Programmer bare avsluttes! help!

gangrie · 27. desember 2006

Hei!

Jeg har fått et problem med filmene mine. Når jeg åpner noen bestemte filmer, så får jeg ikke gjort en eneste ting, før det kommer opp en melding om at programmet må lukkes. Det spiller ingen rolle hvilken videoavspiller jeg bruker, alle bare avsluttes.

Jeg tror kanskje jeg har virus. Akkurat det samme skjer med noen andre programmer også. jeg har prøvd å skaffe crack til noen programmer, så jeg tror jeg godt kan ha fått noe dirtt der fra.

Jeg bruker ad-aware og spybot, og jeg bruker norton antivirus.

Noen tips på hva jeg kan gjøre for å fixe problemet??

Blir veldig glad da!

CofidiS · 27. desember 2006

hvilke bestemmte filer er det du prøver å åpne?

norbat · 27. desember 2006

Last ned SAS, installer, oppdater og kjør en complete scan

Last ned HJT, og legg ut loggen sammen med en logg fra SAS (preferences->statistics/logs)

gangrie · 27. desember 2006

Hei

Programmene er sånn som Windows Media Player, Media player classic og et program som fulgte med digital kamera mit, Finepix viewer, sånn bilde program....

ok, nå har jeg scannet. her er loggen fra HJT:

Logfile of HijackThis v1.99.1

Scan saved at 20:33:35, on 27.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccSetMgr.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe

C:\Programfiler\Fellesfiler\Symantec Shared\SNDSrvc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe

C:\WINDOWS\system32\RunDLL32.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe

C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe

C:\WINDOWS\MXOALDR.EXE

C:\Programfiler\QuickTime\qttask.exe

C:\WINDOWS\system32\bgsvcgen.exe

C:\Programfiler\iTunes\iTunesHelper.exe

C:\Programfiler\Fellesfiler\Symantec Shared\DJSNETCN.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Programfiler\Norton AntiVirus\navapsvc.exe

C:\Programfiler\Norton AntiVirus\IWP\NPFMntor.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

C:\Programfiler\iPod\bin\iPodService.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\MSN Messenger\msnmsgr.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\Security Console\NSCSRVCE.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Programfiler\Mozilla Firefox\firefox.exe

C:\Programfiler\WinRAR\WinRAR.exe

C:\DOCUME~1\Lars\LOKALE~1\Temp\Rar$EX00.046\HijackThis.exe

C:\Programfiler\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.no/0SENBNO/SAOS01?FORM=TOOLBR

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.no/0SENBNO/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.friidrett.no/

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.no/0SENBNO/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programfiler\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-01B1B64B7057} - C:\WINDOWS\system32\SearchTool\nso60.dll

O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-436325722327} - C:\WINDOWS\system32\SmartShopper\SmartShopper0.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Programfiler\Norton AntiVirus\NavShExt.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Programfiler\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [nTrayFw] C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe"

O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Programfiler\NVIDIA Corporation\nTune\\nTune.exe" clear

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [ccApp] "C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe

O4 - HKLM\..\Run: [MXOBG] C:\WINDOWS\MXOALDR.EXE

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programfiler\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [REGSHAVE] C:\Programfiler\REGSHAVE\REGSHAVE.EXE /AUTORUN

O4 - HKLM\..\RunServices: [DJSNetCN] C:\Programfiler\Fellesfiler\Symantec Shared\DJSNETCN.exe

O4 - Global Startup: Exif Launcher 2.lnk = ?

O4 - Global Startup: Microsoft Office.lnk = C:\Programfiler\Microsoft Office\Office\OSA9.EXE

O8 - Extra context menu item: &Windows Live Search - res://C:\Programfiler\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Åpne i ny bakgrunnsflik - res://C:\Programfiler\Windows Live Toolbar\Components\nb-no\msntabres.dll.mui/229?b0665c3c08254f4aa073b8b4a2c65870

O8 - Extra context menu item: Åpne i ny forgrunnsflik - res://C:\Programfiler\Windows Live Toolbar\Components\nb-no\msntabres.dll.mui/230?b0665c3c08254f4aa073b8b4a2c65870

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O12 - Plugin for .spop: C:\Programfiler\Internet Explorer\Plugins\NPDocBox.dll

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://larsipanergodt.spaces.live.com//Pho...ad/MsnPUpld.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - AppInit_DLLs: pushow34.dll

O23 - Service: app_filter - Unknown owner - C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

O23 - Service: Automatisk LiveUpdate-planlegging - Symantec Corporation - C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\ccSetMgr.exe

O23 - Service: Symantec Licensing Detect Internet Connection (DJSNETCN) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\DJSNETCN.exe

O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programfiler\iPod\bin\iPodService.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - C:\Programfiler\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Programfiler\Norton AntiVirus\IWP\NPFMntor.exe

O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\Security Console\NSCSRVCE.EXE

O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Programfiler\Norton AntiVirus\SAVScan.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\SNDSrvc.exe

O23 - Service: SPBBCSvc - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\CCPD-LC\symlcsvc.exe

:)Her er loggen fra SAS:

SUPERAntiSpyware Scan Log

Generated 12/27/2006 at 08:54 PM

Application Version : 3.4.1000

Core Rules Database Version : 3154

Trace Rules Database Version: 1171

Scan type : Complete Scan

Total Scan Time : 00:09:27

Memory items scanned : 492

Memory threats detected : 0

Registry items scanned : 5279

Registry threats detected : 48

File items scanned : 14882

File threats detected : 33

Trojan.SearchTool

HKLM\Software\Classes\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}\InprocServer32

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}\InprocServer32#ThreadingModel

