Angående fjernelse af " Blue The Math" Bar Total irreterende

Prøv at gå ind i kontrolpanel under tilføj/fjern programmer og se om du kan finde den der? Prøv at afinstallere den og kør så Ad-aware. Og prøv at installere "spywareblaster" (gratis på nettet)

Hvis det ikke har hjulpet, så følg den anvisning her punkt 1-4 http://www.spywarefri.dk/hjtanv.htm og så kopier resultatet af det herind i denne tråd

Har set under tilføj fjern og kørt adware det virker ikke men prøver lige det der

jeg er igang med spybot

Ok;)

Poster det imorgen, da den er igan og jeg skal på arbejde. Men kom på imorgen så har jeg postet resultatet af hijac

Logfile of HijackThis v1.98.0
Scan saved at 21:09:07, on 23-07-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\System32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\Programmer\Sygate\SPF\smc.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Programmer\AVPersonal\AVGUARD.EXE
G:\Programmer\AVPersonal\AVWUPSRV.EXE
G:\CFusionMX\runtime\bin\jrunsvc.exe
G:\CFusionMX\db\slserver52\bin\swagent.exe
G:\CFusionMX\db\slserver52\bin\swstrtr.exe
G:\CFusionMX\runtime\bin\jrun.exe
G:\CFusionMX\db\slserver52\bin\swsoc.exe
G:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\Programmer\MultiRes\MultiRes.exe
G:\Programmer\AVPersonal\AVGNT.EXE
G:\WINDOWS\SOUNDMAN.EXE
G:\PROGRA~1\1FOUR~1\BIN GLUE COAL.exe
G:\Programmer\Logitech\iTouch\iTouch.exe
G:\Programmer\Logitech\MouseWare\system\em_exec.exe
G:\Programmer\Logitech\ImageStudio\LogiTray.exe
G:\Programmer\Logitech\Video\LogiTray.exe
G:\Programmer\D-Tools\daemon.exe
G:\Programmer\ICQLite\ICQLite.exe
G:\Programmer\iTunes\iTunesHelper.exe
G:\Programmer\Java\j2re1.5.0\bin\jusched.exe
G:\Programmer\iPod\bin\iPodService.exe
G:\WINDOWS\System32\LVComS.exe
G:\Programmer\MSN Messenger\MsnMsgr.Exe
G:\Programmer\Logitech\ImageStudio\LowLight.exe
G:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
G:\Programmer\Mozilla Firefox\firefox.exe
G:\Programmer\Outlook Express\msimn.exe
G:\Programmer\Messenger\msmsgs.exe
G:\Programmer\Winamp\winamp.exe
G:\Programmer\Skype\Phone\Skype.exe
G:\Programmer\ABC\abc.exe
G:\Programmer\DC++\DCPlusPlus.exe
G:\Documents and Settings\Christian\Skrivebord\hijackthis\hijackthis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://omegasearch.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://omegasearch.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Ace Admin - {449229CC-CA1A-5A53-0D8A-82BF4CCB0D78} - G:\PROGRA~1\SIXTHR~1\Scrplan.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - g:\programmer\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - G:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - g:\programmer\google\googletoolbar2.dll
O3 - Toolbar: Blue the math - {F56A6A50-E661-4E2B-C1C5-D3CC2733E8AB} - G:\PROGRA~1\SIXTHR~1\Scrplan.dll
O4 - HKLM\..\Run: [MultiRes] G:\Programmer\MultiRes\MultiRes.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] "G:\Programmer\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CornLicense] G:\PROGRA~1\1FOUR~1\BIN GLUE COAL.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [zBrowser Launcher] G:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] G:\Programmer\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] G:\Programmer\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] G:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] G:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NeroCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "G:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [ICQ Lite] G:\Programmer\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [iTunesHelper] G:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Programmer\Java\j2re1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [SmcService] G:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\RunOnce: [SpybotSnD] "G:\Programmer\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKCU\..\Run: [MsnMsgr] "G:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\RunOnce: [ICQ Lite] G:\Programmer\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O8 - Extra context menu item: &Google Search - res://g:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://g:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://g:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Edit with &XML Spy - G:\Programmer\Altova\XMLSPY2004\spy.htm
O8 - Extra context menu item: Si&milar Pages - res://g:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://g:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmer\Java\j2re1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmer\Java\j2re1.5.0\bin\npjpi150.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - G:\Programmer\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - G:\Programmer\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - G:\Programmer\Altova\XMLSPY2004\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - G:\Programmer\Altova\XMLSPY2004\spy.htm (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - G:\Programmer\Fælles filer\Microsoft Shared\Help\hxds.dll

Logfile of HijackThis v1.98.0
Scan saved at 21:20:48, on 23-07-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\System32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\Programmer\Sygate\SPF\smc.exe
G:\WINDOWS\system32\spoolsv.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\Programmer\AVPersonal\AVGUARD.EXE
G:\Programmer\AVPersonal\AVWUPSRV.EXE
G:\CFusionMX\runtime\bin\jrunsvc.exe
G:\CFusionMX\db\slserver52\bin\swagent.exe
G:\CFusionMX\runtime\bin\jrun.exe
G:\CFusionMX\db\slserver52\bin\swstrtr.exe
G:\CFusionMX\db\slserver52\bin\swsoc.exe
G:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
G:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe
G:\WINDOWS\System32\svchost.exe
G:\Programmer\MultiRes\MultiRes.exe
G:\Programmer\AVPersonal\AVGNT.EXE
G:\WINDOWS\SOUNDMAN.EXE
G:\PROGRA~1\1FOUR~1\BIN GLUE COAL.exe
G:\Programmer\Logitech\iTouch\iTouch.exe
G:\Programmer\Logitech\MouseWare\system\em_exec.exe
G:\Programmer\Logitech\ImageStudio\LogiTray.exe
G:\Programmer\Logitech\Video\LogiTray.exe
G:\Programmer\D-Tools\daemon.exe
G:\Programmer\ICQLite\ICQLite.exe
G:\WINDOWS\System32\LVComS.exe
G:\Programmer\iTunes\iTunesHelper.exe
G:\Programmer\Logitech\ImageStudio\LowLight.exe
G:\Programmer\Java\j2re1.5.0\bin\jusched.exe
G:\Programmer\iPod\bin\iPodService.exe
G:\Programmer\MSN Messenger\MsnMsgr.Exe
G:\Programmer\Mozilla Firefox\firefox.exe
G:\Documents and Settings\Christian\Skrivebord\hijackthis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Ace Admin - {449229CC-CA1A-5A53-0D8A-82BF4CCB0D78} - G:\PROGRA~1\SIXTHR~1\Scrplan.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - g:\programmer\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - G:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - g:\programmer\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MultiRes] G:\Programmer\MultiRes\MultiRes.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] "G:\Programmer\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CornLicense] G:\PROGRA~1\1FOUR~1\BIN GLUE COAL.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [zBrowser Launcher] G:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] G:\Programmer\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] G:\Programmer\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] G:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] G:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NeroCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "G:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [ICQ Lite] G:\Programmer\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [iTunesHelper] G:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Programmer\Java\j2re1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [SmcService] G:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [MsnMsgr] "G:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O8 - Extra context menu item: &Google Search - res://g:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://g:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://g:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Edit with &XML Spy - G:\Programmer\Altova\XMLSPY2004\spy.htm
O8 - Extra context menu item: Si&milar Pages - res://g:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://g:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmer\Java\j2re1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmer\Java\j2re1.5.0\bin\npjpi150.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - G:\Programmer\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - G:\Programmer\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - G:\Programmer\Altova\XMLSPY2004\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - G:\Programmer\Altova\XMLSPY2004\spy.htm (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - G:\Programmer\Fælles filer\Microsoft Shared\Help\hxds.dll

NY LOG

Deaktiver systemgendannelse: - Dette venter vi med til maskinen er ren.
http://www.spywarefri.dk/virusscannere.htm#alle

Hent denne scanner, den skal du bruge senere.
http://www.mwti.net/antivirus/free_utilities.asp - Virusscanner.
Hent også TheKillBox og vejledningen.
http://home8.inet.tele.dk/fbj/TheKillBox.exe
http://home8.inet.tele.dk/fbj/TheKillBoxBrugsanvisning.htm


Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, brug TheKillBox til at slette filerne listet nederst.
Dobbelttjek, så alt kommer med.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://omegasearch.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://omegasearch.com/searchbar.html
O2 - BHO: Ace Admin - {449229CC-CA1A-5A53-0D8A-82BF4CCB0D78} - G:\PROGRA~1\SIXTHR~1\Scrplan.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O3 - Toolbar: Blue the math - {F56A6A50-E661-4E2B-C1C5-D3CC2733E8AB} - G:\PROGRA~1\SIXTHR~1\Scrplan.dll
O4 - HKLM\..\Run: [CornLicense] G:\PROGRA~1\1FOUR~1\BIN GLUE COAL.exe
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab

---------------------------------------
Sletning af filer og mapper:
Åbn en mappe, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".
Brug af Start->Søg.
Klik på "Alle filer og mapper"
Klik på "Avancerede indstillinger"
Sæt flueben i de tre øverste.
Brug TheKillBox med indstillingen sletning ved næste genstart.
-------------------
Mapper:
G:\PROGRA~1\SIXTHR~1\
G:\PROGRA~1\1FOUR~1\
---------------------------------------
Så kører du engangsskanneren fra Kaspersky - Aktiver det hele i opsætningen derinde, så den kan skanne alt igennem.
---------------------------------------
Du skal også lige hente og installere programmet Ad-aware hvis du da ikke har det i forvejen. Opdater det straks efter installationen, og inden du kører en scanning med denne. Fjern alt hvad den finder. Programmet samt brugervejledning på dansk finder du her: http://www.spywarefri.dk/vaerktoj.htm#adaware
Følg også vejledningen her til udvidet søgning: http://www.spywarefri.dk/tipsogtricks.htm#adaware
---------------------------------------
Genstart og kom med en ny logfil, så jeg kan se om alt er med.

Ny post

Logfile of HijackThis v1.98.0
Scan saved at 01:37:43, on 24-07-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\csrss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\System32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\Programmer\AVPersonal\AVWUPSRV.EXE
G:\CFusionMX\runtime\bin\jrunsvc.exe
G:\CFusionMX\db\slserver52\bin\swagent.exe
G:\CFusionMX\runtime\bin\jrun.exe
G:\CFusionMX\db\slserver52\bin\swstrtr.exe
G:\CFusionMX\db\slserver52\bin\swsoc.exe
G:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
G:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe
G:\WINDOWS\System32\svchost.exe
G:\Programmer\MultiRes\MultiRes.exe
G:\Programmer\AVPersonal\AVGNT.EXE
G:\WINDOWS\SOUNDMAN.EXE
G:\Programmer\Logitech\iTouch\iTouch.exe
G:\Programmer\Logitech\MouseWare\system\em_exec.exe
G:\Programmer\Logitech\ImageStudio\LogiTray.exe
G:\Programmer\Logitech\Video\LogiTray.exe
G:\Programmer\D-Tools\daemon.exe
G:\WINDOWS\System32\LVComS.exe
G:\Programmer\iTunes\iTunesHelper.exe
G:\Programmer\Logitech\ImageStudio\LowLight.exe
G:\Programmer\Java\j2re1.5.0\bin\jusched.exe
G:\Programmer\iPod\bin\iPodService.exe
G:\Programmer\ABC\abc.exe
G:\DOCUME~1\CHRIST~1\LOKALE~1\Temp\mwavscan.com
G:\DOCUME~1\CHRIST~1\LOKALE~1\Temp\kavss.exe
G:\Programmer\Webroot\Spy Sweeper\SpySweeper.exe
G:\Programmer\SpywareBlaster\spywareblaster.exe
G:\Programmer\SpywareGuard\sgmain.exe
G:\Programmer\SpywareGuard\sgbhp.exe
G:\Programmer\AVPersonal\AVGUARD.EXE
G:\Programmer\AVPersonal\AVWIN.EXE
G:\Programmer\ABC\abc.exe
G:\WINDOWS\System32\msiexec.exe
G:\Documents and Settings\Christian\Skrivebord\hijackthis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - G:\Programmer\SpywareGuard\dlprotect.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - g:\programmer\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - G:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - g:\programmer\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MultiRes] G:\Programmer\MultiRes\MultiRes.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] "G:\Programmer\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [zBrowser Launcher] G:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] G:\Programmer\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] G:\Programmer\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] G:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] G:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NeroCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "G:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [ICQ Lite] G:\Programmer\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [iTunesHelper] G:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Programmer\Java\j2re1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [SmcService] G:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [MsnMsgr] "G:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpySweeper] "G:\Programmer\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Startup: SpywareGuard.lnk = G:\Programmer\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O8 - Extra context menu item: &Google Search - res://g:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://g:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://g:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Edit with &XML Spy - G:\Programmer\Altova\XMLSPY2004\spy.htm
O8 - Extra context menu item: Si&milar Pages - res://g:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://g:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmer\Java\j2re1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmer\Java\j2re1.5.0\bin\npjpi150.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - G:\Programmer\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - G:\Programmer\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - G:\Programmer\Altova\XMLSPY2004\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - G:\Programmer\Altova\XMLSPY2004\spy.htm (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - G:\Programmer\Fælles filer\Microsoft Shared\Help\hxds.dll

Så er din log ren, du skal lige deaktivere systemgendannelse, genstarte genaktivere den og sætte filvisning til normal.
Vi har skrevet et par artikler om sikkerhed på nettet.
http://www.eksperten.dk/artikler/144
http://www.eksperten.dk/artikler/254
Som minimum anbefaler jeg Spywareguard, Spywareblaster, IE-Spyad og IE Privacy Keeper.
Mvh:
Fromsej/Team Spywarefri.