Nogen der vil tjekken en hijacklog
Min putter er meget langsom og fryser mere og mere og jeg må genstarte, tror der er snavs på. Vil nogen kigge på denne log?Marie
Logfile of HijackThis v1.99.1
Scan saved at 16:47:17, on 21-09-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\LEXPPS.EXE
D:\Programmer\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
D:\Programmer\Java\jre1.5.0_04\bin\jusched.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FSM32.EXE
D:\Programmer\QuickTime\qttask.exe
D:\WINDOWS\system32\LVCOMSX.EXE
D:\Programmer\Logitech\Video\LogiTray.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Programmer\Sony Ericsson\Mobile\audevicemgr.exe
D:\Programmer\Logitech\Video\FxSvr2.exe
D:\WINDOWS\system32\RAMASST.exe
D:\Programmer\SpywareGuard\sgmain.exe
d:\PROGRA~1\INTUWA~1\Shared\MROUTE~1\MROUTE~2.EXE
D:\Programmer\SpywareGuard\sgbhp.exe
D:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE
D:\PROGRA~1\TDCKAB~1\backweb\7791805\Program\SERVIC~1.EXE
D:\WINDOWS\System32\DVDRAMSV.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\backweb\7791805\Program\fspex.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Anti-Virus\fsgk32st.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\backweb\7791805\program\fsbwsys.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Anti-Virus\FSGK32.EXE
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FSMA32.EXE
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Anti-Virus\fssm32.exe
D:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FSMB32.EXE
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FCH32.EXE
D:\WINDOWS\System32\svchost.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FAMEH32.EXE
D:\Programmer\TDC Kabel TV Sikkerhedspakke\FWES\Program\fsdfwd.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\Anti-Virus\fsav32.exe
D:\Programmer\TDC Kabel TV Sikkerhedspakke\FSGUI\fsguiexe.exe
D:\Programmer\MSN Messenger\msnmsgr.exe
D:\Programmer\Microsoft Office\Office10\WINWORD.EXE
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\Marie\Skrivebord\Virus\hjt.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmer\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - D:\Programmer\SpywareGuard\dlprotect.dll
O4 - HKLM\..\Run: [RemoteControl] "D:\Programmer\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [CrazyTalk Serve] rundll32.exe D:\WINDOWS\system32\CrazyTalk.dll,DllServeMediaFile
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Programmer\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [F-Secure Manager] "D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "D:\Programmer\TDC Kabel TV Sikkerhedspakke\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Programmer\TDC Kabel TV Sikkerhedspakke\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "D:\Programmer\TDC Kabel TV Sikkerhedspakke\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] D:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] D:\Programmer\Logitech\Video\ManifestEngine.exe boot
O4 - Startup: SpywareGuard.lnk = D:\Programmer\SpywareGuard\sgmain.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programmer\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Phone Connection Monitor.lnk = D:\Programmer\Sony Ericsson\Mobile\audevicemgr.exe
O4 - Global Startup: RAMASST.lnk = D:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programmer\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programmer\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Programmer\Messenger\msmsgs.exe
O12 - Plugin for .spop: D:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1106524388842
O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} (Microsoft RDP Client Control (redist)) - http://workathome.debitel.dk/msrdp.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IP-Uploader Control) - http://asp03.photoprintit.de/microsite/defaults/activex/ImageUploader3.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O16 - DPF: {EDAF796E-9210-4417-ADDC-2AB18E4F6C27} (Hjemmeside.KvikFoto) - http://www.123hjemmeside.dk/builder/pages/KvikFoto.CAB
O20 - Winlogon Notify: NavLogon - D:\WINDOWS\System32\NavLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - D:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: TDC Kabel TV Sikkerhedspakke (BackWeb Plug-in - 7791805) - Unknown owner - D:\PROGRA~1\TDCKAB~1\backweb\7791805\Program\SERVIC~1.EXE
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - D:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - D:\Programmer\TDC Kabel TV Sikkerhedspakke\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - D:\Programmer\TDC Kabel TV Sikkerhedspakke\backweb\7791805\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Programmer\TDC Kabel TV Sikkerhedspakke\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - D:\Programmer\TDC Kabel TV Sikkerhedspakke\Common\FSMA32.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE
