Hijack-this. Gider i tjecke den

Af Megabruger Mighty_nOOb | 10-07-2004 23:22 | 825 visninger | 6 svar, hop til seneste

Haløjsa gutter.. Idag sidder jeg så ved en veninde, der også har bøvl med hendes bærbare. Gidder i kigge lidt på hendes log. Logfile of HijackThis v1.98.0 Scan saved at 23:18:50, on 10-07-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:WINDOWSSOUNDMAN.EXE C:ProgrammerClassic PhoneToolsCapFax.EXE C:ProgrammerMicrosoft WorksWksSb.exe C:WINDOWSSystem32RUNDLL32.EXE C:ProgrammerSynapticsSynTPSynTPLpr.exe C:ProgrammerSynapticsSynTPSynTPEnh.exe C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmm_tray.exe C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmmtask.exe C:ProgrammerFælles filerRealUpdate_OB ealsched.exe C:ProgrammerCommon filesupdmgrupdmgr.exe C:ProgrammerFælles filerCMEIICMESys.exe C:ProgrammerBullGuardgnewsag.exe C:ProgrammerFælles filerGMTGMT.exe C:ProgrammerEzButton System V2.1EzButton.exe C:PROGRA~2AltnetDOWNLO~1asm.exe C:WINDOWSSystem32P2P NetworkingP2P Networking.exe C:ProgrammerFælles filerMicrosoft SharedVS7Debugmdm.exe C:WINDOWSSystem32 vsvc32.exe C:ProgrammerFælles filerBullGuardBullGuard Communicatorxcommsvr.exe C:ProgrammerFælles filerBullGuardBullGuard Scan Serverdss.exe C:ProgrammerWindows Media Playerwmplayer.exe C:ProgrammerMUSICMATCHMUSICMATCH JukeboxMMJB.EXE C:ProgrammerMUSICMATCHMUSICMATCH JukeboxMMDiag.exe C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmm_director.exe C:ProgrammerInternet Exploreriexplore.exe C:Documents and SettingsCamilla ChristensenSkrivebordhijackthisHijackThis.exe C:ProgrammerRealRealPlayerRealPlay.exe C:ProgrammerRealRealPlayerRealPlay.exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.msn.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://runonce.msn.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.tdconline.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks R3 - URLSearchHook: PerfectNavBHO Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:PROGRA~1PERFEC~1BHOPERFEC~1.DLL O2 - BHO: (no name) - {00041A26-7033-432C-94C7-6371DE343822} - (no file) O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:PROGRA~1PERFEC~1BHOPERFEC~1.DLL O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:ProgrammerMyWaymyBar2.binMYBAR.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmergooglegoogletoolbar1.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:ProgrammerMyWaymyBar2.binMYBAR.DLL O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN Toolbar1.01.1629.0damsntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmergooglegoogletoolbar1.dll O4 - HKLM..Run: [SiSUSBRG] C:WINDOWSSiSUSBrg.exe O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe O4 - HKLM..Run: [CapFax] C:ProgrammerClassic PhoneToolsCapFax.EXE O4 - HKLM..Run: [Microsoft Works Portfolio] C:ProgrammerMicrosoft WorksWksSb.exe /AllUsers O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM..Run: [SynTPLpr] C:ProgrammerSynapticsSynTPSynTPLpr.exe O4 - HKLM..Run: [SynTPEnh] C:ProgrammerSynapticsSynTPSynTPEnh.exe O4 - HKLM..Run: [MMTray] C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmm_tray.exe O4 - HKLM..Run: [mmtask] C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmmtask.exe O4 - HKLM..Run: [Sexy_dk] C:Program FilesGMSoftDialersSexy_dkSexy_dk.exe /dontdial O4 - HKLM..Run: [TkBellExe] "C:ProgrammerFælles filerRealUpdate_OB ealsched.exe" -osboot O4 - HKLM..Run: [KAZAA] C:ProgrammerKazaakazaa.exe /SYSTRAY O4 - HKLM..Run: [updmgr] C:ProgrammerCommon filesupdmgrupdmgr.exe O4 - HKLM..Run: [AltnetPointsManager] c:program filesaltnetpoints managerpoints manager.exe -s O4 - HKLM..Run: [CMESys] "C:ProgrammerFælles filerCMEIICMESys.exe" O4 - HKLM..Run: [BDMCon] C:ProgrammerBullGuard\bdmcon.exe O4 - HKLM..Run: [BGNewsAgent] C:ProgrammerBullGuardgnewsag.exe O4 - HKCU..Run: [Microsoft Works Update Detection] C:ProgrammerMicrosoft WorksWkDetect.exe O4 - HKCU..Run: [MsnMsgr] "C:ProgrammerMSN MessengerMsnMsgr.Exe" /background O4 - Startup: EzButton System.lnk = C:ProgrammerEzButton System V2.1EzButton.exe O4 - Global Startup: GStartup.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOffice10OSA.EXE O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present O8 - Extra context menu item: &Google Search - res://c:programmergoogleGoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward &Links - res://c:programmergoogleGoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:programmergoogleGoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000 O8 - Extra context menu item: Si&milar Pages - res://c:programmergoogleGoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:programmergoogleGoogleToolbar1.dll/cmtrans.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengerMSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengerMSMSGS.EXE O14 - IERESET.INF: START_PAGE_URL=http://www.tdconline.dk[...] O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) - O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com[...] O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com[...] O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net[...]
--

