Hey gutter,
Min computer kommer op med mærkelige alerts om der er virus, og andet på, og jeg skal downloade nogen programmer fra nettet. sådan nogen reklamer tror jeg.
Den er osse blevet langsom, især mit internet.
Jeg scannede og fik dette :
Logfile of HijackThis v1.99.1
Scan saved at 15:31:29, on 14-08-2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32ibmpmsvc.exe
C:ProgrammerThinkPadUtilitiesTpKmapMn.exe
C:ProgrammerThinkPadUtilitiesTpKmapMn.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
C:WINDOWSExplorer.EXE
C:ProgrammerFælles filerSymantec SharedSNDSrvc.exe
C:ProgrammerFælles filerSymantec SharedSPBBCSPBBCSvc.exe
C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
C:ProgrammerSynapticsSynTPSynTPLpr.exe
C:ProgrammerSynapticsSynTPSynTPEnh.exe
C:PROGRA~1ThinkPadPkgMgrHOTKEYTPHKMGR.exe
C:ProgrammerThinkPadUtilitiesTpKmapMn.exe
C:ProgrammerThinkPadPkgMgrHOTKEYTPONSCR.exe
C:ProgrammerThinkPadPkgMgrHOTKEY_1TpScrex.exe
C:ProgrammerThinkPadConnectUtilitiesQCWLICON.EXE
C:PROGRA~1ThinkPadUTILIT~1EzEjMnAp.Exe
C:WINDOWSAGRSMMSG.exe
C:ProgrammerIBMMessages By IBMibmmessages.exe
C:WINDOWSsystem32dla fswctrl.exe
C:PROGRA~1ThinkPadCONNEC~1QCTray.exe
C:ProgrammerFælles filerSymantec SharedccApp.exe
C:ProgrammerMessengermsmsgs.exe
C:WINDOWSsystem32spoolsv.exe
C:ProgrammerMSN MessengerMsnMsgr.Exe
C:WINDOWSSystem32Ati2evxx.exe
C:ProgrammerFælles filerMicrosoft SharedVS7DEBUGMDM.EXE
C:ProgrammerNorton AntiVirus
avapsvc.exe
C:ProgrammerNorton AntiVirusIWPNPFMntor.exe
C:WINDOWSSystem32QCONSVC.EXE
C:ProgrammerFælles filerSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32cmd.exe
C:WINDOWSSystem32svchost.exe
C:Documents and SettingsPetar StankovskiSkrivebordNy mappemwavscan.com
C:Documents and SettingsPetar StankovskiSkrivebordNy mappekavss.exe
C:ProgrammerInternet Exploreriexplore.exe
C:Documents and SettingsPetar StankovskiSkrivebordHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://www.google.dk[...]
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammerAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:WINDOWSsystem32dla fswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammerNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammerNorton AntiVirusNavShExt.dll
O4 - HKLM..Run: [S3TRAY2] S3Tray2.exe
O4 - HKLM..Run: [SynTPLpr] C:ProgrammerSynapticsSynTPSynTPLpr.exe
O4 - HKLM..Run: [SynTPEnh] C:ProgrammerSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM..Run: [TPHOTKEY] C:PROGRA~1ThinkPadPkgMgrHOTKEYTPHKMGR.exe
O4 - HKLM..Run: [BMMLREF] C:ProgrammerThinkPadUtilitiesBMMLREF.EXE
O4 - HKLM..Run: [TPKMAPMN] C:ProgrammerThinkPadUtilitiesTpKmapMn.exe
O4 - HKLM..Run: [TP4EX] tp4ex.exe
O4 - HKLM..Run: [QCWLICON] C:ProgrammerThinkPadConnectUtilitiesQCWLICON.EXE
O4 - HKLM..Run: [EZEJMNAP] C:PROGRA~1ThinkPadUTILIT~1EzEjMnAp.Exe
O4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM..Run: [ATIPTA] C:ProgrammerATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [ibmmessages] C:ProgrammerIBMMessages By IBMibmmessages.exe
O4 - HKLM..Run: [StorageGuard] "c:ProgrammerVERITAS SoftwareUpdate Managersgtray.exe" /r
O4 - HKLM..Run: [dla] C:WINDOWSsystem32dla fswctrl.exe
O4 - HKLM..Run: [QCTray] C:PROGRA~1ThinkPadCONNEC~1QCTray.exe
O4 - HKLM..Run: [File System] taskmqr.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammerFælles filerSymantec SharedccApp.exe"
O4 - HKLM..Run: [SSC_UserPrompt] C:ProgrammerFælles filerSymantec SharedSecurity CenterUsrPrmpt.exe
O4 - HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe /Consumer
O4 - HKLM..RunServices: [File System] taskmqr.exe
O4 - HKCU..Run: [ibmmessages] C:ProgrammerIBMMessages By IBMibmmessages.exe
O4 - HKCU..Run: [MSMSGS] "C:ProgrammerMessengermsmsgs.exe" /background
O4 - HKCU..Run: [File System] taskmqr.exe
O4 - HKCU..Run: [MsnMsgr] "C:ProgrammerMSN MessengerMsnMsgr.Exe" /background
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengerMSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammerMessengerMSMSGS.EXE
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com[...]
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com[...]
O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedccSetMgr.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:WINDOWSSystem32ibmpmsvc.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:ProgrammerNorton AntiVirus
avapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:ProgrammerNorton AntiVirusIWPNPFMntor.exe
O23 - Service: QCONSVC - Unknown owner - C:WINDOWSSystem32QCONSVC.EXE
O23 - Service: SAVScan - Symantec Corporation - C:ProgrammerNorton AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:PROGRA~1FÆLLES~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Win32 Driver (shit) - Unknown owner - C:WINDOWSSystem32svchosts.exe" -netsvcs (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedSNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedSPBBCSPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:ProgrammerFælles filerSymantec SharedCCPD-LCsymlcsvc.exe
håber i kan hjælpe..
--