har jeg fået virus? Hijack log til gennemsyn.
Hej eksperterMin computer har opført sig underligt et stykke tid, og tager sig ind imellem et par kraftige pauser? Samtidig kan jeg ikke åbne PDF filer fra nettet, jeg får et lille rødt kryds istedet for dokumentet. (Måske 2 spørgsmål???)
Har kørt: Spybot SD, Ad-Aware og ewido som alle fandt en masse skidt, men problemerne fortsætter alligevel.
Hijack log til gennemsyn-
Logfile of HijackThis v1.99.1
Scan saved at 13:31:42, on 19-10-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Programmer\Support.com\bin\tgcmd.exe
E:\Programmer\AVPersonal\AVSched32.EXE
E:\Programmer\Office keyboard utility\1.1\nhksrv.exe
E:\Programmer\AVPersonal\AVWUPSRV.EXE
E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
E:\Programmer\iTunes\iTunesHelper.exe
E:\Programmer\QuickTime\qttask.exe
E:\Programmer\Winamp\winampa.exe
E:\Programmer\Norton AntiVirus\navapsvc.exe
E:\Programmer\Logitech\MouseWare\system\em_exec.exe
E:\Programmer\Browser MOUSE\mouse32a.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Programmer\Plaxo\2.4.1.5\InstallStub.exe
E:\Programmer\Office keyboard utility\1.1\TrayMon.exe
E:\Programmer\Office keyboard utility\1.1\osd.exe
E:\Programmer\Norton AntiVirus\SAVScan.exe
E:\Programmer\Kodak\Kodak EasyShare software\bin\EasyShare.exe
E:\WINDOWS\System32\svchost.exe
E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
E:\Programmer\Fælles filer\Symantec Shared\Security Center\SymWSC.exe
E:\Programmer\iPod\bin\iPodService.exe
E:\WINDOWS\explorer.exe
E:\Programmer\Messenger\msmsgs.exe
E:\Programmer\Internet Explorer\iexplore.exe
E:\Programmer\ewido\security suite\ewidoguard.exe
E:\Programmer\ewido\security suite\ewidoctrl.exe
E:\Documents and Settings\Administrator\Skrivebord\computer værktøj\Hijackers\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sbbu.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hcenter] "E:\Programmer\Support.com\bin\tgcmd.exe" /server /startmonitor
O4 - HKLM\..\Run: [AVSCHED32] E:\Programmer\AVPersonal\AVSched32.EXE /min
O4 - HKLM\..\Run: [ccApp] "E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [iTunesHelper] E:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "E:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [WinampAgent] E:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] E:\Programmer\Browser MOUSE\mouse32a.exe
O4 - HKLM\..\Run: [FLMOFFICEKEYBOARD] E:\Programmer\Office keyboard utility\1.1\OFFICEKB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PlaxoUpdate] E:\Programmer\Plaxo\2.4.1.5\InstallStub.exe -a
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = E:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Kodak EasyShare software.lnk = E:\Programmer\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O12 - Plugin for .pdf: E:\Programmer\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) - http://netbank.danskebank.dk/html/activex/DB/Menu.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} (DeviceEnum Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpbasicdetection3.cab
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - E:\Programmer\AVPersonal\AVWUPSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - E:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - E:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - E:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: Norton AntiVirus Auto Protect (navapsvc) - Symantec Corporation - E:\Programmer\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - E:\Programmer\Office keyboard utility\1.1\nhksrv.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Programmer\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FLLESF~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\Security Center\SymWSC.exe
Venlig hilsen og håb om hjælp / Rainbow
