Avatar billede christianskou Nybegynder
03. december 2006 - 21:50 Der er 4 kommentarer og
1 løsning

HiJackThis log

Hej eksperter :), er i ikke flinke lige og kigge om der er noget snavs?



HJT LOG

Logfile of HijackThis v1.99.1
Scan saved at 20:50:55, on 03-12-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS.002\System32\smss.exe
C:\WINDOWS.002\system32\winlogon.exe
C:\WINDOWS.002\system32\services.exe
C:\WINDOWS.002\system32\lsass.exe
C:\WINDOWS.002\system32\svchost.exe
C:\WINDOWS.002\System32\svchost.exe
C:\Programmer\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS.002\system32\spoolsv.exe
C:\WINDOWS.002\Explorer.EXE
C:\WINDOWS.002\ATKKBService.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS.002\system32\nvsvc32.exe
C:\WINDOWS.002\system32\svchost.exe
C:\WINDOWS.002\SOUNDMAN.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS.002\vsnpstd3.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\Messenger\msmsgs.exe
C:\programmer\valve\steam\steam.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programmer\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500USB.exe
C:\Programmer\SpywareGuard\sgmain.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\SpywareGuard\sgbhp.exe
C:\WINDOWS.002\system32\WgaTray.exe
C:\WINDOWS.002\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Christian.CHRILLE\Skrivebord\hijackthis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Programmer\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS.002\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS.002\vsnpstd3.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS.002\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS.002\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "c:\programmer\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Adobe Gamma.lnk = ?
O4 - Startup: SpywareGuard.lnk = C:\Programmer\SpywareGuard\sgmain.exe
O4 - Global Startup: RaConfig2500USB.lnk = C:\Programmer\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500USB.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O15 - Trusted Zone: *.www.n.dk
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by118fd.bay118.hotmail.msn.com/resources/MsnPUpld.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS.002\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS.002\ATKKBService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.002\system32\nvsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Programmer\TGTSoft\StyleXP\StyleXPService.exe

------------------------------------------------------------------

DrWeb:

mirc.exe;C:\Program Files\mIRC;Program.mIRC.617;Renamed.;
mirc.exe;C:\Program Files\mIRC\backup;Program.mIRC.617;Renamed.;
A0076865.dll;C:\System Volume Information\_restore{6909ED9B-FB93-4F49-A063-48C8E9A75D5F}\RP159;IRC.Flood;Deleted.;
A0096406.exe;C:\System Volume Information\_restore{6909ED9B-FB93-4F49-A063-48C8E9A75D5F}\RP215;Program.mIRC.617;Renamed.;
A0096407.exe;C:\System Volume Information\_restore{6909ED9B-FB93-4F49-A063-48C8E9A75D5F}\RP215;Program.mIRC.617;Renamed.;

-------------------------------------------------------------------------------------------

SAS LOG (fra den 28/11-2006): SUPERAntiSpyware Scan Log
Generated 11/28/2006 at 09:44 PM

Application Version : 3.3.1020

Core Rules Database Version : 3137
Trace Rules Database Version: 1154

Scan type      : Complete Scan
Total Scan Time : 03:30:34

Memory items scanned      : 426
Memory threats detected  : 0
Registry items scanned    : 3868
Registry threats detected : 0
File items scanned        : 35100
File threats detected    : 3

Adware.Tracking Cookie
    C:\Documents and Settings\Christian.CHRILLE\Cookies\christian@track.adform[2].txt
    C:\Documents and Settings\Christian.CHRILLE\Cookies\christian@ilead.itrack[2].txt
    C:\Documents and Settings\Christian.CHRILLE\Cookies\christian@cgi-bin[1].txt

------------------------------------------------------------------
Avatar billede fromsej Praktikant
03. december 2006 - 22:13 #1
Den er stadig ren.
Du skal nøjes med at oprette en tråd om samme problem.
Avatar billede christianskou Nybegynder
04. december 2006 - 13:21 #2
Oki, vil du have point?
Avatar billede fromsej Praktikant
04. december 2006 - 15:29 #3
Nej, dem tager du bare selv.*S*
Avatar billede christianskou Nybegynder
04. december 2006 - 15:37 #4
Ok :).
Avatar billede christianskou Nybegynder
04. december 2006 - 15:38 #5
Kigger du ikke lige her: http://www.eksperten.dk/spm/748602 ? Så du flink :P
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester