PCen funker ikke, tror eg har virus, hjelp!

[stega]

Hei alle sammen.

Jeg har hatt litt problemer med pcen i det siste, lat som jeg er har jeg ikke giddet å gjøre noe med det før den slo seg helt vrang. I starten slo den seg av av seg selv når den hadde lyst, så en dag når jeg slo den på så var skjermoppløsningen på det minste og det funket ikke å stille en opp igjen, til slutt fikk jeg ikke til å slå den på i det hele tatt.

Nå fikk jeg til å starte den i sikkerhetsmodus, jeg fulgte instruksjonene i posten her på forumet og kjørte alle de programmene dere linket til osv, jeg restartet maskinen og den var tilbake til laveste skjermoppløsning.

 

Jeg skal prøve å få postet loggene her inne, vist jeg bare får den i brukbar stand..

 

 

Logger:

Klikk for å se/fjerne innholdet nedenfor

Malwarebytes' Anti-Malware 1.30

Database versjon: 1313

Windows 6.0.6001 Service Pack 1

 

2008-10-24 16:57:06

mbam-log-2008-10-24 (16-57-06).txt

 

Skanntype: Rask Skann

Objekter skannet: 44114

Tid tilbakelagt: 3 minute(s), 1 second(s)

 

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 46

Registerverdier infisert: 0

Registerfiler infisert: 0

Mapper infisert: 5

Filer infisert: 6

 

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

 

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

 

Registernøkler infisert:

HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\zangosa (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\zangoax.clientdetector (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\zangoax.clientdetector.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\zangoax.userprofiles (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\zangoax.userprofiles.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.toolbarctl (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.toolbarctl.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\instie.hbinstobj (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\instie.hbinstobj.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbr.hbmain (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbr.hbmain.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbmain.commband (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbmain.commband.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.

 

Registerverdier infisert:

(Ingen mistenkelige filer funnet)

 

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

 

Mapper infisert:

C:\Program Files\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.

C:\Program Files\ShoppingReport\Bin (Adware.Shopping.Report) -> Quarantined and deleted successfully.

C:\Program Files\ShoppingReport\Bin\2.5.0 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

C:\ProgramData\ZangoSA (Adware.Zango) -> Quarantined and deleted successfully.

C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Quarantined and deleted successfully.

 

Filer infisert:

C:\Program Files\Mozilla Firefox\plugins\npclntax_ZangoSA.dll (Adware.Zango) -> Quarantined and deleted successfully.

C:\ProgramData\ZangoSA\ZangoSA.dat (Adware.Zango) -> Quarantined and deleted successfully.

C:\ProgramData\ZangoSA\ZangoSAAbout.mht (Adware.Zango) -> Quarantined and deleted successfully.

C:\ProgramData\ZangoSA\ZangoSAau.dat (Adware.Zango) -> Quarantined and deleted successfully.

C:\ProgramData\ZangoSA\ZangoSAEula.mht (Adware.Zango) -> Quarantined and deleted successfully.

C:\ProgramData\ZangoSA\ZangoSA_kyf.dat (Adware.Zango) -> Quarantined and deleted successfully.

 

 

 

 

 

 

 

 

 

ComboFix 08-10-23.08 - Steffmeister 2008-10-24 16:59:08.1 - NTFSx86 NETWORK

Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1044.18.1475 [GMT 2:00]

Running from: C:\Users\Steffmeister\Desktop\ComboFix.exe

.

Error: Cfiles.dat

 

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\DRV\Tuner\Yuan\Resources\_desktop.ini

C:\Users\STEFFM~1\AppData\Roaming\WeatherDPA

C:\Users\STEFFM~1\AppData\Roaming\WeatherDPA\Weather\WeatherStartup.xml

C:\Users\STEFFM~1\AppData\Roaming\Zango

C:\Users\Steffmeister\AppData\Roaming\WeatherDPA\Weather\WeatherStartup.xml

C:\Windows\system32\x64

D:\install.exe

 

.

((((((((((((((((((((((((( Files Created from 2008-09-24 to 2008-10-24 )))))))))))))))))))))))))))))))

.

 

No new files created in this timespan

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-10-24 14:52 --------- d-----w C:\Users\Steffmeister\AppData\Roaming\Malwarebytes

2008-10-24 14:52 --------- d-----w C:\Users\STEFFM~1\AppData\Roaming\Malwarebytes

2008-10-24 14:52 --------- d-----w C:\PROGRA~2\Malwarebytes

2008-10-22 14:10 38,496 ----a-w C:\Windows\system32\drivers\mbamswissarmy.sys

2008-10-22 14:10 15,504 ----a-w C:\Windows\system32\drivers\mbam.sys

2008-10-10 08:02 --------- d-----w C:\Users\Steffmeister\AppData\Roaming\Winamp

2008-10-10 08:02 --------- d-----w C:\Users\STEFFM~1\AppData\Roaming\Winamp

2008-10-05 14:55 --------- d-----w C:\Program Files\Steam

2008-10-04 15:54 --------- d-----w C:\Program Files\Bin

2008-10-04 15:54 --------- d-----w C:\PROGRA~2\Microsoft Help

2008-10-04 14:05 --------- d-----w C:\Program Files\Microsoft SQL Server

2008-10-04 13:59 --------- d-----w C:\Program Files\Microsoft Visual Studio 9.0

2008-10-04 13:52 --------- d-----w C:\Program Files\Common Files\Merge Modules

2008-10-04 13:47 --------- d-----w C:\Program Files\Microsoft SDKs

2008-10-04 13:01 --------- d-----w C:\PROGRA~2\avg8

2008-09-28 08:36 --------- d-----w C:\Program Files\Messenger Plus! Live

2008-09-25 12:22 --------- d-----w C:\PROGRA~2\Messenger Plus!

2008-09-24 18:32 --------- d-----w C:\Program Files\Windows Live Toolbar

2008-09-24 18:32 --------- d-----w C:\Program Files\Windows Live Favorites

2008-09-24 18:29 --------- d-----w C:\PROGRA~2\WLInstaller

2008-09-20 20:18 --------- d-----w C:\Program Files\Common Files\Steam

2008-09-15 15:02 --------- d-----w C:\Program Files\Gabest

2008-09-13 12:36 --------- d-----w C:\Program Files\Google

2008-09-13 00:47 110,016 ----a-w C:\Users\Steffmeister\AppData\Roaming\nvModes.dat

2008-09-13 00:47 110,016 ----a-w C:\Users\STEFFM~1\AppData\Roaming\nvModes.dat

2008-09-10 01:01 --------- d-----w C:\Program Files\Microsoft Works

2008-09-08 19:13 --------- d-----w C:\Program Files\Java

2008-08-25 17:47 0 ---ha-w C:\Windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf

2008-08-25 17:27 --------- d-----w C:\Users\Steffmeister\AppData\Roaming\PC Suite

2008-08-25 17:27 --------- d-----w C:\Users\STEFFM~1\AppData\Roaming\PC Suite

2008-08-25 17:26 0 ---ha-w C:\Windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf

2008-08-25 17:26 0 ---ha-w C:\Windows\system32\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf

2008-08-02 03:26 36,864 ----a-w C:\Windows\System32\cdd.dll

2008-07-31 03:32 460,288 ----a-w C:\Windows\AppPatch\AcSpecfc.dll

2008-07-31 03:32 28,160 ----a-w C:\Windows\System32\Apphlpdm.dll

2008-07-31 03:32 2,154,496 ----a-w C:\Windows\AppPatch\AcGenral.dll

2008-07-31 03:32 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll

2008-07-31 01:13 4,240,384 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll

2008-07-27 18:03 96,760 ----a-w C:\Windows\System32\dfshim.dll

2008-07-27 18:03 83,968 ----a-w C:\Windows\System32\mscories.dll

2008-07-27 18:03 41,984 ----a-w C:\Windows\System32\netfxperf.dll

2008-07-27 18:03 282,112 ----a-w C:\Windows\System32\mscoree.dll

2008-07-27 18:03 158,720 ----a-w C:\Windows\System32\mscorier.dll

2008-05-24 00:26 174 --sha-w C:\Program Files\desktop.ini

2008-01-02 12:17 22,328 ----a-w C:\Users\Steffmeister\AppData\Roaming\PnkBstrK.sys

2008-01-02 12:17 22,328 ----a-w C:\Users\STEFFM~1\AppData\Roaming\PnkBstrK.sys

2007-11-21 15:50 16,311,648 ----a-w C:\Users\Steffmeister\Bioshock.exe

2007-07-19 12:32 237,568 ----a-w C:\Users\Steffmeister\paul.dll

2008-03-18 20:20 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

2008-03-18 20:20 32,768 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

2008-03-18 20:20 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 495616]

"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-04-18 3628080]

"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-06-18 1122816]

"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" [2008-06-17 1249280]

"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2008-09-10 171448]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"eAudio"="C:\Acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 1286144]

"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-03-08 40048]

"PLFSet"="C:\Windows\PLFSet.dll" [2007-04-25 45056]

"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2007-06-27 752136]

"PlayMovie"="C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2007-05-24 206952]

"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]

"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]

"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2007-06-06 159744]

"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-05-22 151552]

"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-01-16 37376]

"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 517768]

"PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2007-08-07 200704]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]

"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-11-16 86016]

"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-11-16 8534560]

"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-11-16 81920]

"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 C:\Windows\RtHDVCpl.exe]

"Skytel"="Skytel.exe" [2007-06-15 C:\Windows\SkyTel.exe]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"GrpConv"="grpconv -o" [X]

"Malwarebytes' Anti-Malware"="D:\Antimalware\Malwarebytes' Anti-Malware\mbamgui.exe" [2008-10-22 399504]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-05-22 151552]

 

C:\Users\Steffmeister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Screen Clipper og Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]

 

C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\

Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-08-10 535336]

 

C:\Users\STEFFM~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\

OneNote 2007 Screen Clipper og Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=eNetHook.dll

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"UacDisableNotify"=dword:00000001

"InternetSettingsDisableNotify"=dword:00000001

"AutoUpdateDisableNotify"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{729B66D6-00F1-416B-A5E9-9A8255A47FBB}"= C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe

"{C01F176F-41CC-4DF0-9FC0-E40B94DF7765}"= C:\Program Files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician

"{E47AD20F-63D3-4F9A-A7F7-4BAE53E638CB}"= C:\Program Files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia

"{AAE65792-0A60-4482-A603-4647BA443C9E}"= C:\Program Files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard

"{C28D3D9E-3619-474C-9BB7-65473D255C5C}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote

"{F97C3EAC-DB0F-40C2-BCD5-E319311C9D13}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote

"{6D515B55-83C1-4750-B4B8-E862B479294D}"= C:\Program Files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine

"{96206FB1-19D6-4256-A438-889F8A81B088}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie

"{3E8477FF-4B6B-4C3E-AEDA-A97116B243B3}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program

"{07C2AB36-4FF3-4E12-84BD-BDC9EF269B9A}"= UDP:C:\Program Files\Autodesk\3ds Max 2008\3dsmax.exe:Autodesk 3ds Max 2008 32-bit

"{F683C02B-984E-45E9-A68B-89805E672539}"= TCP:C:\Program Files\Autodesk\3ds Max 2008\3dsmax.exe:Autodesk 3ds Max 2008 32-bit

"{1D9CEBE9-890B-4B90-B1FA-6DADDAD83538}"= UDP:C:\Program Files\Autodesk\3ds Max 9\3dsmax.exe:Autodesk 3ds Max 9 32-bit

"{9C2E4168-2F44-4FEC-9E94-9BACC36AD546}"= TCP:C:\Program Files\Autodesk\3ds Max 9\3dsmax.exe:Autodesk 3ds Max 9 32-bit

"{0BCD0145-C796-4004-9918-BB6074A4E2BB}"= UDP:C:\Program Files\Autodesk\Backburner\monitor.exe:backburner 2.3 monitor

"{D9B7EA71-9FC9-4118-970B-A63E3F03CD00}"= TCP:C:\Program Files\Autodesk\Backburner\monitor.exe:backburner 2.3 monitor

"{2E6B8A73-C77F-4497-899E-1AB5EA543D65}"= UDP:C:\Program Files\Autodesk\Backburner\manager.exe:backburner 2.3 manager

"{F396BAA5-A5CB-458E-A23C-88B2B576BD8D}"= TCP:C:\Program Files\Autodesk\Backburner\manager.exe:backburner 2.3 manager

"{75B0F473-738D-4846-9D5D-942005D8D926}"= UDP:C:\Program Files\Autodesk\Backburner\server.exe:backburner 2.3 server

"{553597D8-E208-4933-B78F-908BE78771FF}"= TCP:C:\Program Files\Autodesk\Backburner\server.exe:backburner 2.3 server

"{29F88239-8E63-4B8A-86D9-FB9065F6D8C1}"= UDP:D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:Crysis_32

"{C7600FF2-8554-40C3-8321-D98A8878CBE4}"= TCP:D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:Crysis_32

"{41B0682F-C342-4F37-9C8C-E4CBBB1E91B4}"= UDP:D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:CrysisDedicatedServer_32

"{02A72ED4-4F87-424E-BE0F-CE755FB003FD}"= TCP:D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:CrysisDedicatedServer_32

"{8578C46B-CBF2-450C-94BC-358459E80C6C}"= UDP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA

"{D6EF5209-68F2-4062-875C-C4E53D484D09}"= TCP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA

"{7B031C67-2576-4ABB-AC5A-19A0056D0914}"= UDP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB

"{A053F832-BA16-4614-8155-A20A53F76C52}"= TCP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB

"{A7FB429A-C53A-4BFB-9E5B-3234D5C4EA84}"= UDP:D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)

"{21064500-2A73-4A6A-9403-D55A81679F3B}"= TCP:D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)

"{9F6488E7-9664-4FFF-A6B6-F1FB829C03FB}"= UDP:D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)

"{40578FB3-5DF0-44E5-B092-349A35223C76}"= TCP:D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)

"{8F30767B-DFC2-422B-B9EC-F93C67E1681F}"= UDP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb

"{9A90872D-B541-44E6-93B9-175DE8FB0A65}"= TCP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb

"{96A4B6AE-D61E-46E6-9161-E9461911D3E5}"= UDP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray

"{D868905C-F2C1-4AD0-A33F-08DA4DBC74F7}"= TCP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray

"{8106BD3D-1A1C-461A-8D2B-59CDEF5130C6}"= UDP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR

"{3D679AEC-290E-4B31-9DB4-3385A11D8148}"= TCP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR

"{B3B104B4-B0D4-4E35-9A00-D5AA7DCB3C6D}"= UDP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client

"{3E191997-1FE6-4BAB-80A9-8F40104E9358}"= TCP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client

"TCP Query User{A9530229-6B79-442B-9A88-D8330562D171}C:\\program files\\ares\\ares.exe"= UDP:C:\program files\ares\ares.exe:Ares p2p for windows

"UDP Query User{DDA2EDBB-984B-4E05-8024-C8860324F3FA}C:\\program files\\ares\\ares.exe"= TCP:C:\program files\ares\ares.exe:Ares p2p for windows

"TCP Query User{B66846E9-7277-4E8E-B5B7-F46784CE0BD7}C:\\program files\\steam\\steamapps\\nerox16\\counter-strike source\\hl2.exe"= UDP:C:\program files\steam\steamapps\nerox16\counter-strike source\hl2.exe:hl2

"UDP Query User{11DD29B8-1AE8-4100-B961-B4E7A0902E1C}C:\\program files\\steam\\steamapps\\nerox16\\counter-strike source\\hl2.exe"= TCP:C:\program files\steam\steamapps\nerox16\counter-strike source\hl2.exe:hl2

"TCP Query User{FCAEBC0C-248B-4474-BD61-BEB03616D40C}C:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:C:\program files\veoh networks\veoh\veohclient.exe:Veoh Client

"UDP Query User{238D5451-0E65-45BD-9E93-B206E873D557}C:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:C:\program files\veoh networks\veoh\veohclient.exe:Veoh Client

"TCP Query User{BB253C00-D4C9-483B-9107-A30550DF5A5D}C:\\xpc\\strongdc++ 2.03\\strongdc.exe"= UDP:C:\xpc\strongdc++ 2.03\strongdc.exe:StrongDC++

"UDP Query User{8E4C577A-AAF6-4B56-BD4E-F85CA7C2634E}C:\\xpc\\strongdc++ 2.03\\strongdc.exe"= TCP:C:\xpc\strongdc++ 2.03\strongdc.exe:StrongDC++

"TCP Query User{FA0E0609-F37A-4BCD-AECE-BB094B6F285F}C:\\program files\\world of warcraft\\backgrounddownloader.exe"= UDP:C:\program files\world of warcraft\backgrounddownloader.exe:Blizzard Downloader

