Det var kanske den här du var ute efter
Ledsen att det blev fel
DDS (Ver_09-07-30.01) - NTFSx86
Run by Tomas at 15:14:50,84 on 2009-09-19
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.2.1252.46.1053.18.959.441 [GMT 2:00]
AV: Telia Säker Surf 8.00 *On-access scanning enabled* (Updated) {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: Telia Säker Surf 8.00 *enabled* {D4747503-0346-49EB-9262-997542F79BF4}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\VistaDrive\VistaDrive.exe
C:\Program\Telia\Telias sakerhetstjanster\Common\FSM32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Delade filer\Ahead\Lib\NMBgMonitor.exe
C:\Program\Eraser\Eraser.exe
C:\Program\C Technologies\C-Pen 20\CPen20.exe
C:\Program\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program\C Technologies\C-Pen 20\CPenOCR.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program\IncrediMail\bin\IMApp.exe
C:\Program\Brother\Brmfcmon\BrMfcmon.exe
C:\Program\C Technologies\C-Pen 20\CPenDesk.exe
E:\Program\Photoshop elements 7.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\svchost.exe -k bthsvcs
C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsgk32st.exe
C:\Program\Telia\Telias sakerhetstjanster\Common\FSMA32.EXE
C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\FSGK32.EXE
C:\Program\uTorrent\uTorrent.exe
C:\Program\Java\jre6\bin\jqs.exe
C:\Program\Delade filer\LightScribe\LSSrvc.exe
C:\Program\Telia\Telias sakerhetstjanster\Common\FSMB32.EXE
C:\Program\Telia\Supportassistent\bin\sprtsvc.exe
C:\Program\Telia\Telias sakerhetstjanster\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program\Telia\Telias sakerhetstjanster\Common\FAMEH32.EXE
C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsqh.exe
C:\Program\Telia\Telias sakerhetstjanster\FSGUI\fsguidll.exe
C:\Program\Delade filer\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program\Delade filer\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program\Telia\Telias sakerhetstjanster\FSAUA\program\fsaua.exe
C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fssm32.exe
C:\Program\Telia\Telias sakerhetstjanster\ORSP Client\fsorsp.exe
C:\Program\Telia\Telias sakerhetstjanster\FWES\Program\fsdfwd.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program\Telia\Telias sakerhetstjanster\FSAUA\program\fsus.exe
C:\Program\Telia\Telias sakerhetstjanster\Anti-Virus\fsav32.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\Telia\Telias sakerhetstjanster\FSGUI\fsavgui.exe
C:\Program\Telia\Telias sakerhetstjanster\FSGUI\scanwizard.exe
C:\Documents and Settings\Tomas\Skrivbord\dds.scr
C:\WINDOWS\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uStart Page = www.google.com
mWinlogon: SfcDisable=-99 (0xffffff9d)
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program\delade filer\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program\micros~1\office12\GrooveShellExtensions.dll
BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [incrediMail] c:\program\incredimail\bin\IncMail.exe /c
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program\delade filer\ahead\lib\NMBgMonitor.exe"
uRun: [Eraser] c:\program\eraser\Eraser.exe -hide
mRun: [soundMan] SOUNDMAN.EXE
mRun: [AlcWzrd] ALCWZRD.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [VistaDrive] c:\windows\vistadrive\VistaDrive.exe
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [setDefPrt] c:\program\brother\brmfl05a\BrStDvPt.exe
mRun: [F-Secure Manager] "c:\program\telia\telias sakerhetstjanster\common\FSM32.EXE" /splash
mRun: [F-Secure TNB] "c:\program\telia\telias sakerhetstjanster\fsgui\TNBUtil.exe" /CHECKALL /WAITFORSW
mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [Telia] "c:\program\telia\supportassistent\bin\sprtcmd.exe" /P Telia
mRun: [Ad-Watch] c:\program\lavasoft\ad-aware\AAWTray.exe
mRunOnce: [Malwarebytes' Anti-Malware] c:\program\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\c-pen 20.lnk - c:\windows\installer\{ed10a1f7-c0d9-44f4-aa62-e6eacfe9188c}\_C05C4E3FAC1D_403E_A9AF_31FAF7F4ECFA.exe
StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\status~1.lnk - c:\program\brother\brmfcmon\BrMfcWnd.exe
mPolicies-explorer: NoResolveTrack = 1 (0x1)
IE: E&xportera till Microsoft Excel
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program\micros~1\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\program\micros~1\office12\REFIEBAR.DLL
LSP: c:\program\telia\telias sakerhetstjanster\fsps\program\fslsp.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program\micros~1\office12\GrooveSystemServices.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program\micros~1\office12\GrooveShellExtensions.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\tomas\applic~1\mozilla\firefox\profiles\6pzb54nq.default\
FF - prefs.js: browser.search.selectedEngine - Fast Browser Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.se/
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
---- FIREFOX POLICIES ----
c:\program\mozilla firefox\greprefs\all.js - pref("browser.visited_color", "#551A8B");
c:\program\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".se");
c:\program\mozilla firefox\defaults\pref\firefox.js - pref("browser.videoFeeds.handler", "ask");
============= SERVICES / DRIVERS ===============
R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [2009-1-27 33920]
R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [2009-1-27 79904]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-7-20 64160]
R0 m5287;m5287;c:\windows\system32\drivers\m5287.sys [2007-6-16 103680]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program\telia\telias sakerhetstjanster\hips\drivers\fshs.sys [2009-1-27 66720]
R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;e:\program\photoshop elements 7.0\PhotoshopElementsFileAgent.exe [2008-9-16 169312]
R2 F-Secure Gatekeeper Handler Starter;FSGKHS;c:\program\telia\telias sakerhetstjanster\anti-virus\fsgk32st.exe [2009-1-27 215648]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program\lavasoft\ad-aware\AAWService.exe [2009-1-18 1029456]
R2 sprtsvc_telia;SupportSoft Sprocket Service (telia);c:\program\telia\supportassistent\bin\sprtsvc.exe [2009-3-30 202016]
R3 CPen20;CPen20;c:\windows\system32\drivers\CPen20.sys [2005-2-16 18536]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program\telia\telias sakerhetstjanster\anti-virus\minifilter\fsgk.sys [2009-1-27 99960]
R3 FSORSPClient;F-Secure ORSP Client;c:\program\telia\telias sakerhetstjanster\orsp client\fsorsp.exe [2009-1-27 55904]
S3 pendfu;PenDfu (pendfu.sys);c:\windows\system32\drivers\pendfu.sys [2005-2-14 39008]
S3 s3017bus;Sony Ericsson Device 3017 driver (WDM);c:\windows\system32\drivers\s3017bus.sys [2009-6-23 83880]
S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter;c:\windows\system32\drivers\s3017mdfl.sys [2009-6-23 15016]
S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver;c:\windows\system32\drivers\s3017mdm.sys [2009-6-23 110632]
S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s3017mgmt.sys [2009-6-23 104616]
S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS);c:\windows\system32\drivers\s3017nd5.sys [2009-6-23 25512]
S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface;c:\windows\system32\drivers\s3017obex.sys [2009-6-23 100648]
S3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM);c:\windows\system32\drivers\s3017unic.sys [2009-6-23 110120]
S4 F-Secure Filter;F-Secure File System Filter;c:\program\telia\telias sakerhetstjanster\anti-virus\win2k\fsfilter.sys [2009-1-27 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program\telia\telias sakerhetstjanster\anti-virus\win2k\fsrec.sys [2009-1-27 25184]
=============== Created Last 30 ================
2009-09-19 13:02 <DIR> --d----- c:\program\Enigma Software Group
2009-09-19 12:57 139,776 -------- c:\windows\system32\sfc_os.dll.$DIS
2009-09-19 12:08 <DIR> --d----- c:\program\VirusTotalUploader
2009-09-18 22:02 <DIR> --d----- c:\docume~1\tomas\applic~1\Malwarebytes
2009-09-18 22:01 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-18 22:01 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-09-18 22:01 19,160 a------- c:\windows\system32\drivers\mbam.sys
2009-09-18 22:01 <DIR> --d----- c:\program\Malwarebytes' Anti-Malware
2009-09-18 10:04 8,192 a--sh--- c:\windows\system32\dllcache\Thumbs.db
2009-09-09 08:43 153,088 -------- c:\windows\system32\dllcache\triedit.dll
2009-09-01 16:24 <DIR> --dsh--- c:\documents and settings\tomas\PrivacIE
==================== Find3M ====================
2009-08-08 23:39 453,292 a------- c:\windows\system32\perfh01D.dat
2009-08-08 23:39 87,426 a------- c:\windows\system32\perfc01D.dat
2009-08-05 11:08 205,312 a------- c:\windows\system32\mswebdvd.dll
2009-08-05 11:08 205,312 -------- c:\windows\system32\dllcache\mswebdvd.dll
2009-07-25 05:23 411,368 a------- c:\windows\system32\deploytk.dll
2009-07-20 15:04 15,688 a------- c:\windows\system32\lsdelete.exe
2009-07-19 18:48 11,067,392 -------- c:\windows\system32\dllcache\ieframe.dll
2009-07-19 15:18 5,937,152 -------- c:\windows\system32\dllcache\mshtml.dll
2009-07-17 21:00 58,880 a------- c:\windows\system32\atl.dll
2009-07-17 21:00 58,880 -------- c:\windows\system32\dllcache\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-07-13 23:43 10,841,088 -------- c:\windows\system32\dllcache\wmp.dll
2009-07-13 23:43 286,208 -------- c:\windows\system32\dllcache\wmpdxm.dll
2009-07-10 15:38 1,315,328 -------- c:\windows\system32\dllcache\msoe.dll
2009-07-06 12:31 87,608 a------- c:\docume~1\tomas\applic~1\inst.exe
2009-07-06 12:31 47,360 a------- c:\docume~1\tomas\applic~1\pcouffin.sys
2009-07-03 19:00 915,456 a------- c:\windows\system32\wininet.dll
2009-07-03 19:00 206,848 a------- c:\windows\system32\dllcache\occache.dll
2009-07-03 19:00 1,208,832 -------- c:\windows\system32\dllcache\urlmon.dll
2009-07-03 19:00 915,456 -------- c:\windows\system32\dllcache\wininet.dll
2009-07-03 19:00 12,800 -------- c:\windows\system32\dllcache\xpshims.dll
2009-07-03 19:00 594,432 a------- c:\windows\system32\dllcache\msfeeds.dll
2009-07-03 19:00 55,296 a------- c:\windows\system32\dllcache\msfeedsbs.dll
2009-07-03 19:00 1,985,536 -------- c:\windows\system32\dllcache\iertutil.dll
2009-07-03 19:00 25,600 -------- c:\windows\system32\dllcache\jsproxy.dll
2009-07-03 19:00 246,272 -------- c:\windows\system32\dllcache\ieproxy.dll
2009-07-03 19:00 184,320 -------- c:\windows\system32\dllcache\iepeers.dll
2009-07-03 19:00 386,048 -------- c:\windows\system32\dllcache\iedkcs32.dll
2009-07-03 13:01 173,056 -------- c:\windows\system32\dllcache\ie4uinit.exe
2009-06-22 13:49 117,248 a------- c:\windows\system32\mqtgsvc.exe
2009-06-22 13:49 19,968 a------- c:\windows\system32\mqbkup.exe
2009-06-22 13:49 117,248 -------- c:\windows\system32\dllcache\mqtgsvc.exe
2009-06-22 13:49 19,968 -------- c:\windows\system32\dllcache\mqbkup.exe
2009-06-22 13:49 4,608 a------- c:\windows\system32\mqsvc.exe
2009-06-22 13:49 4,608 -------- c:\windows\system32\dllcache\mqsvc.exe
2009-06-22 13:48 91,776 -------- c:\windows\system32\dllcache\mqac.sys
2009-06-22 08:48 726,528 -------- c:\windows\system32\dllcache\jscript.dll
2009-01-27 16:55 32,768 a--sh--- c:\windows\system32\config\systemprofile\lokala inställningar\tidigare\history.ie5\mshist012009012720090128\index.dat
============= FINISH: 15:17:17,65 ===============