Hallo,

ich würde mich sehr freuen, wenn mir jemand diese file auswerten könnte. Mein Computer ist sehr langsam geworden. Bei der kleinsten Rechenleistung habe ich 100% CPU Auslastung.

Logfile of HijackThis v1.99.1
Scan saved at 07:14:39, on 23.01.2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\termsrv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programme\CA\BrightStor ARCserve Backup\RDS.EXE
C:\Programme\CA\BrightStor ARCserve Backup\casmrtbk.exe
C:\Programme\CA\BrightStor ARCserve Backup\caloggerd.exe
C:\Programme\CA\BrightStor ARCserve Backup\Mediasvr.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\System32\svchost.exe
C:\Programme\CA\iGateway\igateway.exe
C:\WINNT\System32\llssrv.exe
C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\WINNT\system32\ntfrs.exe
C:\Programme\Trend Micro\Client Server Security Agent\ntrtscan.exe
C:\Programme\CA\BrightStor ARCserve Backup\caauthd.exe
C:\Programme\CA\BrightStor ARCserve Backup\LQServer.exe
D:\Programme\TrendMicro\PCCSRV\web\service\ofcservice.exe
C:\WINNT\System32\rcssrv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\TEMP\GA98D7.EXE
C:\Programme\Trend Micro\Client Server Security Agent\tmlisten.exe
D:\Programme\TrendMicro\PCCSRV\Web\Service\DbServer.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Programme\UPS\WorldShip\wshipservicecom.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\tcpsvcs.exe
C:\WINNT\System32\dns.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\System32\ismserv.exe
C:\WINNT\System32\msdtc.exe
C:\Programme\Trend Micro\Client Server Security Agent\OfcPfwSvc.exe
C:\WINNT\System32\svchost.exe
C:\Programme\CA\BrightStor ARCserve Backup\LDBServer.exe
C:\Programme\CA\BrightStor ARCserve Backup\asalert.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\igfxtray.exe
C:\WINNT\System32\hkcmd.exe
C:\Programme\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
C:\Programme\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Programme\Trend Micro\Client Server Security Agent\pccntmon.exe
C:\Programme\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\WINNT\system32\HPZipm12.exe
C:\WINNT\system32\taskmgr.exe
D:\Test\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [PRONoMgrWired] C:\Programme\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Programme\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Programme\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [FinishOptions] C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\1\hpbinxst.exe
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Programme\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {35C3D91E-401A-4E45-88A5-F3B32CD72DF4} (Encrypt Class) - https://server.bac****.local/SMB/console/html/root/AtxEnc.cab
O16 - DPF: {E78DE03F-DC83-40DB-B590-8FD80BE5F7C8} (Security Server Management-Konsole) - https://server.bachernet.local/SMB/console/html/root/AtxConsole.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = bac****.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{DD7567D9-5E5E-42A7-A2F8-ED3DBC382DBF}: NameServer = 192.168.99.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = bac****.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = bac****.local
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates International Inc. - C:\Programme\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Centura SQLBase - Centura Software Corporation - C:\programme\UPS\WorldShip\Dbnt25sv.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: iTechnology iGateway 3.0 (iGateway) - Computer Associates - C:\Programme\CA\iGateway\igateway.exe
O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Trend Micro Client-Server Security Agent Echtzeitsuche (ntrtscan) - Trend Micro Inc. - C:\Programme\Trend Micro\Client Server Security Agent\ntrtscan.exe
O23 - Service: Trend Micro Client-Server Security Agent Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\Programme\Trend Micro\Client Server Security Agent\OfcPfwSvc.exe
O23 - Service: Trend Micro Security Server Master Service (ofcservice) - Trend Micro Inc. - D:\Programme\TrendMicro\PCCSRV\web\service\ofcservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe
O23 - Service: RAID Configuration Service (RAIDService) - Unknown owner - C:\WINNT\System32\rcssrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Trend Micro Client-Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Programme\Trend Micro\Client Server Security Agent\tmlisten.exe


Vielen Dank

Hi,

C:\WINNT\system32\Dfssvc.exe

Lies dir mal dies hier durch. Könnte damit zu tun haben.

Hallo,

nein, daran liegt es leider nicht. Vielleicht erhalte ich noch weitere Tipps.

Gruß
Bastian

Bastian,

The process C:\WINNT\TEMP\GA98D7.EXE might be doubtful. But to be shure just run the Task Manager and sort the processes by clicking on the header 'CPU' or 'Mem Usage'. By doing this the processes with the highest CPU% or Mem Usage will be shown at the top. The list will be resorted every x seconds.

Wim