Hijackthis, kig venligst igennem. brugeren kommer ikke på net.
Logfile of HijackThis v1.99.0Scan saved at 13:07:28, on 18-01-2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\MS\SMS\CORE\BIN\CLISVCL.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\timeserv.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
C:\WINNT\MS\SMS\clicomp\apa\Bin\smsapm32.exe
C:\Program Files\OfficeScan NT\PCCNTMON.EXE
C:\Program Files\OfficeScan NT\tmlisten.exe
C:\Program Files\OfficeScan NT\ntrtscan.exe
C:\WINNT\TEMP\FQ827B.EXE
C:\WINNT\MS\SMS\CLICOMP\SWDist32\bin\smsmon32.exe
C:\Program Files\OfficeScan NT\OfcPfwSvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.EXE
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\ahead\InCD\InCD.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Internet Optimizer\optimize.exe
C:\WINNT\system32\SahAgent.exe
C:\program files\180solutions\sais.exe
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\Program Files\Netwise\CMG 6.0\Quick 6.0\Quick60.exe
C:\WINNT\SYSTEM32\DWRCS.EXE
D:\Hijackthis\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://web.dk.sibt.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://sieweb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Leveret af Siemens A/S
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://ita-config/config/ie55/ieproxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 149.212.21.102:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = web.*;143.99.*;10.4.*;*.siemens.de;*.siemens.net;scd*;*.abatos.com;*.siemens.com;*.siemens.dk;149.212*;targit*;finserv*;*.siemens.nl;<local>
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\OfficeScan NT\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [cryptoex] C:\Program Files\CryptoEx Security Suite\cex_t.exe
O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.EXE
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [VPNlogon] c:\sielan\logon\vpnlogon.bat
O4 - HKLM\..\Run: [InCD] C:\Program Files\ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\System32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [loader32] C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [SAHAgent] C:\WINNT\system32\SahAgent.exe
O4 - Startup: Netwise Quick 6.0.lnk = C:\Program Files\Netwise\CMG 6.0\Quick 6.0\Quick60.exe
O4 - Global Startup: Microsoft Office Shortcut Bar.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Know How - {7B01ECA0-50D3-11D4-AA68-003005020AF5} - C:\WINNT\System32\KnowHow.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O14 - IERESET.INF: START_PAGE_URL=http://sieweb
O15 - Trusted Zone: *.a-team.dk
O15 - Trusted Zone: www.enalyser.dk
O15 - Trusted Zone: www.enalyzer.com
O15 - Trusted Zone: *.enemyofstate.dk
O15 - Trusted Zone: *.mmmanager.org
O15 - Trusted Zone: *.passport.com
O15 - Trusted Zone: *.sbs.de
O15 - Trusted Zone: *.siemens.de
O15 - Trusted Zone: *.a-team.dk (HKLM)
O15 - Trusted Zone: www.enalyser.dk (HKLM)
O15 - Trusted Zone: www.enalyzer.com (HKLM)
O15 - Trusted Zone: *.enemyofstate.dk (HKLM)
O15 - Trusted Zone: *.mmmanager.org (HKLM)
O15 - Trusted Zone: *.passport.com (HKLM)
O15 - Trusted Zone: *.sbs.de (HKLM)
O15 - Trusted Zone: *.siemens.de (HKLM)
O15 - Trusted IP range: 149.212.31.137
O15 - Trusted IP range: 149.212.31.137 (HKLM)
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - http://www.kortal.dk/ecwplugins/ncs.cab
O16 - DPF: {B3EB74A1-1483-11D3-946F-00A0C91F240A} - http://sie34/Scanweb/INFOSCAN_OCX.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{2507D8E8-3631-4E37-AF60-7C0A64953F9E}: Domain = siemens.dk
O17 - HKLM\System\CCS\Services\Tcpip\..\{2507D8E8-3631-4E37-AF60-7C0A64953F9E}: NameServer = 149.212.32.100
O17 - HKLM\System\CS1\Services\Tcpip\..\{2507D8E8-3631-4E37-AF60-7C0A64953F9E}: Domain = siemens.dk
O17 - HKLM\System\CS1\Services\Tcpip\..\{2507D8E8-3631-4E37-AF60-7C0A64953F9E}: NameServer = 149.212.32.100
O17 - HKLM\System\CS2\Services\Tcpip\..\{2507D8E8-3631-4E37-AF60-7C0A64953F9E}: Domain = siemens.dk
O17 - HKLM\System\CS2\Services\Tcpip\..\{2507D8E8-3631-4E37-AF60-7C0A64953F9E}: NameServer = 149.212.32.100
O23 - Service: Logical Disk Manager Administrative Service - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: DameWare Mini Remote Control - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE
O23 - Service: OfficeScanNT RealTime Scan - Trend Micro Inc. - C:\Program Files\OfficeScan NT\ntrtscan.exe
O23 - Service: OfficeScanNT Personal Firewall - Trend Micro Inc. - C:\Program Files\OfficeScan NT\OfcPfwSvc.exe
O23 - Service: OfficeScanNT Listener - Trend Micro Inc. - C:\Program Files\OfficeScan NT\tmlisten.exe
