Noget stjæler cpu-kraft

Hent en hijackthis : http://www.arlet.dk/hjt.htm

Logfile of HijackThis v1.98.2
Scan saved at 21:10:50, on 25-09-2004
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
F:\WINNT\System32\smss.exe
F:\WINNT\system32\winlogon.exe
F:\WINNT\system32\services.exe
F:\WINNT\system32\lsass.exe
F:\WINNT\system32\svchost.exe
F:\WINNT\system32\spoolsv.exe
F:\WINNT\System32\cisvc.exe
F:\WINNT\System32\svchost.exe
O:\Program Files\Norton Personal Firewall\NISUM.EXE
F:\WINNT\system32\regsvc.exe
F:\WINNT\system32\MSTask.exe
F:\WINNT\System32\snmp.exe
F:\WINNT\System32\WBEM\WinMgmt.exe
F:\WINNT\System32\mspmspsv.exe
F:\WINNT\system32\svchost.exe
F:\WINNT\System32\inetsrv\inetinfo.exe
O:\Program Files\Norton Personal Firewall\NISSERV.EXE
F:\WINNT\Explorer.EXE
F:\Program Files\Common Files\stardock\TrayServer.exe
F:\WINNT\System32\khooker.exe
E:\hp-printer\drivers\Win98\ptg\hpoopm07.exe
F:\WINNT\system32\CTHELPER.EXE
O:\Program Files\Norton Personal Firewall\IAMAPP.EXE
F:\Program Files\MultiMedia Keyboard\MultiMedia Keyboard\1.0\KbdAp32A.exe
F:\Program Files\Browser Mouse\Browser Mouse\1.1\MOUSE32A.EXE
F:\Program Files\Common Files\InterVideo\FastTVSync\FastTVSync.exe
O:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
F:\WINNT\system32\internat.exe
F:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
O:\Program Files\BoincLogX\boinclogx.exe
F:\WINNT\System32\cidaemon.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
O:\ny dl\seti\BOINCMeter.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\WINNT\system32\svchost.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\WINNT\system32\notepad.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
o:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
O:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
O:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
O:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
F:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
O:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
G:\Program Files\SETIMON\SetiMon.exe
g:\Program Files\SETI@home\setiathome-3.08.i386-winnt-cmdline.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Internet Explorer\IEXPLORE.EXE
N:\Program Files\Macromedia\Dreamweaver 4\Dreamweaver.exe
F:\Documents and Settings\Administrator\Desktop\hijackthis\hjt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.greenholt.dk/intranet
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - o:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - O:\Program Files\Desktop Sidebar\sbhelp.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - F:\WINNT\Downloaded Program Files\googlenav.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINNT\System32\msdxm.ocx
O3 - Toolbar: McAfee VirusScan - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - O:\Program Files\McAfee\McAfee VirusScan\VSCShellExtension.dll
O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "F:\Program Files\Common Files\stardock\TrayServer.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SiS KHooker] F:\WINNT\System32\khooker.exe
O4 - HKLM\..\Run: [HPAIO_PrintFolderMgr] E:\hp-printer\drivers\Win98\ptg\hpoopm07.exe
O4 - HKLM\..\Run: [QuickTime Task] "N:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] F:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "n:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [DU Meter] N:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [SysMetrix] O:\Program Files\SysMetrix\SysMetrix.exe
O4 - HKLM\..\Run: [MBM 5] "O:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [iamapp] "O:\Program Files\Norton Personal Firewall\IAMAPP.EXE"
O4 - HKLM\..\Run: [LWBKEYBOARD] F:\Program Files\MultiMedia Keyboard\MultiMedia Keyboard\1.0\KbdAp32A.exe
O4 - HKLM\..\Run: [LWBMOUSE] F:\Program Files\Browser Mouse\Browser Mouse\1.1\MOUSE32A.EXE
O4 - HKLM\..\Run: [TkBellExe] F:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "O:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [FastTVSync] "F:\Program Files\Common Files\InterVideo\FastTVSync\FastTVSync.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] O:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [UNIPHIZ Zigzag Cleaner] N:\Program Files\Zigzag_Cleaner\ZCleaner.exe
O4 - HKCU\..\Run: [SetiLog9x] O:\Program Files\Log9x\log9x.exe
O4 - HKCU\..\Run: [msnmsgr] "F:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WorkShelf] O:\Program Files\Winstep\workshelf.exe autostart
O4 - HKCU\..\Run: [WindowFX] O:\PROGRA~1\OBJECT~1\WindowFX\\wfxload.exe
O4 - HKCU\..\Run: [DesktopX] F:\Program Files\Stardock\Object Desktop\DesktopX\DesktopX.exe
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "F:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\Run: [Yabber] O:\Program Files\Yabber\Yabber.exe
O4 - HKCU\..\Run: [SETI Monitor] G:\PROGRAM FILES\SETIMON\SetiMon.exe
O4 - HKCU\..\Run: [seticlient] g:\Program Files\SETI@home\SETI@home.exe -min
O4 - HKCU\..\Run: [BoincLogX] o:\Program Files\BoincLogX\boinclogx.exe
O4 - HKCU\..\Run: [BOINCMeter] O:\ny dl\seti\BOINCMeter.exe
O4 - Startup: Rainmeter.lnk = O:\Program Files\Rainmeter\Rainmeter.exe
O4 - Startup: Ativa Net Meter 4.lnk = N:\Program Files\Ativa Net Meter\Ativa.exe
O4 - Startup: Trillian.lnk = O:\Program Files\Trillian\trillian.exe
O4 - Startup: Rainlendar.lnk = O:\Program Files\Rainlendar\Rainlendar.exe
O4 - Startup: WinCustomize Updates.lnk = O:\Program Files\Stardock\WinCustomize\Tray\wctray.exe
O4 - Startup: Shortcut to SetiSpy.exe.lnk = G:\Program Files\SETI@home\SetiSpy.exe
O4 - Startup: SETI@home.lnk = SETI@home\setiathome-3.08.i386-winnt-cmdline.exe
O4 - Global Startup: HPAiODevice.lnk = F:\Program Files\Hewlett-Packard\hp psc 700 series\bin\hpodev07.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BOINC.lnk = O:\Program Files\BOINC\boinc_gui.exe
O8 - Extra context menu item: &Google Search - res://F:\WINNT\Downloaded Program Files\googlenav.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://F:\WINNT\Downloaded Program Files\googlenav.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://F:\WINNT\Downloaded Program Files\googlenav.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://F:\WINNT\Downloaded Program Files\googlenav.dll/cmsimilar.html
O8 - Extra context menu item: Subscribe in Desktop Sidebar - res://O:\Program Files\Desktop Sidebar\sbhelp.dll/menuhandler.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\WINNT\System32\msjava.dll
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - O:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - O:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - N:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - N:\Program Files\ICQ\ICQ.exe
O12 - Plugin for .asf: O:\PROGRA~1\Netscape\COMMUN~1\Program\PLUGINS\npdsplay.dll
O12 - Plugin for .spop: F:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: O:\PROGRA~1\Netscape\COMMUN~1\Program\PLUGINS\npdsplay.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://simcity.ea.com/patch/EARTPX.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://toolbar.google.com/data/da/deleon/1.1.62-deleon/GoogleNav.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - https://www.gamespyid.com/alaunch.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) - http://81.19.245.211/speedtest/SpeedTest_2.cab

(he, jeg turde da godt nok heller ikke pille ved noget på egen hånd :-D)

tjekker den nu..

tak :)

Umiddelbart er der intet at se i loggen.

Hent og kør denne scanner fra Kaspersky : http://www.arlet.dk/mwti.htm
Slet alt hvad den finder

det var pokkers. den har allerede fundet 3...

jeg gætter på at jeg skal genstarte bagefter? (gys, genstartskuller :-D)

Ja, du skal genstarte bagefter

Hvordan kører computeren så??

det tog 4 timer... Nå, men det ser helt klart ud til at maskinen kører upåklageligeligt nu :) Jeg har fået afprøvet et par vindues-åbninger, og selv den tidligere ventetid var væk :)

Tak for hjælpen :) Smider du lige et svar? :)

Jeps.

Det var godt det lykkes..

:)