Hijackthis log. En der gider tjekke?

Af Bruger Aspirant Brian Stelmer | 24-09-2004 19:00 | 960 visninger | 3 svar, hop til seneste

Er der en venlig sjæl der gider tjekke min kammerats log? Jeg syntes ikke jeg kan se noget snavs i den. Men hans system kører meget langsomt. LOG: Logfile of HijackThis v1.97.7 Scan saved at 18:57:13, on 24-09-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32logonui.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:PROGRA~1GrisoftAVG6avgcc32.exe C:ProgrammerMSN AppsUpdater1.02.0002.1001damsnappau.exe C:ProgrammerWinampwinampa.exe C:WINDOWSSystem32ctfmon.exe C:PROGRA~1GrisoftAVG6avgserv.exe C:ProgrammerInternet ExplorerIEXPLORE.EXE C:Documents and SettingsLazz.LAZZ-YPGC9SPOTDLokale indstillingerTemporary Internet FilesContent.IE5U5PQJQL4HijackThis[1].exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.msn.dk[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.dk[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.microsoft.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://www.microsoft.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://ie.search.msn.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://ie.search.msn.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://home.microsoft.com[...] R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,AutoConfigURL = http://odense.kollegienet.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:ProgrammerSpybot - Search & DestroySDHelper.dll O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:ProgrammerMSN AppsST1.02.0002.1001en-xustmain.dll O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmergooglegoogletoolbar2.dll O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN AppsMSN Toolbar1.02.0002.1001damsntb.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN AppsMSN Toolbar1.02.0002.1001damsntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmergooglegoogletoolbar2.dll O4 - HKLM..Run: [AVG_CC] C:PROGRA~1GrisoftAVG6avgcc32.exe /STARTUP O4 - HKLM..Run: [msnappau] "C:ProgrammerMSN AppsUpdater1.02.0002.1001damsnappau.exe" O4 - HKLM..Run: [WinampAgent] C:ProgrammerWinampwinampa.exe O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerofficeOffice10OSA.EXE O8 - Extra context menu item: &Google Search - res://c:programmergoogleGoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:programmergoogleGoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:programmergoogleGoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1officeOffice10EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:programmergoogleGoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:programmergoogleGoogleToolbar2.dll/cmtrans.html O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com[...] O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com[...] O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com[...] O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.axis.com[...] O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com[...] O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O17 - HKLMSystemCCSServicesTcpip..{911AF138-37D5-4E8B-99F6-FBD231072882}: NameServer = 172.16.1.2,130.225.130.6 På Forhånd Tak. :)
--

#1
Brian Stelmer
Bruger Aspirant
24-09-2004 19:01

Rapporter til Admin

Hov! Logfile of HijackThis v1.97.7 Scan saved at 18:57:13, on 24-09-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32logonui.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:PROGRA~1GrisoftAVG6avgcc32.exe C:ProgrammerMSN AppsUpdater1.02.0002.1001damsnappau.exe C:ProgrammerWinampwinampa.exe C:WINDOWSSystem32ctfmon.exe C:PROGRA~1GrisoftAVG6avgserv.exe C:ProgrammerInternet ExplorerIEXPLORE.EXE C:Documents and SettingsLazz.LAZZ-YPGC9SPOTDLokale indstillingerTemporary Internet FilesContent.IE5U5PQJQL4HijackThis[1].exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.msn.dk[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.dk[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.microsoft.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://www.microsoft.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://ie.search.msn.com[...] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://ie.search.msn.com[...] R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://home.microsoft.com[...] R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,AutoConfigURL = http://odense.kollegienet.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:ProgrammerSpybot - Search & DestroySDHelper.dll O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:ProgrammerMSN AppsST1.02.0002.1001en-xustmain.dll O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmergooglegoogletoolbar2.dll O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN AppsMSN Toolbar1.02.0002.1001damsntb.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN AppsMSN Toolbar1.02.0002.1001damsntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmergooglegoogletoolbar2.dll O4 - HKLM..Run: [AVG_CC] C:PROGRA~1GrisoftAVG6avgcc32.exe /STARTUP O4 - HKLM..Run: [msnappau] "C:ProgrammerMSN AppsUpdater1.02.0002.1001damsnappau.exe" O4 - HKLM..Run: [WinampAgent] C:ProgrammerWinampwinampa.exe O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerofficeOffice10OSA.EXE O8 - Extra context menu item: &Google Search - res://c:programmergoogleGoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:programmergoogleGoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:programmergoogleGoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1officeOffice10EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:programmergoogleGoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:programmergoogleGoogleToolbar2.dll/cmtrans.html O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com[...] O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com[...] O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com[...] O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.axis.com[...] O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com[...] O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com[...] O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com[...] O17 - HKLMSystemCCSServicesTcpip..{911AF138-37D5-4E8B-99F6-FBD231072882}: NameServer = 172.16.1.2,130.225.130.6
--

#2
Blazta
Monsterbruger
24-09-2004 19:14

Rapporter til Admin

Jeg har ikke synderligt meget forstand på det, men prøv at kigge på: C:PROGRA~1GrisoftAVG6avgcc32.exe -ikke fjerne noget før du er sikker! men prøv lige at se hvad det er! :) GL
--
My freinds says: Get a life! -But i dont know where to download it!

#3
A
Gæst
24-09-2004 19:22

Rapporter til Admin

#1 Det er antivirusprogrammet AVG fra Grisoft, som jo er i orden. #0 Prøv at uploade loggen på http://www.upit.dk[...]
--
Gæstebruger, opret dit eget login og få din egen signatur.