#1
Zimes
Monster Supporter
10-07-2004 23:36

Rapporter til Admin

Hvornår kommer det forum kun for HJT logs? Synes der har været en røvfuld af dem i dag... Du skal i hvert fald af med de "MyWaymyBar" entries...
--
Er ovenstående indlæg dårligt eller på anden måde elendigt, tryk da Ctrl+W (6F)

#2
Mighty_nOOb
Gigabruger
10-07-2004 23:40

Rapporter til Admin

#1 Kunne du ikke oprette tråd om det istedet for at bugge mig med dine meninger om hvordan et HW forum skal køre. Men jeg skaffer mig af med dem så
--

#3
Knutz
Nørd Aspirant
10-07-2004 23:54

Rapporter til Admin

#2 skal lige have hele loggen... copy/paste det resterende ind!
--
Jahh.. Så kan du lære det! MSN: [email protected]

#4
Zimes
Monster Supporter
11-07-2004 00:07

Rapporter til Admin

#2 Tro mig, der har været mange tråde om det... Hvorfor mangler alle den sidste bid af loggen i dag? For at gøre det lidt nemmere, så søg i teksten og erstat alle \ med \\ for så fanger hol den også...
--
Er ovenstående indlæg dårligt eller på anden måde elendigt, tryk da Ctrl+W (6F)

#5
Mighty_noob
Gæst
11-07-2004 00:23

Rapporter til Admin

Ny log så.. *:-) Logfile of HijackThis v1.98.0 Scan saved at 00:20:18, on 11-07-2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSExplorer.EXE C:WINDOWSSOUNDMAN.EXE C:ProgrammerClassic PhoneToolsCapFax.EXE C:ProgrammerMicrosoft WorksWksSb.exe C:WINDOWSSystem32RUNDLL32.EXE C:ProgrammerSynapticsSynTPSynTPLpr.exe C:ProgrammerSynapticsSynTPSynTPEnh.exe C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmm_tray.exe C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmmtask.exe C:ProgrammerFælles filerRealUpdate_OB ealsched.exe C:ProgrammerCommon filesupdmgrupdmgr.exe C:ProgrammerFælles filerCMEIICMESys.exe C:ProgrammerBullGuardgnewsag.exe C:ProgrammerFælles filerGMTGMT.exe C:ProgrammerEzButton System V2.1EzButton.exe C:PROGRA~2AltnetDOWNLO~1asm.exe C:WINDOWSSystem32P2P NetworkingP2P Networking.exe C:ProgrammerFælles filerMicrosoft SharedVS7Debugmdm.exe C:WINDOWSSystem32 vsvc32.exe C:ProgrammerFælles filerBullGuardBullGuard Communicatorxcommsvr.exe C:ProgrammerFælles filerBullGuardBullGuard Scan Serverdss.exe C:ProgrammerWindows Media Playerwmplayer.exe C:ProgrammerMUSICMATCHMUSICMATCH JukeboxMMJB.EXE C:ProgrammerMUSICMATCHMUSICMATCH JukeboxMMDiag.exe C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmm_director.exe C:ProgrammerInternet Exploreriexplore.exe C:Documents and SettingsCamilla ChristensenSkrivebordhijackthisHijackThis.exe R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.msn.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://runonce.msn.com[...] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.tdconline.dk[...] R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks R3 - URLSearchHook: PerfectNavBHO Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:PROGRA~1PERFEC~1BHOPERFEC~1.DLL O2 - BHO: (no name) - {00041A26-7033-432C-94C7-6371DE343822} - (no file) O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:PROGRA~1PERFEC~1BHOPERFEC~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmergooglegoogletoolbar1.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:ProgrammerMyWaymyBar2.binMYBAR.DLL O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammerMSN Toolbar1.01.1629.0damsntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmergooglegoogletoolbar1.dll O4 - HKLM..Run: [SiSUSBRG] C:WINDOWSSiSUSBrg.exe O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe O4 - HKLM..Run: [Microsoft Works Portfolio] C:ProgrammerMicrosoft WorksWksSb.exe /AllUsers O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM..Run: [SynTPLpr] C:ProgrammerSynapticsSynTPSynTPLpr.exe O4 - HKLM..Run: [SynTPEnh] C:ProgrammerSynapticsSynTPSynTPEnh.exe O4 - HKLM..Run: [MMTray] C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmm_tray.exe O4 - HKLM..Run: [mmtask] C:ProgrammerMUSICMATCHMUSICMATCH Jukeboxmmtask.exe O4 - HKLM..Run: [TkBellExe] "C:ProgrammerFælles filerRealUpdate_OB ealsched.exe" -osboot O4 - HKLM..Run: [KAZAA] C:ProgrammerKazaakazaa.exe /SYSTRAY O4 - HKLM..Run: [updmgr] C:ProgrammerCommon filesupdmgrupdmgr.exe O4 - HKLM..Run: [AltnetPointsManager] c:program filesaltnetpoints managerpoints manager.exe -s O4 - HKLM..Run: [CMESys] "C:ProgrammerFælles filerCMEIICMESys.exe" O4 - HKLM..Run: [BGNewsAgent] C:ProgrammerBullGuardgnewsag.exe O4 - HKCU..Run: [MsnMsgr] "C:ProgrammerMSN MessengerMsnMsgr.Exe" /background O4 - Startup: EzButton System.lnk = C:ProgrammerEzButton System V2.1EzButton.exe O4 - Global Startup: GStartup.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:ProgrammerMicrosoft OfficeOffice10OSA.EXE O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present O8 - Extra context menu item: &Google Search - res://c:programmergoogleGoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward &Links - res://c:programmergoogleGoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:programmergoogleGoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000 O8 - Extra context menu item: Si&milar Pages - res://c:programmergoogleGoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:programmergoogleGoogleToolbar1.dll/cmtrans.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengerMSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengerMSMSGS.EXE O14 - IERESET.INF: START_PAGE_URL=http://www.tdconline.dk[...] O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) - O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com[...]
--
Gæstebruger, opret dit eget login og få din egen signatur.

#6
Jakob_buchholtz
Semi Supporter
11-07-2004 00:28

Rapporter til Admin