Scan saved at 12:13:29, on 2008-06-01
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\dllcache\svqhost.exe
C:\WINNT\system32\dllcache\Rtsecar.exe
C:\WINNT\System32\nvsvc32.exe
C:\Program\Olivetti\ANY_WAY\olMntrService.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\system32\RUNDLL32.EXE
C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program\MSN Apps\Updater\01.03.0000.1005\sv\msnappau.exe
C:\WINNT\system32\firefoxV2.com
C:\WINNT\system32\SQIservr.exe
C:\WINNT\system32\reglogon.exe
C:\WINNT\system32\1nternet.exe
C:\WINNT\system32\pwxmmdo.exe
C:\Program\Olivetti\ANY_WAY\olDvcStatus.exe
C:\WINNT\system32\internat.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\WINNT\system32\spools.exe
C:\WINNT\system32\spwls.exe
C:\Program\WinZip\WZQKPICK.EXE
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\EditPlus 2\editplus.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.se/0SESVSE/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.argus.nu/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.5000.1021\sv\msntb.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.5000.1021\sv\msntb.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CaAvTray] "C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program\MSN Apps\Updater\01.03.0000.1005\sv\msnappau.exe"
O4 - HKLM\..\Run: [Fire Fox] firefoxV2.com
O4 - HKLM\..\Run: [SQL Server] SQIservr.exe
O4 - HKLM\..\Run: [Microsoft Reglogon Service] reglogon.exe
O4 - HKLM\..\Run: [Topic 1nternet] 1nternet.exe
O4 - HKLM\..\Run: [Topic lnternet] pwxmmdo.exe
O4 - HKLM\..\Run: [Spool Service] spools.exe
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [Spwl Service] spwls.exe
O4 - HKLM\..\RunServices: [Fire Fox] firefoxV2.com
O4 - HKLM\..\RunServices: [SQL Server] SQIservr.exe
O4 - HKLM\..\RunServices: [Microsoft Reglogon Service] reglogon.exe
O4 - HKLM\..\RunServices: [Topic 1nternet] 1nternet.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Windows Service Find] findup.exe
O4 - HKCU\..\Run: [Topic lnternet] pwxmmdo.exe
O4 - HKCU\..\Run: [Spool Service] spools.exe
O4 - HKCU\..\Run: [Spwl Service] spwls.exe
O4 - HKCU\..\RunServices: [Windows Service Find] findup.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program\Delade filer\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program\WinZip\WZQKPICK.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 9326153140
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManagerkontroll) - http://dlm.tools.akamai.com/dlmanager/v ... .2.1.6.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program\Delade filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Microsoft Agent - Unknown owner - C:\WINNT\system32\dllcache\svqhost.exe
O23 - Service: Microsoft Media - Unknown owner - C:\WINNT\system32\dllcache\Rtsecar.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: olMntrService - Olivetti - C:\Program\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: Service Starter: Host (SRVStarter_Host) - Eng. Usama El-Mokadem - C:\WINNT\system32\dllcache\SRVhost.exe
O23 - Service: Service Starter: Hosts (SRVStarter_Hosts) - Eng. Usama El-Mokadem - C:\WINNT\system32\dllcache\SuStur.exe
O23 - Service: Service Starter: Link (SRVStarter_Link) - Eng. Usama El-Mokadem - C:\WINNT\system32\dllcache\SRVhost.exe
O23 - Service: Service Starter: Links (SRVStarter_Links) - Eng. Usama El-Mokadem - C:\WINNT\system32\dllcache\SuStur.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe