Hijack this logg?? vad är fel??|Felsökning|Forum|Nordichardware

   

Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Lost password?
The forums are currently locked and only available for read only access
sp_Feed sp_TopicIcon
Hijack this logg?? vad är fel??
callawayno1
Nu vet jag hur man gör inlägg!
Medlem
Forum Posts: 21
Member Since:
December 20, 2004
sp_UserOfflineSmall Offline
1
March 19, 2005 - 8:54 pm
sp_Permalink sp_Print

Logfile of HijackThis v1.99.1
Scan saved at 21:53:16, on 2005-03-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:ProgramDelade filerSymantec SharedccProxy.exe
C:ProgramDelade filerSymantec SharedccSetMgr.exe
C:ProgramNorton Internet SecurityNorton AntiVirusnavapsvc.exe
C:WINDOWSsystem32nvsvc32.exe
C:ProgramDelade filerSymantec SharedSNDSrvc.exe
C:ProgramDelade filerSymantec SharedccEvtMgr.exe
C:ProgramDelade filerSymantec SharedSecurity CenterSymWSC.exe
C:ProgramNorton Internet SecurityNorton AntiVirusSAVScan.exe
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32WF2K.EXE
C:ProgramDelade filerSymantec SharedccApp.exe
C:ProgramHotkeyHotkey.exe
C:ProgramMSN AppsUpdater1.02.3000.1001svmsnappau.exe
C:WINDOWSSOUNDMAN.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:ProgramD-Toolsdaemon.exe
C:ProgramQuickTimeqttask.exe
C:WINDOWSsystem32rundll32.exe
C:ProgramDelade filerRealUpdate_OBevntsvc.exe
C:ProgramMessengerPlus! 3MsgPlus.exe
C:WINDOWSddthc.exe
C:ProgramMessengerDiscoveryMessengerDiscovery.exe
C:ProgramCOMMON~1rzqrrzqrm.exe
C:ProgramWayTechColorealColoreal BrightColoreal Bright.exe
C:ProgramInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesinterMuteSpySubtractSpySub.exe
C:ProgramCOMMON~1rzqrrzqra.exe
C:ProgramCOMMON~1rzqrrzqrl.exe
C:ProgramMSN Messengermsnmsgr.exe
C:ProgramInternet Exploreriexplore.exe
C:DOCUME~1CALLAW~1LOKALA~1TempRar$EX15.891HijackThis.exe
C:ProgramMessengermsmsgs.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.zatzy.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Länkar
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgramAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:ProgramMSN AppsST1.02.3000.1002en-xustmain.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:ProgramDelade filerSymantec SharedAdBlockingNISShExt.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgramMSN AppsMSN Toolbar1.02.3000.1001svmsntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgramNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:ProgramDelade filerSymantec SharedAdBlockingNISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgramNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgramMSN AppsMSN Toolbar1.02.3000.1001svmsntb.dll
O4 - HKLM..Run: [WCOLOREAL] C:ProgramWayTechColorealcoloreal.exe
O4 - HKLM..Run: [Coloreal Hint] C:ProgramWayTechColorealColoreal BrightColoreal Hint.exe
O4 - HKLM..Run: [WinFoxV2] C:WINDOWSSystem32WF2K.EXE Initial
O4 - HKLM..Run: [WinFast2KLoadDefault] rundll32.exe wf2kcpl.dll,DllLoadDefaultSettings
O4 - HKLM..Run: [ManualRun] "D:AUTORUNAutoRun"
O4 - HKLM..Run: [ccApp] "C:ProgramDelade filerSymantec SharedccApp.exe"
O4 - HKLM..Run: [URLLSTCK.exe] C:ProgramNorton Internet SecurityUrlLstCk.exe
O4 - HKLM..Run: [Hotkey] C:ProgramHotkeyHotkey.exe
O4 - HKLM..Run: [msnappau] "C:ProgramMSN AppsUpdater1.02.3000.1001svmsnappau.exe"
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgramD-Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [QuickTime Task] "C:ProgramQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Symantec NetDriver Monitor] C:ProgramSYMNET~1SNDMon.exe
O4 - HKLM..Run: [TkBellExe] C:ProgramDelade filerRealUpdate_OBevntsvc.exe -osboot
O4 - HKLM..Run: [MessengerPlus3] "C:ProgramMessengerPlus! 3MsgPlus.exe"
O4 - HKLM..Run: [YdMb] C:WINDOWSddthc.exe
O4 - HKLM..Run: [Power Scan] C:ProgramPower Scanpowerscan.exe
O4 - HKLM..Run: [<°‡@¡±§Tlçÿ[Ì…*9ÀÌC:ProgramISTsvcistsvc.exe] C:WINDOWSddthc.exe
O4 - HKCU..Run: [MessengerDiscovery] C:ProgramMessengerDiscoveryMessengerDiscovery.exe
O4 - HKCU..Run: [MessengerPlus3] "C:ProgramMessengerPlus! 3MsgPlus.exe" /WinStart
O4 - HKCU..Run: [rzqr] C:ProgramCOMMON~1rzqrrzqrm.exe
O4 - HKCU..Run: [msnmsgr] "C:ProgramMSN Messengermsnmsgr.exe" /background
O4 - Global Startup: Coloreal Bright.lnk = ?
O4 - Global Startup: Coloreal Hint.lnk = ?
O4 - Global Startup: Coloreal Visual.lnk = C:ProgramWayTechColorealColoreal VisualColorealVisual.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:ProgramInterVideoCommonBinWinCinemaMgr.exe
O4 - Global Startup: SpySubtract.lnk = C:Program FilesinterMuteSpySubtractSpySub.exe
O8 - Extra context menu item: Use as &Display Picture - C:ProgramIEDP2IEDP.htm
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:ProgramladbrokesMPPMPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramMessengermsmsgs.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:ProgramDelade filerSymantec SharedccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:ProgramNorton Internet SecurityNorton AntiVirusnavapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:ProgramNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:ProgramDELADE~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:ProgramDelade filerSymantec SharedSNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:ProgramDelade filerSymantec SharedSecurity CenterSymWSC.exe

