Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojans, Pop Up And Messed Up Descktop Background


  • This topic is locked This topic is locked
4 replies to this topic

#1 hybard

hybard

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 AM

Posted 27 August 2007 - 01:09 PM

I got some trojans on my laptop the other day, after a few runs with Avast/AdAware/Search & Destroy and CCcleaner and some hair pulling I got most the trojans and entries of the computer. Leaving my desktop with an big red toxic sign (That cant be good :flowers: ) and three web links I couldnt get rid of. Along with some annoying pop ups, also with the browser closed. After reading another post in here I tried with SDfix wich got rid of a few more trojans (hopefully all), but still i got that desktop background.... Any Ideas?? :thumbsup:

My HijackThis logfile:

Logfile of HijackThis v1.99.1
Scan saved at 20:01:31, on 27.08.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programfiler\Alwil Software\Avast4\aswUpdSv.exe
C:\Programfiler\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Atievxx.exe
C:\Programfiler\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\mqsvc.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\Programfiler\Alwil Software\Avast4\ashMaiSv.exe
C:\Programfiler\Alwil Software\Avast4\ashWebSv.exe
C:\Programfiler\QuickTime\qttask.exe
C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe
C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe
C:\Programfiler\PowerISO\SCDEmuApp.exe
C:\Programfiler\iTunes\iTunesHelper.exe
C:\Programfiler\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programfiler\D-Tools\daemon.exe
C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programfiler\iPod\bin\iPodService.exe
C:\Programfiler\MSN Messenger\msnmsgr.exe
C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe
C:\Programfiler\Heidi\Last.fm\LastFMHelper.exe
C:\Programfiler\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Programfiler\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programfiler\Fellesfiler\Nokia\MPAPI\MPAPI3s.exe
C:\Programfiler\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Stig-Rune Holien\Skrivebord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=...6Ojg5&lid=2
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {208D7BCC-9857-4C9E-823B-D04E72490A67} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UniPrint] C:\PROGRA~1\UniPrint\Client\SetDfltSettings.exe
O4 - HKLM\..\Run: [SCDEmuApp.exe] C:\Programfiler\PowerISO\SCDEmuApp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programfiler\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Programfiler\Winamp\winampa.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programfiler\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programfiler\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programfiler\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Programfiler\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Global Startup: Hurtigstart for Adobe Reader.lnk = C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Last.fm Helper.lnk = C:\Programfiler\Heidi\Last.fm\LastFMHelper.exe
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Programfiler\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programfiler\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programfiler\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programfiler\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programfiler\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programfiler\iPod\bin\iPodService.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Programfiler\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

Edited by hybard, 27 August 2007 - 01:21 PM.


BC AdBot (Login to Remove)

 


#2 hybard

hybard
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 AM

Posted 27 August 2007 - 01:14 PM

SDFix rapport below...

Edited by hybard, 27 August 2007 - 01:17 PM.


#3 hybard

hybard
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 AM

Posted 27 August 2007 - 01:15 PM

SDFix: Version 1.100

Run by Administrator on 27.08.2007 at 17:54

Microsoft Windows XP [Versjon 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default IE HomePage
Restoring Default Desktop Components Value

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\duocore.dll - Deleted
C:\WINDOWS\wmpconf.dll - Deleted
C:\WINDOWS\wmpenv.dll - Deleted



Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\WINDOWS\\system32\\mqsvc.exe"="C:\\WINDOWS\\system32\\mqsvc.exe:*:Enabled:Message Queuing"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Programfiler\\WinMX\\WinMX.exe"="C:\\Programfiler\\WinMX\\WinMX.exe:*:Enabled:WinMX Application"
"C:\\Programfiler\\Yahoo!\\Messenger\\YPager.exe"="C:\\Programfiler\\Yahoo!\\Messenger\\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\\Programfiler\\Yahoo!\\Messenger\\YServer.exe"="C:\\Programfiler\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\\Programfiler\\LimeWire\\LimeWire.exe"="C:\\Programfiler\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\mIRC\\mirc.exe"="C:\\mIRC\\mirc.exe:*:Enabled:mIRC"
"C:\\Programfiler\\Messenger\\msmsgs.exe"="C:\\Programfiler\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Programfiler\\PPLive\\PPLive.exe"="C:\\Programfiler\\PPLive\\PPLive.exe:*:Enabled:PPLive"
"C:\\Programfiler\\ppStream\\ppStream.exe"="C:\\Programfiler\\ppStream\\ppStream.exe:*:Enabled:ppStream P2P Streaming Player"
"C:\\Programfiler\\BitLord\\BitLord.exe"="C:\\Programfiler\\BitLord\\BitLord.exe:*:Enabled:BitLord"
"C:\\Programfiler\\Mozilla Firefox\\firefox.exe"="C:\\Programfiler\\Mozilla Firefox\\firefox.exe:*:Disabled:Firefox"
"C:\\Programfiler\\MissionRisk\\MissionRisk.exe"="C:\\Programfiler\\MissionRisk\\MissionRisk.exe:*:Enabled:Based on risk, the classic military strategy game."
"C:\\Programfiler\\Windows Media Player\\wmplayer.exe"="C:\\Programfiler\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\\Programfiler\\TVAnts\\Tvants.exe"="C:\\Programfiler\\TVAnts\\Tvants.exe:*:Enabled:TVAnts"
"C:\\Programfiler\\MSN Messenger\\msncall.exe"="C:\\Programfiler\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Programfiler\\iTunes\\iTunes.exe"="C:\\Programfiler\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Programfiler\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"="C:\\Programfiler\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe:*:Enabled:OTI@Home User Interface"
"C:\\Programfiler\\Fellesfiler\\Nokia\\Service Layer\\nsl_host_process.exe"="C:\\Programfiler\\Fellesfiler\\Nokia\\Service Layer\\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\\Programfiler\\MSN Messenger\\msnmsgr.exe"="C:\\Programfiler\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Programfiler\\MSN Messenger\\livecall.exe"="C:\\Programfiler\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Programfiler\\Last.fm\\LastFM.exe"="C:\\Programfiler\\Last.fm\\LastFM.exe:*:Enabled:LastFM"
"C:\\Programfiler\\Heidi\\Last.fm\\LastFM.exe"="C:\\Programfiler\\Heidi\\Last.fm\\LastFM.exe:*:Enabled:LastFM"
"C:\\Programfiler\\uTorrent\\utorrent.exe"="C:\\Programfiler\\uTorrent\\utorrent.exe:*:Enabled:ęTorrent"
"C:\\Programfiler\\SopCast\\SopCast.exe"="C:\\Programfiler\\SopCast\\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\\Documents and Settings\\Stig-Rune Holien\\Programdata\\SopCast\\adv\\SopAdver.exe"="C:\\Documents and Settings\\Stig-Rune Holien\\Programdata\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\\Programfiler\\Internet Explorer\\iexplore.exe"="C:\\Programfiler\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Programfiler\\PPMate\\ppmate.exe"="C:\\Programfiler\\PPMate\\ppmate.exe:*:Enabled:PPMate"
"C:\\Programfiler\\PPMate\\ppmnet.exe"="C:\\Programfiler\\PPMate\\ppmnet.exe:*:Enabled:PPMate"
"C:\\Documents and Settings\\Stig-Rune Holien\\Skrivebord\\tvkoo.exe"="C:\\Documents and Settings\\Stig-Rune Holien\\Skrivebord\\tvkoo.exe:*:Enabled:ViViMediaPlay"
"C:\\Documents and Settings\\Stig-Rune Holien\\Skrivebord\\ViViPlay.exe"="C:\\Documents and Settings\\Stig-Rune Holien\\Skrivebord\\ViViPlay.exe:*:Enabled:ViViMediaPlay"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\\WINDOWS\\system32\\mqsvc.exe"="C:\\WINDOWS\\system32\\mqsvc.exe:*:Enabled:Message Queuing"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Programfiler\\MSN Messenger\\msncall.exe"="C:\\Programfiler\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Programfiler\\MSN Messenger\\msnmsgr.exe"="C:\\Programfiler\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Programfiler\\MSN Messenger\\livecall.exe"="C:\\Programfiler\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Documents and Settings\Heidi Merete\Lokale innstillinger\Programdata\Microsoft\Messenger\heidifredriksen@hotmail.com\Sharing Folders\anettebakkenhaug@hotmail.com\Thumbs.db
C:\Documents and Settings\Heidi Merete\Lokale innstillinger\Programdata\Microsoft\Messenger\heidifredriksen@hotmail.com\Sharing Folders\hannesofieh@hotmail.com\Thumbs.db
C:\Documents and Settings\Heidi Merete\Lokale innstillinger\Programdata\Microsoft\Messenger\heidifredriksen@hotmail.com\Sharing Folders\hannesofieh@hotmail.com\Bulgaria\Thumbs.db
C:\Documents and Settings\Heidi Merete\Lokale innstillinger\Programdata\Microsoft\Messenger\heidifredriksen@hotmail.com\Sharing Folders\jorgenkristoffersen@hotmail.com\Thumbs.db
C:\Documents and Settings\Heidi Merete\Lokale innstillinger\Programdata\Microsoft\Messenger\heidifredriksen@hotmail.com\Sharing Folders\kristineandersso@hotmail.com\Thumbs.db
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Programdata\Microsoft\Messenger\hybard@hotmail.com\Sharing Folders\anette_strols_9@hotmail.com\Thumbs.db
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Programdata\Microsoft\Messenger\hybard@hotmail.com\Sharing Folders\thormaa@msn.com\Thumbs.db
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Programdata\Microsoft\Messenger\hybard@hotmail.com\Sharing Folders\unnirekkedal@hotmail.com\Thumbs.db
C:\Programfiler\Messenger\msmsgs.exe
C:\Programfiler\PPLive\Setup.exe
