Logfile of HijackThis v1.99.1
Scan saved at 21:02:19, on 21-07-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:ProgrammerWindows DefenderMsMpEng.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
C:WINDOWSExplorer.EXE
C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32
etwks32.exe
C:ProgrammerFælles filerSymantec SharedccApp.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSSOUNDMAN.EXE
C:ProgrammerJavajre1.5.0_07injusched.exe
C:WINDOWSsystem32ctfmon.exe
C:ProgrammerNorton AntiVirus
avapsvc.exe
C:WINDOWSsystem32
vsvc32.exe
C:ProgrammerNorton AntiVirusSAVScan.exe
C:WINDOWSSystem32 cpsvcs.exe
C:WINDOWSSystem32snmp.exe
C:ProgrammerFælles filerSymantec SharedSecurity CenterSymWSC.exe
C:ProgrammerMessengermsmsgs.exe
C:Documents and SettingsMartinSkrivebordHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://www.past90.com[...]
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
Hyperlinks
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:ProgrammerJavajre1.5.0_07inssv.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} -
C:ProgrammerNorton AntiVirusNavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
C:ProgrammerNorton AntiVirusNavShExt.dll
O4 - HKLM..Run: [Win Net Wks32] netwks32.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec
SharedccApp.exe"
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE
C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE
C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [Symantec NetDriver Monitor]
C:PROGRA~1SYMNET~1SNDMon.exe /Consumer
O4 - HKLM..Run: [NVMixerTray] "C:ProgrammerNVIDIA
CorporationNvMixerNVMixerTray.exe"
O4 - HKLM..Run: [SunJavaUpdateSched]
C:ProgrammerJavajre1.5.0_07injusched.exe
O4 - HKLM..Run: [Windows Defender] "C:ProgrammerWindows
DefenderMSASCui.exe" -hide
O4 - HKLM..RunServices: [Win Net Wks32] netwks32.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [Win Net Wks32] netwks32.exe
O4 - HKCU..Run: [MsnMsgr] "C:ProgrammerMSN MessengerMsnMsgr.Exe"
/background
O4 - HKCU..RunServices: [Win Net Wks32] netwks32.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:ProgrammerJavajre1.5.0_07inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:ProgrammerJavajre1.5.0_07inssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:ProgrammerMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengermsmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
Validation Tool) -
http://go.microsoft.com[...]
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
"C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
Corporation - C:ProgrammerFælles filerSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect (navapsvc) - Symantec
Corporation - C:ProgrammerNorton AntiVirus
avapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -
C:WINDOWSsystem32
vsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:ProgrammerNorton
AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
C:PROGRA~1FLLESF~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
Corporation - C:ProgrammerFælles filerSymantec SharedSNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation -
C:ProgrammerFælles filerSymantec SharedSecurity CenterSymWSC.exe
På forhånd tak!
--