datorn börjar bli seg, hijackthis logg.

har jag virus ? o sen skulle jag behöva formatera om datorn, nån som kan skaffa cd key som funkar som inte upptäcks av windows så det blir fejkkopia ? har det nu o rätt så irriterande att man inte kan ladda hem saker från microsoft.com.

HijackThis Loggen

Logfile of HijackThis v1.99.1
Scan saved at 19:51:49, on 2007-01-06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\Program\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\Program\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program\Delade filer\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Cheetah Burner\Cheetah DVD Burner\NMSAccess.exe
C:\WINDOWS.0\svchost.exe
C:\WINDOWS.0\Explorer.exe
C:\Program\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\scvhost.exe
C:\WINDOWS.0\system32\WgaTray.exe
C:\Program\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS.0\SOUNDMAN.EXE
C:\WINDOWS.0\vsnpstd.exe
C:\Program\D-Link\AirPlus G\AirGCFG.exe
C:\Program\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
C:\Program\CyberLink\PowerDVD\PDVDServ.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
D:\ajo\spel\steam 2\steam.exe
C:\Program\Netropa\Onscreen Display\OSD.exe
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program\Hbtools\HBTV\HBTV.exe
C:\Program\MessengerDiscovery\MessengerDiscovery Live.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\wuauclt.exe
C:\WINDOWS.0\system32\svchost.exe
C:\Program\Azureus\Azureus.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Documents and Settings\apstjärt\Skrivbord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.blocket.se/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
F2 - REG:system.ini: Shell=Explorer.exe scvhost.exe
F3 - REG:win.ini: run=C:\WINDOWS.0\scvhost.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: War Rock Toolbar Helper - {0914953A-B6C0-42C3-983E-5213C64AFA9B} - C:\Program\War Rock Toolbar\v3.2.0.0\War_Rock_Toolbar.dll
O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E2 DE775879472C38C0 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - c:\program\hbtools\hbtv\hbtvhelper.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program\HbTools\Bin\4.8.4.0\HbtHostIE.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program\TGTSoft\StyleXP\TGT_BHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: War Rock Toolbar - {5D956A61-05E7-427B-A2B1-BF32FB18B1BE} - C:\Program\War Rock Toolbar\v3.2.0.0\War_Rock_Toolbar.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program\HbTools\Bin\4.8.4.0\HbtHostIE.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RaidTool] C:\Program\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS.0\vsnpstd.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [msconfig] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [icq lite] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [Update Checker] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [AntiVir] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [Steam] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [Nero] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [ATI] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [NVIDIA] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS.0\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HbTools] C:\Program\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [jxuliifq] C:\WINDOWS.0\system32\cgfguxef.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Program\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Program\CyberLink\PowerDVD\Language\Language.ex e
O4 - HKLM\..\RunServices: [Windows Update] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [msconfig] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [icq lite] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [Update Checker] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [AntiVir] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [Steam] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [Nero] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [ATI] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunServices: [NVIDIA] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [Windows Update] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [msconfig] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [icq lite] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [Update Checker] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [AntiVir] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [Steam] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [Nero] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [ATI] C:\WINDOWS.0\scvhost.exe
O4 - HKLM\..\RunOnce: [NVIDIA] C:\WINDOWS.0\scvhost.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "d:\ajo\spel\steam 2\steam.exe" -silent
O4 - HKCU\..\Run: [STYLEXP] C:\Program\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program\Hide IP Platinum\hideippla.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program\Delade filer\Ahead\Lib\NMBgMonitor.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program\Microsoft Office\OFFICE11\REFIEBAR.DLL
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://appldnld.apple.com.edgesuite.net/qtinstall.info.apple.com/lupin/us/win/QuickTimeInstaller.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program\MSN Messenger\msgrapp.8.0.0812.00.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program\MSN Messenger\msgrapp.8.0.0812.00.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS.0\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program\Delade filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\Cheetah Burner\Cheetah DVD Burner\NMSAccess.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program\CyberLink\Shared files\RichVideo.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program\TGTSoft\StyleXP\StyleXPService.exe


mvh ,

Scanna svchostarna som ligger i Windows0 på Virustotal.com. Angående uppdateringarna så sök lite på Windows Genuine Valdation. Orkar inte hjälpa någon som inte orkar lägga tråden i rätta Forum.

den hittar inget virus :/

Tycker också att sökvägen "C:\WINDOWS.0" verkar skum
har du installerat på något konstigt sätt? (reparation, image, något?)

Trodde först att det var ett virus som hade skapat en ny Windows mapp men då det inte finns någon annan så blev det lite klurigare.

Förövrigt så tror jag att din dator kan bli mycket snabbare om du avinstallerar en del program(bl.a Stylexp).