Hjælp til analyse af min hijack liste

Din pc har snavs, så du bør følge denne vejledning http://www.eksperten.dk/artikler/954

Tror du får brug for denne VundoFix http://www.atribune.org/content/view/24/2/

Logger selv af nu, så måske vil andre hjælpe dig videre - ellers kigger jeg i aften.

Hej igen og tak for at du gidder at hjælpe mig :)

Jeg har nu fået fjernet det meste således at der ikke popper op flere vinduer mens jeg surfer.

Men jeg mangler stadig at kunne komme ind i 'Kør' under 'Start'. I tillæg mangler stadig mine nedlukningsalternativer. Jeg har i øjeblikket kun anledning til at 'Log af bruger'

Men nedenunder er mine resultater fra først SuperAntiSpyware, derefter min Drweb log og så Hijack loggen.
*********************************************************************************
SUPERAntiSpyware Scan Log
Generated 05/25/2007 at 07:10 PM

Application Version : 3.5.1016

Core Rules Database Version : 3244
Trace Rules Database Version: 1255

Scan type      : Complete Scan
Total Scan Time : 00:28:19

Memory items scanned      : 236
Memory threats detected  : 0
Registry items scanned    : 6837
Registry threats detected : 27
File items scanned        : 41248
File threats detected    : 29

Unclassified.Oreans32
    HKLM\System\ControlSet001\Services\oreans32
    C:\WINDOWS\SYSTEM32\DRIVERS\OREANS32.SYS
    HKLM\System\ControlSet003\Services\oreans32
    HKLM\System\CurrentControlSet\Services\oreans32
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32#NextInstance
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Service
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Legacy
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ConfigFlags
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Class
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ClassGUID
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#DeviceDesc
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Capabilities
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Driver
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\LogConf
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\Control
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Type
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Start
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ErrorControl
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ImagePath
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#DisplayName
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security#Security
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#0
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#Count
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#NextInstance

Adware.Tracking Cookie
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@zedo[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@stats.drivecleaner[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@clickbank[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@www.amaena[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@partypoker[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@imrworldwide[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@ad.yieldmanager[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@hitbox[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@drivecleaner[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@stats1.reliablestats[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@adtech[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@int.sitestat[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@www.googleadservices[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@track.adform[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@mediaplex[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@ad.zanox[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@doubleclick[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@dk.winantivirus[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@indexstats[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@statcounter[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@ehg-hollywood.hitbox[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@int.sitestat[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@fastclick[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@partygaming.122.2o7[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@linksynergy[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@cpvfeed[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@winantivirus[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@dk.drivecleaner[1].txt

SUPERAntiSpyware Scan Log
Generated 05/25/2007 at 07:10 PM

Application Version : 3.5.1016

Core Rules Database Version : 3244
Trace Rules Database Version: 1255

Scan type      : Complete Scan
Total Scan Time : 00:28:19

Memory items scanned      : 236
Memory threats detected  : 0
Registry items scanned    : 6837
Registry threats detected : 27
File items scanned        : 41248
File threats detected    : 29

Unclassified.Oreans32
    HKLM\System\ControlSet001\Services\oreans32
    C:\WINDOWS\SYSTEM32\DRIVERS\OREANS32.SYS
    HKLM\System\ControlSet003\Services\oreans32
    HKLM\System\CurrentControlSet\Services\oreans32
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32#NextInstance
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Service
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Legacy
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ConfigFlags
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Class
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ClassGUID
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#DeviceDesc
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Capabilities
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Driver
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\LogConf
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\Control
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Type
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Start
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ErrorControl
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ImagePath
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32#DisplayName
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security#Security
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#0
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#Count
    HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#NextInstance

Adware.Tracking Cookie
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@zedo[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@stats.drivecleaner[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@clickbank[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@www.amaena[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@partypoker[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@imrworldwide[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@ad.yieldmanager[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@hitbox[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@drivecleaner[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@stats1.reliablestats[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@adtech[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@int.sitestat[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@www.googleadservices[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@track.adform[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@mediaplex[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@ad.zanox[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@doubleclick[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@dk.winantivirus[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@indexstats[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@statcounter[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@ehg-hollywood.hitbox[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@int.sitestat[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@fastclick[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@partygaming.122.2o7[1].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@linksynergy[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@cpvfeed[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@winantivirus[2].txt
    C:\Documents and Settings\Roger Espset\Cookies\roger_espset@dk.drivecleaner[1].txt

*****************************************************************************
DrWeb1.csv:

A0000046.dll;C:\System Volume Information\_restore{C3B7B717-12D3-4193-BB91-EE57B36AEA8D}\RP2;Adware.Crew;Renamed.;

*****************************************************************************

Logfile of HijackThis v1.99.1
Scan saved at 19:31:20, on 25-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
C:\Programmer\Fælles filer\Symantec Shared\ccProxy.exe
C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
C:\Programmer\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\programmer\fælles filer\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
C:\Programmer\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programmer\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\PROGRA~1\SYMANT~1\SYMANT~2\vptray.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
C:\Programmer\Skype\Phone\Skype.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Google\Google Talk\googletalk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programmer\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmer\SlySoft\AnyDVD\AnyDVD.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
C:\Programmer\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\Skype\Plugin Manager\SkypePM.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Programmer\Logitech\SetPoint\SetPoint.exe
D:\programmer\Nikon\PictureProject\NkbMonitor.exe
C:\Programmer\Delux\PS2 Keyboard English Edition\keyboard.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Programmer\MSN Messenger\usnsvc.exe
C:\Programmer\Fælles filer\Logitech\khalshared\KHALMNPR.EXE
C:\Programmer\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Programmer\Internet Explorer\IEXPLORE.EXE
D:\Download\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jyskeprivatpc.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IE7pro - {68C55168-E188-40DF-A514-835FCD78B1BF} - C:\Programmer\IE7pro\IE7pro.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {78BD2971-EB54-4EE9-95F2-F6321B16AC85} - C:\WINDOWS\system32\gebbcaw.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {814BBFEF-73C2-463D-A10B-0671C1586D29} - C:\WINDOWS\system32\pmkkh.dll (file missing)
O2 - BHO: IE DevToolbar BHO - {CC7E636D-39AA-49b6-B511-65413DA137A1} - C:\Programmer\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll
O4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /Audit
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmer\Fælles filer\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Programmer\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Programmer\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~2\\vptray.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Programmer\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [googletalk] "C:\Programmer\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Programmer\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [WMPNSCFG] C:\Programmer\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [AnyDVD] C:\Programmer\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Adobe Gamma.lnk = ?
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = D:\programmer\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: PS2 Keyboard English Edition.lnk = ?
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: IE7pro - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Programmer\IE7pro\IE7pro.dll
O9 - Extra 'Tools' menuitem: IE7pro    Ctrl+Alt+7 - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Programmer\IE7pro\IE7pro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: IE Developer Toolbar - {48FFE35F-36D9-44bd-A6CC-1D34414EAC0D} - C:\Programmer\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1153599743269
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://light.gabs.dk/imageuploader/ImageUploader3.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {D216644A-C6DB-49D9-BBCF-D38FE7991BF2} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/tdccsp-0506.exe
O18 - Protocol: bw+0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FLLESF~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Programmer\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Programmer\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\programmer\fælles filer\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Programmer\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Programmer\Symantec Client Security\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Programmer\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Symantec SecurePort (SymSecurePort) - Symantec Corporation - C:\Programmer\Symantec Client Security\Symantec Client Firewall\SymSPort.exe

**********************************************************************************'

That's it!

Hej igen.

Nu har jeg fået ordnet mine problemer. Delvis med hjælp fra nva og så vha af Spybot - Search & Destroy. Nva sine forslag sørget for at mine popups forsvant.

Spybot ordnet det med kør kommandoen i start, samt at jeg nu også kan vælge 'luk computeren' fra min start menu.

SÅ hvis nva lægger igen et svar, får du mine points.

Tak for hjælpen!

Glæder mig du fik det klaret :)

Du kan fixe disse:

O2 - BHO: (no name) - {78BD2971-EB54-4EE9-95F2-F6321B16AC85} - C:\WINDOWS\system32\gebbcaw.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {814BBFEF-73C2-463D-A10B-0671C1586D29} - C:\WINDOWS\system32\pmkkh.dll (file missing)
og alle disse:
O18 - Protocol: bw+0 - {91DDD8C7-DFD5-48D3-AB63-0735CAD39745} - C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

mest pga. oprydning

Tak! :)

Hmm, jeg prøver at acceptere dit svar, men det lykkedes ikke rigtig....

Sådan!