Avatar billede ghostweb Nybegynder
11. maj 2007 - 15:21 Der er 5 kommentarer

Hijackthis Log.

Tror min computer har fået virus. den bliver ved med at slukke af sig selv , bagefter vil den ikke tænde ?

evt. en der vil kigge den igennem , gerne hurtigst muligt (200 points)

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 15:19:12, on 11-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\programmer\fælles filer\logishrd\lvmvfm\LVPrcSrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Programmer\PCI Audio Applications\Bin\EchoCtrl.exe
C:\WINDOWS\Mixer.exe
C:\Programmer\Java\jre1.5.0_03\bin\jusched.exe
C:\Programmer\SAMSUNG\FW LiveUpdate\Liveupdate.exe
C:\Programmer\Fælles filer\LogiShrd\LComMgr\Communications_Helper.exe
C:\Programmer\Logitech\QuickCam10\QuickCam10.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\Java\jre1.5.0_03\bin\jucheck.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Steam\Steam.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\Fælles filer\Ahead\Lib\NMBgMonitor.exe
C:\Programmer\Fælles filer\LogiShrd\LComMgr\LVComSX.exe
C:\Programmer\Fælles filer\Logishrd\LQCVFX\COCIManager.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Ahead\Lib\NMIndexingService.exe
C:\Programmer\Fælles filer\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programmer\MSN Messenger\usnsvc.exe
C:\WINDOWS\System32\igfxsrvc.exe
C:\WINDOWS\system32\wuauclt.exe
c:\programmer\steam\steamapps\super_clan2\counter-strike\hl.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\pokzi\Skrivebord\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\System32\igfxpers.exe
O4 - HKLM\..\Run: [C-Media Echo Control] C:\Programmer\PCI Audio Applications\Bin\EchoCtrl.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [Name of App] C:\Programmer\SAMSUNG\FW LiveUpdate\Liveupdate.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Programmer\Fælles filer\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Programmer\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmer\Fælles filer\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "C:\Programmer\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmer\Fælles filer\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1173460547105
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod-tjeneste (iPod Service) - Unknown owner - C:\Programmer\iPod\bin\iPodService.exe (file missing)
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\programmer\fælles filer\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Programmer\Fælles filer\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Programmer\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmer\Fælles filer\Ahead\Lib\NMIndexingService.exe

--
End of file - 5594 bytes
Avatar billede levich Nybegynder
11. maj 2007 - 17:06 #1
Ja, øjeblik.
Avatar billede levich Nybegynder
11. maj 2007 - 17:10 #2
Der er ikke noget snavs at se i loggen, men derfor kan der jo godt være noget, som er skjult. Prøv dette:

Hent http://www.ewido.net/en/download (AVG AntiSpyware).
Installer programmet, opdater det, scan, fix de ting som den finder og kopier loggen herind.
Avatar billede ghostweb Nybegynder
12. maj 2007 - 08:40 #3
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:    08:36:12 12-05-2007

+ Scan result:   



C:\Documents and Settings\pokzi\Dokumenter\GTA SA\No CD\grand.theft.auto.san.andreas.nocd-ind.r00/hlm-intro.exe -> Backdoor.Hupigon.kg : Cleaned with backup (quarantined).
:mozilla.49:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.50:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.51:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.46:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.47:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.48:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.100:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.101:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.102:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.55:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.9:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.24:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Gemius : Cleaned.
:mozilla.25:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Gemius : Cleaned.
:mozilla.44:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.69:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.70:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.71:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.72:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.104:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.105:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.86:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.87:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.88:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.89:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.90:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.91:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.78:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.26:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.107:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.108:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.79:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.80:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.81:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.82:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.83:C:\Documents and Settings\pokzi\Application Data\Mozilla\Firefox\Profiles\axewnbrd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.


::Report end
Avatar billede levich Nybegynder
12. maj 2007 - 15:32 #4
Hmm, der var ikke noget særligt ifølge AVG-loggen. Tænder og slukker computeren stadig?
Avatar billede levich Nybegynder
02. juli 2007 - 18:08 #5
?
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester