192b4c2)" = "C: \ Program Files \ Google \ Gmail Notifier \ gnotify.exe" [2005-07-15 16:48 479232]
"SunJavaUpdateSched" = "C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ jusched.exe" [2005-03-15 13:37 32881]
"iTunesHelper" = "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" [2008-01-08 17:33 53096]
"Symantec pif AlertEng" = "C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe" [2007-03-12 17:30 517768]
"NvCplDaemon" = "SOUNDMAN.EXE" [2005-04-06 17:57 90112 C: \ WINDOWS \ SOUNDMAN.EXE]
"Påminnelse" = "C: \ Windows \ Creator \ Remind_XP.exe" [2004-12-13 21:23 663552]
"Recguard" = "C: \ WINDOWS \ SMINST \ RECGUARD.EXE" [2004-04-14 08:43 233472]
"WinampAgent" = "C: \ windows \ system \ hpsysdrv.exe" [1998-05-07 04:04 52736]
"HotKeysCmds" = "C: \ WINDOWS \ system32 \ hkcmd.exe" [2004-12-01 05:55 126976]
"High Definition Audio Property Page Shortcut" = "HDAudPropShortcut.exe" [2004-03-17 19:10 61952 C: \ WINDOWS \ system32 \ Hdaudpropshortcut.exe]
"ehTray" = "C: \ WINDOWS \ ehome \ NvStartup" [2005-08-05 13:56 64512]
"AlcWzrd" = "ALCWZRD.EXE" [2005-04-06 17:53 2805248 C: \ WINDOWS \ ALCWZRD.EXE]
"Nwiz" = "NeroCheck.exe" [2004-06-29 05:06 88363 C: \ WINDOWS \ NeroCheck.exe]
"itype" = "C: \ Program \ Microsoft IntelliType Pro \ itype.exe" [2006-11-21 20:08 813912]
"IntelliPoint" = "C: \ Program \ Microsoft IntelliPoint \ ipoint.exe" [2007-02-05 18:52 849280]
"NvMediaCenter" = "C: \ Program Files \ Winamp \ winampa.exe" [2007-12-20 10:16 37376]
"KBD" = "C: \ HP \ KBD \ KBD.EXE" [2005-02-02 16:44 61440]
"SpySweeper" = "C: \ Program Files \ Webroot \ Spy Sweeper \ SpySweeperUI.exe" [2008-01-04 20:56 5367664]
"AutoTBar" = "C: \ Program Files \ HP \ Digital Imaging \ bin \ AUTOTBAR.EXE" []

C: \ Documents and Settings \ All Users \ Start-meny \ Program \ Autostart \
Adobe Gamma Loader.lnk - C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe [2004-10-04 00:12:18 113664]
Adobe Reader Speed Launcher.lnk - C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ jusched.exe [2005-09-23 21:05:26 29696]
SpySubtract.lnk - C: \ Program Files \ interMute \ SpySubtract \ sslaunch.exe [2005-03-15 14:14:11 73728]
Uppdateringar från HP.lnk - C: \ Program Files \ Updates från HP \ 309.731 \ Program \ Updates från HP.exe [2005-03-15 14:15:23 45056]

[HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entversion \ Policies \ System]
"InstallVisualStyle" = C: \ WINDOWS \ Resources \ Themes \ Royale \ Royale.msstyles
"InstallTheme" = C: \ WINDOWS \ Resources \ Themes \ Royale.theme

[HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entversion \ run]
"QuickTime Task" = "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
"SunJavaUpdateSched" = "C: \ Program Files \ iTunes \ iTunesHelper.exe"

[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntversion \ Explorer \ mountpoints2 \ (749df047-9937-11dB-9221-0013d408ae3c)]
\ Shell \ AutoRun \ command - L: \ wd_windows_tools \ setup.exe

* Newly Created Service * - COMHOST
* Newly Created Service * - PROCEXP90
.
Innehållet i "Schemalagda aktiviteter" mapp
"2008-01-19 15:35:02 C: \ WINDOWS \ Tasks \ AppleSoftwareUpdate.job"
- C: \ Program Files \ Apple Software Update \ SoftwareUpdate.exe
"2008-01-26 01:09:39 C: \ WINDOWS \ Tasks \ Norton AntiVirus - Run Full System Scan - HP_Administrator.job"
- C: \ PROGRA ~ 1 \ NORTON ~ 1 \ NORTON ~ 1 \ Navw32.exeh/TASK:
.
************************************************** ************************

CatchMe 0.3.1344 W2K/XP/Vista - rootkit / stealth malware detector av Gmer, http://www.gmer.net
Rootkit scan 2008-01-25 22:54:40
Windows 5.1.2600 Service Pack 2 NTFS

scanning dolda processer ...

scanning dold autostart poster ...

scanning dolda filer ...

scan completed successfully
dolda filer: 0

************************************************** ************************
.
Completion time: 2008-01-25 22:55:28
.
2008-01-09 13:11:47 --- EOF ---

[IMG] file: / / / C: / DOCUME% 7E1/HP_ADM% 7E1/LOCALS% 7E1/Temp/moz-screenshot.jpg [/ IMG] [IMG] file: / / / C: / DOCUME% 7E1/HP_ADM % 7E1/LOCALS% 7E1/Temp/moz-screenshot-1.jpg [/ IMG]

**evilfantasy** · #9 25 januari 2008, 21:48

Hände detta kort efter att ladda ner Winamp?

Kör en ny HJT scan och efter loggen.

GMB · #10 25 januari 2008, 22:32

Jag har haft Winamp under lång tid, innan detta började hända. Jag var tvungen att installera om det ett tag tillbaka, innan de fel, men jag minns inte hur snart efter fel inträffade.

Här är HJT log:

Loggfil av Trend Micro HijackThis v2.0.2
Scan saved at 12:29:23, den 1/26/2008
Plattform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Kör processer:
C: \ WINDOWS \ System32 \ Smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ Lsass.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccProxy.exe
C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe
C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe
C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe
C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe
C: \ WINDOWS \ system32 \ Spoolsv.exe
C: \ Program Files \ Google \ Gmail Notifier \ gnotify.exe
C: \ Program \ Java \ j2re1.4.2_03 \ bin \ jusched.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe
C: \ WINDOWS \ SOUNDMAN.EXE
C: \ windows \ system \ hpsysdrv.exe
C: \ WINDOWS \ system32 \ hkcmd.exe
C: \ WINDOWS \ ehome \ ehtray.exe
C: \ WINDOWS \ ALCWZRD.EXE
C: \ WINDOWS \ AGRSMMSG.exe
C: \ Program \ Microsoft IntelliType Pro \ itype.exe
C: \ Program \ Microsoft IntelliPoint \ ipoint.exe
C: \ Program \ Winamp \ winampa.exe
C: \ HP \ KBD \ KBD.EXE
C: \ Program \ Webroot \ Spy Sweeper \ SpySweeperUI.exe
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ Program \ Creative \ MediaSource \ Detector \ CTDetect.exe
C: \ PROGRA ~ 1 \ Sony \ Sonics ~ 1 \ SsAAD.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe
C: \ WINDOWS \ system32 \ CTsvcCDA.exe
C: \ WINDOWS \ eHome \ ehRecvr.exe
C: \ WINDOWS \ eHome \ ehSched.exe
C: \ Program Files \ ewido \ security suite \ ewidoctrl.exe
c: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
C: \ Program \ Delade filer \ Microsoft Shared \ VS7DEBUG \ MDM.EXE
C: \ Program \ Norton Internet Security \ Norton AntiVirus \ navapsvc.exe
C: \ WINDOWS \ system32 \ HPZipm12.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ Program Files \ synvinkel \ Common \ ViewpointService.exe
C: \ Program \ Webroot \ Spy Sweeper \ SpySweeper.exe
C: \ WINDOWS \ system32 \ dllhost.exe
C: \ WINDOWS \ eHome \ ehmsas.exe
C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE
C: \ Program \ Webroot \ Spy Sweeper \ SSU.EXE
C: \ Program Files \ synvinkel \ synvinkel Manager \ ViewMgr.exe
C: \ Program Files \ interMute \ SpySubtract \ SpySub.exe
C: \ Program \ Mozilla Firefox \ firefox.exe
C: \ Program Files \ AIM \ aim.exe
C: \ Program Files \ Encore \ Hoyle Card Games 2005 \ HoyleCardGames2005.exe
C: \ Program Files \ Trend Micro \ HijackThis \ sniper.exe
C: \ Program Files \ Messenger \ msmsgs.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://netscape.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Settings, ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: (inget namn) - (53707962-6F74-2D53-2644-206D7942484F) - C: \ progra ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program \ Java \ jre1.6.0_02 \ bin \ ssv.dll
O2 - BHO: Norton Internet Security 2006 - (9ECB9560-04F9-4bbc-943D-298DDF1699E1) - C: \ Program Files \ Common Files \ Symantec Shared \ AdBlocking \ NISShExt.dll
O2 - BHO: NAV Helper - (A8F38D8D-E480-4D52-B7A2-731BB6995FDD) - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ NavShExt.dll
O3 - Toolbar: Norton Internet Security 2006 - (0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7) - C: \ Program Files \ Common Files \ Symantec Shared \ AdBlocking \ NISShExt.dll
O3 - Toolbar: Norton AntiVirus - (C4069E3A-68F1-403E-B40E-20066696354B) - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ NavShExt.dll
O4 - HKLM \ .. \ Run: [(0228e555-4f9c-4e35-a3ec-b109a192b4c2)] "C: \ Program Files \ Google \ Gmail Notifier \ gnotify.exe"
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe"
O4 - HKLM \ .. \ Run: [Symantec pif AlertEng] "C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe" / a / m " C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ AlertEng.dll "
O4 - HKLM \ .. \ Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM \ .. \ Run: [Reminder] "C: \ Windows \ Creator \ Remind_XP.exe"
O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE
O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe
O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ WINDOWS \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ ehome \ ehtray.exe
O4 - HKLM \ .. \ Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM \ .. \ Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM \ .. \ Run: [itype] "C: \ Program \ Microsoft IntelliType Pro \ itype.exe"
O4 - HKLM \ .. \ Run: [IntelliPoint] "C: \ Program \ Microsoft IntelliPoint \ ipoint.exe"
O4 - HKLM \ .. \ Run: [WinampAgent] "C: \ Program \ Winamp \ winampa.exe"
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE
O4 - HKLM \ .. \ Run: [AutoTBar] C: \ Program Files \ HP \ Digital Imaging \ bin \ AUTOTBAR.EXE
O4 - HKLM \ .. \ Run: [SpySweeper] "C: \ Program \ Webroot \ Spy Sweeper \ SpySweeperUI.exe" / startintray
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKCU \ .. \ Run: [Creative Detector] "C: \ Program \ Creative \ MediaSource \ Detector \ CTDetect.exe" / R
O4 - HKLM \ .. \ Run: [CTFMON.EXE] C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.0.720.3640 \ Go ogleToolbarNotifier.exe "
O4 - HKLM \ .. \ Run: [SsAAD.exe] C: \ PROGRA ~ 1 \ Sony \ Sonics ~ 1 \ SsAAD.exe
O4 - HKCU \ .. \ Run: [MSMSGS] "C: \ Program Files \ Messenger \ msmsgs.exe" / bakgrund
O4 - Startup: Adobe Gamma.lnk = C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C: \ Program Files \ Common Files \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
O4 - Global Startup: SpySubtract.lnk = C: \ Program Files \ interMute \ SpySubtract \ sslaunch.exe
O4 - Global Startup: Uppdateringar från HP.lnk = C: \ Program Files \ Updates från HP \ 309.731 \ Program \ Updates från HP.exe
O8 - Extra sammanhang menyobjektet: E & xportera till Microsoft Excel - res: / / C: \ progra ~ 1 \ MI1933 ~ 1 \ Office11 \ EXCEL.EXE/3000
Ø9 - Extra button: (inget namn) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program \ Java \ jre1.6.0_02 \ bin \ ssv.dll
Ø9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program \ Java \ jre1.6.0_02 \ bin \ ssv.dll
Ø9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ progra ~ 1 \ MI1933 ~ 1 \ Office11 \ REFIEBAR.DLL
Ø9 - Extra button: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program \ AIM \ aim.exe
Ø9 - Extra button: (inget namn) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O12 - Plugin för. Spop: C: \ Program \ Internet Explorer \ Plugins \ NPDocBox.dll
O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program \ Yahoo! \ Common \ yinsthelper.dll
O16 - DPF: (6A344D34-5231-452A-8A57-D064AC9B7862) (Symantec Download Manager) -- https: / / webdl.symantec.com / ActiveX / symdlmgr.cab
O16 - DPF: (DBFF771D-3F92-4C70-9978-508738536F38) (CSConn Class) -- https: / / wtiwebopt.axaonline.com / fins...ts / csagent.cab
O16 - DPF: (DF780F87-FF2B-4DF8-92D0-73DB16A1543A) (PopCapLoader Object) -- http://www.popcap.com/games/popcaploader_v6.cab
O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Common Files \ Adobe Systems Shared \ Service \ Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C: \ WINDOWS \ system32 \ CTsvcCDA.exe
O23 - Service: Ewido Security Suite kontroll - Ewido nätverk - C: \ Program Files \ ewido \ security suite \ ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1150 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C: \ progra ~ 1 \ Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ MSCSPTISRV.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C: \ Program \ Norton Internet Security \ Norton AntiVirus \ navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Security Console \ NSCSRVCE.EXE
O23 - Service: PACSPTISVR - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ PACSPTISVR.exe
O23 - Service: PML Driver HPZ12 - HP - C: \ WINDOWS \ system32 \ HPZipm12.exe
O23 - Service: Symantec avscan (SAVScan) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C: \ Program Files \ Common Files \ Sony Shared \ AVLib \ SSScsiSV.exe
O23 - Service: Symantec Core LC - Unknown ägaren - C: \ Program Files \ Common Files \ Symantec Shared \ CCPD-LC \ symlcsvc.exe
O23 - Service: synvinkel Manager Service - synvinkel Corporation - C: \ Program Files \ synvinkel \ Common \ ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C: \ Program \ Webroot \ Spy Sweeper \ SpySweeper.exe

--
End of file - 12852 bytes