Mein Log -> Welche Dienste kann ich da deaktivieren?

system

Hi,

hier ist mein Log.
Es wird vorgeschlagen, dass ich diverse Dienste deaktivieren soll.
Ich bin mir da ziemlich unschlüssig, da der Scan an einem Windows 2000 Terminalserver gemacht worden ist:


Logfile of HijackThis v1.99.0
Scan saved at 11:13:02, on 08.01.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)


Teil 1:


Running processes:
C:\Dokumente und Einstellungen\Administrator\WINDOWS\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus for File Servers 5\kavmm.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus for File Servers 5\kavmm.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus for File Servers 5\kavmm.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus for File Servers 5\kavmm.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus for File Servers 5\kavmm.exe
C:\WINNT\system32\cmd.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\explorer.exe
C:\Programme\PestPatrol\PPControl.exe
C:\Programme\PestPatrol\pestpatrol.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.100.9:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 192.168.*;<local>
F2 - REG:system.ini: UserInit=C:\winnt\SYSTEM32\Userinit.exe,
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [PrinTray] C:\WINNT\System32\spool\DRIVERS\W32X86\2\printray.exe
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\nvc\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [PPMemCheck] C:\Programme\PestPatrol\PPMemCheck.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\Programme\PestPatrol\PPControl.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\Programme\PestPatrol\CookiePatrol.exe
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP provider 'c:\dokumente und einstellungen\administrator\windows\system32\rnr20.dll' missing
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...17/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0338BBEE-CC19-4C87-BDDF-55D2E9152282}: NameServer = 192.168.100.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{91E781E6-80C8-4BDD-86D5-0B5882049221}: NameServer = 192.168.100.9
O17 - HKLM\System\CS1\Services\Tcpip\..\{0338BBEE-CC19-4C87-BDDF-55D2E9152282}: NameServer = 192.168.100.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{0338BBEE-CC19-4C87-BDDF-55D2E9152282}: NameServer = 192.168.100.4
O17 - HKLM\System\CS3\Services\Tcpip\..\{0338BBEE-CC19-4C87-BDDF-55D2E9152282}: NameServer = 192.168.100.4