--- title: "Virus?" type: "forum-thread" url: "https://www.webforum.nu/amne/program-appar/155342-virus" topic: "Program & appar" topic_url: "https://www.webforum.nu/amne/program-appar" author: "septor" published: "2006-12-28T13:21:21.000Z" updated: "2006-12-29T22:19:17.000Z" replies: 3 views: 705 page: 1 pages: 1 language: "sv-SE" site: "webForum — webforum.nu" rights: "Upphovsrätten till varje inlägg tillhör dess författare." attribution: "Citera som: webForum, https://www.webforum.nu/amne/program-appar/155342-virus" --- # Virus? ## #1 — septor, 2006-12-28T13:21Z Datorn uppför sig extremt konstigt, någon som ser något i loggen nedan som inte borde vara där? Logfile of HijackThis v1.99.1 Scan saved at 14:17:32, on 2006-12-28 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\\WINDOWS\\System32\\smss.exe C:\\WINDOWS\\SYSTEM32\\winlogon.exe C:\\WINDOWS\\system32\\services.exe C:\\WINDOWS\\system32\\lsass.exe C:\\WINDOWS\\system32\\Ati2evxx.exe C:\\WINDOWS\\system32\\svchost.exe C:\\WINDOWS\\System32\\svchost.exe C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe C:\\WINDOWS\\system32\\spoolsv.exe C:\\WINDOWS\\SYSTEM32\\Ati2evxx.exe C:\\Program Files\\Bluetooth\\Bluetooth-programvara\\bin\\btwdins.exe C:\\WINDOWS\\Explorer.EXE C:\\WINDOWS\\System32\\inetsrv\\inetinfo.exe C:\\mysql\\bin\\mysqld-nt.exe C:\\Program Files\\Eset\\nod32krn.exe C:\\WINDOWS\\system32\\oodag.exe C:\\WINDOWS\\System32\\snmp.exe C:\\WINDOWS\\System32\\svchost.exe C:\\PROGRA\~1\\Logitech\\iTouch\\iTouch.exe C:\\WINDOWS\\SOUNDMAN.EXE C:\\Program Files\\MSI\\Live Update 3\\LMonitor.exe C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe C:\\Program Files\\ATI Technologies\\ATI HYDRAVISION\\HydraDM.exe C:\\Program Files\\ATI Technologies\\ATI HYDRAVISION\\HydraMD.exe C:\\Program Files\\NETGEAR\\SC101 Manager Utility\\ZeteraService.exe C:\\Program Files\\Eset\\nod32kui.exe C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe C:\\WINDOWS\\system32\\ctfmon.exe C:\\Program Files\\Common Files\\Ahead\\lib\\NMBgMonitor.exe C:\\Program Files\\TuneUp Utilities 2006\\MemOptimizer.exe C:\\Program Files\\Intuwave Ltd\\Shared\\mRouterRunTime\\mRouterConfig.exe C:\\Program Files\\Motorola\\Motorola Desktop Suite\\DesktopSuite.exe C:\\Program Files\\Common Files\\Ahead\\Lib\\NMIndexStoreSvr.exe C:\\Program Files\\MSI\\PC Alert 4\\PCAlert4.exe C:\\PROGRA\~1\\INTUWA\~1\\Shared\\MROUTE\~1\\mRouterRuntime.exe C:\\PROGRA\~1\\Symbian\\Shared\\SYMBIA\~1\\SYMBIA\~1.EXE C:\\Program Files\\Eset\\nod32.exe C:\\PROGRA\~1\\Symbian\\Shared\\SYMBIA\~1\\SCBAL.exe C:\\WINDOWS\\System32\\svchost.exe C:\\Program Files\\Internet Explorer\\iexplore.exe C:\\Program Files\\TuneUp Utilities 2006\\SystemOptimizer.exe C:\\Documents and Settings\\Andreas\\Desktop\\Spy Progz\\hijackthis\\HijackThis.exe R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Bar = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll O2 - BHO: LightFrame3IECOM - {43D29D14-460E-4F3A-9037-E60F11EF12F0} - C:\\WINDOWS\\system32\\LightFrame3IECOM.dll O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\\Program Files\\Desktop Sidebar\\sbhelp.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\\PROGRA\~1\\SPYBOT\~1\\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKLM\\..\\Run: \[zBrowser Launcher\] C:\\PROGRA\~1\\Logitech\\iTouch\\iTouch.exe O4 - HKLM\\..\\Run: \[SoundMan\] SOUNDMAN.EXE O4 - HKLM\\..\\Run: \[LiveMonitor\] C:\\Program Files\\MSI\\Live Update 3\\LMonitor.exe O4 - HKLM\\..\\Run: \[SunJavaUpdateSched\] C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe O4 - HKLM\\..\\Run: \[HydraVisionDesktopManager\] C:\\Program Files\\ATI Technologies\\ATI HYDRAVISION\\HydraDM.exe O4 - HKLM\\..\\Run: \[HydraVisionViewport\] C:\\Program Files\\ATI Technologies\\ATI HYDRAVISION\\HydraMD.exe O4 - HKLM\\..\\Run: \[NeroFilterCheck\] C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe O4 - HKLM\\..\\Run: \[PC Suite for Smartphones\] "C:\\Program Files\\Sony Ericsson\\Mobile4\\Application Launcher\\Application Launcher.exe" /startoptions O4 - HKLM\\..\\Run: \[nod32kui\] "C:\\Program Files\\Eset\\nod32kui.exe" /WAITSERVICE O4 - HKLM\\..\\Run: \[Zone Labs Client\] "C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe" O4 - HKCU\\..