Hijackthis & Combofix log
Min computer er blevet langsommere og langsommere, og opføre sig underligt til tider. Ved ikk om det kan være virus.Her er Logsne.
ComboFix 09-10-10.01 - Rasmus 11-10-2009 0:12.1.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.45.1030.18.1023.565 [GMT 2:00]
Kører fra: c:\documents and settings\Rasmus\Skrivebord\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Andet, der er slettet )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Rasmus\Application Data\.#
c:\windows\Installer\7f2fd30.msi
c:\windows\Installer\7f2fd31.msp
c:\windows\Installer\7f2fd32.msp
c:\windows\Installer\7f2fd33.msp
c:\windows\Installer\7f2fd34.msp
c:\windows\Installer\7f2fd35.msp
c:\windows\Installer\7f2fd36.msp
c:\windows\Installer\7f2fd37.msp
c:\windows\Installer\7f2fd38.msp
c:\windows\Installer\7f2fd39.msp
.
((((((((((((((((((((((((((((( Filer skabt fra 2009-09-10 til 2009-10-10 )))))))))))))))))))))))))))))))))))
.
2009-10-02 17:15 . 2009-10-02 17:15 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Malwarebytes
2009-10-02 17:15 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-02 17:15 . 2009-10-02 17:15 -------- d-----w- c:\programmer\Malwarebytes' Anti-Malware
2009-10-02 17:15 . 2009-10-02 17:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-10-02 17:15 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-02 17:12 . 2009-10-02 17:12 -------- d-----w- c:\programmer\CCleaner
2009-09-30 12:23 . 2002-02-21 16:56 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-09-29 02:33 . 2009-09-29 02:33 -------- d-----w- c:\programmer\uTorrent
2009-09-29 02:32 . 2009-10-09 13:36 -------- d-----w- c:\documents and settings\Rasmus\Application Data\uTorrent
2009-09-25 01:01 . 2009-09-25 01:01 -------- d-----w- c:\windows\ie8updates
2009-09-24 15:42 . 2008-04-14 16:05 153088 -c----w- c:\windows\system32\dllcache\shmedia.dll
2009-09-24 15:41 . 2008-04-14 16:05 136192 ------w- c:\windows\system32\aaclient.dll
2009-09-24 15:41 . 2008-04-14 15:35 8192 -c----w- c:\windows\system32\dllcache\asferror.dll
2009-09-24 15:19 . 2009-09-24 15:19 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-09-24 15:18 . 2009-09-24 15:18 -------- d-sh--w- c:\documents and settings\Rasmus\IETldCache
2009-09-24 15:15 . 2009-08-07 08:48 100352 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-09-24 15:14 . 2009-07-19 16:45 11067392 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-09-24 15:14 . 2009-07-03 16:59 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-09-24 15:14 . 2009-07-03 16:59 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2009-09-24 15:14 . 2009-07-03 16:59 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-09-24 15:14 . 2009-07-03 16:59 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-09-24 15:14 . 2009-07-03 16:59 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-09-24 15:13 . 2009-09-24 15:14 -------- dc-h--w- c:\windows\ie8
2009-09-24 14:51 . 2009-09-24 14:51 -------- d-----w- c:\documents and settings\All Users\Application Data\id Software
2009-09-24 14:34 . 2009-02-09 11:26 2191616 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-24 14:34 . 2009-06-25 08:26 731648 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-09-24 14:34 . 2009-02-09 11:25 2147840 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-24 14:34 . 2009-02-09 11:26 2026496 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-24 14:34 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-09-19 16:24 . 2009-09-19 16:24 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Leadertech
2009-09-19 15:29 . 2006-11-08 19:19 4544 ----a-w- c:\windows\system32\drivers\hidusbf.sys
2009-09-19 15:27 . 2009-09-19 15:25 142976 ----a-w- c:\windows\system32\usbport.sys
2009-09-17 19:23 . 2009-09-17 19:23 55808 ----a-w- c:\windows\devcon.exe
2009-09-15 13:21 . 2009-09-15 13:21 692224 ----a-w- c:\windows\system32\bsrmgcv.dll
2009-09-15 13:21 . 2009-09-15 13:21 192512 ----a-w- c:\windows\system32\bsrmgps.dll
2009-09-15 13:20 . 2009-09-15 13:20 585728 ----a-w- c:\windows\system32\bsratswf.dll
2009-09-15 13:20 . 2009-09-15 13:20 147456 ----a-w- c:\windows\system32\bsratwmv.dll
2009-09-15 13:20 . 2009-09-15 13:20 -------- d-----w- C:\Program Files
2009-09-14 20:07 . 2009-09-14 20:07 -------- d-----w- c:\documents and settings\LocalService\Lokale indstillinger\Application Data\NVIDIA Corporation
2009-09-14 20:07 . 2009-09-14 20:07 -------- d-----w- c:\documents and settings\Rasmus\Lokale indstillinger\Application Data\NVIDIA Corporation
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-10 21:56 . 2008-10-08 14:26 -------- d-----w- c:\programmer\BearShare
2009-10-10 20:58 . 2008-11-27 21:39 -------- d-----w- c:\documents and settings\Rasmus\Application Data\mIRC
2009-10-10 20:52 . 2008-10-23 19:38 138944 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-10-10 20:52 . 2008-10-23 19:38 189784 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-10-10 20:28 . 2009-08-16 13:05 -------- d-----w- c:\programmer\mIRC
2009-10-10 20:11 . 2009-10-07 21:54 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Skype
2009-10-10 20:09 . 2009-10-07 21:55 -------- d-----w- c:\documents and settings\Rasmus\Application Data\skypePM
2009-10-10 02:18 . 2009-10-10 02:18 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-10-10 02:15 . 2009-10-10 02:15 -------- d-----w- c:\programmer\NGO
2009-10-10 01:48 . 2009-10-10 01:48 -------- d-----w- c:\programmer\Driver Cleaner Pro
2009-10-07 21:54 . 2009-10-07 21:53 -------- d-----r- c:\programmer\Skype
2009-10-07 21:54 . 2009-10-07 21:54 -------- d-----w- c:\programmer\Fælles filer\Skype
2009-10-07 21:53 . 2009-04-29 10:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-10-06 09:32 . 2009-08-23 14:11 -------- d-----w- c:\programmer\Analog Devices
2009-10-05 13:09 . 2008-10-05 03:28 -------- d-----w- c:\programmer\Fælles filer\logishrd
2009-10-05 13:08 . 2009-01-10 17:53 -------- d-----w- c:\programmer\Common Files
2009-10-05 13:08 . 2008-10-05 03:41 -------- d-----w- c:\documents and settings\All Users\Application Data\LogiShrd
2009-10-02 11:44 . 2009-05-04 17:37 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-09-30 19:00 . 2009-07-19 18:10 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Mumble
2009-09-30 12:20 . 2008-10-02 11:06 -------- d--h--w- c:\programmer\InstallShield Installation Information
2009-09-30 12:20 . 2008-10-05 12:31 -------- d-----w- c:\programmer\Logitech
2009-09-25 15:58 . 2009-02-02 11:05 143872 ----a-w- c:\windows\system32\drivers\usbport.sys
2009-09-24 16:17 . 2009-03-22 13:21 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Hamachi
2009-09-24 14:51 . 2009-07-01 18:12 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Octoshape
2009-09-22 21:58 . 2009-02-28 15:51 2373712 ----a-w- c:\windows\system32\pbsvc.exe
2009-09-15 13:22 . 2009-03-31 21:09 2048 ----a-w- c:\windows\system32\Tr_sttool.dat
2009-09-14 20:07 . 2009-09-06 20:10 -------- d-----w- c:\programmer\NVIDIA Corporation
2009-09-09 18:35 . 2009-09-09 18:35 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA
2009-09-09 16:52 . 2009-09-09 16:52 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Warsow 0.5
2009-09-09 14:25 . 2009-09-09 14:25 -------- d-----w- c:\programmer\Ventrilo
2009-09-09 13:36 . 2009-09-09 13:36 17408 ----a-w- C:\psapi.dll
2009-09-02 19:57 . 2009-03-22 13:21 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2009-09-01 19:19 . 2009-09-01 19:19 4096 ----a-w- c:\windows\system32\detoured.dll
2009-08-23 14:23 . 2008-10-05 03:07 -------- d-----w- c:\programmer\Windows Live
2009-08-23 14:11 . 2009-08-23 14:11 -------- d-----w- c:\programmer\MSBuild
