December 20, 2004
OfflineLogfile of HijackThis v1.99.1
Scan saved at 21:53:16, on 2005-03-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:ProgramDelade filerSymantec SharedccProxy.exe
C:ProgramDelade filerSymantec SharedccSetMgr.exe
C:ProgramNorton Internet SecurityNorton AntiVirusnavapsvc.exe
C:WINDOWSsystem32nvsvc32.exe
C:ProgramDelade filerSymantec SharedSNDSrvc.exe
C:ProgramDelade filerSymantec SharedccEvtMgr.exe
C:ProgramDelade filerSymantec SharedSecurity CenterSymWSC.exe
C:ProgramNorton Internet SecurityNorton AntiVirusSAVScan.exe
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32WF2K.EXE
C:ProgramDelade filerSymantec SharedccApp.exe
C:ProgramHotkeyHotkey.exe
C:ProgramMSN AppsUpdater1.02.3000.1001svmsnappau.exe
C:WINDOWSSOUNDMAN.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:ProgramD-Toolsdaemon.exe
C:ProgramQuickTimeqttask.exe
C:WINDOWSsystem32rundll32.exe
C:ProgramDelade filerRealUpdate_OBevntsvc.exe
C:ProgramMessengerPlus! 3MsgPlus.exe
C:WINDOWSddthc.exe
C:ProgramMessengerDiscoveryMessengerDiscovery.exe
C:ProgramCOMMON~1rzqrrzqrm.exe
C:ProgramWayTechColorealColoreal BrightColoreal Bright.exe
C:ProgramInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesinterMuteSpySubtractSpySub.exe
C:ProgramCOMMON~1rzqrrzqra.exe
C:ProgramCOMMON~1rzqrrzqrl.exe
C:ProgramMSN Messengermsnmsgr.exe
C:ProgramInternet Exploreriexplore.exe
C:DOCUME~1CALLAW~1LOKALA~1TempRar$EX15.891HijackThis.exe
C:ProgramMessengermsmsgs.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.zatzy.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Länkar
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgramAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:ProgramMSN AppsST1.02.3000.1002en-xustmain.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:ProgramDelade filerSymantec SharedAdBlockingNISShExt.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgramMSN AppsMSN Toolbar1.02.3000.1001svmsntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgramNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:ProgramDelade filerSymantec SharedAdBlockingNISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgramNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgramMSN AppsMSN Toolbar1.02.3000.1001svmsntb.dll
O4 - HKLM..Run: [WCOLOREAL] C:ProgramWayTechColorealcoloreal.exe
O4 - HKLM..Run: [Coloreal Hint] C:ProgramWayTechColorealColoreal BrightColoreal Hint.exe
O4 - HKLM..Run: [WinFoxV2] C:WINDOWSSystem32WF2K.EXE Initial
O4 - HKLM..Run: [WinFast2KLoadDefault] rundll32.exe wf2kcpl.dll,DllLoadDefaultSettings
O4 - HKLM..Run: [ManualRun] "D:AUTORUNAutoRun"
O4 - HKLM..Run: [ccApp] "C:ProgramDelade filerSymantec SharedccApp.exe"
O4 - HKLM..Run: [URLLSTCK.exe] C:ProgramNorton Internet SecurityUrlLstCk.exe
O4 - HKLM..Run: [Hotkey] C:ProgramHotkeyHotkey.exe
O4 - HKLM..Run: [msnappau] "C:ProgramMSN AppsUpdater1.02.3000.1001svmsnappau.exe"
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgramD-Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [QuickTime Task] "C:ProgramQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Symantec NetDriver Monitor] C:ProgramSYMNET~1SNDMon.exe
O4 - HKLM..Run: [TkBellExe] C:ProgramDelade filerRealUpdate_OBevntsvc.exe -osboot
O4 - HKLM..Run: [MessengerPlus3] "C:ProgramMessengerPlus! 3MsgPlus.exe"
O4 - HKLM..Run: [YdMb] C:WINDOWSddthc.exe
O4 - HKLM..Run: [Power Scan] C:ProgramPower Scanpowerscan.exe
O4 - HKLM..Run: [<°‡@¡±§Tlçÿ[Ì…*9ÀÌC:ProgramISTsvcistsvc.exe] C:WINDOWSddthc.exe
O4 - HKCU..Run: [MessengerDiscovery] C:ProgramMessengerDiscoveryMessengerDiscovery.exe
O4 - HKCU..Run: [MessengerPlus3] "C:ProgramMessengerPlus! 3MsgPlus.exe" /WinStart
O4 - HKCU..Run: [rzqr] C:ProgramCOMMON~1rzqrrzqrm.exe
O4 - HKCU..Run: [msnmsgr] "C:ProgramMSN Messengermsnmsgr.exe" /background
O4 - Global Startup: Coloreal Bright.lnk = ?
O4 - Global Startup: Coloreal Hint.lnk = ?
O4 - Global Startup: Coloreal Visual.lnk = C:ProgramWayTechColorealColoreal VisualColorealVisual.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:ProgramInterVideoCommonBinWinCinemaMgr.exe
O4 - Global Startup: SpySubtract.lnk = C:Program FilesinterMuteSpySubtractSpySub.exe
O8 - Extra context menu item: Use as &Display Picture - C:ProgramIEDP2IEDP.htm
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:ProgramladbrokesMPPMPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:ProgramNorton Internet SecurityNorton AntiVirusnavapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:ProgramNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:ProgramDELADE~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:ProgramDelade filerSymantec SharedSNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:ProgramDelade filerSymantec SharedSecurity CenterSymWSC.exe
February 21, 2003
Offlinereagerade på "WF2K.EXE", men är ju ditt leadtek graffe bara
"C:WINDOWSddthc.exe", vad är det för app?
likaså "C:ProgramCOMMON~1rzqrrzqrm.exe" "rzqra.exe" "rzqrl.exe"
sök efter dem i ditt registry och se om du kan binda dem till nån app, använd processexplorer för att se om de har några kopplingar etc...
P5E64 WS EVOLUTION | INTEL Q9650 CORE2QUAD@3000 | 8 GB | CLUB 3D 4870X2 | 2xSamsung SM 2493HM 24""@1900x1280 | Windows 7 Ultimate 64
1 Guest(s)









Log In
