Hei!
onko tässä logissa mitään ylimääräistä? kone on toiminut todella epävakaasti viimeiset pari päivää..mm. service pack:in asennukset eivät onnistu ja kone kaatuu vähän väliä.
Logfile of HijackThis v1.99.0
Scan saved at 10:52:40, on 4.1.2005
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Norton Personal Firewall\SymProxySvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Norton Personal Firewall\NISSERV.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\devldr32.exe
C:\WINNT\anvshell.exe
C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\program files\MSN Messenger\msnmsgr.exe
C:\Program Files\Norton Personal Firewall\ATRACK.EXE
C:\WINNT\System32\MsiExec.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\hjt\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iamapp] C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [msnmsgr] "C:\program files\MSN Messenger\msnmsgr.exe" /background
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fi/win/QuickTimeFullInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O23 - Service: Hälytys - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Sovellusten hallinta - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Tietokoneiden selaus - Unknown - C:\WINNT\system32\services.exe
O23 - Service: DHCP-asiakas - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINNT\System32\dmadmin.exe
O23 - Service: Loogisen levyn hallinta - Unknown - C:\WINNT\System32\services.exe
O23 - Service: DNS-asiakas - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Tapahtumaloki - Unknown - C:\WINNT\system32\services.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Faksipalvelu - Unknown - C:\WINNT\system32\faxsvc.exe
O23 - Service: F-Secure Authentication Agent - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: Palvelin - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Työasema - Unknown - C:\WINNT\system32\services.exe
O23 - Service: TCP/IP NetBIOS Helper -palvelu - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Viestinvälitys - Unknown - C:\WINNT\system32\services.exe
O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINNT\System32\mnmsrvc.exe
O23 - Service: Verkon DDE - Unknown - C:\WINNT\system32\netdde.exe
O23 - Service: Verkon DDE DSDM - Unknown - C:\WINNT\system32\netdde.exe
O23 - Service: Verkkokirjautuminen - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: Norton Personal Firewall Service - Symantec Corporation - C:\Program Files\Norton Personal Firewall\NISSERV.EXE
O23 - Service: Norton Personal Firewall Accounts Manager - Symantec Corporation - C:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: NT LM -suojaustuen toimittaja - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Plug and Play - Unknown - C:\WINNT\system32\services.exe
O23 - Service: IP-suojauskäytäntöagentti - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: Suojattu tallennuspaikka - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Käyttöoikeustilien hallinta - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: Älykortti-apuohjelma - Unknown - C:\WINNT\System32\SCardSvr.exe
O23 - Service: Älykortti - Unknown - C:\WINNT\System32\SCardSvr.exe
O23 - Service: Tehtävien ajoitus - Unknown - C:\WINNT\system32\MSTask.exe
O23 - Service: RunAs-palvelu - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Still Image Service - Unknown - C:\WINNT\system32\stisvc.exe
O23 - Service: Norton Personal Firewall Proxy Service - Symantec Corporation - C:\Program Files\Norton Personal Firewall\SymProxySvc.exe
O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINNT\system32\smlogsvc.exe
O23 - Service: Telnet - Unknown - C:\WINNT\system32\tlntsvr.exe
O23 - Service: Tiedostolinkkijäljityksen asiakas - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Toimintojen hallinta - Unknown - C:\WINNT\System32\UtilMan.exe
O23 - Service: Windows Time - Unknown - C:\WINNT\System32\services.exe
O23 - Service: WMI-palvelu (Windows Management Instrumentation) - Unknown - C:\WINNT\System32\WBEM\WinMgmt.exe
O23 - Service: WM -instrumenttien ohjainlaajennukset - Unknown - C:\WINNT\system32\Services.exe
onko tässä logissa mitään ylimääräistä? kone on toiminut todella epävakaasti viimeiset pari päivää..mm. service pack:in asennukset eivät onnistu ja kone kaatuu vähän väliä.
Logfile of HijackThis v1.99.0
Scan saved at 10:52:40, on 4.1.2005
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Norton Personal Firewall\SymProxySvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Norton Personal Firewall\NISSERV.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\devldr32.exe
C:\WINNT\anvshell.exe
C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\program files\MSN Messenger\msnmsgr.exe
C:\Program Files\Norton Personal Firewall\ATRACK.EXE
C:\WINNT\System32\MsiExec.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\hjt\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iamapp] C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [msnmsgr] "C:\program files\MSN Messenger\msnmsgr.exe" /background
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fi/win/QuickTimeFullInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O23 - Service: Hälytys - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Sovellusten hallinta - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Tietokoneiden selaus - Unknown - C:\WINNT\system32\services.exe
O23 - Service: DHCP-asiakas - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINNT\System32\dmadmin.exe
O23 - Service: Loogisen levyn hallinta - Unknown - C:\WINNT\System32\services.exe
O23 - Service: DNS-asiakas - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Tapahtumaloki - Unknown - C:\WINNT\system32\services.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Faksipalvelu - Unknown - C:\WINNT\system32\faxsvc.exe
O23 - Service: F-Secure Authentication Agent - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: Palvelin - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Työasema - Unknown - C:\WINNT\system32\services.exe
O23 - Service: TCP/IP NetBIOS Helper -palvelu - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Viestinvälitys - Unknown - C:\WINNT\system32\services.exe
O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINNT\System32\mnmsrvc.exe
O23 - Service: Verkon DDE - Unknown - C:\WINNT\system32\netdde.exe
O23 - Service: Verkon DDE DSDM - Unknown - C:\WINNT\system32\netdde.exe
O23 - Service: Verkkokirjautuminen - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: Norton Personal Firewall Service - Symantec Corporation - C:\Program Files\Norton Personal Firewall\NISSERV.EXE
O23 - Service: Norton Personal Firewall Accounts Manager - Symantec Corporation - C:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: NT LM -suojaustuen toimittaja - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Plug and Play - Unknown - C:\WINNT\system32\services.exe
O23 - Service: IP-suojauskäytäntöagentti - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: Suojattu tallennuspaikka - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Käyttöoikeustilien hallinta - Unknown - C:\WINNT\system32\lsass.exe
O23 - Service: Älykortti-apuohjelma - Unknown - C:\WINNT\System32\SCardSvr.exe
O23 - Service: Älykortti - Unknown - C:\WINNT\System32\SCardSvr.exe
O23 - Service: Tehtävien ajoitus - Unknown - C:\WINNT\system32\MSTask.exe
O23 - Service: RunAs-palvelu - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Still Image Service - Unknown - C:\WINNT\system32\stisvc.exe
O23 - Service: Norton Personal Firewall Proxy Service - Symantec Corporation - C:\Program Files\Norton Personal Firewall\SymProxySvc.exe
O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINNT\system32\smlogsvc.exe
O23 - Service: Telnet - Unknown - C:\WINNT\system32\tlntsvr.exe
O23 - Service: Tiedostolinkkijäljityksen asiakas - Unknown - C:\WINNT\system32\services.exe
O23 - Service: Toimintojen hallinta - Unknown - C:\WINNT\System32\UtilMan.exe
O23 - Service: Windows Time - Unknown - C:\WINNT\System32\services.exe
O23 - Service: WMI-palvelu (Windows Management Instrumentation) - Unknown - C:\WINNT\System32\WBEM\WinMgmt.exe
O23 - Service: WM -instrumenttien ohjainlaajennukset - Unknown - C:\WINNT\system32\Services.exe
Vastaukset 1
Vanhimmat
Logi on kunnossa ainaki mun silmään.