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}\ProgID

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}\Programmable

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}\TypeLib

HKCR\CLSID\{5015BF9D-173C-474B-9AF3-77D4D23A4135}\VersionIndependentProgID

C:\WINDOWS\SYSTEM32\SMARTSHOPPER\SMARTSHOPPER0.DLL

HKLM\Software\Classes\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}\InprocServer32

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}\InprocServer32#ThreadingModel

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}\ProgID

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}\Programmable

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}\TypeLib

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}\VersionIndependentProgID

C:\WINDOWS\SYSTEM32\SEARCHTOOL\NSO60.DLL

HKLM\Software\Classes\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}\InprocServer32

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}\InprocServer32#ThreadingModel

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}\ProgID

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}\Programmable

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}\TypeLib

HKCR\CLSID\{5ED7D3DE-6DBE-4516-8712-436325722327}\VersionIndependentProgID

HKLM\Software\Classes\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}\InprocServer32

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}\InprocServer32#ThreadingModel

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}\ProgID

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}\Programmable

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}\TypeLib

HKCR\CLSID\{92C3F342-45DA-4511-853A-B3836AAFF5F5}\VersionIndependentProgID

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5ED7D3DE-6DBE-4516-8712-01B1B64B7057}

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5ED7D3DE-6DBE-4516-8712-436325722327}

Adware.SearchTool

HKLM\Software\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D7}

HKCR\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D7}

HKCR\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D7}\Implemented Categories

HKCR\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D7}\Implemented Categories\{00021493-0000-0000-C000-000000000046}

HKCR\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D7}\InprocServer32

HKCR\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D7}\InprocServer32#ThreadingModel

C:\WINDOWS\SYSTEM32\SEARCHTOOL\SEARCHTOOL.DLL

Adware.Tracking Cookie

C:\Documents and Settings\Lars\Cookies\lars@1069010172[1].txt

C:\Documents and Settings\Lars\Cookies\lars@tradedoubler[2].txt

C:\Documents and Settings\Lars\Cookies\[email protected][2].txt

C:\Documents and Settings\Lars\Cookies\lars@doubleclick[1].txt

C:\Documents and Settings\Lars\Cookies\lars@ad[2].txt

C:\Documents and Settings\Lars\Cookies\[email protected][2].txt

C:\Documents and Settings\Lars\Cookies\lars@qnsr[1].txt

C:\Documents and Settings\Lars\Cookies\lars@clicktorrent[1].txt

C:\Documents and Settings\Lars\Cookies\lars@adbrite[2].txt

C:\Documents and Settings\Lars\Cookies\lars@advertising[1].txt

C:\Documents and Settings\Lars\Cookies\lars@mb[2].txt

C:\Documents and Settings\Lars\Cookies\[email protected][1].txt

C:\Documents and Settings\Lars\Cookies\lars@macromedia[1].txt

C:\Documents and Settings\Lars\Cookies\[email protected][1].txt

C:\Documents and Settings\Lars\Cookies\lars@cgi-bin[2].txt

C:\Documents and Settings\Lars\Cookies\[email protected][1].txt

C:\Documents and Settings\Lars\Cookies\lars@yadro[1].txt

C:\Documents and Settings\Lars\Cookies\lars@tacoda[1].txt

C:\Documents and Settings\Gjest\Cookies\[email protected][1].txt

C:\Documents and Settings\Gjest\Cookies\[email protected][2].txt

C:\Documents and Settings\Gjest\Cookies\[email protected][1].txt

C:\Documents and Settings\Gjest\Cookies\gjest@adsrevenue[1].txt

C:\Documents and Settings\Gjest\Cookies\gjest@clicktorrent[2].txt

C:\Documents and Settings\Gjest\Cookies\gjest@partypoker[2].txt

C:\Documents and Settings\Gjest\Cookies\[email protected][1].txt

C:\Documents and Settings\Gjest\Cookies\[email protected][2].txt

C:\Documents and Settings\Gjest\Cookies\[email protected][1].txt

Adware.Advertisemen

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\advertismen

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\advertismen#DisplayName

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\advertismen#UninstallString

27. desember 2006

Kjør HJT og fjern:

O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-01B1B64B7057} - C:\WINDOWS\system32\SearchTool\nso60.dll

O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-436325722327} - C:\WINDOWS\system32\SmartShopper\SmartShopper0.dll

gangrie · 27. desember 2006

ok, jeg fant ikke de tingene nå med HJT, men det tror jeg kan være fordi SAS fjernet dem da jeg scanet med det programmet.

Men selv om de er borte nå, så fortsette de programmene å lukke seg når jeg åpner dem!! er det ikke noe annet jeg kan gjøre??

Her er den nye logen etter at jeg scanet med HJT:

Logfile of HijackThis v1.99.1

Scan saved at 23:49:44, on 27.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccSetMgr.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe

C:\Programfiler\Fellesfiler\Symantec Shared\SNDSrvc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Programfiler\Fellesfiler\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\bgsvcgen.exe

C:\Programfiler\Fellesfiler\Symantec Shared\DJSNETCN.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programfiler\Norton AntiVirus\navapsvc.exe

C:\Programfiler\Norton AntiVirus\IWP\NPFMntor.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe

C:\WINDOWS\system32\RunDLL32.exe

C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe

C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe

C:\WINDOWS\MXOALDR.EXE

C:\Programfiler\QuickTime\qttask.exe

C:\Programfiler\iTunes\iTunesHelper.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

F:\Programfiler\SuperAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

C:\Programfiler\iPod\bin\iPodService.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Fellesfiler\Symantec Shared\Security Console\NSCSRVCE.EXE

C:\Programfiler\Mozilla Firefox\firefox.exe

C:\Programfiler\WinRAR\WinRAR.exe

C:\DOCUME~1\Lars\LOKALE~1\Temp\Rar$EX19.281\HijackThis.exe