2009-08-23 04:09 . 2009-08-23 04:09 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2009-08-20 15:04 . 2009-01-11 18:21 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2009-08-20 14:22 . 2008-10-23 19:38 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-08-17 01:00 . 2009-08-13 17:42 314224 ----a-w- c:\documents and settings\LocalService\Lokale indstillinger\Application Data\FontCache3.0.0.0.dat
2009-08-16 17:25 . 2009-08-16 17:25 -------- d-----w- c:\documents and settings\Rasmus\Application Data\Winamp
2009-08-16 17:25 . 2009-08-16 17:25 -------- d-----w- c:\programmer\Winamp
2009-08-14 16:18 . 2008-10-02 12:41 68440 ----a-w- c:\documents and settings\Rasmus\Lokale indstillinger\Application Data\GDIPFONTCACHEV1.DAT
2009-08-14 15:54 . 2009-08-14 15:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Sony
2009-08-13 17:36 . 2008-12-15 20:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-08-06 17:24 . 2008-10-02 11:14 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 17:24 . 2008-07-18 20:08 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 17:24 . 2008-10-02 11:14 44768 ----a-w- c:\windows\system32\wups2.dll
2009-08-06 17:24 . 2008-10-02 11:14 35552 ----a-w- c:\windows\system32\wups.dll
2009-08-06 17:24 . 2008-10-02 08:16 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-08-06 17:24 . 2003-07-30 14:56 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 17:23 . 2008-10-02 11:14 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 17:23 . 2008-10-06 07:12 215920 ----a-w- c:\windows\system32\muweb.dll
2009-08-06 17:23 . 2008-10-06 07:12 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-08-06 17:23 . 2008-10-02 08:16 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-05 09:00 . 2003-07-30 15:06 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-05 00:56 . 2009-08-05 00:56 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-07-29 04:36 . 2003-07-30 15:15 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:36 . 2003-07-30 14:58 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-17 19:03 . 2003-07-30 14:55 58880 ----a-w- c:\windows\system32\atl.dll
2009-01-27 01:34 . 2009-01-27 01:34 1044480 ----a-w- c:\programmer\mozilla firefox\plugins\libdivx.dll
2009-01-27 01:34 . 2009-01-27 01:34 200704 ----a-w- c:\programmer\mozilla firefox\plugins\ssldivx.dll
.
((((((((((((((((((((((((((((((((((( Start steder i reg.basen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\programmer\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"Octoshape Streaming Services"="c:\documents and settings\Rasmus\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936]
"Skype"="c:\programmer\Skype\Phone\Skype.exe" [2009-09-02 25623336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"Malwarebytes Anti-Malware (reboot)"="c:\programmer\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-03-30 5898240]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-03-30 86016]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2005-03-30 1519616]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmer\\mIRC\\mirc.exe"=
"c:\\Programmer\\Mozilla Firefox\\firefox.exe"=
"c:\\Programmer\\Bonjour\\mDNSResponder.exe"=
"c:\\Programmer\\Ventrilo\\Ventrilo.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmer\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmer\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Documents and Settings\\Rasmus\\Application Data\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"=
"c:\\Programmer\\uTorrent\\uTorrent.exe"=
"c:\\Programmer\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8834:TCP"= 8834:TCP:BitComet 8834 TCP
"8834:UDP"= 8834:UDP:BitComet 8834 UDP
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\Rasmus\LOKALE~1\Temp\ZBF10.tmp --> c:\docume~1\Rasmus\LOKALE~1\Temp\ZBF10.tmp [?]
S3 hidusbf;USB Mouse Rate Adjuster Lower Filter by SweetLow;c:\windows\system32\drivers\hidusbf.sys [19-09-2009 17:29 4544]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Indhold af mappen 'Planlagte Opgaver'
.
.
------- Yderligere scanning -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {05108D86-A871-4B7B-91CF-3EB224469012} = 208.67.222.222,208.67.220.220
DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} - hxxps://play.battlefield-heroes.com/static/updater/BFHUpdater_4.0.15.0.cab
FF - ProfilePath - c:\documents and settings\Rasmus\Application Data\Mozilla\Firefox\Profiles\ybh7y7x5.default\
FF - plugin: c:\documents and settings\All Users\Application Data\id Software\QuakeLive\npquakezero.dll
FF - plugin: c:\documents and settings\Rasmus\Application Data\Mozilla\plugins\npoctoshape.dll
FF - plugin: c:\programmer\Mozilla Firefox\plugins\npigl.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - TOMME GENVEJE FJERNET - - - -
AddRemove-Octoshape add-in for Adobe Flash Player - c:\documents and settings\Rasmus\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-11 00:17
Windows 5.1.2600 Service Pack 3 NTFS
scanner skjulte processer ...
scanner skjulte autostarter ...
scanner skjulte filer ...
scanning gennemført med succes
skjulte filer: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Rasmus\LOKALE~1\Temp\ZBF10.tmp"
.
--------------------- LÅSTE REGISTRERINGS NØGLER ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h-€|ÿÿÿÿ¤•€|ù•6~*]
"AB141C35E9F4BF344B9FC010BB17F68A"=""
.
--------------------- DLLs startet under kørende Processer ---------------------
- - - - - - - > 'explorer.exe'(2036)
c:\windows\system32\webcheck.dll
.
------------------------ Andre kørende processer ------------------------
.
c:\programmer\Bonjour\mDNSResponder.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Gennemført tid: 2009-10-10 0:21 - maskinen blev genstartet
ComboFix-quarantined-files.txt 2009-10-10 22:21
Pre-Kørsel: 90.353.553.408 byte ledig
Post-Kørsel: 90.439.671.808 byte ledig
WindowsXP-KB310994-SP2-Home-BootDisk-DAN.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
Current=1 Default=1 Failed=0 LastKnownGood=5 Sets=1,2,3,4,5
231 --- E O F --- 2009-10-03 12:37
HIJACK THIS
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:23:59, on 11-10-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\Programmer\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Programmer\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Rasmus\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKCU\..\Run: [Skype] "C:\Programmer\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} - http://messenger.zone.msn.com/DA-DK/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1222946377031
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} - https://play.battlefield-heroes.com/static/updater/BFHUpdater_4.0.15.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{05108D86-A871-4B7B-91CF-3EB224469012}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{05108D86-A871-4B7B-91CF-3EB224469012}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{05108D86-A871-4B7B-91CF-3EB224469012}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{05108D86-A871-4B7B-91CF-3EB224469012}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS4\Services\Tcpip\..\{05108D86-A871-4B7B-91CF-3EB224469012}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS5\Services\Tcpip\..\{05108D86-A871-4B7B-91CF-3EB224469012}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FLLESF~1\Skype\SKYPE4~1.DLL
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Programmer\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 6992 bytes
Håber nogen kan se om der skulle være noget.. og muligvis nogen gode råd :D
