Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Viruses, not sure of name. Hijackthis log.


  • Please log in to reply

#1
stianhh

stianhh

    New Member

  • Member
  • Pip
  • 1 posts
Yea, i been through all the steps here: http://www.geekstogo..._Log-t2852.html.
but i still have some viruses i cant get rid off, so im gonna post the Ewido log and Hijackthis log.

Hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 15:40:09, on 27.06.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programfiler\Logitech\Video\LogiTray.exe
C:\Programfiler\Java\jre1.5.0_06\bin\jusched.exe
C:\Programfiler\Unlocker\UnlockerAssistant.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Programfiler\FilmLoop Player\FilmLoop.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programfiler\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programfiler\ewido anti-spyware 4.0\guard.exe
C:\Programfiler\Spyware Doctor\sdhelp.exe
C:\Programfiler\Spyware Doctor\swdoctor.exe
C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Programfiler\Universal Shield 4.0\US30Service.exe
C:\Programfiler\Logitech\Video\FxSvr2.exe
C:\Programfiler\SpywareGuard\sgmain.exe
C:\Programfiler\SpywareGuard\sgbhp.exe
C:\WINDOWS\System32\alg.exe
C:\Programfiler\Mozilla Firefox\firefox.exe
C:\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startsiden.no/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Programfiler\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Programfiler\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Programfiler\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programfiler\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programfiler\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programfiler\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programfiler\Winamp\winampa.exe
O4 - HKLM\..\Run: [UnlockerAssistant] C:\Programfiler\Unlocker\UnlockerAssistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programfiler\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [FilmLoop] "C:\Programfiler\FilmLoop Player\FilmLoop.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [THGuard] "C:\Programfiler\TrojanHunter 4.5\THGuard.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Programfiler\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Programfiler\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [RoboForm] "C:\Programfiler\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: SpywareGuard.lnk = C:\Programfiler\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Programfiler\GetRight\getright.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Customize Menu - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Download with GetRight - C:\Programfiler\GetRight\GRdownload.htm
O8 - Extra context menu item: Fill Forms - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Open with GetRight Browser - C:\Programfiler\GetRight\GRbrowse.htm
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programfiler\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Programfiler\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowso...nSSWebAgent.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=48835
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...er.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} (DeskUpdate - Activex Control) - http://support.fujit...api/activex.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O18 - Protocol: bw+0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {7F8C55FE-1A26-40A8-B73B-AD8ABAAF9F1E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programfiler\Fellesfiler\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Programfiler\ewido anti-spyware 4.0\guard.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Programfiler\Spyware Doctor\sdhelp.exe
O23 - Service: US30Service - Unknown owner - C:\Programfiler\Universal Shield 4.0\US30Service.exe


Ewido:

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:23:46 26.06.2006

+ Scan result:



HKU\S-1-5-21-854245398-1935655697-839522115-1004\Software\Softactivity -> Adware.ActivityLogger : No action taken.
C:\WINDOWS\conn.exe -> Backdoor.Small : No action taken.
C:\WINDOWS\auto32.exe -> Logger.WinSpy.r : No action taken.
C:\WINDOWS\comp.exe -> Logger.WinSpy.r : No action taken.
C:\WINDOWS\msapps\services.exe -> Logger.WinSpy.r : No action taken.
C:\WINDOWS\winusers.exe -> Logger.WinSpy.r : No action taken.
:mozilla.47:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.236:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.237:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.238:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.159:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Clickbank : No action taken.
:mozilla.35:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.36:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.316:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.317:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.132:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.133:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.134:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.135:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.334:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.217:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Ivwbox : No action taken.
:mozilla.337:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.338:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.339:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.340:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.37:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.38:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.53:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.54:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.55:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.56:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.57:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.58:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.59:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.60:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.61:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.62:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.63:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.64:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.121:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.122:C:\Documents and Settings\Sverre\Programdata\Mozilla\Firefox\Profiles\6n6ehq6n.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Programfiler\Spyware Doctor\SpywareDoctor3801555 Patch\swdoctor.exe -> Trojan.Agent.sk : No action taken.


::Report end


thanks for all help!

Edited by stianhh, 27 June 2006 - 07:46 AM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP