Hjælp til hijack this logfil
Min maskine (win2000) er til tider meget langsom og den opfører sig som om den låser.Er der nogen der kan se nogle åbenlyse fejl i følgende HijackThis logfil ????
Logfile of HijackThis v1.97.7
Scan saved at 19:03:43, on 24-01-2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\SYSTEM32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\MS\SMS\CORE\BIN\CLISVCL.EXE
C:\Program Files\CA\eTrust\Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust\Antivirus\InoRT.exe
C:\Program Files\CA\eTrust\Antivirus\InoTask.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
C:\WINNT\Explorer.Exe
C:\WINNT\MS\SMS\clicomp\apa\Bin\smsapm32.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\CA\eTrust\Antivirus\realmon.exe
C:\Program Files\Compaq\EAB\EabServr.exe
C:\WINNT\system32\atiptaxx.exe
C:\WINNT\system32\PRPCUI.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Nokia\Card Phone 2.0\Setup\CardPhoneUIStarter.exe
C:\WINNT\system32\ltmsg.exe
C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.EXE
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3d.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe
C:\WINNT\MS\SMS\CLICOMP\SWDist32\bin\smsmon32.exe
C:\Documents and Settings\lars\Desktop\download2\ad-aware\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://vip.ramboll.dk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://vip.ramboll.dk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by RAMBØLL Informatik
F0 - system.ini: Shell=C:\WINNT\Explorer.Exe,
F2 - REG:system.ini: Shell=C:\WINNT\Explorer.Exe,
O1 - Hosts: 193.163.251.132 pepw2.maersksealand.com
O1 - Hosts: 193.163.251.130 ppepw2.maersksealand.com
O1 - Hosts: 172.17.1.34 mslbackup1
O1 - Hosts: 172.17.1.35 mslbackup2
O1 - Hosts: 172.17.1.51 a-msldb1
O1 - Hosts: 172.17.1.52 a-msldb2
O1 - Hosts: 172.17.1.41 a-sc2-winterm
O1 - Hosts: 172.17.1.42 a-sc3-winterm
O1 - Hosts: 172.17.1.38 a-sc4-wm
O1 - Hosts: 172.17.1.39 a-sc4-ws
O1 - Hosts: 172.17.1.45 a-mapprd-01
O1 - Hosts: 172.17.1.46 a-mapprd-02
O1 - Hosts: 172.17.1.53 a-msldb3
O1 - Hosts: 172.17.1.54 a-msldb4
O1 - Hosts: 172.17.1.50 a-prsftp
O1 - Hosts: 172.17.1.36 a-sc2-wm
O1 - Hosts: 172.17.1.37 a-sc2-ws
O1 - Hosts: 172.17.1.40 a-sc1-winterm
O1 - Hosts: 172.17.1.43 a-mappre-01
O1 - Hosts: 172.17.1.44 a-mappre-02
O1 - Hosts: 172.17.1.69 a-ngpp-jump
O1 - Hosts: 172.17.1.61 a-ngpp-ridb1
O1 - Hosts: 172.17.1.62 a-ngpp-ridb2
O1 - Hosts: 172.17.1.63 a-ngpp-riapp1
O1 - Hosts: 172.17.1.64 a-ngpp-riapp2
O1 - Hosts: 172.17.1.65 a-ngpp-riapp3
O1 - Hosts: 172.17.1.66 a-ngpp-riapp4
O1 - Hosts: 172.17.1.67 a-ngpp-riapp5
O1 - Hosts: 172.17.1.68 a-ngpp-riapp6
O1 - Hosts: 172.17.1.71 a-ngpd-ridb1
O1 - Hosts: 172.17.1.72 a-ngpd-ridb2
O1 - Hosts: 172.17.1.74 a-ngpd-riapp1
O1 - Hosts: 172.17.1.75 a-ngpd-riapp2
O1 - Hosts: 172.17.1.76 a-ngpd-riapp3
O1 - Hosts: 172.17.1.77 a-ngpd-riapp4
O1 - Hosts: 172.17.1.78 a-ngpd-riapp5
O1 - Hosts: 172.17.1.79 a-ngpd-riapp6
O1 - Hosts: 172.17.1.73 a-ngpt-ridb1
O1 - Hosts: 172.17.1.80 a-ngpt-riapp1
O1 - Hosts: 172.17.1.70 a-ngpt-riapp2
O1 - Hosts: 172.17.1.34 a-mslbackup1
O1 - Hosts: 172.17.1.35 a-mslbackup2
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing)
O2 - BHO: (no name) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~1\TEXTware\QUICKF~1\PlugIns\IEHelp.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Realtime Monitor] "C:\Program Files\CA\eTrust\Antivirus\realmon.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\Compaq\EAB\EabServr.exe /Start
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [UIStarter] "C:\Program Files\Nokia\Card Phone 2.0\Setup\CardPhoneUIStarter.exe"
O4 - HKLM\..\Run: [LTWinModem1] ltmsg.exe 9
O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Office 2000\Office10\OSA.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://vip.ramboll.dk
O15 - Trusted Zone: *.bps.dk
O16 - DPF: {0006F063-0000-0000-C000-000000000046} (Microsoft Outlook View Control) - http://activex.microsoft.com/activex/controls/office/outlctlx.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/abarth/us/win/QuickTimeInstaller.exe
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37642.2407175926
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = informatik.ramboll-group.global.network
O17 - HKLM\System\CCS\Services\Tcpip\..\{B9B8C3C0-FE19-4F51-97E1-2CEC18975542}: NameServer = 192.168.160.200,192.168.160.201
O17 - HKLM\System\CCS\Services\Tcpip\..\{FA5C460C-CD01-48D7-AB62-119314150FC8}: NameServer = 192.168.160.200,192.168.160.201
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = informatik.ramboll-group.global.network
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = informatik.ramboll-group.global.network,
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = informatik.ramboll-group.global.network
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = informatik.ramboll-group.global.network,
