Logfile of HijackThis v1.99.1 Scan saved at 16:50:41, on 2006-11-03 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32smss.exe C:WINDOWSsystem32csrss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:ProgramTeliaSupportassistentbintgcmd.exe C:WINDOWSRTHDCPL.EXE C:ProgramHPQHP ProtectTools Security ManagerPTHOSTTR.EXE C:ProgramEsetnod32kui.exe C:WINDOWSsystem32igfxtray.exe C:WINDOWSsystem32igfxpers.exe C:WINDOWSsystem32hkcmd.exe C:ProgramHPHP Software UpdateHPWuSchd2.exe C:ProgramD-Toolsdaemon.exe C:ProgramQuickTimeqttask.exe C:ProgramiTunesiTunesHelper.exe C:ProgramDelade filerAheadlibNMBgMonitor.exe C:ProgramEsetnod32krn.exe C:ProgramAdobeAcrobat 6.0Distillracrotray.exe C:ProgramHPDigital Imagingbinhpqtra08.exe C:WINDOWSsystem32svchost.exe C:ProgramDelade filerAheadLibNMIndexStoreSvr.exe C:WINDOWSsystem32wdfmgr.exe C:ProgramNationalencyklopedinNE_sokverktyg_20NeHotKey.exe C:ProgramPersonalbinPersonal.exe C:ProgramHPDigital Imagingbinhpqgalry.exe C:ProgramiPodbiniPodService.exe C:WINDOWSSystem32alg.exe C:ProgramSpyware Doctorsdhelp.exe C:ProgramSpyware Doctorswdoctor.exe C:PROGRAMMOZILL~1FIREFOX.EXE C:DOCUME~1ADMINI~1LOKALA~1TempRarSFX0winvnc.exe C:DOCUME~1ADMINI~1LOKALA~1TempTemporär katalog 2 för hijackthis.zipHijackThis.exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.msn.se/0SESVSE/SAOS02 R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.startsidan.telia.se R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Länkar O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgramAdobeAcrobat 7.0ActiveXAcroIEHelper.dll O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:ProgramSPYWAR~1toolsiesdsg.dll O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:ProgramSPYWAR~1toolsiesdpb.dll O3 - Toolbar: Sök i NE - {ACECC8E8-45A5-41ec-A82A-B3363103E293} - C:ProgramNationalencyklopedinNE_sokverktyg_20NeToolbar.dll O4 - HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u O4 - HKLM..Run: [tgcmd] "C:ProgramTeliaSupportassistentbintgcmd.exe" /server /startmonitor /deaf O4 - HKLM..Run: [SetRefresh] C:ProgramCompaqSetRefreshSetRefresh.exe O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM..Run: [PTHOSTTR] C:ProgramHPQHP ProtectTools Security ManagerPTHOSTTR.EXE /Start O4 - HKLM..Run: [nod32kui] "C:ProgramEsetnod32kui.exe" /WAITSERVICE O4 - HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe O4 - HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe O4 - HKLM..Run: [HP Software Update] C:ProgramHPHP Software UpdateHPWuSchd2.exe O4 - HKLM..Run: [Genväg till egenskapssida för High Definition Audio] HDAShCut.exe O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgramD-Toolsdaemon.exe" -lang 1033 O4 - HKLM..Run: [QuickTime Task] "C:ProgramQuickTimeqttask.exe" -atboottime O4 - HKLM..Run: [iTunesHelper] "C:ProgramiTunesiTunesHelper.exe" O4 - HKLM..Run: [NeroFilterCheck] C:ProgramDelade filerAheadLibNeroCheck.exe O4 - HKCU..Run: [Spamihilator] "C:ProgramSpamihilatorspamihilator.exe" O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:ProgramDelade filerAheadlibNMBgMonitor.exe" O4 - HKCU..Run: [Spyware Doctor] "C:ProgramSpyware Doctorswdoctor.exe" /Q O4 - Global Startup: Acrobat Assistant.lnk = C:ProgramAdobeAcrobat 6.0Distillracrotray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:ProgramDelade filerAdobeCalibrationAdobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:ProgramAdobeAcrobat 7.0Readerreader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:ProgramHPDigital Imagingbinhpqtra08.exe O4 - Global Startup: HP Image Zone Snabbstarta.lnk = C:ProgramHPDigital Imagingbinhpqthb08.exe O4 - Global Startup: HP LaserJet Director.lnk = C:ProgramHewlett-PackardLaserJet All-in-onehppdirector.exe O4 - Global Startup: NE sökverktyg 2.0.lnk = ? O4 - Global Startup: Personal.lnk = C:ProgramPersonalbinPersonal.exe O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:ProgramMICROS~2OFFICE11EXCEL.EXE/3000 O8 - Extra context menu item: Sök i NE - res://C:ProgramNationalencyklopedinNE_sokverktyg_20NeToolbar.dll/NeSearch.html O8 - Extra context menu item: Översätt i NE - res://C:ProgramNationalencyklopedinNE_sokverktyg_20NeToolbar.dll/NeTranslate.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgramJavajre1.5.0binnpjpi150.dll O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgramJavajre1.5.0binnpjpi150.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:ProgramSPYWAR~1toolsiesdpb.dll O9 - Extra button: Referensinformation - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:ProgramMICROS~2OFFICE11REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130998146125 O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxdev.dll O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:ProgramHPQSharedhpqwmi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:ProgramDelade filerInstallShieldDriver11Intel 32IDriverT.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:ProgramiPodbiniPodService.exe O23 - Service: NBService - Nero AG - C:ProgramNeroNero 7Nero BackItUpNBService.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:ProgramEsetnod32krn.exe O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:ProgramSpyware Doctorsdhelp.exe O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:ProgramDelade filerSymantec SharedSecurity CenterSymWSC.exe (file missing)