Logfile of HijackThis v1.97.7 Scan saved at 14:50:04, on 05-07-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSSystem32Ati2evxx.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32spoolsv.exe C:Program FilesJavaj2re1.4.2_04injusched.exe C:Program FilesCommon FilesSymantec SharedccApp.exe C:WINDOWSSystem32ctfmon.exe C:Program FilesMSN MessengerMsnMsgr.Exe C:Documents and SettingsSun_tzuMy DocumentsWinKeyKillWKeyKill.exe C:Program FilesCommon FilesSymantec SharedccProxy.exe C:Program FilesCommon FilesSymantec SharedccSetMgr.exe C:Program FilesNorton Internet Security ProfessionalNorton AntiVirus avapsvc.exe C:Program FilesNorton Internet Security ProfessionalNorton AntiVirusAdvToolsNPROTECT.EXE C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe C:Program FilesMessengermsmsgs.exe C:Program FilesNorton Internet Security ProfessionalNorton AntiVirusSAVScan.exe C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe C:Program FilesInternet Exploreriexplore.exe F:div skidtHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.dk[...] O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {633036F2-0B16-0836-4854-F91A355EABDE} - C:PROGRA~1NOUNBI~1Slowopen.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:Program FilesNorton Internet Security ProfessionalNorton AntiVirusNavShExt.dll O4 - HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_04injusched.exe O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe" O4 - HKLM..Run: [URLLSTCK.exe] C:Program FilesNorton Internet Security ProfessionalUrlLstCk.exe O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1NORTON~1AdvToolsADVCHK.EXE O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - HKCU..Run: [MsnMsgr] "C:Program FilesMSN MessengerMsnMsgr.Exe" /background O4 - Startup: Shortcut to WKeyKill.exe.lnk = C:Documents and SettingsSun_tzuMy DocumentsWinKeyKillWKeyKill.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com[...] O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com[...] O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com[...] O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com[...]
--
Jeg siger hvad der passer mig så fat det dog EPoX 8RDA3+ amd xp 3200 1024 A-DATA vitesta 9800pro@XT MOD

Hejsa, Der er et par småting som lige skal fixes. Start med at deaktivere systemgendannelse. Højreklik på "Denne Computer" på skrivebordet, vælg egenskaber og fanebladet "Systemgendannelse" og sæt flueben i "Deaktiver systemgendannelse". Klik ok og genstart. Kør en ny scanning med HJT og sæt flueben ved disse: O2 - BHO: (no name) - {633036F2-0B16-0836-4854-F91A355EABDE} - C:PROGRA~1NOUNBI~1Slowopen.dll O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_04 injusched.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe Luk alle øvrige programvinduer så kun HJT er åben. Klik på ”Fix checked”. Luk programmet og genstart i fejlsikret tilstand (tryk F8 efter POST skærmen). Find og slet denne: C:\PROGRA~1\NOUNBI~1\Slowopen.dll Genstart normalt. Kør en ny scanning med HJT og smid loggen herind til kontrol.
--
/Armageddon - [email protected] http://www.mdegn.dk[...]

tilføjelse til #2 denne: C:PROGRA~1NOUNBI~1Slowopen.dll skal rodmappen slettes så vidt muligt!
--
Jahh.. Så kan du lære det! MSN: [email protected]

#3 Ja, det fik jeg ikke lige skrevet ;)
--
/Armageddon - [email protected] http://www.mdegn.dk[...]

ny log er alt i orden? Logfile of HijackThis v1.97.7 Scan saved at 17:20:49, on 05-07-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSSystem32Ati2evxx.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32Ati2evxx.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32spoolsv.exe C:Program FilesCommon FilesSymantec SharedccApp.exe C:WINDOWSSystem32ctfmon.exe C:Program FilesMSN MessengerMsnMsgr.Exe C:Documents and SettingsSun_tzuMy DocumentsWinKeyKillWKeyKill.exe C:Program FilesCommon FilesSymantec SharedccProxy.exe C:Program FilesCommon FilesSymantec SharedccSetMgr.exe C:Program FilesNorton Internet Security ProfessionalNorton AntiVirus avapsvc.exe C:Program FilesNorton Internet Security ProfessionalNorton AntiVirusAdvToolsNPROTECT.EXE C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe C:Program FilesMessengermsmsgs.exe C:Program FilesVentriloVentrilo.exe C:Program FilesNorton Internet Security ProfessionalNorton AntiVirusSAVScan.exe F:div skidtHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.dk[...] O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:Program FilesNorton Internet Security ProfessionalNorton AntiVirusNavShExt.dll O4 - HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe" O4 - HKLM..Run: [URLLSTCK.exe] C:Program FilesNorton Internet Security ProfessionalUrlLstCk.exe O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1NORTON~1AdvToolsADVCHK.EXE O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - HKCU..Run: [MsnMsgr] "C:Program FilesMSN MessengerMsnMsgr.Exe" /background O4 - Startup: Shortcut to WKeyKill.exe.lnk = C:Documents and SettingsSun_tzuMy DocumentsWinKeyKillWKeyKill.exe O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com[...] O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com[...] O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com[...] O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com[...]
--
Jeg siger hvad der passer mig så fat det dog EPoX 8RDA3+ amd xp 3200 1024 A-DATA vitesta 9800pro@XT MOD

#5 jeps! ren! :)
--
Jahh.. Så kan du lære det! MSN: [email protected]

takker hvordan finder i egentlig ud af hvad der er godt og hvad der er skidt?
--
Jeg siger hvad der passer mig så fat det dog EPoX 8RDA3+ amd xp 3200 1024 A-DATA vitesta 9800pro@XT MOD

Tilføjelse til #6 Husk at aktivere systemgendannelsen igen... Og det er noget med at kende de fleste programmer som er "lovlige" Det er erfaring og man lærer det lidt efter lidt...
--