Archief - Log

Hey, kan iemand deze log eens nakijken, normaal lukt het me vrij goed om m'n pc proper te houden, maar er zitten toch wat dingen in waarbij ik vraagtekens heb:

Logfile of HijackThis v1.99.1
Scan saved at 19:36:54, on 2/05/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
G:\Programs\Antivir\AVWUPSRV.EXE
C:\WINNT\system32\CTsvcCDA.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\MsPMSPSv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\StartupMonitor.exe
G:\Program Files\Logitech Setpoint\iTouch\iTouch.exe
G:\Programs\iTunes\iTunesHelper.exe
G:\Programs\iPod\bin\iPodService.exe
G:\Programs\Java\jre1.5.0_02\bin\jusched.exe
G:\Programs\ATI Technologies\ATI Control Panel\atiptaxx.exe
G:\Programs\CyberLink\PowerDVD\PDVDServ.exe
G:\Programs\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
G:\Programs\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\WINNT\system32\CTHELPER.EXE
G:\Programs\Antivir\AVGNT.EXE
C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe
C:\WINNT\system32\internat.exe
G:\Programs\Creative\MediaSource\RemoteControl\RCMan.EXE
G:\Programs\Logitech\SetPoint\KEM.exe
G:\Programs\Ultramon\UltraMon.exe
G:\Programs\SpywareGuard\sgmain.exe
G:\Programs\Logitech\SetPoint\KHALMNPR.EXE
G:\Programs\Ultramon\UltraMonTaskbar.exe
G:\Programs\Antivir\AVGUARD.EXE
C:\WINNT\System32\MsiExec.exe
G:\Programs\SpywareGuard\sgbhp.exe
G:\Programs\Firefox\firefox.exe
C:\WINNT\explorer.exe
C:\Documents and Settings\Joeri\Mijn documenten\Allerlei\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.nl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Programs\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - G:\Programs\SpywareGuard\dlprotect.dll
O3 - Toolbar: @msdxmLC.dll,-1@1043,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [zBrowser Launcher] G:\Program Files\Logitech Setpoint\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [iTunesHelper] G:\Programs\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Programs\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] G:\Programs\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SBDrvDet] G:\Programs\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [RemoteControl] G:\Programs\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [CTSysVol] G:\Programs\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] G:\Programs\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [AVGCtrl] G:\Programs\Antivir\AVGNT.EXE /min
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "G:\Programs\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [RemoteCenter] G:\Programs\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - Startup: SpywareGuard.lnk = G:\Programs\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech SetPoint.lnk = G:\Programs\Logitech\SetPoint\KEM.exe
O4 - Global Startup: UltraMon.lnk = G:\Programs\Ultramon\UltraMon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programs\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programs\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - G:\Programs\Antivir\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - G:\Programs\Antivir\AVWUPSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\system32\CTsvcCDA.exe
O23 - Service: Logical Disk Manager Administrative-service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - G:\Programs\iPod\bin\iPodService.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - G:\Programs\SiSoftware\SiSoftware Sandra Lite 2005\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - G:\Programs\SiSoftware\SiSoftware Sandra Lite 2005\RpcSandraSrv.exe


Al die Apple, Ipod en Itunes dingen vind ik vreemd, Ipod heb ik niet en Itunes wordt niet gebruikt
Alvast bedankt

Verwijder:
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe adware/spyware


Overbodig:
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Programs\Java\jre1.5.0_02\bin\jusched.exe


Itunes/Ipod zal mee geïnstalleerd zijn met een ander programma(quicktime update?); kijk eens in configuratie>software of het daar niet te verwijderen is.
Deze mogen normaal weg, maar zijn onschadelijk:
O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - G:\Programs\iPod\bin\iPodService.exe
O4 - HKLM\..\Run: [iTunesHelper] G:\Programs\iTunes\iTunesHelper.exe

ok, thanx