LOGG FRÅN HijackThis!!!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:35:35, on 2011-01-12
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\explorer.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\Delade filer\Java\Java Update\jusched.exe
C:\Program\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
E:\Program\uTorrent.exe
C:\Documents and Settings\Virus666\Skrivbord\Sharecash Downloader.exe
C:\Documents and Settings\Virus666\Skrivbord\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://adsc.startya.com/?cfg=2-491-0-0&...&country=SE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program\Delade filer\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HKLM] C:\WINDOWS\system32\WinDir\server.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Mega Manager] E:\Program\Mega Manager\MegaManager.exe /Tray
O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\WinDir\server.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\WinDir\server.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\WinDir\server.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1293298076484
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 5149 bytes
Sorry för dubbelpost men här är en LOG från ComboFix!!!
ComboFix 11-01-11.03 - Virus666 2011-01-12 19:01:04.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.46.1053.18.767.308 [GMT 1:00]
Körs från: c:\documents and settings\Virus666\Skrivbord\Process Hacker\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
((((((((((((((((((((((((((((((((((((((( Andra raderingar ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Virus666\Application Data\chrtmp
c:\windows\system32\windir
c:\windows\system32\windir\server.exe
c:\windows\XSxS
.
(((((((((((((((((((((((( Filer Skapade från 2010-12-12 till 2011-01-12 ))))))))))))))))))))))))))))))
.
2011-01-12 15:44 . 2011-01-12 15:44 -------- d-----w- c:\documents and settings\Virus666\Application Data\Process Hacker 2
2011-01-11 18:11 . 2010-06-15 17:27 282928 ----a-w- c:\windows\system32\HMIPCore.dll
2011-01-08 12:54 . 2011-01-08 12:54 -------- d-----w- c:\documents and settings\Virus666\Lokala inställningar\Application Data\Team_Horizon
2011-01-08 12:53 . 2011-01-08 12:53 -------- d-----w- c:\program\Xenocode
2011-01-08 12:53 . 2011-01-08 12:53 -------- d-----w- c:\documents and settings\Virus666\Lokala inställningar\Application Data\Xenocode
2011-01-04 15:14 . 2011-01-04 15:40 -------- d-----w- c:\program\Real
2011-01-04 13:50 . 2011-01-04 13:50 -------- d-----w- c:\program\TubeDownloader
2011-01-03 16:46 . 2011-01-12 15:35 -------- d-----w- c:\documents and settings\Virus666\Tracing
2011-01-03 16:44 . 2011-01-03 16:44 -------- d-----w- c:\program\Microsoft
2011-01-03 16:44 . 2011-01-03 16:44 -------- d-----w- c:\program\Windows Live SkyDrive
2011-01-03 16:44 . 2011-01-03 16:45 -------- d-----w- c:\program\Windows Live
2011-01-03 16:42 . 2011-01-03 16:42 -------- d-----w- c:\program\Delade filer\Windows Live
2011-01-03 09:27 . 2011-01-03 09:27 -------- d-----w- c:\documents and settings\Virus666\Application Data\ImgBurn
2010-12-28 08:12 . 2008-05-16 13:01 446464 ----a-w- c:\windows\system32\nvudisp.exe
2010-12-28 08:07 . 2008-05-16 10:48 446464 ----a-w- c:\windows\system32\NVUNINST.EXE
2010-12-27 11:52 . 2010-12-27 11:52 -------- d-----w- c:\documents and settings\Virus666\Lokala inställningar\Application Data\GameTuts
2010-12-27 11:52 . 2010-12-27 11:52 -------- d-----w- c:\documents and settings\Virus666\Application Data\GameTuts
2010-12-27 11:46 . 2010-12-27 11:46 -------- d-----w- c:\program\MSBuild
2010-12-27 11:46 . 2010-12-27 20:27 -------- d-----w- c:\windows\system32\XPSViewer
2010-12-27 11:46 . 2010-12-27 11:46 -------- d-----w- c:\program\Reference Assemblies
2010-12-27 11:45 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-12-27 11:45 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2010-12-27 09:49 . 2010-12-27 12:08 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-12-27 09:36 . 2010-12-27 09:36 -------- d-sh--w- c:\documents and settings\Virus666\IECompatCache