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT100.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT101.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT102.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT103.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT104.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT105.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT106.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT107.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT108.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT109.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10A.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10B.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10C.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10D.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10E.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT10F.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT11.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT12.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT13.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT14.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT15.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT16.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT17.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT18.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT19.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1A.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1B.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1C.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1D.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1E.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT1F.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT20.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT21.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT22.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT23.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT24.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT25.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT26.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT27.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT28.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT29.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT2A.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT2B.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT2C.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT31.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT34.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT39.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT3C.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT3F.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT43.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT4B.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT52.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT57.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT9C.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT9D.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT9E.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BIT9F.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA0.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITA9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITAA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITAB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITAC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITAD.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITAE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITAF.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB0.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITB9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITBA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITBB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITBC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITBD.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITBE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITBF.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC0.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITC9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITCA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITCB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITCC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITCD.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITCE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITCF.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD0.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITD9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITDA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITDB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITDC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITDD.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITDE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITDF.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE0.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITE9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITEA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITEB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITEC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITED.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITEE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITEF.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF0.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF1.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF2.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF3.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF4.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF5.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF6.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF7.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF8.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITF9.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITFA.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITFB.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITFC.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITFD.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITFE.tmp
C:\Documents and Settings\Stig-Rune Holien\Lokale innstillinger\Temp\BITFF.tmp
C:\Documents and Settings\Stig-Rune Holien\Skrivebord\~WRL0001.tmp

Finished

Edited by hybard, 27 August 2007 - 01:20 PM.


#4 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:09:25 AM

Posted 05 September 2007 - 05:30 AM

Hi,

The forums are really busy, that explains why logs get behind. If you still need some help, please start with posting a new hijackthislog in this thread. Don't start with a new thread.
Then I'll take a look. :thumbsup:
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#5 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:09:25 AM

Posted 17 September 2007 - 08:26 AM

Since there is no feedback anymore, I assume this issue is resolved ... so, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users