Hemlig spion bild foto kopiering batch filen (5 / 10 steg)

Processer som körs:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program WC Mechanic\regmech.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Vuze\Azureus.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK. EXE
C:\Program Files\AutoCAD 2008\acad.exe
C:\Users\Tom\AppData\Local\Temp\AdskCleanup.0001
C:\Program Mozilla Firefox Firefox\firefox.exe
C:\Windows\System32\NOTEPAD. EXE
C:\Windows\system32\SearchFilterHost.exe
C:\HijackThis\HijackThis.exe

R1 - HKCU Explorer\Main, Default_Page_URL = http://www.google.co.uk
R1 - HKCU Explorer\Main, söka sida = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU Explorer\Main, börja sida = http://www.google.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL = http://www.google.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, söka sida = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main, börja sida = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch =
R0 - HKCUSoftwareMicrosoftInternet\\ Explorer\Toolbar, LinksFolderName =
O1 - Hosts::: 1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program delade filer Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72.853.161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper klass - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\... \Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe-dölja
O4 - HKLM\... \Run: [TkBellExe] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\... \Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\... \Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\... \Run: [persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\... \Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\... \Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\... \Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\... \Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\... \Run: [Toshiba TEMPO] C:\Program program TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\... \Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\... \Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKCU\... \Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\... \Run: [RegistryMechanic] C:\Program WC Mechanic\RMTray.exe/h
O4 - Startup: OneNote 2007 skärmen Clipper och Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM. EXE
O8 - Extra sammanhangen menyn moment: E & xportera till Microsoft Excel - res: / / C:\PROGRA~1\MICROS~3\Office12\EXCEL. EXE/3000
O9 - Extra knapp: (inga namn) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsolen - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra knapp: skicka till OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: skicka till OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll &
O9 - Extra knapp: eBay.co.uk - köpa det sälja It Love It - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/710-44557-9400-3/4 (fil saknas)
O9 - Extra knapp: (inga namn) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (fil saknas)
O9 - Extra 'Tools' menuitem: avinstallera BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (fil saknas)
O9 - Extra knapp: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (fil saknas)
O9 - Extra button: Forskning - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR. DLL-FIL
Ø10 - Okänd fil i Winsock LSP: c:\windows\system32\nlaapi.dll
Ø10 - Okänd fil i Winsock LSP: c:\windows\system32\napinsp.dll
Ø10 - Okänd fil i Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
Ø10 - Okänd fil i Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O11 - gruppen alternativ: [INTERNATIONAL] internationella *
O13 - Gopher Prefix:
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protokoll: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protokoll: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program delade filer\Microsoft Shared\Help\hxds.dll
O18 - Filter kapa: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF. DLL-FIL
Ø20 - Winlogon Underrätta: igfxcui - C:\Windows\SYSTEM32\igfxdev.dll
O23 - Service: Agere Modem ringa framsteg ljud (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program delade filer Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program delade filer Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: (ehstart) - Okänd ägare - %windir%\system32\svchost.exe (fil saknas)
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Update Service (gupdate1c98840f4e6525b) (gupdate1c98840f4e6525b) - Okänd ägare - C:\Program Files\Google\Update\GoogleUpdate.exe "/ SVC (fil saknas)
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Okänd ägare - C:\Program delade filer Files\BitDefender\BitDefender Update Service\livesrv.exe "/service (fil saknas)
O23 - Service: (QWAVE) - Okänd ägare - %windir%\system32\svchost.exe (fil saknas)
O23 - Service: (seclogon) - Okänd ägare - %windir%\system32\svchost.exe (fil saknas)
O23 - Service: Anteckningsboken Utförande Stämmande Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program program TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Toshiba Toshiba DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA optisk enhet Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA SMART Loggtjänsten - TOSHIBA Corporation - c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: VMware Agent-tjänsten (ufad-ws60) - Okänd ägare - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe "-d"C:\Program Files\VMware\VMware Workstation\\"-s ufad-p2v.xml (fil saknas)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program delade filer Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VMware tillstånd Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP-tjänst (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Okänd ägare - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe "/service (fil saknas)
O23 - Service: VNC Server Version 4 (WinVNC4) - Okänd ägare - C:\Program Files\RealVNC\VNC4\WinVNC4.exe "-tjänst (fil saknas)
O23 - Service: Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Okänd ägare - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (fil saknas)