\\Run: \[CTFMON.EXE\] C:\\WINDOWS\\system32\\ctfmon.exe O4 - HKCU\\..\\Run: \[BgMonitor\_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}\] "C:\\Program Files\\Common Files\\Ahead\\lib\\NMBgMonitor.exe" O4 - HKCU\\..\\Run: \[TuneUp MemOptimizer\] "C:\\Program Files\\TuneUp Utilities 2006\\MemOptimizer.exe" autostart O4 - Global Startup: Adobe Gamma Loader.lnk = C:\\Program Files\\Common Files\\Adobe\\Calibration\\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\\Program Files\\Microsoft Office\\Office10\\OSA.EXE O4 - Global Startup: Motorola Desktop Suite mRouter Config.lnk = C:\\Program Files\\Intuwave Ltd\\Shared\\mRouterRunTime\\mRouterConfig.exe O4 - Global Startup: Motorola Desktop Suite.lnk = C:\\Program Files\\Motorola\\Motorola Desktop Suite\\DesktopSuite.exe O4 - Global Startup: PC Alert 4.lnk = C:\\Program Files\\MSI\\PC Alert 4\\PCAlert4.exe O8 - Extra context menu item: Download All by FlashGet - C:\\Program Files\\FlashGet\\jc_all.htm O8 - Extra context menu item: Download using FlashGet - C:\\Program Files\\FlashGet\\jc_link.htm O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\\PROGRA\~1\\MICROS\~2\\Office10\\EXCEL.EXE/3000 O8 - Extra context menu item: Open Client to monitor &1 - C:\\WINDOWS\\web\\AOpenClient.htm O8 - Extra context menu item: Open Client to monitor &2 - C:\\WINDOWS\\web\\AOpenClient.htm O8 - Extra context menu item: Skicka till &Bluetooth - C:\\Program Files\\Bluetooth\\Bluetooth-programvara\\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\\Program Files\\Desktop Sidebar\\sbhelp.dll O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\\Program Files\\Desktop Sidebar\\sbhelp.dll O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\\Program Files\\UnibetpokerMPP\\MPPoker.exe O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\\Program Files\\Bluetooth\\Bluetooth-programvara\\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\\Program Files\\Bluetooth\\Bluetooth-programvara\\btsendto_ie.htm O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\\PROGRA\~1\\FlashGet\\flashget.exe (file missing) O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\\PROGRA\~1\\FlashGet\\flashget.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe O15 - Trusted Zone: O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\\PROGRA\~1\\MSNMES\~1\\msgrapp.dll" (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\\WINDOWS\\system32\\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\\WINDOWS\\system32\\ati2sgag.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\\Program Files\\Bluetooth\\Bluetooth-programvara\\bin\\btwdins.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Common Files\\InstallShield\\Driver\\11\\Intel 32\\IDriverT.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\\Program Files\\Common Files\\Macromedia Shared\\Service\\Macromedia Licensing.exe O23 - Service: MySql - Unknown owner - C:/mysql/bin/mysqld-nt.exe O23 - Service: NBService - Nero AG - C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\NBService.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\\Program Files\\Eset\\nod32krn.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\\WINDOWS\\system32\\oodag.exe O23 - Service: Workstation NetLogon Service (O?’ŽrtñåȲ$Ó) - Unknown owner - C:\\WINDOWS\\mshm.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe O23 - Service: Zetera - Zetera Corporation - C:\\Program Files\\NETGEAR\\SC101 Manager Utility\\ZeteraService.exe Permalänk: https://www.webforum.nu/p/155342 ## #2 — septor, 2006-12-29T21:03Z Märkte nu att det inte går att uppdatera något virus/spyware program som jag har installerat + att när jag scannar så rör sig aldrig procenten :( Permalänk: https://www.webforum.nu/p/1916647 ## #3 — Lasp, 2006-12-29T21:22Z Du verkar ha en del OnLine igång. Måste du ha det? Om det inte får kontakt så blir det ju delay väntan. Rensa bland de autostartande tjänsterna. Permalänk: https://www.webforum.nu/p/1916650 ## #4 — septor, 2006-12-29T22:19Z Lite osäker bara på vad som jag kan ta bort, tex under C:\\WINDOWS\\system32\\ Men jag ska testa att ta bort en del av det som jag iaf vet vad det är. Permalänk: https://www.webforum.nu/p/1916665 --- Tråden på webben: https://www.webforum.nu/amne/program-appar/155342-virus