Langsom hardddisk, arbejder konstant
HejLige pludselig er min computer blevet mega langsom. HD arbejder hele tiden. Har kørt Spyware men der er ikke fundet noget.
Her er en logfil fra Hijack this
Logfile of HijackThis v1.99.1
Scan saved at 17:02:25, on 28-04-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\Programmer\Windows Defender\MsMpEng.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\PROGRA~1\TDCPCS~1\backweb\2127079\Program\SERVIC~1.EXE
F:\Programmer\TDC PC Security\Anti-Virus\fsgk32st.exe
F:\Programmer\TDC PC Security\backweb\2127079\program\fsbwsys.exe
F:\Programmer\TDC PC Security\Anti-Virus\FSGK32.EXE
F:\Programmer\TDC PC Security\Common\FSMA32.EXE
F:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
F:\Programmer\TDC PC Security\Common\FSMB32.EXE
F:\Programmer\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\Programmer\TDC PC Security\Anti-Virus\fssm32.exe
F:\Programmer\TDC PC Security\Common\FCH32.EXE
F:\WINDOWS\System32\svchost.exe
F:\Programmer\TDC PC Security\Common\FAMEH32.EXE
F:\Programmer\TDC PC Security\Anti-Virus\fsrw.exe
F:\Programmer\TDC PC Security\FWES\Program\fsdfwd.exe
F:\Programmer\TDC PC Security\Anti-Virus\fsav32.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\wscntfy.exe
F:\Programmer\Logitech\iTouch\iTouch.exe
F:\WINDOWS\VM_STI.EXE
F:\WINDOWS\system32\atiptaxx.exe
F:\Programmer\TDC PC Security\Common\FSM32.EXE
F:\Programmer\Windows Defender\MSASCui.exe
F:\WINDOWS\system32\ctfmon.exe
F:\PROGRA~1\TDCPCS~1\ANTI-S~1\fsaw.exe
F:\Programmer\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe
F:\Programmer\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe
F:\Programmer\Microsoft ActiveSync\wcescomm.exe
F:\Programmer\Skype\Phone\Skype.exe
F:\Programmer\TDC PC Security\FSGUI\fsguidll.exe
F:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
F:\Programmer\TDC PC Security\backweb\2127079\Program\fspex.exe
F:\PROGRA~1\MICROS~4\rapimgr.exe
F:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
F:\Programmer\Hewlett-Packard\Digital Imaging\bin\Hpqdirec.exe
F:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
F:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
F:\WINDOWS\system32\HPZipm12.exe
F:\Programmer\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
F:\Programmer\Adobe\Acrobat 6.0\Acrobat\Acrobat.exe
F:\WINDOWS\system32\WISPTIS.EXE
F:\Programmer\Internet Explorer\iexplore.exe
F:\DOCUME~1\POULER~1\LOKALE~1\Temp\Midlertidig mappe 1 for hijackthis[1].zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tdconline.dk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://tdconline.dk/?ngURL=www.opasia.dk%2F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programmer\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [PinnacleDriverCheck] F:\WINDOWS\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [zBrowser Launcher] F:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [BigDogPath] F:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [F-Secure TNB] "F:\Programmer\TDC PC Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Manager] "F:\Programmer\TDC PC Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\Programmer\TDC PC Security\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [Windows Defender] "F:\Programmer\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [InstantTray] F:\Programmer\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe
O4 - HKCU\..\Run: [IW_Drop_Icon] F:\Programmer\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe /DropDisc
O4 - HKCU\..\Run: [MsnMsgr] "F:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "F:\Programmer\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [Skype] "F:\Programmer\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: Tursejler.lnk = ?
O4 - Global Startup: Acrobat-assistenten.lnk = F:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: hp psc 2000 Series.lnk = F:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: TDC PC-Sikkerhed.lnk = F:\Programmer\TDC PC Security\backweb\2127079\Program\fspex.exe
O8 - Extra context menu item: &Bloker dette pop up-vindue - F:\Programmer\TDC PC Security\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - F:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Internet Explorer-beskyttelse - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\Programmer\TDC PC Security\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Internet Explorer-beskyttelse... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\Programmer\TDC PC Security\Anti-Spyware\ieshield.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmer\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmer\Messenger\msmsgs.exe (file missing)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3D6DDD23-870A-4FC8-B3AF-5F67C935A9B7} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-1204.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125345289410
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125346000082
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B1953AD6-C50E-11D3-B020-00A0C9251384} (O2C-Player (ELECO Software GmbH)) - http://www.o2c.de/download/o2cplayer.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE90C0AB-F69A-44D5-BD9B-9AED1E600230}: Domain = Tursejlere
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE90C0AB-F69A-44D5-BD9B-9AED1E600230}: NameServer = 193.162.145.130 193.162.159.194 193.162.145.130 193.162.159.194
O20 - Winlogon Notify: NavLogon - F:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - F:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: TDC PC-Sikkerhed (BackWeb Plug-in - 2127079) - BackWeb Technologies Inc. - F:\PROGRA~1\TDCPCS~1\backweb\2127079\Program\SERVIC~1.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Programmer\TDC PC Security\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - F:\Programmer\TDC PC Security\backweb\2127079\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Programmer\TDC PC Security\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - F:\Programmer\TDC PC Security\Common\FSMA32.EXE
O23 - Service: Pml Driver HPZ12 - HP - F:\WINDOWS\system32\HPZipm12.exe
Nogen der kan hjælpe
