rendered paste bodyLogfile of HijackThis v1.99.1
Scan saved at 16:50:41, on 2006-11-03
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:ProgramTeliaSupportassistentbintgcmd.exe
C:WINDOWSRTHDCPL.EXE
C:ProgramHPQHP ProtectTools Security ManagerPTHOSTTR.EXE
C:ProgramEsetnod32kui.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32hkcmd.exe
C:ProgramHPHP Software UpdateHPWuSchd2.exe
C:ProgramD-Toolsdaemon.exe
C:ProgramQuickTimeqttask.exe
C:ProgramiTunesiTunesHelper.exe
C:ProgramDelade filerAheadlibNMBgMonitor.exe
C:ProgramEsetnod32krn.exe
C:ProgramAdobeAcrobat 6.0Distillracrotray.exe
C:ProgramHPDigital Imagingbinhpqtra08.exe
C:WINDOWSsystem32svchost.exe
C:ProgramDelade filerAheadLibNMIndexStoreSvr.exe
C:WINDOWSsystem32wdfmgr.exe
C:ProgramNationalencyklopedinNE_sokverktyg_20NeHotKey.exe
C:ProgramPersonalbinPersonal.exe
C:ProgramHPDigital Imagingbinhpqgalry.exe
C:ProgramiPodbiniPodService.exe
C:WINDOWSSystem32alg.exe
C:ProgramSpyware Doctorsdhelp.exe
C:ProgramSpyware Doctorswdoctor.exe
C:PROGRAMMOZILL~1FIREFOX.EXE
C:DOCUME~1ADMINI~1LOKALA~1TempRarSFX0winvnc.exe
C:DOCUME~1ADMINI~1LOKALA~1TempTemporär katalog 2 för hijackthis.zipHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.msn.se/0SESVSE/SAOS02
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.startsidan.telia.se
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Länkar
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgramAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:ProgramSPYWAR~1toolsiesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:ProgramSPYWAR~1toolsiesdpb.dll
O3 - Toolbar: Sök i NE - {ACECC8E8-45A5-41ec-A82A-B3363103E293} - C:ProgramNationalencyklopedinNE_sokverktyg_20NeToolbar.dll
O4 - HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 - HKLM..Run: [tgcmd] "C:ProgramTeliaSupportassistentbintgcmd.exe" /server /startmonitor /deaf
O4 - HKLM..Run: [SetRefresh] C:ProgramCompaqSetRefreshSetRefresh.exe
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [PTHOSTTR] C:ProgramHPQHP ProtectTools Security ManagerPTHOSTTR.EXE /Start
O4 - HKLM..Run: [nod32kui] "C:ProgramEsetnod32kui.exe" /WAITSERVICE
O4 - HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [HP Software Update] C:ProgramHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [Genväg till egenskapssida för High Definition Audio] HDAShCut.exe
O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgramD-Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [QuickTime Task] "C:ProgramQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:ProgramiTunesiTunesHelper.exe"
O4 - HKLM..Run: [NeroFilterCheck] C:ProgramDelade filerAheadLibNeroCheck.exe
O4 - HKCU..Run: [Spamihilator] "C:ProgramSpamihilatorspamihilator.exe"
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:ProgramDelade filerAheadlibNMBgMonitor.exe"
O4 - HKCU..Run: [Spyware Doctor] "C:ProgramSpyware Doctorswdoctor.exe" /Q
O4 - Global Startup: Acrobat Assistant.lnk = C:ProgramAdobeAcrobat 6.0Distillracrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:ProgramDelade filerAdobeCalibrationAdobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:ProgramAdobeAcrobat 7.0Readerreader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:ProgramHPDigital Imagingbinhpqtra08.exe
O4 - Global Startup: HP Image Zone Snabbstarta.lnk = C:ProgramHPDigital Imagingbinhpqthb08.exe
O4 - Global Startup: HP LaserJet Director.lnk = C:ProgramHewlett-PackardLaserJet All-in-onehppdirector.exe
O4 - Global Startup: NE sökverktyg 2.0.lnk = ?
O4 - Global Startup: Personal.lnk = C:ProgramPersonalbinPersonal.exe
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:ProgramMICROS~2OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Sök i NE - res://C:ProgramNationalencyklopedinNE_sokverktyg_20NeToolbar.dll/NeSearch.html
O8 - Extra context menu item: Översätt i NE - res://C:ProgramNationalencyklopedinNE_sokverktyg_20NeToolbar.dll/NeTranslate.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgramJavajre1.5.0binnpjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgramJavajre1.5.0binnpjpi150.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:ProgramSPYWAR~1toolsiesdpb.dll
O9 - Extra button: Referensinformation - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:ProgramMICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130998146125
O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:ProgramHPQSharedhpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:ProgramDelade filerInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:ProgramiPodbiniPodService.exe
O23 - Service: NBService - Nero AG - C:ProgramNeroNero 7Nero BackItUpNBService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:ProgramEsetnod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:ProgramSpyware Doctorsdhelp.exe
O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:ProgramDelade filerSymantec SharedSecurity CenterSymWSC.exe (file missing)