2010-12-27 09:19 . 2010-12-27 09:19 -------- d-----w- c:\documents and settings\Virus666\Lokala inställningar\Application Data\ESET
2010-12-26 15:35 . 2010-12-26 15:35 -------- d-----w- c:\documents and settings\LocalService\Lokala inställningar\Application Data\ESET
2010-12-26 08:52 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-12-25 18:21 . 2010-12-25 18:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2010-12-25 13:02 . 2010-12-25 13:02 -------- d-----w- c:\program\Microsoft Silverlight
2010-12-25 13:00 . 2010-12-25 13:00 -------- d-----w- c:\documents and settings\Virus666\Lokala inställningar\Application Data\Identities
2010-12-25 12:55 . 2010-12-25 12:55 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-12-24 20:48 . 2009-06-25 12:20 1446264 ----a-w- c:\program\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
2010-12-24 20:42 . 2008-10-03 10:48 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-12-24 20:38 . 2009-09-01 14:30 282654 ------w- c:\windows\system32\msaud32.acm
2010-12-24 20:14 . 2010-12-24 20:14 -------- d-sh--w- c:\documents and settings\Virus666\PrivacIE
2010-12-24 19:32 . 2011-01-12 17:47 -------- d-----w- c:\documents and settings\Virus666\Application Data\uTorrent
2010-12-24 18:51 . 2010-12-24 18:51 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-12-24 18:51 . 2010-12-24 18:51 -------- d-sh--w- c:\documents and settings\Virus666\IETldCache
2010-12-24 18:49 . 2010-12-28 08:14 -------- d-----w- c:\windows\nview
2010-12-24 18:48 . 2010-12-24 19:08 -------- d-----w- c:\program\Delade filer\InstallShield
2010-12-24 18:48 . 2010-12-28 08:07 -------- d-----w- C:\NVIDIA
2010-12-24 18:22 . 2010-10-18 11:10 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-12-24 18:20 . 2010-11-06 00:22 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-12-24 18:20 . 2010-11-06 00:22 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-12-24 18:20 . 2010-11-06 00:22 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-12-24 18:20 . 2010-11-06 00:22 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-12-24 18:20 . 2010-11-06 00:22 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-12-24 18:20 . 2010-11-06 00:22 11080704 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-12-24 18:20 . 2010-11-06 00:22 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-12-24 18:19 . 2010-12-24 18:20 -------- dc-h--w- c:\windows\ie8
2010-12-24 13:30 . 2010-12-24 13:30 -------- d-----w- c:\program\SystemRequirementsLab
2010-12-24 13:30 . 2010-12-24 13:30 -------- d-----w- c:\documents and settings\Virus666\Application Data\SystemRequirementsLab
2010-12-24 13:06 . 2011-01-05 17:10 -------- d-----w- c:\documents and settings\Virus666\Lokala inställningar\Application Data\Spotify
2010-12-24 13:06 . 2011-01-05 17:10 -------- d-----w- c:\documents and settings\Virus666\Application Data\Spotify
2010-12-24 12:47 . 2010-12-27 13:46 -------- d-----w- c:\windows\.jagex_cache_32
2010-12-24 12:47 . 2010-12-24 12:47 -------- d-----w- c:\windows\Sun
2010-12-24 12:43 . 2010-12-24 12:43 -------- d-----w- c:\program\Delade filer\Java
2010-12-24 12:43 . 2010-12-24 12:42 472808 ----a-w- c:\program\Mozilla Firefox\plugins\npdeployJava1.dll
2010-12-24 12:43 . 2010-12-24 12:42 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-12-24 12:43 . 2010-12-24 12:42 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-12-24 12:42 . 2010-12-24 12:42 -------- d-----w- c:\program\Java
2010-12-24 10:20 . 2008-06-14 17:36 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-12-24 10:20 . 2008-06-14 17:36 272128 ------w- c:\windows\system32\drivers\bthport.sys
2010-12-24 10:19 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-12-24 10:19 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-12-24 10:18 . 2010-04-28 18:15 2190720 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-12-24 10:18 . 2010-04-28 05:45 2147328 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-12-24 10:18 . 2010-04-28 05:45 2067584 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2010-12-24 10:18 . 2010-04-28 05:45 2025472 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-12-24 10:11 . 2011-01-12 10:57 -------- d--h--w- c:\windows\$hf_mig$
2010-12-18 14:03 . 2001-09-06 18:55 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2010-12-18 14:03 . 2001-09-06 18:55 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-08 14:50 . 2010-12-08 14:50 21840 ----atw- c:\windows\system32\SIntfNT.dll
2010-12-08 14:50 . 2010-12-08 14:50 17212 ----atw- c:\windows\system32\SIntf32.dll
2010-12-08 14:50 . 2010-12-08 14:50 12067 ----atw- c:\windows\system32\SIntf16.dll
2010-12-07 18:01 . 2010-12-07 18:01 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-11-18 18:15 . 2010-12-07 16:48 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-09 14:52 . 2008-04-18 12:00 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:22 . 2008-04-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:22 . 2008-04-18 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2010-11-06 00:22 . 2008-04-18 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:27 . 2008-04-18 12:00 385024 ------w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2008-04-18 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:09 . 2008-04-18 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 14:00 . 2008-04-18 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
2005-09-29 09:51 . 2005-09-29 09:51 488656 ----a-w- c:\program\DXSETUP.exe
2005-09-29 09:51 . 2005-09-29 09:51 74448 ----a-w- c:\program\DSETUP.dll
2005-09-29 09:51 . 2005-09-29 09:51 2245840 ----a-w- c:\program\dsetup32.dll
.
(((((((((((((((((((((((((((((((((( Startpunkter i registret )))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Not* Tomma poster & legitima standardposter visas inte.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program\Delade filer\Java\Java Update\jusched.exe" [2010-05-14 248552]
"egui"="c:\program\ESET\ESET NOD32 Antivirus\egui.exe" [2010-11-04 2219184]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
"nwiz"="nwiz.exe" [2008-05-16 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-16 86016]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-18 15360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"d:\\Call of duty 1\\CoDMP.exe"=
"e:\\Program\\uTorrent.exe"=
"e:\\Program\\Spotify\\spotify.exe"=
"c:\\Program\\Windows Live\\Messenger\\msnmsgr.exe"=
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2010-12-07 717296]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2010-07-29 115008]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2010-08-03 95896]
R2 ekrn;ESET Service;c:\program\Eset\ESET NOD32 Antivirus\ekrn.exe [2010-11-04 810144]
R4 KProcessHacker2;KProcessHacker2;c:\documents and settings\Virus666\Skrivbord\Process Hacker\x86\kprocesshacker.sys [2011-01-12 32840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
--- Övriga tjänster/drivrutiner i minnet ---
*NewlyCreated* - KPROCESSHACKER2
.
Innehållet i mappen 'Schemalagda aktiviteter':
2011-01-12 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 14:07]
.
.
------- Extra genomsökning -------
.
uStart Page = hxxp://adsc.startya.com/?cfg=2-491-0-0&engine_id=3&provider_id=3&product_id=491&country=SE
FF - ProfilePath - c:\documents and settings\Virus666\Application Data\Mozilla\Firefox\Profiles\gd6r343i.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - youtube.com
FF - prefs.js: keyword.URL - hxxp://adsc.startya.com/s/?src=FF-Address&site=Yahoo!&cfg=2-491-0-0&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
- - - - FÖRÄLDRALÖSA POSTER SOM TAGITS BORT - - - -
HKCU-Run-Mega Manager - e:\program\Mega Manager\MegaManager.exe
AddRemove-Spotify - e:\program\uninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-12 19:04
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLer som "laddats" under processer som körs ---------------------
- - - - - - - > 'winlogon.exe'(552)
c:\windows\system32\antiwpa.dll
.
Sluttid: 2011-01-12 19:06:28
ComboFix-quarantined-files.txt 2011-01-12 18:06
Före genomsökningen: 20 676 472 832 byte ledigt
Efter genomsökningen: 21 055 873 024 byte ledigt
WindowsXP-KB310994-SP2-Pro-BootDisk-SVE.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
- - End Of File - - DF9179E75E3813747DFB9E15DE2D6C15