Avatar
BloodMan
Member
Medlem
Forum Posts: 5990
Member Since:
May 21, 2002
sp_UserOfflineSmall Offline
861629
March 19, 2005 - 9:49 pm
sp_Permalink sp_Print

inget konstigt serj ag, bara att du har en jävla massa program installerade.

tiggre
Kommer du hit ofta?
Medlem
Forum Posts: 739
Member Since:
February 21, 2003
sp_UserOfflineSmall Offline
861711
March 20, 2005 - 4:50 am
sp_Permalink sp_Print

reagerade på "WF2K.EXE", men är ju ditt leadtek graffe bara

"C:WINDOWSddthc.exe", vad är det för app?

likaså "C:ProgramCOMMON~1rzqrrzqrm.exe" "rzqra.exe" "rzqrl.exe"

sök efter dem i ditt registry och se om du kan binda dem till nån app, använd processexplorer för att se om de har några kopplingar etc...

P5E64 WS EVOLUTION | INTEL Q9650 CORE2QUAD@3000 | 8 GB | CLUB 3D 4870X2 | 2xSamsung SM 2493HM 24""@1900x1280 | Windows 7 Ultimate 64

Forum Timezone: Europe/Stockholm
Most Users Ever Online: 1030
Currently Online:
Guest(s) 47
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Andreas Galistel: 16287
Jonas Klar: 15897
ilg@dd: 10810
Nyhet: 10607
Mind: 10550
Ctrl: 10355
Gueno: 9881
Guest: 9344
Snorch: 8881
Callister: 8468
Newest Members:
PetrbonFU PetrbonFU
Karine Bembry
Dolores Mcdaniels
Anibal McLeish
Francisca Alt
Alfie Everhart
Lester Huitt
Orlando Jorgensen
Mikki Lundgren
Dakota Kozlowski
Forum Stats:
Groups: 11
Forums: 59
Topics: 146630
Posts: 1300967

 

Member Stats:
Guest Posters: 2
Members: 79425
Moderators: 0
Admins: 11
Administrators: nordicadmin, Henrik Berntsson, Anton Karmehed, Carl Holmberg, Joel Oscarsson, Mikael Linnér, Mikael Schwartz, Andreas Paulsson, Nickebjrk, Mattias Pettersson, EmxL