hjælp med hijackthis log

... Nu er det ikke alle (u)ønskede elementer som viser sig med en HiJackThis Log;  så gennemfør proceduren herfra -> http://www.eksperten.dk/artikler/1123

okay:)

combo fix log:
ComboFix 08-02.05.3 - Peter 2008-02-09 15:07:20.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.390 [GMT 1:00]
Running from: C:\fjenspyware\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

(((((((((((((((((((((((((((((((((((((((  Other Deletions  )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\Documents and Settings\Peter\Application Data\inst.exe
C:\Documents and Settings\Peter\Desktop\Error Cleaner.url
C:\Documents and Settings\Peter\Desktop\Privacy Protector.url
C:\Documents and Settings\Peter\Desktop\Spyware&Malware Protection.url
C:\Documents and Settings\Peter\Favorites\Error Cleaner.url
C:\Documents and Settings\Peter\Favorites\Privacy Protector.url
C:\Documents and Settings\Peter\Favorites\Spyware&Malware Protection.url
C:\WINDOWS\dat.txt
C:\WINDOWS\dwrmntsvrm.dll
C:\WINDOWS\edfqvrw.dll
C:\WINDOWS\rs.txt
C:\WINDOWS\search_res.txt

----- BITS: Possible infected sites -----

hxxp://onsafepro.com
hxxp://softworldnetwork.com
.
(((((((((((((((((((((((((  Files Created from 2008-01-09 to 2008-02-09  )))))))))))))))))))))))))))))))
.

2008-02-09 14:47 . 2008-02-09 14:48    <DIR>    d--------    C:\Program Files\SUPERAntiSpyware
2008-02-09 14:45 . 2008-02-09 14:45    <DIR>    d--------    C:\Program Files\Common Files\Wise Installation Wizard
2008-02-09 14:38 . 2008-02-09 14:38    <DIR>    d--------    C:\Program Files\CCleaner
2008-02-09 14:34 . 2008-02-09 15:02    <DIR>    d--------    C:\fjenspyware
2008-02-09 11:42 . 2008-02-09 11:42    1,308,216    --a------    C:\HiJackThis_v2.exe
2008-02-09 11:39 . 2008-02-09 11:39    <DIR>    d--------    C:\Documents and Settings\Peter\Application Data\InstallShield
2008-02-04 16:30 . 2008-02-04 16:30    <DIR>    d--------    C:\WINDOWS\solcache
2008-02-04 16:30 . 1998-06-10 13:07    1,053,184    --a------    C:\WINDOWS\system32\SierraNW.dll
2008-02-04 16:30 . 1997-09-18 00:00    490,256    --a------    C:\WINDOWS\system32\Oleaut32.1
2008-02-04 16:30 . 1998-06-10 13:05    231,936    --a------    C:\WINDOWS\system32\SNWValid.dll
2008-02-04 16:30 . 1997-07-14 14:57    11,104    --a------    C:\WINDOWS\system32\Snwvalid.hlp
2008-02-04 16:27 . 2008-02-04 16:36    <DIR>    d--------    C:\SIERRA
2008-02-04 16:27 . 2008-02-04 16:30    <DIR>    d--------    C:\Program Files\Sierra On-Line
2008-02-04 16:26 . 2008-02-04 16:26    <DIR>    d--------    C:\Documents and Settings\Peter\WINDOWS
2008-02-04 16:26 . 1998-01-23 12:22    304,128    --a------    C:\WINDOWS\IsUninst.exe
2008-02-04 16:26 . 2008-02-04 16:31    323    --a------    C:\WINDOWS\SIERRA.INI
2008-02-04 16:26 . 2008-02-04 16:31    136    --a------    C:\WINDOWS\wininit.ini
2008-02-04 16:22 . 2008-02-03 20:40    270,336    --a------    C:\WINDOWS\bfrgnos.dll
2008-02-04 16:22 . 2008-02-03 20:40    270,336    --a------    C:\WINDOWS\afxlspw.dll
2008-02-04 16:22 . 2008-02-03 20:40    90,112    --a------    C:\WINDOWS\frplprg.exe
2008-01-10 15:00 . 2008-01-10 15:00    <DIR>    d--------    C:\Program Files\XviD
2008-01-10 15:00 . 2008-01-10 15:00    <DIR>    d--------    C:\Program Files\Lame MP3 Codec
2008-01-10 15:00 . 2002-12-03 22:13    1,048,576    --a------    C:\WINDOWS\system32\lameACM.acm
2008-01-10 15:00 . 2005-05-03 09:33    299,008    --a------    C:\WINDOWS\system32\LAME_MP3.dll
2008-01-10 15:00 . 2008-01-10 15:00    65,024    --a------    C:\WINDOWS\IFinst26.exe
2008-01-10 15:00 . 2004-12-10 21:29    401    --a------    C:\WINDOWS\system32\lame_acm.xml
2008-01-10 14:59 . 2008-01-10 14:59    <DIR>    d--------    C:\Program Files\Samsung
2008-01-10 14:59 . 2008-01-10 14:59    <DIR>    d--------    C:\Program Files\MarkAny
2008-01-10 14:54 . 2001-09-30 19:10    246,784    --a------    C:\WINDOWS\system32\ActiveSkin.ocx
2008-01-10 14:54 . 2001-05-24 12:59    162,304    --a------    C:\UNWISE.EXE
2008-01-10 14:54 . 2002-01-18 18:12    112    --a------    C:\WINDOWS\ActiveSkin.INI

.
((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-09 13:53    ---------    d-----w    C:\Documents and Settings\Peter\Application Data\MegauploadToolbar
2008-02-09 13:47    ---------    d-----w    C:\Documents and Settings\Peter\Application Data\SUPERAntiSpyware.com
2008-01-10 13:59    ---------    d--h--w    C:\Program Files\InstallShield Installation Information
2007-09-16 12:35    47,360    ----a-w    C:\Documents and Settings\Peter\Application Data\pcouffin.sys
2007-06-29 15:21    87,608    ----a-w    C:\Documents and Settings\Peter\Application Data\ezpinst.exe
.

(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-04-23 15:46 1318128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIModeChange"="Ati2mdxx.exe" [2006-10-29 18:36 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-09 21:10 335872]
"AGRSMMSG"="AGRSMMSG.exe" [2006-10-29 18:47 88363 C:\WINDOWS\agrsmmsg.exe]
"ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-09-22 08:00 94208]
"McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2005-12-07 03:55 131072]
"Network Associates Error Reporting Service"="C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" [2003-10-07 09:48 147514]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 16:34 213936]
"!AVG Anti-Spyware"="C:\AVG Anti-Spyware 7.5\avgas.exe" [2007-09-28 09:26 6731312]
"SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-02-23 16:32 126976]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Hurtigstart.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [2006-11-02 16:59:29 102400]
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2006-11-01 19:27:34 155648]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{88485281-8b4b-4f8d-9ede-82e29a064277}"= C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 16:51 192512]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"afxlspw"= {72BD7570-C19C-4D77-852E-CE029D142F0F} - C:\WINDOWS\afxlspw.dll [2008-02-03 20:40 270336]
"bfrgnos"= {58766AF6-EA0E-4CEC-8848-7808EE05381B} - C:\WINDOWS\bfrgnos.dll [2008-02-03 20:40 270336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

R0 atiide;atiide;C:\WINDOWS\system32\DRIVERS\atiide.sys [2006-10-29 18:36]

*Newly Created Service* - CATCHME
*Newly Created Service* - ENTDRV51
*Newly Created Service* - SASDIFSV
*Newly Created Service* - SASENUM
*Newly Created Service* - SASKUTIL
.
Contents of the 'Scheduled Tasks' folder
"2007-11-28 15:58:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-09 15:11:59
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-09 15:13:49
ComboFix-quarantined-files.txt  2008-02-09 14:13:21
.
2008-01-17 15:00:40    --- E O F --- 


hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 14:55:06, on 09-02-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\fjenspyware\alternativ.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: SXG Advisor - {C1AEEDB2-C2BA-4F27-B591-44EA89388299} - C:\WINDOWS\dwrmntsvrm.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O3 - Toolbar: edfqvrw - {5FF6FACA-CFF7-499D-AB5B-8EEA9CE80739} - C:\WINDOWS\edfqvrw.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: Download link med Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://flashcasino.ladbrokes.com/instant-play-en/FlashAX.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: afxlspw - {72BD7570-C19C-4D77-852E-CE029D142F0F} - C:\WINDOWS\afxlspw.dll
O21 - SSODL: bfrgnos - {58766AF6-EA0E-4CEC-8848-7808EE05381B} - C:\WINDOWS\bfrgnos.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe


rootlog:
********************************* ROOTCHK-(28-12-07)-LOG, by ejvindh
09-02-2008 14:59:14,92

NOTICE!! Rootchk is not being updated anymore, and is thus gradually getting outdated.
Last update was made 28-12-07

The rootkits that are detected by this tool were not found.

********************************* ROOTCHK-LOG-end


catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-09 14:59:19
Windows 5.1.2600 Service Pack 2
scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reinstall\\24\xe1\21]
"DisplayName"="\xa290\37\xa290\37\1"
"DeviceDesc"="\xa290\37\xa290\37\1"
"ProviderName"="\xfed4\21\xee18\x7c90\xff44\21\b"
"MFG"="\x2f4"
"ReinstallString"="C:\WINDOWS\System32\ReinstallBackups\\xe114\21\x80\xc010\DriverFiles\.INF"
"DeviceInstanceIds"=str(7):"c:\documents and settings\peter\desktop\drivers\display-xp-614106430\sbdrv\smbus\smbusati.inf"

scanning hidden files ...

hidden processes: 0
hidden services: 0
hidden files: 0

BONGO - ComboFix 'fixed' en del Uønskede elementer!!!

------------------------------------------------------------------------

Kør en scanning med Hijackthis,
Du får herunder nogle filer, som du skal fixe. Det, du skal gøre, er at sætte et flueben ud for disse filer. Når du har gjort det, så lukker du alle andre vinduer ned. Det er meget vigtigt at det eneste vindue, som er åbent er HijackThis vinduet. Husk også at lukke dette vindue, når du har markeret filerne. Nu må du fixe. Klik på Fix checked.

Det er disse, som skal fixes:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
O2 - BHO: SXG Advisor - {C1AEEDB2-C2BA-4F27-B591-44EA89388299} - C:\WINDOWS\dwrmntsvrm.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O3 - Toolbar: edfqvrw - {5FF6FACA-CFF7-499D-AB5B-8EEA9CE80739} - C:\WINDOWS\edfqvrw.dll
O8 - Extra context menu item: Download link med Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O21 - SSODL: afxlspw - {72BD7570-C19C-4D77-852E-CE029D142F0F} - C:\WINDOWS\afxlspw.dll
O21 - SSODL: bfrgnos - {58766AF6-EA0E-4CEC-8848-7808EE05381B} - C:\WINDOWS\bfrgnos.dll

Genstart normalt, kør en ny scanning med hijackthis, og kopier en frisk log herind til tjek.

------------------------------------------------------------------------