Hijackthis

Zadnje čase mi moj računalnik pokašljuje,toda mislim da ni samo prehladek,bojim se namreč da ga bo pokopala pljučnica :((
Imam XP Pro,antivirusni program je NOD 32.
Do nedavnega ni bilo z računalnikom nobenih problemov,kake 3 tedne nazaj,pa nisem mogel narediti WindoWs update.Stalno mi javlja napako.Šel sem na obnovitev sistema za nazaj,tako da mi je pač sedaj nehal kašljati,čutim in opažam pa,da se mi računalnik duši.Kljub temu,da sem lastnik računalnika že 2 leti,mi obnovitev lahko naredi za nazaj do datuma v decembru 2005.Tega ne razumem.
Danes sem se lotil narediti še Hijackthis.Ker sem na tem področju popolni tepec,vas prosim za pomoč.
Zanima me,kaj lahko počistim iz svojega računalnika in zakaj mi pri nekaterih file-ih piše file missing.
Za vsakršno pomoč se vam že vnaprej zahvaljujem.Pa ne se mi smejat,če sem se malo čudno izražal,kajti na računalniku nisem prav dolgo in se še vedno učim.
Lep pozdrav in hvala.

Logfile of HijackThis v1.99.1
Scan saved at 23:10:13, on 7.4.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Media Key\MagicKey.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Documents and Settings\janko\Start Menu\Programs\Startup\FSScrCtl.exe
C:\Program Files\Metacafe\MetacafeAgent.exe
C:\Program Files\Media Key\OSD.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\janko\Desktop\Razno\Programi\hijackthis\HijackThis.exe

R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telemach.net/novice/index.php
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 – HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 – BHO: (no name) – {53707962-6F74-2D53-2644-206D7942484F} – C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 – HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 – HKLM\..\Run: [RemoteControl] “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”
O4 – HKLM\..\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE
O4 – HKLM\..\Run: [TkBellExe] “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot
O4 – HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 – HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 – HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 – HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
O4 – HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 – HKCU\..\Run: [MsnMsgr] “C:\Program Files\MSN Messenger\MsnMsgr.Exe” /background
O4 – HKCU\..\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
O4 – HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 – HKCU\..\Run: [NBJ] “C:\Program Files\Ahead\Nero BackItUp\NBJ.exe”
O4 – HKCU\..\Run: [Unnt] “C:\Program Files\eeac\rdae.exe” -vt mtx
O4 – HKCU\..\Run: [Hniw] C:\WINDOWS\system32\??erinit.exe
O4 – HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 – Startup: FSScrCtl.exe
O4 – Startup: MetaCafe.lnk = C:\Program Files\Metacafe\MetacafeAgent.exe
O4 – Startup: Reboot.exe
O4 – Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 – Global Startup: Media Key.lnk = C:\Program Files\Media Key\MagicKey.exe
O4 – Global Startup: MetaCafe.lnk = C:\Program Files\Metacafe\MetacafeAgent.exe
O8 – Extra context menu item: I&zvoz v Microsoft Excel – res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\WINDOWS\system32\msjava.dll
O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\WINDOWS\system32\msjava.dll
O9 – Extra button: Raziskovanje – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O16 – DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) – http://go.microsoft.com/fwlink/?linkid=39204
O16 – DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} – http://www.miniclip.com/supergerball/miniclipGameLoader.dll
O16 – DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) – http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 – DPF: {3DA5D23B-EFE1-4181-ADB7-7D457567AACA} (TGOnlineCtrl Class) – http://games.bluemountain.com/online2/panda_craze/pandaonline.cab
O16 – DPF: {5DB54D80-827E-11D5-AA77-00105A26398B} – http://www.renderspace.si/download/pweb3d.cab
O16 – DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) – http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1134605505679
O16 – DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) – http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 – DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) – http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 – DPF: {B495C654-5860-45D4-8EAA-5663B9393F33} (OVA Class) – http://go.microsoft.com/fwlink/?linkid=49480
O16 – DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) – http://www.windowsecurity.com/trojanscan/axscan.cab
O16 – DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) – http://arcade.about.com/online2/bejeweled2/popcaploader_v6.cab
O16 – DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) – http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – “C:\PROGRA~1\MSNMES~1\msgrapp.dll” (file missing)
O23 – Service: Ati HotKey Poller – Unknown owner – C:\WINDOWS\system32\Ati2evxx.exe
O23 – Service: ATI Smart – Unknown owner – C:\WINDOWS\system32\ati2sgag.exe
O23 – Service: NOD32 Kernel Service (NOD32krn) – Eset – C:\Program Files\Eset\nod32krn.exe
O23 – Service: VNC Server Version 4 (WinVNC4) – Unknown owner – C:\Program Files\RealVNC\VNC4\WinVNC4.exe” -service (file missing)

Prilepi ga sem.

Ali mi lahko poveš zakaj tja in kaj potem storim?
Kot sem že povedal,sem na področju računalništva res popolni laik in upam,da s tem vprašanjem nisem izpadel še večji idiot.

Ni nič tako kritičnega. Izbrišeš pa lahko tole:

O4 – HKCU\..\Run: [Hniw] C:\WINDOWS\system32\??erinit.exe

O23 – Service: VNC Server Version 4 (WinVNC4) – Unknown owner – C:\Program Files\RealVNC\VNC4\WinVNC4.exe” -service (file missing)

Lp, Max

Hvala!!!!!!!

Tja ga skopiraš in spodaj klikneš “analiziraj”

Sedaj me pa zanima še nekaj.
To kar sem odstranil,se je shranilo v mapo backups.Ali to mapo sedaj odstranim-zbrišem,ali jo pustim?
Upam,da sedaj nisem že preveč nadležen.

To je varnostna kopija, ki jo lahko v primeru težav obnoviš, navadi se tako, da varnostne kopije pustiš nekaj časa, da vidiš če ti PC normalno dela in šele potem zbrišeš.
To velja za vse programe, ki si delajo te kopije.

Hvala ti za tole razlago.Danes sem se zopet nekaj novega naučil.