Infekterad dator - Hijackthis finns

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:03:54, on 2008-03-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\Ati2evxx.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\Ati2evxx.exe
H:\Program\Alwil Software\Avast4\aswUpdSv.exe
H:\Program\Alwil Software\Avast4\ashServ.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\Explorer.EXE
H:\Program\Delade filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
H:\Program\Delade filer\Microsoft Shared\VS7DEBUG\mdm.exe
H:\WINDOWS\xwfafsdq.exe
H:\WINDOWS\system32\dla\tfswctrl.exe
H:\WINDOWS\stsystra.exe
H:\Program\Security\Spyware Terminator\sp_rsser.exe
H:\Program\Dell Photo AIO Printer 922\dlbtbmgr.exe
H:\Program\Java\jre1.6.0_03\bin\jusched.exe
H:\Program\Dell Photo AIO Printer 922\dlbtbmon.exe
H:\Program\Nokia\Nokia PC Suite 6\LaunchApplication.exe
H:\Program\Security\Spyware Terminator\SpywareTerminatorShield.exe
H:\Program\LClock\LClock.exe
H:\Program\VisualTooltip\VisualToolTip.exe
H:\Program\ALWILS~1\Avast4\ashDisp.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Program\Windows Live\Messenger\MsnMsgr.Exe
H:\Program\Internet Explorer\iexplore.exe
H:\DOCUME~1\CAESAR\LOKALA~1\Temp\{86904A09-82F0-4814-9F9C-856AC725F824}\Blaero Start Orb.exe
H:\Program\Internet Explorer\iexplore.exe
H:\Program\Alwil Software\Avast4\ashMaiSv.exe
H:\Program\Alwil Software\Avast4\ashWebSv.exe
H:\Program\PC Connectivity Solution\ServiceLayer.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\dlbtcoms.exe
H:\Program\Mozilla Firefox\firefox.exe
H:\Program\Internet Explorer\iexplore.exe
H:\Program\Delade filer\Microsoft Shared\Windows Live\WLLoginProxy.exe
H:\Documents and Settings\CAESAR\Mina dokument\firefox downloads\VundoFix.exe
H:\Program\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.se/spbasic.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://se.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.se/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\Program\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - H:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {61DA2185-991E-48C5-B675-4AA4BC0F87Ad} - H:\WINDOWS\system32\suyiupxh.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {80EB7EAF-B2EC-4342-99FF-05DEBCF903Dd} - H:\WINDOWS\system32\suyiupxh.dll (file missing)
O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - h:\program\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - H:\Program\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {CF46BFB3-2ACC-441b-B82B-36B9562C7FF1} - H:\WINDOWS\system32\nxxmvrya.dll (file missing)
O2 - BHO: (no name) - {F05F250B-ED7F-4AD9-BB29-567BC5CC6E9E} - H:\WINDOWS\system32\geedc.dll (file missing)
O2 - BHO: (no name) - {F17F8C1D-6966-4AD7-B395-32A4126161Bc} - H:\WINDOWS\system32\suyiupxh.dll (file missing)
O2 - BHO: (no name) - {F4002052-AB29-4B33-8C8D-0E99084564EC} - H:\WINDOWS\system32\qomjiif.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - h:\program\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - H:\Program\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [dla] H:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Photo AIO Printer 922] "H:\Program\Dell Photo AIO Printer 922\dlbtbmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "H:\Program\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PCSuiteTrayApplication] H:\Program\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SpywareTerminator] "H:\Program\Security\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [LClock] H:\Program\LClock\LClock.exe
O4 - HKLM\..\Run: [VisualTooltip] H:\Program\VisualTooltip\VisualToolTip.exe
O4 - HKLM\..\Run: [Blaero Start Orb] H:\Program\Blaero Start Orb\Blaero Start Orb.exe
O4 - HKLM\..\Run: [avast!] H:\Program\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [dart active] H:\DOCUME~1\CAESAR\APPLIC~1\NOUNSA~1\Tray log.exe
O4 - HKCU\..\Run: [MsnMsgr] "H:\Program\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [sR5WrsR5Wr] H:\WINDOWS\xwfafsdq.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://H:\Program\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://H:\Program\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Blogga detta - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - H:\Program\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blogga detta i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - H:\Program\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\Program\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.onskefoto.se/photos/upload/ImageUploader4.cab
O20 - Winlogon Notify: geedc - H:\WINDOWS\system32\geedc.dll (file missing)
O20 - Winlogon Notify: qomjiif - qomjiif.dll (file missing)
O21 - SSODL: bokpkov - {5692CAE4-8175-4AD6-AE5C-0CC56FF5A16D} - H:\WINDOWS\bokpkov.dll (file missing)
O21 - SSODL: altvxvm - {23716442-C626-449B-A127-C54A29577537} - H:\WINDOWS\altvxvm.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - H:\Program\Delade filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - H:\Program\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - H:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - H:\WINDOWS\system32\ati2sgag.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - H:\Program\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - H:\Program\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - H:\Program\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: dlbt_device - Dell - H:\WINDOWS\system32\dlbtcoms.exe
O23 - Service: DomainService - Unknown owner - H:\WINDOWS\system32\dfoochmx.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - H:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - H:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - H:\Program\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - H:\Program\WinClamAVShield\sp_clamsrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - H:\Program\Security\Spyware Terminator\sp_rsser.exe
O24 - Desktop Component 0: Privacy Protection - :\WINDOWS\privacy_danger\index.htm

--
End of file - 9394 bytes