Please help with "HijackThis" Log

tidi · #1 2. juli 2009, 13:46

Jeg har ingen anelse om, hvordan du læser dette kan nogen behage hjælp mig venligst, noget forkert her?

Logfile af Trend Micro HijackThis v2.0.2
Scan gemt kl 07:57:12 pm, den 23/06/2009
Boot mode: Normal

Kørende processer:
C: \ Program Files (x86) \ Ares \ Ares.exe
C: \ Program Files (x86) \ HP \ Digital Imaging \ bin \ hpqtra08.exe
C: \ Program Files (x86) \ HP \ QuickPlay \ QPService.exe
C: \ Program Files (x86) \ Hewlett-Packard \ HP Quick Launch Buttons \ QLBCTRL.exe
C: \ Program Files (x86) \ HP \ HP Software Update \ hpwuSchd2.exe
C: \ Program Files (x86) \ Hewlett-Packard \ HP Wireless Assistant \ HPWAMain.exe
C: \ Program Files (x86) \ Hewlett-Packard \ HP Wireless Assistant \ WiFiMsg.exe
C: \ Program Files (x86) \ Daemon Tools \ daemon.exe
C: \ Program Files (x86) \ Common Files \ Real \ Update_OB \ realsched.exe
C: \ Program Files (x86) \ Kiwee Toolbar \ 2.8.167 \ kwtbaim.exe
C: \ Program Files (x86) \ Lavasoft \ Ad-Aware \ AAWTray.exe
C: \ Program Files (x86) \ Common Files \ Research In Motion \ Auto Update \ RIMAutoUpdate.exe
C: \ Program Files (x86) \ Java \ jre6 \ bin \ jusched.exe
C: \ Program Files (x86) \ iTunes \ iTunesHelper.exe
C: \ Programmer \ Alwil Software \ Avast4 \ ashDisp.exe
C: \ Program Files (x86) \ Hewlett-Packard \ Shared \ HpqToaster.exe
C: \ Windows \ SysWOW64 \ conime.exe
C: \ Programmer \ WIDCOMM \ Bluetooth Software \ BluetoothHeadsetProxy.exe
C: \ Windows \ SysWOW64 \ DllHost.exe
C: \ Program Files (x86) \ HP \ Digital Imaging \ bin \ hpqSTE08.exe
C: \ Program Files (x86) \ Mozilla Firefox \ firefox.exe
C: \ Program Files (x86) \ Windows Live \ Messenger \ msnmsgr.exe
C: \ Program Files (x86) \ Trend Micro \ HijackThis \ juice.exe.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files (x86) \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O2 - BHO: NCO 2.0 IE BHO - (602ADB0E-4AFF-4217-8AA1-95DAC4DFA408) - (no file)
O2 - BHO: Kiwee Toolbar - (6638A9DE-0745-4292-8A2E-AE530E7B9B3F) - C: \ Program Files (x86) \ Kiwee Toolbar \ 2.8.167 \ KiweeIEToolbar.dll
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files (x86) \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files (x86) \ Google \ GoogleToolbarNotifier \ 5.1.1309.3572 \ s wg.dll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files (x86) \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: HP Smart BHO Class - (FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856) - C: \ Program Files (x86) \ HP \ Digital Imaging \ Smart Web Printing \ hpswp_BHO.dll
O2 - BHO: HP Print Clips - (FFFFFFFF-FF12-44C5-91EC-068E3AA1B2D7) - c: \ Program Files (x86) \ HP \ Smart Web Printing \ hpswp_framework.dll
O3 - Toolbar: (no name) - (7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA) - (no file)
O3 - Toolbar: Kiwee Toolbar - (6638A9DE-0745-4292-8A2E-AE530E7B9B3F) - C: \ Program Files (x86) \ Kiwee Toolbar \ 2.8.167 \ KiweeIEToolbar.dll
O4 - HKLM \ .. \ Run: [QPService] "C: \ Program Files (x86) \ HP \ QuickPlay \ QPService.exe"
O4 - HKLM \ .. \ Run: [QlbCtrl]% ProgramFiles (x86)% \ Hewlett-Packard \ HP Quick Launch Buttons \ QlbCtrl.exe / Start
O4 - HKLM \ .. \ Run: [UCam_Menu] "C: \ Program Files (x86) \ Cyberlink \ YouCam \ MUITransfer \ MUIStartMenu.ex e" "C: \ Program Files (x86) \ Cyberlink \ YouCam" update "Software \ Cyberlink \ YouCam \ 1.0 "
O4 - HKLM \ .. \ Run: [hpqSRMon] C: \ Program Files (x86) \ HP \ Digital Imaging \ bin \ hpqSRMon.exe
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files (x86) \ HP \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [hpWirelessAssistant] C: \ Program Files (x86) \ Hewlett-Packard \ HP Wireless Assistant \ HPWAMain.exe
O4 - HKLM \ .. \ Run: [WAWifiMessage] C: \ Program Files (x86) \ Hewlett-Packard \ HP Wireless Assistant \ WiFiMsg.exe
O4 - HKLM \ .. \ Run: [Daemon Tools] "C: \ Program Files (x86) \ Daemon Tools \ daemon.exe"-lang 1033
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files (x86) \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot
O4 - HKLM \ .. \ Run: [KiweeHook] "C: \ Program Files (x86) \ Kiwee Toolbar \ 2.8.167 \ kwtbaim.exe"
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files (x86) \ Adobe \ Reader 8.0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [Ad-Watch] "C: \ Program Files (x86) \ Lavasoft \ Ad-Aware \ AAWTray.exe"
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files (x86) \ QuickTime \ QTTask.exe"-atboottime
O4 - HKLM \ .. \ Run: [BlackBerryAutoUpdate] C: \ Program Files (x86) \ Common Files \ Research In Motion \ Auto Update \ RIMAutoUpdate.exe / baggrund
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files (x86) \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files (x86) \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe
O4 - HKCU \ .. \ Run: [Sidebar] C: \ Programmer \ Windows Sidebar \ sidebar.exe / autorun
O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe
O4 - HKCU \ .. \ Run: [ar] "C: \ Program Files (x86) \ Ares \ Ares.exe"-h
O4 - HKCU \ .. \ Run: [Uniblue RegistryBooster 2] c: \ program files (x86) \ uniblue \ registrybooster 2 \ StartRegistryBooster.exe
O4 - HKCU \ .. \ Run: [SWG] C: \ Program Files (x86) \ Google \ GoogleToolbarNotifier \ GoogleToolbarNo tifier.exe
O4 - HKCU \ .. \ Run: [Windows] JOOJIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII0JIIJ IJI0IJ00C: \ Windows \ Services.exe
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files (x86) \ Windows Live \ Messenger \ MsnMsgr.Exe" / baggrund
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk =?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C: \ Program Files (x86) \ HP \ Digital Imaging \ bin \ hpqtra08.exe
O9 - Ekstra knap: Send til OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 2 \ mikroer ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra 'Tools' MENUITEM: S & ende til OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 2 \ mikroer ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Ekstra knap: HP Smart Vælg - (58ECB495-38F0-49cb-A538-10282ABF65E7) - c: \ Program Files (x86) \ HP \ Smart Web Printing \ hpswp_extensions.dll
O9 - Ekstra knap: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 2 \ mikroer ~ 2 \ Office12 \ REFIEBAR.DLL
O9 - Ekstra knap: Send til Bluetooth - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Programmer \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm
O9 - Extra 'Tools' MENUITEM: Send til & Bluetooth-enhed ... - (CCA281CA-C863-46ef-9331-5C8D4460577F) - C: \ Programmer \ WIDCOMM \ Bluetooth Software \ btsendto_ie.htm
O9 - Ekstra knap: selección inteligente de HP - (DDE87865-83C5-48c4-8357-2F5B1AA84522) - C: \ Program Files (x86) \ HP \ Digital Imaging \ Smart Web Printing \ hpswp_BHO.dll
O13 - Gopher Prefix:
O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files (x86) \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: AG Windows Service (AGWinService) - Ukendt ejer - C: \ Program Files (x86) \ AGI \ common \ win32 \ PythonService.exe
O23 - Service: @% SystemRoot% \ system32 \ Alg.exe, -112 (ALG) - Unknown ejer - C: \ Windows \ System32 \ alg.exe (file mangler)
O23 - Service: Apple Mobile Device - Apple Inc. - C: \ Program Files (x86) \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Ares chatroom-serveren (AresChatServer) - Ares Development Group - C: \ Program Files (x86) \ Ares \ chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Programmer \ Alwil Software \ Avast4 \ aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C: \ Programmer \ Alwil Software \ Avast4 \ ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Programmer \ Alwil Software \ Avast4 \ ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Programmer \ Alwil Software \ Avast4 \ ashWebSv.exe
O23 - Service: Servicio Bonjour (Bonjour Service) - Apple Inc. - C: \ Program Files (x86) \ Bonjour \ mDNSResponder.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, LP - C: \ Program Files (x86) \ Hewlett-Packard \ HP Quick Launch Buttons \ Com4Qlb.exe
O23 - Service: @ dfsrres.dll, -101 (DFSR) - Unknown ejer - C: \ Windows \ system32 \ DFSR.exe (filen mangler)
O23 - Service: GameConsoleService - WildTangent, Inc. - C: \ Program Files (x86) \ HP Games \ My HP Game Console \ GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C: \ Program Files (x86) \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c: \ Program Files (x86) \ Hewlett-Packard \ HP Health Check \ hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, LP - C: \ Program Files (x86) \ Hewlett-Packard \ Shared \ hpqwmiex.exe
O23 - Service: InstallDriver Tabel Manager (IDriverT) - Macrovision Corporation - C: \ Program Files (x86) \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe
O23 - Service: Servicio del iPod (iPod Service) - Apple Inc. - C: \ Program Files (x86) \ iPod \ bin \ iPodService.exe
O23 - Service: @ keyiso.dll, -100 (KeyIso) - Ukendt ejer - C: \ Windows \ system32 \ Lsass.exe (filen mangler)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C: \ Program Files (x86) \ Lavasoft \ Ad-Aware \ AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C: \ Program Files (x86) \ Common Files \ LightScribe \ LSSrvc.exe
O23 - Service: @ comres.dll, -2797 (MSDTC) - Unknown ejer - C: \ Windows \ System32 \ msdtc.exe (file mangler)
O23 - Service: @% SystemRoot% \ System32 \ netlogon.dll, -102 (Netlogon) - Unknown ejer - C: \ Windows \ system32 \ Lsass.exe (filen mangler)
O23 - Service: @% systemroot% \ system32 \ psbase.dll, -300 (ProtectedStorage) - Ukendt ejer - C: \ Windows \ system32 \ Lsass.exe (filen mangler)
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Ukendt ejer - C: \ Program Files (x86) \ HP \ QuickPlay \ Kernel \ TV \ QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Ukendt ejer - C: \ Program Files (x86) \ HP \ QuickPlay \ Kernel \ TV \ QPSched.exe
O23 - Service: Cyberlink RichVideo Service (CRVS) (RichVideo) - Unknown ejer - C: \ Program Files (x86) \ Cyberlink \ Shared Files \ RichVideo.exe
O23 - Service: @% systemroot% \ system32 \ Locator.exe, -2 (RpcLocator) - Ukendt ejer - C: \ Windows \ System32 \ Locator.exe (filen mangler)
O23 - Service: @% SystemRoot% \ system32 \ samsrv.dll, -1 (SamSs) - Ukendt ejer - C: \ Windows \ system32 \ Lsass.exe (filen mangler)
O23 - Service: @% SystemRoot% \ system32 \ SLsvc.exe, -101 (slsvc) - Ukendt ejer - C: \ Windows \ system32 \ SLsvc.exe (file mangler)
O23 - Service: @% SystemRoot% \ system32 \ snmptrap.exe, -3 (SNMPTRAP) - Ukendt ejer - C: \ Windows \ System32 \ snmptrap.exe (filen mangler)
O23 - Service: @% systemroot% \ system32 \ Spoolsv.exe, -1 (Spooler) - Unknown ejer - C: \ Windows \ System32 \ Spoolsv.exe (filen mangler)
O23 - Service: @% SystemRoot% \ system32 \ ui0detect.exe, -101 (UI0Detect) - Ukendt ejer - C: \ Windows \ system32 \ UI0Detect.exe (filen mangler)
O23 - Service: @% SystemRoot% \ system32 \ vds.exe, -100 (VDS) - Ukendt ejer - C: \ Windows \ System32 \ vds.exe (filen mangler)
O23 - Service: @% systemroot% \ system32 \ vssvc.exe, -102 (vss) - Ukendt ejer - C: \ Windows \ system32 \ vssvc.exe (file mangler)
O23 - Service: @% systemroot% \ system32 \ Wbem \ wmiapsrv.exe, -110 (wmiApSrv) - Ukendt ejer - C: \ Windows \ System32 \ Wbem \ WmiApSrv.exe (filen mangler)
O23 - Service: @% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe, -101 (WMPNetworkSvc) - Unknown ejer - C: \ Program Files (x86) \ Windows Media Player \ wmpnetwk.exe (file mangler)
O23 - Service: XAudioService - Ukendt ejer - C: \ Windows \ system32 \ DRIVERS \ xaudio64.exe (filen mangler)

--
End of file - 12962 bytes

**evilfantasy** · #2 2. juli 2009, 14:16

Højreklik HijackThis og vælge Kør som administrator

Næste vælge Må en systemscanning kun

Anbringe en markering ved siden af følgende poster: (hvis der)

O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O2 - BHO: NCO 2.0 IE BHO - (602ADB0E-4AFF-4217-8AA1-95DAC4DFA408) - (no file)
O3 - Toolbar: (no name) - (7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA) - (no file)

Vigtigt: Luk alle åbne vinduer undtagen HijackThis og klik derefter på Fix kontrolleres.

Når afsluttet, exit HijackThis.

----------

Hvis du allerede har Malwarebytes skal du sørge for at opdatere det, før du kører scanningen!

Downloade Malwarebytes' Anti-Malware (MBAM)

Suppleant MBAM download-link

Dobbeltklik på mbam-setup.exe og følg instruktionerne for at installere programmet.
Ved udgangen, skal du sørge for en hak er placeret ud for følgende:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
Klik derefter på Udfør.
Hvis en opdatering er fundet, vil det at hente og installere den nyeste version.
Når programmet er indlæst, skal du vælge Udføre hurtig scanningKlik derefter på Scan.
Når scanningen er færdig, skal du klikke på OK, Derefter Vis resultater at se resultaterne.
Vær sikker på at alt er markeret, og klik Fjern markering.
Når desinfektionen er afsluttet, en log vil åbne i Notesblok, og du kan blive bedt om at genstarte. (Se Ekstra note)
Logfilen gemmes automatisk ved MBAM og kan ses ved at klikke på Logs fane i MBAM.
Kopier og indsæt hele rapport i dit næste svar.

Ekstra Bemærk: Hvis MBAM støder på en fil, der er vanskelige at fjerne, vil du blive præsenteret med 1 af 2 prompter, klik på OK for at enten og lad MBAM fortsætte med desinfektion processen, hvis bedt om at genstarte computeren, skal du gøre det straks.

tidi · #3 12 juli 2009, 19:29

Jeg er ked af jeg tog så lang tid at skrive et svar her, er MBAM log ser temmelig god til mig, tak mange mennesker virkelig værdsætte det

Malwarebytes' Anti-Malware 1.38
Database version: 2325
Windows 6.0.6001 Service Pack 1

12/07/2009 10:26:34 pm
mbam-log-2009-07-12 (22-26-34). txt

Scan type: Quick Scan
Objekter skannet: 74665
Tidsforbrug: 2 minut (ter), 52 sekund (s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registreringsdatabasenøgler Inficerede: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(Nr. ondsindede elementer opdaget)

Memory Modules Infected:
(Nr. ondsindede elementer opdaget)

Registreringsdatabasenøgler Inficerede:
(Nr. ondsindede elementer opdaget)

Registry Values Infected:
(Nr. ondsindede elementer opdaget)

Registry Data Items Infected:
(Nr. ondsindede elementer opdaget)

Folders Infected:
(Nr. ondsindede elementer opdaget)

Files Infected:
(Nr. ondsindede elementer opdaget)

**evilfantasy** · #4 12 juli 2009, 19:53

Er den computer, der har spørgsmål eller er dette blot en helbredsundersøgelse?

tidi · #5 12 juli 2009, 20:48

Den havde nogle spørgsmål, men nu er alt faste tak til jer, nu sin tid til at fastsætte min anden computer, og at de reelle rodet op

Lignende Tråde
Tråd	Thread Starter	Forum	Svar	Last Post
Harddisk Fejl på Bootup - "Disk Error" "Tryk på en tast for at genstarte"	ashaiba	General Hardware Chat	6	13 marts 2009 15:56
Vil "Office 95" arbejde med "Windows XP"?	Raynhawk	Office Suites & Applications	4	23 februar 2009 17:01
"Compenent" MSINET.OCX "eller af dens afhængigheder ikke korrekt registreret: af	ashprice01	General Software Chat	1	19 november 2008 08:01
Kan ikke sætte "Aktiver" funktion "på" i Bios ref CD / DVD.	ashmehta	Laptops, Mobiles & PDA'er	8	17th May 2008 02:56
Laptop ikke starte, "syntaks" eller "diskfejl".	aechain	Windows-operativsystemer	5	24 januar 2008 15:45