Treg PC - sjekk min HiJack logg

[Bitesizedmoose]

Min PC har blitt veldig treg i det siste.

 

Har kjørt Spybot flere ganger og får ca 13 problemer opp hver gang.

Tipper det er de samme hver gang, men er ikke sikker (husker ikke helt).

Etter bare en dag er de tilbake selv om jeg har trykket Immunize.

 

Kan noen være så vennlig å sjekke min HijackThis logg?

 

Takk!

 

Edit: Legger også ved screenshot av de problemene Spybot finner.

 

 

Loggen er her:

Skjult tekst: (Marker innholdet i feltet for å se teksten):

Logfile of HijackThis v1.99.0

Scan saved at 19:32:19, on 20.05.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe

C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe

C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe

C:\WINDOWS\system32\WgaTray.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe

C:\Program Files\Azureus\Azureus.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Common Files\Symantec Shared\NMain.exe

C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

C:\Program Files\WinRAR\WinRAR.exe

C:\DOCUME~1\Thomas\LOCALS~1\Temp\Rar$EX00.235\HijackThis.exe

 

O2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - C:\WINDOWS\system32\HDBHO.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [RegRun WinBait] C:\WINDOWS\winbait.exe

O4 - HKLM\..\Run: [@RegRunOnSecure] C:\PROGRA~1\REGRUN~1\OnSecure.exe

O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz

O4 - HKCU\..\Run: [Regrun2] C:\PROGRA~1\REGRUN~1\WatchDog.exe

O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {1AFE7596-D8FF-11D5-BFEA-00D0093BEE8D} (PreventiviRicambi.PiaggioPreventivi) - http://importer.dealerarea.piaggio.com/ric...oPreventivi.CAB

O16 - DPF: {BD5ADD6F-D9EF-11D5-BFEE-00D0093BEE8D} (Salvataggio.PiaggioPreventivi) - http://importer.dealerarea.piaggio.com/ric...salvataggio.CAB

O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} - http://download.redswoosh.net/Installer/113/rssoft.cab

O21 - SSODL: System - {88E4BF22-ADCD-4687-9A5C-B30A534C6264} - (no file)

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: InstallDriver Table Manager - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: InCD Helper - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Norton AntiVirus Auto-Protect Service - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton AntiVirus Firewall Monitor Service - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe

O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE

O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe

O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

 

Endret 20. mai 2006 av Cool'n'jazzy

[Jubelsau]

Fix disse i HJT:

 

O16 - DPF: {1AFE7596-D8FF-11D5-BFEA-00D0093BEE8D} (PreventiviRicambi.PiaggioPreventivi) - http://importer.dealerarea.piaggio.com/ric...oPreventivi.CAB

 

O16 - DPF: {BD5ADD6F-D9EF-11D5-BFEE-00D0093BEE8D} (Salvataggio.PiaggioPreventivi) - http://importer.dealerarea.piaggio.com/ric...salvataggio.CAB

 

O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} - http://download.redswoosh.net/Installer/113/rssoft.cab

 

O21 - SSODL: System - {88E4BF22-ADCD-4687-9A5C-B30A534C6264} - (no file)

[Bitesizedmoose]

Fix disse i HJT:

 

O16 - DPF: {1AFE7596-D8FF-11D5-BFEA-00D0093BEE8D} (PreventiviRicambi.PiaggioPreventivi) - http://importer.dealerarea.piaggio.com/ric...oPreventivi.CAB

 

O16 - DPF: {BD5ADD6F-D9EF-11D5-BFEE-00D0093BEE8D} (Salvataggio.PiaggioPreventivi) - http://importer.dealerarea.piaggio.com/ric...salvataggio.CAB

 

 

Hvorfor skal disse to slettes?

Tror ikke det er noe skadelig. Jeg vet ikke akkurat hva de filene er, men jeg vet de har noe å gjøre med en Piaggio-nettside (scootere) som jeg bruker jevnlig i jobb-sammenheng.

 

Ellers takk.

Hva er forøvrig de to andre sakene du vil jeg skal slette (bare nysjerrig).

[skylinepower]

slik jeg føltedet når jeg scanet var at de jeg fann var også på mappen programfiler i Hoved dicsken

[zjulik]

Litt usikker på om du egentlig har noe veldig skadelig på maskinen din. Kanskje er det bare cookies. Ikke lett å si, men mitt tips er følgende:

1. Rens grundig med CCleaner, og gjør det igjen minst annenhver dag. Link i min signatur.

2. Last ned og immuniser med Spywareblaster:

http://www.javacoolsoftware.com/spywareblaster.html

Denne må du oppdatere manuelt en gang i måneden ca.

Endret 21. mai 2006 av zjulik

[Bitesizedmoose]

Hjalp en del å defragmentere harddisen også, hadde glemt å gjøre det på en stund så det var nok på tide det ja.

 

Edit: Selv om det nok også hjalp å kjøre CCleaner og et par andre ting.

Endret 24. mai 2006 av Cool'n'jazzy