Blokeret website og HJT logfile

Du har 'snavs' på din pc - følg denne vejledning http://www.eksperten.dk/artikler/954 - ikke mig der følger op.

OK, efter mange lange programmer ser det sådan ud:

DrWeb:
top_avi.exe;C:\Documents and Settings\Kristoffer\Local Settings\Temp\Rar$EX00.187\images;Dialer.Riprova;Deleted.;
mirc.exe;C:\Documents and Settings\Kristoffer\Desktop\mIRC;Program.mIRC.616;Renamed.;

SAS:
SUPERAntiSpyware Scan Log
Generated 08/22/2006 at 05:13 PM

Core Rules Database Version : 3058
Trace Rules Database Version: 1104

Memory threats detected  : 0
Registry threats detected : 0
File threats detected    : 65

Adware.Tracking Cookie
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@adtech[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@track.adform[6].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@cgi-bin[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ads.primeinteractive[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@xiti[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@www.swebusexpress[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad1.emediate[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@atwola[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@track.adform[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@dist.belnk[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad.adtoma[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@cz8.clickzs[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@cz7.clickzs[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@cz4.clickzs[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@bizrate[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad1.emediate[3].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@track.adform[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@burstnet[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@tracking[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@mirror2.s-tracking[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@belnk[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad.adtoma[3].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@paypopup[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@112.2o7[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@hatstats[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@adknowledge[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@www.allrealitypass[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@m1.webstats4u[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@rotator.adjuggler[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@cbs.112.2o7[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ads.as4x.tmcs.ticketmaster[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ads.as4x.tmcs[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ilead.itrack[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@indextools[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ads.monster[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad1.emediate[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad.adtoma[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@elitedates[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@click.tdc-online[1].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@track.adform[4].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@dist.belnk[3].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@ad.yieldmanager[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@www.swebusexpress[2].txt
    C:\Documents and Settings\Kristoffer\Cookies\kristoffer@track.adform[3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adform[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ad1.emediate[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@track.adform[2].txt
    D:\WINDOWS\Cookies\kristoffer boesen@www.xxxud[1].txt
    D:\WINDOWS\Cookies\kristoffer boesen@cz4.clickzs[1].txt
    D:\WINDOWS\Cookies\kristoffer boesen@clickzs[2].txt
    D:\WINDOWS\Cookies\uro@frame.warez-list[1].txt
    D:\WINDOWS\Cookies\uro@www.warezfounder[1].txt
    D:\WINDOWS\Cookies\uro@ontrack[1].txt
    D:\WINDOWS\Cookies\uro@www.ontrack[2].txt
    D:\WINDOWS\Cookies\uro@cz4.clickzs[2].txt
    D:\WINDOWS\Cookies\uro@cz6.clickzs[1].txt
    D:\WINDOWS\Cookies\uro@stats.klsoft[1].txt
    D:\WINDOWS\Cookies\uro@cz3.clickzs[2].txt
    D:\WINDOWS\Cookies\uro@ads.adtegrity[2].txt
    D:\WINDOWS\Cookies\uro@ads.jubii[2].txt
    D:\WINDOWS\Cookies\uro@clickzs[2].txt
    D:\WINDOWS\Cookies\uro@ads.as4x.tmcs.ticketmaster[1].txt
    D:\WINDOWS\Cookies\uro@ads.link4ads[2].txt
    D:\WINDOWS\Cookies\uro@ads.realcities[1].txt
    D:\WINDOWS\Cookies\uro@clickzs[3].txt

Hijack This:
Logfile of HijackThis v1.99.1
Scan saved at 19:27:51, on 22-08-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Belkin\Bluetooth-Software\bin\btwdins.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\Program Files\Logitech\iTouch\kbdtray.exe
C:\Program Files\Belkin\Bluetooth-Software\BTTray.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Documents and Settings\Kristoffer\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.live.com/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&tw=0&fs=1&fsa=1&fsat=1296000&lc=1030&_lang=EN
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Cama-Loader.lnk = C:\Program Files\mIRC\Startup.bat
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Send til &Bluetooth - C:\Program Files\Belkin\Bluetooth-Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth-Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth-Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3D6DDD23-870A-4FC8-B3AF-5F67C935A9B7} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-1204.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040428/qtinstall.info.apple.com/saba/dk/win/QuickTimeFullInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37380.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D216644A-C6DB-49D9-BBCF-D38FE7991BF2} (Util Class) - https://opdatering.tdc.dk/csp/authenticode/tdccsp-0506.exe
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll
O20 - Winlogon Notify: SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\Belkin\Bluetooth-Software\bin\btwdins.exe
O23 - Service: NS (MSLLR) - Unknown owner - C:\WINDOWS\System32\ns.exe" -service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

-- Klik på Start-kør. Skriv: Services.msc, og klik på OK.
Find følgende services, højreklik på dem og vælg egenskaber. Under starttype vælger du deaktiveret. Klik også på Stop:
"NS"

-- Klik Start-kør, skriv cmd, og klik på OK. I det sorte billede skriver du:
sc delete "MSLLR" <efterfulgt af Enter>
Luk det sorte billede.

-- Genstart computeren, og lav en ny log med Hijackthis, som du lægger herind til check.

-- Prøv derefter at slette alle dine cookies, og midlertidige filer i din browser. Genstart, og se om det har hjulpet på dit problem.

-- En mulighed kunne også være, at du er blevet IP-bannet fra siden. Er det en mulighed, der kunne være realistisk?

Du skriver: Find følgende services, højreklik på dem og vælg egenskaber. Under starttype vælger du deaktiveret.

Hvilke services?


Og nej, jeg tror det er tvivlsomt, at jeg er blevet IP-bannet. Jeg har lavet en ændring i hosts-filen, så det virker lige nu, men ikke en reel løsning.

<< Hvilke services? >>

Find følgende services, højreklik på dem og vælg egenskaber. Under starttype vælger du deaktiveret. Klik også på Stop:
"NS" <<<<------

Inden jeg laver de ting, som ejvindh foreslår, så har jeg lige ændet min hosts-fil tilbage, og nu fungerer det at logge ind på sitet.

Men jeg vil da gerne have så meget 'snavs' væk som muligt, så jeg forsøger også ejvindhs foreslag.

Logfile of HijackThis v1.99.1
Scan saved at 10:45:14, on 23-08-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Belkin\Bluetooth-Software\bin\btwdins.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\iTouch\kbdtray.exe
C:\Program Files\Belkin\Bluetooth-Software\BTTray.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Documents and Settings\Kristoffer\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.live.com/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&tw=0&fs=1&fsa=1&fsat=1296000&lc=1030&_lang=EN
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Cama-Loader.lnk = C:\Program Files\mIRC\Startup.bat
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Send til &Bluetooth - C:\Program Files\Belkin\Bluetooth-Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth-Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth-Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3D6DDD23-870A-4FC8-B3AF-5F67C935A9B7} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-1204.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040428/qtinstall.info.apple.com/saba/dk/win/QuickTimeFullInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37380.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D216644A-C6DB-49D9-BBCF-D38FE7991BF2} (Util Class) - https://opdatering.tdc.dk/csp/authenticode/tdccsp-0506.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{D4B4E687-9644-4656-87C3-DA689200DA83}: NameServer = 82.180.0.166 213.170.224.166
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll
O20 - Winlogon Notify: SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\Belkin\Bluetooth-Software\bin\btwdins.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

Tak for assistance til mcgoat :-)

Så er loggen ren. Jeg tror nu egentlig at computeren har været rimelig ren fra starten af -- det er mest rester fra tidligere infektioner og nogle cookies, der er blevet slettet.

Men dejligt at det virker nu :-)

Tak for hjælpen.

Du er velkommen.