Just nu i M3-nätverket
Jump to content

Onödiga program vid start !Varför?


Guest idgadmin

Recommended Posts

Guest idgadmin

Se min loggfil och hjälp mig! Min dator är fruktansvärd att starta men det ser väl ni som kan redan,antar jag.Loggfilen är långt ifrån komplett,detta är ca 1/100 del.Gick inte att skicka hela tror jag!Där det står: HKLM....run/ sådana rader har jag flera hundra(tusen kanske).Jag har en 14 årig son som "hjälper mig" och efter det blir det kaos!Vad har hänt och varför?Vad gör jag? Tack på förhand!

 

 

Logfile of HijackThis v1.99.0

Scan saved at 16:12:38, on 2005-01-27

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\CTSvcCDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE

C:\WINDOWS\Explorer.EXE

C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE

C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

C:\Program\uqtspoxr\ustovqpw.exe

C:\Program\uqtspoxr\wpqvotsu.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Program\QuickTime\qttask.exe

C:\WINDOWS\system32\CTHELPER.EXE

C:\Program\Real\RealPlayer\RealPlay.exe

C:\WINDOWS\System32\P2P Networking\P2P Networking.exe

C:\Program\Delade filer\Nokia\Tools\NclTray.exe

C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe

C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

C:\Program\Delade filer\PCSuite\Services\ServiceLayer.exe

C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\framxpro\FreeRAM XP Pro 1.30.exe

C:\Program\MSN Messenger\msnmsgr.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\Widcomm\Bluetooth Software\BTTray.exe

C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

C:\Program\Delade filer\Microsoft Shared\Works Shared\wkcalrem.exe

c:\program\intern~1\iexplore.exe

C:\Program\Widcomm\Bluetooth Software\BTStackServer.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe

C:\Program\DELADE~1\MICROS~1\Msinfo\OFFPRV10.EXE

C:\Program\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Thomas\Skrivbord\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bhxrqmjemtnvvvcto.net/p0yaOuV4mhegiRahBYmqDGIRxyWKdWZR8stBohNKkMesDnEFWHKWZ4tzBFFADM44.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zqdcnhmuyxygz.net/p0yaOuV4mhdg08YZfYJxXIEnMhI1kgOXpX3hNVY5HYg.htm

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali Sverige Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

R3 - Default URLSearchHook is missing

O1 - Hosts: 216.177.73.139 auto.search.msn.com

O1 - Hosts: 216.177.73.139 search.netscape.com

O1 - Hosts: 216.177.73.139 ieautosearch

O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com

O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - C:\WINDOWS\mslagent\4b_1,0,1,2_mslagent.dll (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll

O2 - BHO: (no name) - {9B0E2322-3E88-FACA-30FE-0BB06FD9A928} - C:\DOCUME~1\Thomas\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O2 - BHO: (no name) - {C0CDD684-A356-FE92-66C7-1056AB0C31E4} - C:\DOCUME~1\Ida\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O4 - HKLM\..\Run: [CTStartup] C:\Program\Creative\Splash Screen\CTEaxSpl.EXE /run

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [navapp] C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

O4 - HKLM\..\Run: [YkFGV5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEpHVw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQVHXcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQFJRwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QU0GV9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUpHZkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIVHTw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIFJYcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fg0GSoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RAFJQAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEFGUgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REpHWsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQVJQ1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQpGUsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YUFGY91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aQVGWcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIFJWkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bg0GYwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egpHScox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QIFGQs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEpHU9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egVJYgUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQFJSsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYFGW1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eg0GUo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQFGYAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYVHScUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUVJXw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yw0GY9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dE0HScUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkVHXw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwpHU5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEVJZg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpGTAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwVJR1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIFJVkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkFGZ9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yw0GXgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIFGRs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVHV51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgVJZoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMVGTAUw] C:\Program\uqtspoxr\ustovqpw.exe

 

Link to comment
Share on other sites

 

oj då, jag vet inte vilket som är bäst.

det är väl ingen risk att det går avinst programmet (eller vad det nu är) uqtspoxr?

 

ett alt kan va att scanna med panda i felsäkert läge eller oxå så bockar du för alla dessa konstiga O4 radera i hijack och klickar på fix checked.

det är iaf en början

 

 

 

Link to comment
Share on other sites

Guest idgadmin

Alltså, jag har ingen kunskap om datorer utan surfar och betalar räkningar. Så vad som hänt vet jag inte,och naturligtvis inte min son heller;)Eftersom jag inte är kunnig har jag inte undersökt så noga men jag sitter och letar om jag kan hitta någon ledtråd.Men om ni vill och kan hjälpa mig är jag tacksam!

 

 

Link to comment
Share on other sites

 

detta är en bra scan

 

 

http://www.spywareinfo.dk/download/mwav.exe

 

Dubbelklicka på mwav.exe sen klicka Unzip och den skapar automatiskt en ny mapp C:\Kapersky

Sen öppna Kapersky mappen och dubbelklicka på kavupd.exe och leta uppdateringar.

När den är klar så tryck på nån tangent och det blir automatiskt 2 nya mappar på C:

C:\Bases

C:\Downloads

 

Öppna Downloads mappen och måla alla filer och Klipp ut

Klicka på Kapersky mappen och klistra in och svara ja till alla.

Sen öppna Kapersky mappen och dubbelklicka på mwavscan.com

Bocka i Drive och Scan All Files.

Sen klicka på Scan och låt den scanna klart.(kan ta upp till 2 timmar)

Kopiera det som blir i nedre fönster.

Först måla svart sen Ctrl+C (kopiera)

Sen Ctrl+V (klista in)

 

 

Link to comment
Share on other sites

Guest idgadmin

Programmet: "uqtspoxr" hittar jag i en mapp under utforskaren.Kan jag bara ta bort den? Programmet finns inte under Kontrollpanelen/Ta bort-lägg till program. Om jag HiJackThis scannar och vill bocka för alla 04 rader(flera tusen),går det att genomföra?och sedan välja Fixchecked?

 

 

Link to comment
Share on other sites

 

> Programmet: "uqtspoxr" hittar jag i en mapp <

 

Titta om du känner igen den eller vet vad det är.

 

Skapa en ny mapp på C:\ och placera HijackThis.exe dit så C:\HjT\HijackThis.exe

 

(skippa inte greijen ovan)

 

Sen bocka i och FIX:sa alla rader som ser ut så här

 

O4 - HKLM\..\Run: [YkFGV5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEpHVw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQVHXcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQFJRwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QU0GV9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUpHZkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIVHTw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIFJYcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fg0GSoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RAFJQAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEFGUgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REpHWsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQVJQ1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQpGUsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YUFGY91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aQVGWcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIFJWkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bg0GYwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egpHScox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QIFGQs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEpHU9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egVJYgUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQFJSsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYFGW1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eg0GUo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQFGYAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYVHScUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUVJXw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yw0GY9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dE0HScUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkVHXw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwpHU5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEVJZg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpGTAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwVJR1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIFJVkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkFGZ9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yw0GXgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIFGRs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVHV51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgVJZoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMVGTAUw] C:\Program\uqtspoxr\ustovqpw.exe

 

 

Inga andra 04 rader.

Sen starta om datorn och skicka en ny Hijack logg.

 

Link to comment
Share on other sites

Guest idgadmin

Ok,efter stora problem har jag nu HijackThis.exe i en ny mapp på C:\ som du sa.Som sagt så är jag INTE datakunnig.Jag har alltså även en mapp som heter:uqtspoxr på C: samt även en mapp som heter något typ:ounoprst och som innehåller ett program.Jag har ingen aning om vad dessa är för något!Dessa program ligger bakom O4 rader.Men jag har lite över 6000 rader i min HiJackThis logg så jag vet inte om jag kan bocka i alla dessa och FIX:sa? Hur gör jag? Tack för hjälpen så länge!

 

 

Link to comment
Share on other sites

 

> Jag har alltså även en mapp som heter:uqtspoxr på C: samt även en mapp som heter något typ:ounoprst och som innehåller ett program.Jag har ingen aning om vad dessa är för något! <

 

Svårt att säga vad det är men titta i egenskaper om du får fram nåt vettigt.

 

> Men jag har lite över 6000 rader i min HiJackThis logg <

 

Oops... det var mycket

Är det mest såna här rader

 

O4 - HKLM\..\Run: [fIFGRs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVHV51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgVJZoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMVGTAUw] C:\Program\uqtspoxr\ustovqpw.exe

 

Eller nåt annat

 

 

 

 

 

Link to comment
Share on other sites

 

jag vet inte vilket som är bäst, 6000 är ju väldigt många..!

 

kanske man ska ta bort dessa mappar och sen ta bort dom i registret oxå för annars kanske datorn fågar efter 6000 filer när den startar.

tar man bara bort mapparna så ligger fortfarande alla dessa "syhoutwx" kvar som run i registret

 

Link to comment
Share on other sites

Guest idgadmin

Ja, det är mest den typen av rader,kanske 90% i loggen.

Hör gärna av er igen med råd, men var så utförliga som ni bara kan så jag kan hänga med och hitta vart jag ska och vad jag bör göra!Har t.ex inte en aning om vad som menas med "syhoutwx"!

 

 

Link to comment
Share on other sites

Bocka i och FIX:sa alla rader som ser ut så här

 

O4 - HKLM\..\Run: [YkFGV5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEpHVw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQVHXcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQFJRwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QU0GV9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUpHZkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIVHTw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIFJYcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fg0GSoov] C:\Program\uqtspoxr\ustovqpw.exe

 

Inget annat

 

Starta sen i felsäkert läge och ta bort

 

C:\Program\uqtspoxr\ustovqpw.exe

- ta bort uqtspoxr mappen

 

Starta sen normalt och skicka en ny Hijack logg.

 

 

 

 

Link to comment
Share on other sites

Guest idgadmin

Men det är totalt över 6200 rader i loggen och det går inte att bocka i alla rader som ska bort?! Om jag skulle göra det,så......Vad innebär att starta i felsäkert läge?Hur gör jag det?

 

 

Link to comment
Share on other sites

> Men det är totalt över 6200 rader i loggen <

 

Har du räknat dom eller var får du den siffran?

 

Ok,vi gör så här.

Starta i felsäkert läge = När du startar datorn så börja trycka på F8 flera gånger och i fönstert som öppnas välj felsäkert läge och Enter.

Sen sök och ta bort (delete)

 

C:\Program\uqtspoxr\ustovqpw.exe

- ta bort uqtspoxr mappen

 

Starta sen normalt och skicka Hijack loggen.

 

 

 

 

Link to comment
Share on other sites

Guest idgadmin

Ja,om man markerar sista raden i loggen visar den på rad nr6245! Jag startade i felsäkert läge och tog bort uqtspoxr mappen.Men nu när jag gör en ny HiJack logg så ser den exakt likadan ut.Ett antal tusen rader med detta uqtspoxr programmet.Varför? Jag har även hittat en liknande mapp på C:\Program\ouorwsro\GEgDD8RM.exe . Nu startar datorn dock mycket snabbare så något har ändå hänt.

Logfile of HijackThis v1.99.0

Scan saved at 18:38:40, on 2005-01-29

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\CTSvcCDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE

C:\WINDOWS\Explorer.EXE

C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE

C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Program\ouorwsro\GEgDD8RM.exe

C:\Program\ouorwsro\MR8DDgEG.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe

C:\Program\QuickTime\qttask.exe

C:\WINDOWS\system32\CTHELPER.EXE

C:\Program\Real\RealPlayer\RealPlay.exe

C:\WINDOWS\System32\P2P Networking\P2P Networking.exe

C:\Program\Delade filer\Nokia\Tools\NclTray.exe

C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe

C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

C:\Program\Delade filer\PCSuite\Services\ServiceLayer.exe

C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\framxpro\FreeRAM XP Pro 1.30.exe

C:\Program\MSN Messenger\msnmsgr.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\Widcomm\Bluetooth Software\BTTray.exe

C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

c:\program\intern~1\iexplore.exe

C:\Program\Delade filer\Microsoft Shared\Works Shared\wkcalrem.exe

C:\Program\Widcomm\Bluetooth Software\BTStackServer.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\system32\wuauclt.exe

C:\HiJachThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://pdqugrrwroty.com/p0yaOuV4mhegiRahBYmqDGIRxyWKdWZR8stBohNKkMcAThbdlyo47ItzBFFADM44.jsp

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zqdcnhmuyxygz.net/p0yaOuV4mhdg08YZfYJxXIEnMhI1kgOXpX3hNVY5HYg.htm

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali Sverige Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

R3 - Default URLSearchHook is missing

O1 - Hosts: 216.177.73.139 auto.search.msn.com

O1 - Hosts: 216.177.73.139 search.netscape.com

O1 - Hosts: 216.177.73.139 ieautosearch

O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com

O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - C:\WINDOWS\mslagent\4b_1,0,1,2_mslagent.dll (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll

O2 - BHO: (no name) - {9B0E2322-3E88-FACA-30FE-0BB06FD9A928} - C:\DOCUME~1\Thomas\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O2 - BHO: (no name) - {C0CDD684-A356-FE92-66C7-1056AB0C31E4} - C:\DOCUME~1\Ida\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O4 - HKLM\..\Run: [CTStartup] C:\Program\Creative\Splash Screen\CTEaxSpl.EXE /run

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [navapp] C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

O4 - HKLM\..\Run: [RIFGQ1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFHUsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVJWA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVHWcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZA0HUoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwVJYw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFJScov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVJQoEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QI0GUAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUVJS9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aAVGWcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIFGQwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEFHS5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgpGWo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQVGQA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYVHUcov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUFHYwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dw0GS51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIVGVoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akVHZAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgVJTgox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aM0GXsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYFGR11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAVHVsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwVJX9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEVGRk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkFGVw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQFHQ1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMVJUk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RAVGY9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aAFGSkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REFHUwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEFJYcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVGSo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQpHW5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUFHQgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUFJVA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIFGXg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIpHRsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agVJV5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgFJZgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYFGTAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYVHX1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwVJZsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewVGT11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFGYk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFHS9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMVJWcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bU0GRsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQpGSo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEVHQ9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkFJUgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQ0GYs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fM0HQ1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YUVHUsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eApGZ91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZI0GTkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cE0HXwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgFHRc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aQpGVoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYpHX5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aU0HRoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwFJVAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIpGZc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekpHUoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgVHY5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMFJQg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZY0GUA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkVJUgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQ0GYA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMFGQ51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUVHUoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cAVJZ5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEVGTgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cEFGXAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQFHR1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aQpGTsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUVGX91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVHRkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIFHV9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bI0GZc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egVGUw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgVHW9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cYVJQkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZY0GUwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cwFGYcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwVHSoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkVJW5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Qk0GYo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bMFGSA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEFGS51x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQpHUgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eQVJYAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUFJS11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUFGXs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YI0HR1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIVJVk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgpGXAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgFGR1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QY0HVsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUFJZ9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RwpGTk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIpHX9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Rk0HQcov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFJUw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fM0GY51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYpHSoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAVHWAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwFJQgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cw0GUwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZkpHW5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akVHQoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMpGVA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aM0GZg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgpGXAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAVHX1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEpGZs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEpHT9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RwpGTg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIVGVA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgVHQgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFHUsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fY0GY1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYVGSkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cwVHW9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwVJQcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bYVHYoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUFJS5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eQVHQgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bYFJUs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUFGY11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQFJWkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEFHUA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZAVHU11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cwFHWkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YE0GQ9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkVGVcox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQVHZwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dMVJT51x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fkVHRg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RwpHZsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYVGZ5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUpHRo1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQVGRAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YIFJZcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUVJXsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RU0GR9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQFHRcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYpGTk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgFJTwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYVGVc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYpHZoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFHT5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewFJXo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFGRA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dU0GZ1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QIVGTsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIVHX9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVGVcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QIVHZwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dIFHT5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVHRg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQpHZw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekVGZ5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akpHTg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMFHWA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIVHV1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akFHYkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Rg0GS9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMVGWkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYVHQw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAVJUcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMVHSoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYpGWAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YA0GQgox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fw0HUsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVHY1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ckpGRsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZM0GV91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cM0HZg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RAFHTsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aApGX1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVGRk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YE0HT9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQFHXkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQ0GRwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUVGWcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUVHQo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIFHU5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUVHSgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bAFJWsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cI0GQ1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEpHSkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgVHW91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQpGQkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aY0GUw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QU0HY11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwVHTkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIpGV9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUVJVgox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUpGZoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIFGR51x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bI0HVg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egVJZAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgpGTgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cYpHXs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZU0HR1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwFJUkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eY0HTwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YUFJYcov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwpGQo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YIpHU51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkFHYgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgFJSAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dMFGWg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYpHQs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMFGZw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYpHYwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RAFHTcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFJXsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVGR9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akpHVkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVJZw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMFJTcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUFGVoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QApHZ5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIVJTo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEFJYAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFGSgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQ0HWs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUVJY11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUpGSgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YIFGWAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fI0HQgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFJUsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgVGY1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYpHRkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cYFHV91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwFJZc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFGTwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkpHXcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akVJRo1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fMFJT5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bMFGXcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eApHRwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bAVJW5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cEpGQo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZkFGU5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUpGSoEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIVGWAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eE0HQcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgFJUw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQpGX51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYpHRoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cUVHVAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RwFJZg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aI0GTsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpHX1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgVHZkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMpGT9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bY0GXk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eA0HSwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwVHW1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cEpGQk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZkVGU91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQ0HWcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFHQwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dApGUcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QAVGYoEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bE0HS5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eEFHXgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQ0GZA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQVGT11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUVHXsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUFHR5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YI0GVg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYVJTAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bY0GXg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewFGSA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwFHW1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fkVJQsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVGS9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dMFGWgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFHQsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dAFJU1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QAVGYs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bEpHS91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eEFHVkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQFJZwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fMFGTc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YUpHXoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAVJR5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YIFJVoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEFGXAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgpHRc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQVJVoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYVGQ5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUFGUg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RwFHYA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YIVJSgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fkVGUsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgpHY1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fMFHSkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QYFJW9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dAVGQcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwpHVw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akFHX91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwpHXgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMFGV91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMpHZc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkFGXsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMVHR51x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMVJVgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YA0GZAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAFGT11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEVHWs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUFGW11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQVGUkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQFGY9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIpGWgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgpHQs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yg0HU1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYFJYsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYpGT9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cwpHXkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIVJZw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ckFJTcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgFGXoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMpHR51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYVJVo1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bApGZwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewFGRcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEFGZkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgVJS5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIpHSk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEFHUwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUpHU11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMFGUwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQFGYwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Rw0GW5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akFGQoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkFHUAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMVJYg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fMVGRsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAFGV5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dAFHZoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEVJTAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cEVGXg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwFJVAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIFGZ1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkpHTsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYFHZo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewFJT5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIVGXgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekpHSA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgFHW1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMFJYsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYFGS1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cApHWkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwVJQA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEFJU1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkFGYsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQ0HR91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMVJVk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUpGZ9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgFJZk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQpGRsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QYpHV1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dU0HZk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewFJT9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bI0GYkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekpHSwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgVHUcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fMFJYo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YY0GS5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fw0HWgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwVHQA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkpGUg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Qk0GWoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bM0HR5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMVHVgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bApGZAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAVGT1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YE0HXsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEFHZ11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQpGTk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQVGX9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUVHRcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUFJWw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eI0GQ5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIpHUkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgVHW9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aQpGQcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fY0GUw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YU0HY5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwVHSoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QIpGWA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dk0GZg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Zg0HTAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Rw0GUwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIpHXAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agVHQ1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIpHZo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIVJU5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agFJWgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgFGQw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYpHU5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYVJYoUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwpGS5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwFGWgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Qk0HYAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ckVJS1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMpGXs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMFGR91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEpGZoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQpHTA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQVHXg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cUFJRsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZA0GV1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIpHQs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVHS9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agFJWkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQ0GQwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YY0HUcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUVHYk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwpGS9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cI0GUcov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Zk0HYw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFHTc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMpGXoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYVGR5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RA0HVgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwFHZAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eE0GR1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkpHVsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eQVHZ11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMFJTgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cA0GYAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZApHS11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eQ0GQAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUFGU1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUFHYs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIVJQ91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIVGUgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgFGZsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFHT1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYVJXsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZU0GR51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQpGRAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewVHZ11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwFHXw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Zk0GYkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agpHS91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYVHWc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYFJRsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fw0GV1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYFJToow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYFGXAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Qw0HRg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwVJVoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekpGX5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFGRg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cM0HVA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMVJZgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cApGTsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZApHY11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dE0HQkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkFJU9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwFHUc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwFJWoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkVGQ5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkpHUg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFHYAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bMFJSgUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkFHQkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFJU9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dMVGYk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eApHTw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bAVJVcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RE0GZoUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkFGT5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVHXcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMVJRwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVGVcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QAFGZo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dIFHR51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEVJWgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgVGQAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQpHU11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYFHYsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUFJS1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQFHQcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYFJUwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUVGYc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwVHQo1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIFHU5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yg0GZgUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgFGTAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYVHX5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cYVJRoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Zw0GT5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFGXg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkVHRA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akVJV1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgVGZsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMFGU91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYFHWkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bAVJQ9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fMVHZ1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIFJUA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QI0GY1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgpHSsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgVHU9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYpGYkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eU0GSwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bw0HWcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIVHQw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZkpGV51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cg0GXkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YM0HRwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYFHVc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QApGZoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwVGT5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QE0HXoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFHZAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eQ0GTg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bMVGYsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUVHS1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAFJWk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fI0GQ9ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YE0HUkUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eU0GSA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwFGW1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIFHQsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgVJT91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgVGXkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYFGR9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYFHVcox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwFJZsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwVGT91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpHVkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akFHZwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMFJTc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMVGYw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAVHS5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAVJWoUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fE0GQAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEFGSgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQVHWsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQVJQ1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cUVGUo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUFGYAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIFHTgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVJVs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgVGZ11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwFJZsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ckpGR11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkpHVg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMVJZAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMFJU1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aAFGYsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fApHS1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEVJWkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEpGY9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQFGSc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQ0HWw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUVJQ5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUpGUoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIFGZ51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aI0HRcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgFJVwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgpGZ5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYpHToEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bU0HXAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RkpHVoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMVHZAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYFJUcox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YA0GYoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fw0HS5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RY0GQk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aY0HUw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQ0GSgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cM0HWs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUFHQ11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aApGUkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIVGX9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aE0HRc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QgFHVwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQ0GZ1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYVGTkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUVHX9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cwFHZc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZI0GTwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgVGY5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgVHSo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYVJW5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QY0GQgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwFGUA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewVHW1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkVJQsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekVGU9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMFGYgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMFHTA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZApGX1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAVGZsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEVHT91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dEFHXk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQ0GRwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQVGVcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUVHZwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUFHR5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cI0GWoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEFGQAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgVHUc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQVJYo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dY0GS5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUFGUgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQ0GUwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQ0HY1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUVHQs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUpGU9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QIVGYkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bI0HTw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgFHXc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agpGRoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYVGV5Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIFJU5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFGQ5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cg0GYk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIFHYAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Zk0GS1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgVGUsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YMVHY5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYVJSg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QA0GWAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwFGQ1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEVHVs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkVJZ91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMVGRkUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bM0HVwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cAFHZcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQpHXsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQFHR1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUFJVkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUVGQ9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIpHUkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIVJYwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFJQc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgFGUo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYpHY5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYVJSgUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwpGWw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwFGQcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ek0HVoUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkVJX5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMVGRgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMFGVAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fAFHZ1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwFJTs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEVGX11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpHZkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQFHT9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFJYc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aUFGSsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RApHW9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIVJQkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REFJS9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFGWc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQ0HQwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dIFGRcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Rk0HTk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agFJX9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMpGRkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYpHVw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fA0HZcov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwFJToUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fE0GV51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpHZgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQVHUAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMFJYgox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aA0GSsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RApHW11x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEVHYgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEpGSAov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQ0GW11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQ0HQs1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUVHU1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cUpGZkUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIVGR9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cI0HVcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgFHZwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [agpGT5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RYVGXo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ck0GV9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQVGQkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMVHUw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUVJYc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aA0GSwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIFGU51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEVHYo1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVJSAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQVGWgUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUFGQoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZUFHV5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIVJXoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIVGRAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFGVg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RgFHZs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYFJT1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QYVGXkUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwpHR91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ewFHTcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFJYwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekFGScox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMVHWkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMVJQ9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZA0GUcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dAFGWwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QEVHQ5Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eUFGQwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZA0HT5Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIFJXkEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEpGRwox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgpHVcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQ0HZw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dYFJT51w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QU0GXoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bwpHZAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIVJTg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFJYsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFGS1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMpHWsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYVJQ9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQFHZ5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YApGSg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZE0HXgox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dwFGWsow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUVGVwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QE0HQ1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIpHZcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dkVJUk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIFHToox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eQpGY91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgFJX5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bMpHTkUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgVGRg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eA0HVwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYpHWA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aAFJZcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cYVJY1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEpGToEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RwFJSsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YEpHX5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFGW11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQ0HRgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkpHQkEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QQFJVA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkVJU9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dU0GZc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMFJYcox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUpHRoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bMFGQsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIVHW5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cA0HU91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIFJQg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZAVJZkow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ag0GUAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cEVGT91x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Rg0HY1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZEFGXc1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYVHSsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQFHRwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYpGU1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFJV5Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Yw0GYk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVGXo1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dw0HS9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eApHRAEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkFHWcov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIFHVgUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dgpGRw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eEFJZAox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YAFHZ1ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgFGU1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fE0GTs1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQpHYo1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVGX91w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYVJQAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVHRkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUFJUgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFHVwUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwFGYs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dU0GXc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eMpGWgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZAFGSoEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkVJWsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aIVHW9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cA0HU11w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVJQkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwFJZg1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ag0GUwEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fEpGTAUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQFGYc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkpHX1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YYVHQoow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQ0HRsEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUVJU5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMFJT1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwVGYg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUpGXkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIFGSA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eApHR9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUVGQ1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fkFHV1Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQpGQo1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RUFGTk1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aMFGSw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFHXwov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akpGS1Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIpGRcUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQFGWsox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVGVw1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aM0HZ9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awpGTAEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QUVJTk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RIVGXg1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bApGXA1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVHRAow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIpHR1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fgFHU1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bE0HVsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YY0GYs1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFJZ91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fYVGS91v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eAFHXgEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwVHWkUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bEFJRw1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cwFHQwUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekVGV5ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Zk0GU1Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQpHXoov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [akFGWsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bEVGX9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RMVHQ9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ekVHRcox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZIpHQgov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bQFHUsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cAVGYoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RY0GXk1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZwVHSAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aw0HR9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aEFHWgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwVHVkov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [Qk0GYoEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkpGXw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dQVGS5ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fk0GR11v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QMVHWgow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YM0HVkUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bUVJRA1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cMVHZ9Uw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eA0GVg1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZApGTcEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bIFGZsov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RQFHS9Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cEVHR1Ux] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YQ0GWcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZgVJVk1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fUVGQwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cQVGZ9Ex] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YUVHU9Ew] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QYFGTcUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cIFHYkox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUFHXwEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZI0GQwow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwVJRcEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cgFGUc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dIVGUoox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZQVHZw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egpHY9ow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [aYVJT5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bgFHSc1x] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [RU0GXoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eYFJWw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [awFGRA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZYVGQ5ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fIVHTgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fwpHUoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YkVJXsUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YwFHW51v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [egVGR1ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fkFJQgEx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZMFGVsEw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QkFGUAUw] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [cYFHZ9ox] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [eIpGVc1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZAVJUgow] C:\Program\uqtspoxr\ustovqpw.exe

 

 

Link to comment
Share on other sites

 

Bocka i och FIX:sa alla rader som ser ut så här

 

O4 - HKLM\..\Run: [RIFGQ1ov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [YgFHUsUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [fQVJWA1v] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [REVHWcow] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [ZA0HUoUx] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [QwVJYw1w] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [bkFJScov] C:\Program\uqtspoxr\ustovqpw.exe

O4 - HKLM\..\Run: [dUVJQoEw] C:\Program\uqtspoxr\ustovqpw.exe

 

 

Link to comment
Share on other sites

Guest idgadmin

Ja,nu ser loggen ut så här hoppas ni kan hjälpa mig vidare.

 

Logfile of HijackThis v1.99.0

Scan saved at 14:29:30, on 2005-01-30

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\CTSvcCDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE

C:\WINDOWS\Explorer.EXE

C:\Program\Panda Software\Panda Antivirus Platinum\apvxdwin.exe

C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Program\ouorwsro\GEgDD8RM.exe

C:\Program\ouorwsro\MR8DDgEG.exe

C:\Program\QuickTime\qttask.exe

C:\WINDOWS\system32\CTHELPER.EXE

C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe

C:\Program\Real\RealPlayer\RealPlay.exe

C:\WINDOWS\System32\P2P Networking\P2P Networking.exe

C:\Program\Delade filer\Nokia\Tools\NclTray.exe

C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe

C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

C:\Program\Delade filer\PCSuite\Services\ServiceLayer.exe

C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\framxpro\FreeRAM XP Pro 1.30.exe

C:\Program\MSN Messenger\msnmsgr.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\Widcomm\Bluetooth Software\BTTray.exe

c:\program\intern~1\iexplore.exe

C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

C:\Program\Delade filer\Microsoft Shared\Works Shared\wkcalrem.exe

C:\Program\Widcomm\Bluetooth Software\BTStackServer.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\Program\Internet Explorer\IEXPLORE.EXE

C:\Program\Mozilla Firefox\firefox.exe

C:\HiJachThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.kawddaenyfdcxedupkirnhmos.com/p0yaOuV4mhegiRahBYmqDGIRxyWKdWZR8stBohNKkMcJUoBjKdJpGotzBFFADM44.html

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zqdcnhmuyxygz.net/p0yaOuV4mhdg08YZfYJxXIEnMhI1kgOXpX3hNVY5HYg.htm

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali Sverige Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

R3 - Default URLSearchHook is missing

O1 - Hosts: 216.177.73.139 auto.search.msn.com

O1 - Hosts: 216.177.73.139 search.netscape.com

O1 - Hosts: 216.177.73.139 ieautosearch

O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com

O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - C:\WINDOWS\mslagent\4b_1,0,1,2_mslagent.dll (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll

O2 - BHO: (no name) - {9B0E2322-3E88-FACA-30FE-0BB06FD9A928} - C:\DOCUME~1\Thomas\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O2 - BHO: (no name) - {C0CDD684-A356-FE92-66C7-1056AB0C31E4} - C:\DOCUME~1\Ida\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O4 - HKLM\..\Run: [CTStartup] C:\Program\Creative\Splash Screen\CTEaxSpl.EXE /run

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [navapp] C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

O4 - HKLM\..\Run: [Trust Size Amen Junk] C:\Documents and Settings\All Users\Application Data\messrealtrustsize\rect exit.exe

O4 - HKLM\..\Run: [drv mags license grim] C:\Documents and Settings\All Users\Application Data\phone window drv mags\stupidsoftware.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE

O4 - HKLM\..\Run: [Windows SyncroAd] C:\Program Files\Windows SyncroAd\SyncroAd.exe

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\Downloaded Program Files\bridge.dll",Load

O4 - HKLM\..\Run: [RealTray] C:\Program\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program\Delade filer\Nokia\Tools\NclTray.exe

O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [msnappau] "C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe"

O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program\Microsoft Works\WkDetect.exe

O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program\Microsoft Works\WksSb.exe /AllUsers

O4 - HKLM\..\Run: [LVCOMS] C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

O4 - HKLM\..\Run: [Jet Detection] C:\Program\Creative\SBLive\PROGRAM\ADGJDet.exe

O4 - HKLM\..\Run: [DataLayer] C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

O4 - HKLM\..\Run: [bxsx5] RunDLL32.EXE C:\WINDOWS\bsx5.dll,DllRun

O4 - HKLM\..\Run: [bsx3] RunDLL32.EXE C:\WINDOWS\bs3.dll,DllRun

O4 - HKLM\..\Run: [YEFJQA1v] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKLM\..\Run: [dgpHZoUw] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [QUpGY91w] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [fMVHY11v] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [YUVHYcox] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [aI0HZkUx] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [cwFGQw1w] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program\framxpro\FreeRAM XP Pro 1.30.exe" -win

O4 - HKCU\..\Run: [That4] C:\DOCUME~1\Thomas\APPLIC~1\FUNKBU~1\balm jump curb.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: Påminnelser för Kalendern i Microsoft Works.lnk = ?

O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~4\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.1_02\bin\npjpi141_02.dll

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.1_02\bin\npjpi141_02.dll

O9 - Extra button: Informationshanteraren - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program\Delade filer\Microsoft Shared\Reference 2001\EROProj.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O10 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing

O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.se

O16 - DPF: IEToolbarCab - http://www.dailytoolbar.com/DailyToolbarAff.CAB

O16 - DPF: ImageUploader - http://www.order.proprint.se/imageuploader.cab

O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1017_EN_XP.cab

O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=727f05f845b9280685bb21690b62797f88401ad03b1187d6e04c7fda009ebf4017c249e10cebc1fc57d89ebeda7432c44c89fbebd87eda562a403a:67aec302c4c9618af8db1358f7b056aa

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -

O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab

O16 - DPF: {2ABE804B-4D3A-41BF-A172-304627874B45} - http://akamai.downloadv3.com/binaries/DialHTML/EGDHTML_XP.cab

O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_EN_XP.cab

O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/se/win/QuickTimeFullInstaller.exe

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab

O16 - DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} (CustomerCtrl Class) - http://cs1b.instantservice.com/jars/customerxsigned35.cab

O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/6c5b0a1ae398e3/player.virtools.com/downloads/player/Install2.5/Installer.exe

O16 - DPF: {C7B05B62-C8D7-438C-840B-4994DAAA8EEE} - http://webpdp.gator.com/v3/download/pdpplugin5094_hd3ptdmgainads.cab

O16 - DPF: {CEFB7B49-9652-464F-8AFD-A577C0500F39} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1012_EN_XP.cab

O16 - DPF: {EE2589EB-7FC8-44DB-A892-573F2C4B41E0} - http://pdf.forbes.com/forbesnews/triggernews/ForbesDownloaderSigned.cab

O16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - http://akamai.downloadv3.com/binaries/IA/netpe32_EN_XP.cab

O16 - DPF: {FA53CFF8-B253-49DE-9B13-3A6129830AF0} - http://216.182.10.243/player/allcast022303_18.cab

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE

O23 - Service: Norman Type-R - Unknown - C:\NORMAN\nvc\BIN\NPFSVICE.EXE (file missing)

O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Panda Firewall Service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

O23 - Service: Panda anti-virus service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

 

 

 

 

Link to comment
Share on other sites

 

du har flera olika sorters problem, det kommer ta ett bra tag att fixa dessa.

 

för att förhoppningsvis slutföra ett problem så bocka för dessa

 

O4 - HKLM\..\Run: [YEFJQA1v] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKLM\..\Run: [dgpHZoUw] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [QUpGY91w] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [fMVHY11v] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [YUVHYcox] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [aI0HZkUx] C:\Program\ouorwsro\GEgDD8RM.exe

O4 - HKLM\..\Run: [cwFGQw1w] C:\Program\ouorwsro\GEgDD8RM.exe

 

starta sen om i felsäkert läge och ta bort filen MR8DDgEG.exe.

 

sen kan du rensa bort skitprogram i lägg till/ta program

 

Link to comment
Share on other sites

Guest idgadmin

Jag vet inte om det blev rätt,ger snart upp men skickar en logg igen.

Logfile of HijackThis v1.99.0

Scan saved at 18:29:03, on 2005-01-30

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\CTSvcCDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE

C:\WINDOWS\Explorer.EXE

C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE

C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

C:\Program\QuickTime\qttask.exe

C:\WINDOWS\system32\CTHELPER.EXE

C:\Program\Real\RealPlayer\RealPlay.exe

C:\WINDOWS\System32\P2P Networking\P2P Networking.exe

C:\Program\Delade filer\Nokia\Tools\NclTray.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe

C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

C:\Program\ouorwsro\eIQDC8RM.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\framxpro\FreeRAM XP Pro 1.30.exe

C:\Program\ouorwsro\MR8CDQIe.exe

C:\Program\MSN Messenger\msnmsgr.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\Delade filer\PCSuite\Services\ServiceLayer.exe

C:\Program\Widcomm\Bluetooth Software\BTTray.exe

C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

c:\program\intern~1\iexplore.exe

C:\Program\Delade filer\Microsoft Shared\Works Shared\wkcalrem.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\Program\Widcomm\Bluetooth Software\BTStackServer.exe

C:\HiJachThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.kkroryzygkuikttiuuetkf.us/p0yaOuV4mhegiRahBYmqDGIRxyWKdWZR8stBohNKkMdHhEFn/tT7yItzBFFADM44.asp

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zqdcnhmuyxygz.net/p0yaOuV4mhdg08YZfYJxXIEnMhI1kgOXpX3hNVY5HYg.htm

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali Sverige Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

R3 - Default URLSearchHook is missing

O1 - Hosts: 216.177.73.139 auto.search.msn.com

O1 - Hosts: 216.177.73.139 search.netscape.com

O1 - Hosts: 216.177.73.139 ieautosearch

O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com

O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - C:\WINDOWS\mslagent\4b_1,0,1,2_mslagent.dll (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll

O2 - BHO: (no name) - {9B0E2322-3E88-FACA-30FE-0BB06FD9A928} - C:\DOCUME~1\Thomas\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O2 - BHO: (no name) - {C0CDD684-A356-FE92-66C7-1056AB0C31E4} - C:\DOCUME~1\Ida\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O4 - HKLM\..\Run: [CTStartup] C:\Program\Creative\Splash Screen\CTEaxSpl.EXE /run

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [navapp] C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

O4 - HKLM\..\Run: [Trust Size Amen Junk] C:\Documents and Settings\All Users\Application Data\messrealtrustsize\rect exit.exe

O4 - HKLM\..\Run: [drv mags license grim] C:\Documents and Settings\All Users\Application Data\phone window drv mags\stupidsoftware.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE

O4 - HKLM\..\Run: [Windows SyncroAd] C:\Program Files\Windows SyncroAd\SyncroAd.exe

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\Downloaded Program Files\bridge.dll",Load

O4 - HKLM\..\Run: [RealTray] C:\Program\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program\Delade filer\Nokia\Tools\NclTray.exe

O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [msnappau] "C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe"

O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program\Microsoft Works\WkDetect.exe

O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program\Microsoft Works\WksSb.exe /AllUsers

O4 - HKLM\..\Run: [LVCOMS] C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

O4 - HKLM\..\Run: [Jet Detection] C:\Program\Creative\SBLive\PROGRAM\ADGJDet.exe

O4 - HKLM\..\Run: [DataLayer] C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

O4 - HKLM\..\Run: [bxsx5] RunDLL32.EXE C:\WINDOWS\bsx5.dll,DllRun

O4 - HKLM\..\Run: [bsx3] RunDLL32.EXE C:\WINDOWS\bs3.dll,DllRun

O4 - HKLM\..\Run: [YEFJQA1v] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program\framxpro\FreeRAM XP Pro 1.30.exe" -win

O4 - HKCU\..\Run: [That4] C:\DOCUME~1\Thomas\APPLIC~1\FUNKBU~1\balm jump curb.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: Påminnelser för Kalendern i Microsoft Works.lnk = ?

O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~4\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.1_02\bin\npjpi141_02.dll

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.1_02\bin\npjpi141_02.dll

O9 - Extra button: Informationshanteraren - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program\Delade filer\Microsoft Shared\Reference 2001\EROProj.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O10 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing

O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.se

O16 - DPF: IEToolbarCab - http://www.dailytoolbar.com/DailyToolbarAff.CAB

O16 - DPF: ImageUploader - http://www.order.proprint.se/imageuploader.cab

O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1017_EN_XP.cab

O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=727f05f845b9280685bb21690b62797f88401ad03b1187d6e04c7fda009ebf4017c249e10cebc1fc57d89ebeda7432c44c89fbebd87eda562a403a:67aec302c4c9618af8db1358f7b056aa

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -

O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab

O16 - DPF: {2ABE804B-4D3A-41BF-A172-304627874B45} - http://akamai.downloadv3.com/binaries/DialHTML/EGDHTML_XP.cab

O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_EN_XP.cab

O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/se/win/QuickTimeFullInstaller.exe

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab

O16 - DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} (CustomerCtrl Class) - http://cs1b.instantservice.com/jars/customerxsigned35.cab

O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/6c5b0a1ae398e3/player.virtools.com/downloads/player/Install2.5/Installer.exe

O16 - DPF: {C7B05B62-C8D7-438C-840B-4994DAAA8EEE} - http://webpdp.gator.com/v3/download/pdpplugin5094_hd3ptdmgainads.cab

O16 - DPF: {CEFB7B49-9652-464F-8AFD-A577C0500F39} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1012_EN_XP.cab

O16 - DPF: {EE2589EB-7FC8-44DB-A892-573F2C4B41E0} - http://pdf.forbes.com/forbesnews/triggernews/ForbesDownloaderSigned.cab

O16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - http://akamai.downloadv3.com/binaries/IA/netpe32_EN_XP.cab

O16 - DPF: {FA53CFF8-B253-49DE-9B13-3A6129830AF0} - http://216.182.10.243/player/allcast022303_18.cab

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE

O23 - Service: Norman Type-R - Unknown - C:\NORMAN\nvc\BIN\NPFSVICE.EXE (file missing)

O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Panda Firewall Service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

O23 - Service: Panda anti-virus service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

 

 

 

 

Link to comment
Share on other sites

> ger snart upp <

 

Nej kämpa på

 

Avinstallera vi Kontrollpanelen om det finns

 

Windows SyncroAd

P2P Networking

 

Scanna med Hijack bocka i följande rader stäng Web-läsaren och alla andra öppna fönster och klicka FIX checked

 

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.kkroryzygkuikttiuuetkf.us/p0yaOuV4mhegiRahBYmqDGIRxyWK

dWZR8stBohNKkMdHhEFn/tT7yItzBFFADM44.asp

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zqdcnhmuyxygz.net/p0yaOuV4mhdg08YZfYJxXIEnMhI1kgOXpX3h

NVY5HYg.htm

O1 - Hosts: 216.177.73.139 auto.search.msn.com

O1 - Hosts: 216.177.73.139 search.netscape.com

O1 - Hosts: 216.177.73.139 ieautosearch

O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com

O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - C:\WINDOWS\mslagent\4b_1,0,1,2_mslagent.dll (file missing)

O2 - BHO: (no name) - {9B0E2322-3E88-FACA-30FE-0BB06FD9A928} - C:\DOCUME~1\Thomas\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)

O2 - BHO: (no name) - {C0CDD684-A356-FE92-66C7-1056AB0C31E4} - C:\DOCUME~1\Ida\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

O4 - HKLM\..\Run: [Trust Size Amen Junk] C:\Documents and Settings\All Users\Application Data\messrealtrustsize\rect exit.exe

O4 - HKLM\..\Run: [drv mags license grim] C:\Documents and Settings\All Users\Application Data\phone window drv mags\stupidsoftware.exe

O4 - HKLM\..\Run: [Windows SyncroAd] C:\Program Files\Windows SyncroAd\SyncroAd.exe

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\Downloaded Program Files\bridge.dll",Load

O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

O4 - HKLM\..\Run: [bxsx5] RunDLL32.EXE C:\WINDOWS\bsx5.dll,DllRun

O4 - HKLM\..\Run: [bsx3] RunDLL32.EXE C:\WINDOWS\bs3.dll,DllRun

O4 - HKLM\..\Run: [YEFJQA1v] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKCU\..\Run: [That4] C:\DOCUME~1\Thomas\APPLIC~1\FUNKBU~1\balm jump curb.exe

O16 - DPF: IEToolbarCab - http://www.dailytoolbar.com/DailyToolbarAff.CAB

O16 - DPF: ImageUploader - http://www.order.proprint.se/imageuploader.cab

O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1017_EN_XP

.cab

O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=727f05f845

b9280685bb21690b62797f88401ad03b1187d6e04c7fda009ebf4017c249e10cebc1fc57d89ebeda7432c44c89fbebd87eda562a403a:67aec302c4c9618af8db1358f7b056aa

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCent

ralInitialSetup1.0.0.8.cab

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -

O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab

O16 - DPF: {2ABE804B-4D3A-41BF-A172-304627874B45} - http://akamai.downloadv3.com/binaries/DialHTML/EGDHTML_XP.cab

O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_EN_XP.cab

O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple

.com/mickey/se/win/QuickTimeFullInstaller.exe

O16 - DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} (CustomerCtrl Class) - http://cs1b.instantservice.com/jars/customerxsigned35.cab

O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab

O16 - DPF: {C7B05B62-C8D7-438C-840B-4994DAAA8EEE} - http://webpdp.gator.com/v3/download/pdpplugin5094_hd3ptdmgainads.

cab

O16 - DPF: {CEFB7B49-9652-464F-8AFD-A577C0500F39} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1012_EN_XP

.cab

O16 - DPF: {EE2589EB-7FC8-44DB-A892-573F2C4B41E0} - http://pdf.forbes.com/forbesnews/triggernews/ForbesDownloaderSign

ed.cab

O16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - http://akamai.downloadv3.com/binaries/IA/netpe32_EN_XP.cab

O16 - DPF: {FA53CFF8-B253-49DE-9B13-3A6129830AF0} - http://216.182.10.243/player/allcast022303_18.cab

 

 

Starta sen i felsäkert läge sök och ta bort om du hittar

 

bsx5.dll

bs3.dll

eIQDC8RM.exe

 

C:\DOCUME~1\Thomas\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

- ta bort PUREVC~1 mappen

 

C:\DOCUME~1\Ida\APPLIC~1\PUREVC~1\ReadmeDoes.exe (file missing)

- ta bort PUREVC~1 mappen

 

C:\Documents and Settings\All Users\Application Data\phone window drv mags\stupidsoftware.exe

- ta bort phone window drv mags mappen

 

C:\Documents and Settings\All Users\Application Data\messrealtrustsize\rect exit.exe

- ta bort messrealtrustsize mappen

 

C:\Program Files\Windows SyncroAd\SyncroAd.exe

- ta bort Windows SyncroAd mappen

 

C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

- ta bort P2P Networking mappen

 

C:\DOCUME~1\Thomas\APPLIC~1\FUNKBU~1\balm jump curb.exe

- ta bort FUNKBU~1 mappen

 

 

Starta sen normalt och skicka en ny Hijack logg

 

 

 

[inlägget ändrat 2005-01-30 19:15:15 av Zipp]

Link to comment
Share on other sites

Guest idgadmin

OK! Jag ska försöka hänga i eftersom det finns människor som hjälper mig! Jag ska se om jag kan fixa det du beskriver och hör av mig när jag kan med en ny logg.Håll gärna tråden under uppsikt så tackar jag för hjälpen så här långt!

 

 

Link to comment
Share on other sites

Guest idgadmin

Jaha då har jag gjort ett nytt försök. Allt som skulle bort lyckades jag inte komma åt,nekades åtkomst eller så används filen.Vet ej hur jag löser det.Senaste loggen ser ut så här:

 

Logfile of HijackThis v1.99.0

Scan saved at 14:12:16, on 2005-02-01

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\cisvc.exe

C:\WINDOWS\System32\CTSvcCDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE

C:\WINDOWS\Explorer.EXE

C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE

C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

C:\Program\QuickTime\qttask.exe

C:\WINDOWS\system32\CTHELPER.EXE

C:\Program\Real\RealPlayer\RealPlay.exe

C:\Program\Delade filer\Nokia\Tools\NclTray.exe

C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe

C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

C:\Program\ouorwsro\eIQDC8RM.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\framxpro\FreeRAM XP Pro 1.30.exe

C:\Program\MSN Messenger\msnmsgr.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\ouorwsro\MR8CDQIe.exe

C:\Program\Widcomm\Bluetooth Software\BTTray.exe

C:\Program\Delade filer\PCSuite\Services\ServiceLayer.exe

C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

C:\Program\Delade filer\Microsoft Shared\Works Shared\wkcalrem.exe

C:\Program\Widcomm\Bluetooth Software\BTStackServer.exe

C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\system32\wuauclt.exe

C:\HiJachThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.qoqtrkvwasxlmtuyqjw.com/p0yaOuV4mhegiRahBYmqDGIRxyWKdWZR8stBohNKkMdlXFQL3i3d5ItzBFFADM44.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://login.bahnhof.se/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali Sverige Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

R3 - Default URLSearchHook is missing

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\01.02.3000.1001\sv\msntb.dll

O4 - HKLM\..\Run: [CTStartup] C:\Program\Creative\Splash Screen\CTEaxSpl.EXE /run

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [navapp] C:\Program\NavExcel\NavHelper\v2.0.4d\navapp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [RealTray] C:\Program\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program\Delade filer\Nokia\Tools\NclTray.exe

O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [msnappau] "C:\Program\MSN Apps\Updater\01.02.3000.1001\sv\msnappau.exe"

O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program\Microsoft Works\WkDetect.exe

O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program\Microsoft Works\WksSb.exe /AllUsers

O4 - HKLM\..\Run: [LVCOMS] C:\Program\Delade filer\Logitech\QCDriver\LVCOMS.EXE

O4 - HKLM\..\Run: [Jet Detection] C:\Program\Creative\SBLive\PROGRAM\ADGJDet.exe

O4 - HKLM\..\Run: [DataLayer] C:\Program\Delade filer\PCSuite\DataLayer\DataLayer.exe

O4 - HKLM\..\Run: [YEFJQA1v] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

O4 - HKLM\..\Run: [YkVJVoUw] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program\framxpro\FreeRAM XP Pro 1.30.exe" -win

O4 - HKCU\..\Run: [msnmsgr] "C:\Program\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program\InterVideo\Common\Bin\WinCinemaMgr.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: Påminnelser för Kalendern i Microsoft Works.lnk = ?

O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~4\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.1_02\bin\npjpi141_02.dll

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.1_02\bin\npjpi141_02.dll

O9 - Extra button: Informationshanteraren - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program\Delade filer\Microsoft Shared\Reference 2001\EROProj.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O10 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing

O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.se

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/6c5b0a1ae398e3/player.virtools.com/downloads/player/Install2.5/Installer.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE

O23 - Service: Norman Type-R - Unknown - C:\NORMAN\nvc\BIN\NPFSVICE.EXE (file missing)

O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Panda Firewall Service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe

O23 - Service: Panda anti-virus service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

 

 

 

 

Link to comment
Share on other sites

> Allt som skulle bort lyckades jag inte komma åt,nekades åtkomst eller så används filen <

 

Du måste ta bort dom i felsäkert läge

 

Avinstallera via Kontrollpanelen

 

P2P Networking

 

Scanna med Hijack bocka i följande rader stäng Web-läsaren och alla andra öppna fönster och klicka FIX checked

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.qoqtrkvwasxlmtuyqjw.com/p0yaOuV4mhegiRahBYmqDGIRxyWKdW

ZR8stBohNKkMdlXFQL3i3d5ItzBFFADM44.htm

R3 - Default URLSearchHook is missing

O4 - HKLM\..\Run: [YEFJQA1v] C:\Program\ouorwsro\eIQDC8RM.exe

O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

O4 - HKLM\..\Run: [YkVJVoUw] C:\Program\ouorwsro\eIQDC8RM.exe

 

 

Starta sen i felsäkert läge sök och ta bort

 

eIQDC8RM.exe

MR8CDQIe.exe

 

C:\WINDOWS\System32\P2P Networking

- ta bort P2P Networking mappen

 

Starta sen normalt och ny Hijack logg.

 

 

 

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...