Avatar billede xtux Nybegynder
17. december 2005 - 14:11 Der er 8 kommentarer og
1 løsning

Nogen som kan se et problem her?

Logfile of HijackThis v1.99.1
Scan saved at 14:07:51, on 17-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Intel\Intel Application

Accelerator\iaanotif.exe
C:\Programmer\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Programmer\Messenger Plus! 3\MsgPlus.exe
C:\Programmer\Fælles filer\Microsoft Shared\Works

Shared\WkUFind.exe
C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programmer\Fælles

filer\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\cisvc.exe
C:\Programmer\Intel\Intel Application

Accelerator\iaantmon.exe
C:\Programmer\Fælles filer\Microsoft

Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Programmer\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Stefan

Hansen\Dokumenter\Modtagne filer\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://www.euro.dell.com/
R0 - HKCU\Software\Microsoft\Internet

Explorer\Main,Start Page = http://www.dk-tv.dk/
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://www.euro.dell.com/
R0 - HKLM\Software\Microsoft\Internet

Explorer\Main,Start Page = http://www.euro.dell.com/
R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Start Page_bak = http://www.dk-tv.dk/
R0 - HKCU\Software\Microsoft\Internet

Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Programmer\Adobe\Acrobat

7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) -

{53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess -

{5CA3D70E-1895-11CF-8E15-001234567890} -

C:\WINDOWS\system32\dla\tfswshx.dll
O3 - Toolbar: (no name) -

{E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [IAAnotif] C:\Programmer\Intel\Intel

Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [PCMService]

"C:\Programmer\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [dla]

C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SetIcon] C:\Program

Files\Icons\SetIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3]

"C:\Programmer\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Microsoft Works Update Detection]

C:\Programmer\Fælles filer\Microsoft Shared\Works

Shared\WkUFind.exe
O4 - HKLM\..\Run: [NeroFilterCheck]

C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client]

C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [QuickTime Task]

"C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper]

"C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles

filer\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [CTFMON.EXE]

C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Hurtigstart.lnk =

C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&ksporter til Microsoft

Excel -

res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open Link Target in

Firefox - file://C:\Documents and Settings\Stefan

Hansen\Application

Data\Mozilla\Firefox\Profiles\4enbhb63.default\extensi

ons\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxview

link.html
O8 - Extra context menu item: View This Page in

Firefox - file://C:\Documents and Settings\Stefan

Hansen\Application

Data\Mozilla\Firefox\Profiles\4enbhb63.default\extensi

ons\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxview

page.html
O9 - Extra button: (no name) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Programmer\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Programmer\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) -

{85d1f590-48f4-11d9-9669-0800200c9a66} -

%windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender

Online Scanner v8 -

{85d1f590-48f4-11d9-9669-0800200c9a66} -

%windir%\bdoscandel.exe (file missing)
O9 - Extra button: Opslag -

{92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Programmer\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Programmer\Messenger\msmsgs.exe (file missing)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C}

(Checkers Class) -

http://messenger.zone.msn.com/binary/msgrchkr.cab31267

.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC}

(MessengerStatsClient Class) -

http://messenger.zone.msn.com/binary/MessengerStatsPAC

lient.cab30149.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}

(Windows Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B}

(Minesweeper Flags Class) -

http://messenger.zone.msn.com/binary/MineSweeper.cab31

267.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8}

(Cult3D ActiveX Player) -

http://www.cult3d.com/download/cult.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN

Photo Upload Tool) -

http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {53B3ABEA-4445-44D9-A01E-088144CAABD9}

(FileSharingCtrl Class) -

http://appdirectory.messenger.msn.com/AppDirectory/P4A

pps/FileSharing/da/filesharingctrl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -

http://software-dl.real.com/02e817bc77e7bc63e219/netzi

p/RdxIE601.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}

(BDSCANONLINE Control) -

http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D}

(MessengerStatsClient Class) -

http://messenger.zone.msn.com/binary/MessengerStatsCli

ent.cab31267.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7}

(DmiReader Class) -

http://support.euro.dell.com/global/apps/systemprofile

r/PROFILER.CAB
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592}

(ZoneIntro Class) -

http://messenger.zone.msn.com/binary/ZIntro.cab30149.c

ab
O16 - DPF: {BF985246-09BF-11D2-BE62-006097DF57F6}

(SimCityX Control) -

http://simcity.ea.com/play/classic/SimCityX.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98}

(Measurement Service Client v.3.4) -

http://ccon.futuremark.com/global/msc34.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A}

(PopCapLoader Object) -

http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF}

(Solitaire Showdown Class) -

http://messenger.zone.msn.com/binary/SolitaireShowdown

.cab31267.cab
O18 - Protocol: msnim -

{828030A1-22C1-4009-854F-8E305202313F} -

"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: Ati HotKey Poller - Unknown owner -

C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: CA ISafe (CAISafe) - Computer

Associates International, Inc. -

C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel

Corporation - C:\Programmer\Intel\Intel Application

Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT)

- Macrovision Corporation - C:\Programmer\Fælles

filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. -

C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK)

- Webroot Software, Inc. - C:\Programmer\Webroot\Spy

Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec

Corporation - C:\Programmer\Fælles filer\Symantec

Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) -

Zone Labs, LLC -

C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
Avatar billede arlet Juniormester
17. december 2005 - 14:12 #1
tjekker den nu
Avatar billede arlet Juniormester
17. december 2005 - 14:17 #2
Intet at udsætte på den log, bortset fra at det står hulter til bulter og meget svær at tyde..

Nogle problemer eller bare et tjek..
Avatar billede haverslev Novice
17. december 2005 - 14:18 #3
arlet, ifm. med dette: http://exp.dk/spm/672868
Avatar billede arlet Juniormester
17. december 2005 - 14:19 #4
Der er intet der ligger og bloker, så haverslev hvis du har andre forslag, så fortsætter du bare
Avatar billede xtux Nybegynder
17. december 2005 - 14:20 #5
Undskyld min bruger er måske gammel men det er anden gang jeg bruger den, så er ikke helt inden i hvordan tingene forgår her
Avatar billede xtux Nybegynder
17. december 2005 - 15:26 #6
Tilføjer lige en ting til. Når computeren fryser og jeg lukker vinduet ned kommer der en fejl raport hvori der står bl.a
szAppName : explorer.exe    szAppVer : 6.0.2900.2180 
szModName : hungapp          szModVer : 0.0.0.0 
  offset : 00000000   
og..
C:\DOCUME~1\STEFAN~1\LOKALE~1\Temp\WER7004.dir00\explorer.exe.mdmp
C:\DOCUME~1\STEFAN~1\LOKALE~1\Temp\WER7004.dir00\appcompat.txt
eller
C:\DOCUME~1\STEFAN~1\LOKALE~1\Temp\WERe525.dir00\explorer.exe.mdmp
C:\DOCUME~1\STEFAN~1\LOKALE~1\Temp\WERe525.dir00\appcompat.txt

det sidste er forskelligt gang på gang.
Avatar billede haverslev Novice
17. december 2005 - 18:15 #7
arlet > hvad med disse ? 
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [Microsoft Works Update Detection]
Avatar billede arlet Juniormester
17. december 2005 - 18:21 #8
haverslev-> Den øverste skal slettes hvis vi begynder, men den er ikke årsagen..

Den nederste: http://process.networktechs.com/WkUFind.exe.php
Avatar billede haverslev Novice
17. december 2005 - 18:24 #9
arlet > fint nok, ledte bare efter en årsag til : hungapp  (17/12-2005 15:26:14)
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester