Er dette normalt? -eller spyware?

tryp på crtl+alt+del 1 gang og se hvad der kører af processor ?
Hent Hijackthis og installer det, læg en kopi af loggen herind og lad en "log" ekspert se den igennem.
http://www.spychecker.com/download/download_hijackthis.html

Jeps...så kommer den her:
Logfile of HijackThis v1.98.2
Scan saved at 21:54:30, on 11-10-2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Programmer\Boomtown\WrOS.EXE
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Programmer\Boomtown\winpppoverethernet.exe
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
F:\Programmer\HewlettPackard\HP Share-to-Web\hpgs2wnd.exe
C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe
H:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\QuickTime\qttask.exe
H:\Programmer\Logitech\iTouch\iTouch.exe
C:\WINNT\system32\msnservices.exe
C:\WINNT\system32\svchostss.exe
C:\WINNT\system32\explorer.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\WINNT\system32\internat.exe
F:\Programmer\HewlettPackard\HP Share-to-Web\hpgs2wnf.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\WINNT\system32\msnservices.exe
C:\WINNT\system32\svchostss.exe
C:\WINNT\system32\explorer.exe
H:\Programmer\CASIO\Photo Loader\Plauto.exe
C:\WINNT\system32\wuauclt.exe
F:\WINZIP\winzip32.exe
C:\WINNT\system32\explorer.exe
C:\WINNT\system32\explore.exe
H:\Downloads\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - f:\AcrobatReader\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: De Gule Sider - {D4003A01-9B2C-4e24-9CD2-8D7DB1BDE096} - C:\WINNT\Downloaded Program Files\DGSToolbar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [a-winpoet-service] C:\Programmer\Boomtown\winpppoverethernet.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] F:\Programmer\HewlettPackard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] H:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [zBrowser Launcher] h:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] h:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Microsoft Service Information] msnservices.exe
O4 - HKLM\..\Run: [Configuration Loader] svchostss.exe
O4 - HKLM\..\Run: [Microsoft Synchronization Manager] explore.exe
O4 - HKLM\..\RunServices: [Microsoft Service Information] msnservices.exe
O4 - HKLM\..\RunServices: [Configuration Loader] svchostss.exe
O4 - HKLM\..\RunServices: [Microsoft Synchronization Manager] explore.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Microsoft Service Information] msnservices.exe
O4 - HKCU\..\Run: [Configuration Loader] svchostss.exe
O4 - HKCU\..\Run: [Microsoft Synchronization Manager] explorer.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\Office10\OSA.EXE
O4 - Global Startup: Photo Loader supervisory.lnk = H:\Programmer\CASIO\Photo Loader\Plauto.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = ?
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://F:\Office10\EXCEL.EXE/3000
O9 - Extra button: Degulesider Toolbar - {B41E4A63-C2FD-4452-8BCA-D16FA5081080} - C:\WINNT\Downloaded Program Files\DGSToolbar.dll
O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) - https://netbank.bgbank.dk/html/activex/BG/Menu.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {D4003A01-9B2C-4E24-9CD2-8D7DB1BDE096} (De Gule Sider) - http://www.degulesider.dk/tool/DGSCab.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://lw11fd.law11.hotmail.msn.com/activex/HMAtchmt.ocx

Jeg tror jeg poster den for sig selv.
Men Haverslev...smid et svar så får du lidt point!

ok, har ikke helt check på hijackthis selv - desværre. ;)

kunne det ikke være din MSN Messenger??