"UDP Query User{16F51179-F3EC-4E7C-A39C-2AF03C896D67}C:\\program files\\world of warcraft\\backgrounddownloader.exe"= TCP:C:\program files\world of warcraft\backgrounddownloader.exe:Blizzard Downloader

"{B8A1775E-7CBE-46C2-BF17-79F5C59EAD60}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

"TCP Query User{6EF54291-A890-4430-9A48-83A59C37BEA7}C:\\program files\\steam\\steamapps\\exmx\\counter-strike source\\hl2.exe"= UDP:C:\program files\steam\steamapps\exmx\counter-strike source\hl2.exe:hl2

"UDP Query User{F92EC31C-EFEC-41CC-8304-D3778F47860D}C:\\program files\\steam\\steamapps\\exmx\\counter-strike source\\hl2.exe"= TCP:C:\program files\steam\steamapps\exmx\counter-strike source\hl2.exe:hl2

"{FBF5FF14-7904-4473-A8DB-1CD2E6D62DC1}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]

"EnableFirewall"= 0 (0x0)

 

R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-06-05 179712]

R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-03-07 32256]

S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 17:51 13560]

S2 NinjaVideo Helper.exe;NinjaVideo Helper;C:\Program Files\NinjaVideo\NinjaVideo Helper\NinjaVideo Helper.exe [2008-04-10 110592]

S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-09-20 92656]

 

*Newly Created Service* - CATCHME

*Newly Created Service* - PROCEXP90

.

- - - - ORPHANS REMOVED - - - -

 

HKLM-Run-IgfxTray - C:\Windows\system32\igfxtray.exe

HKLM-Run-HotKeysCmds - C:\Windows\system32\hkcmd.exe

HKLM-Run-Persistence - C:\Windows\system32\igfxpers.exe

HKLM-Run-SetPanel - C:\Acer\APanel\APanel.cmd

HKLM-Run-Acer Tour - (no file)

HKLM-Run-eRecoveryService - (no file)

HKLM-RunOnce-<NO NAME> - (no file)

HKU-Default-Run-Nokia.PCSync - C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

 

 

.

------- Supplementary Scan -------

.

FireFox -: Profile - C:\Users\STEFFM~1\AppData\Roaming\Mozilla\Firefox\Profiles\66wqqmhx.default\

FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npclntax_ZangoSA.dll

FF -: plugin - C:\Program Files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll

FF -: plugin - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-10-24 17:02:00

Windows 6.0.6001 Service Pack 1 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Completion time: 2008-10-24 17:03:45

ComboFix-quarantined-files.txt 2008-10-24 15:03:42

 

Pre-Run: Finner ikke meldingstekst for melding nummer 0x2379 i meldingsfilen for Application.

Post-Run: 18,108,243,968 byte ledig

 

233 --- E O F --- 2008-09-26 15:54:01

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:16:22, on 24.10.2008

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Safe mode with network support

 

Running processes:

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\NOTEPAD.EXE

C:\Windows\Explorer.exe

C:\Windows\system32\notepad.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Users\Steffmeister\Desktop\HJT\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://no.intl.acer.yahoo.com

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Påloggingshjelp for Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting

O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"

O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKLM\..\Run: [symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"

O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] D:\Antimalware\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background

O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide

O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')

O4 - Startup: OneNote 2007 Screen Clipper og Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O8 - Extra context menu item: &Winamp Toolbar Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll

O9 - Extra button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (file missing)

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo.../sysreqlab2.cab

O20 - AppInit_DLLs: eNetHook.dll

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: NinjaVideo Helper (NinjaVideo Helper.exe) - NinjaVideo - C:\Program Files\NinjaVideo\NinjaVideo Helper\NinjaVideo Helper.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

 

--

End of file - 10874 bytes

Endret 24. oktober 2008 av stega

[stega]

Setter veldig pris på et kjapt svar vist noen har tid til å ta en titt på loggene, har veldig lite lyst til å formatere den.

[stega]

Ingen som kan helpe meg med dette?

[norbat]

Programmene slettet noe smårusk, men jeg tror ikke dette var/er skyld i dine problemer. Ville ha forsøkt å reinstallert skjermkortdriveren.

[stega]

Ok, jeg får se om jeg klarer det da.. Takk

 

Edit: Fikk ikke til å reinstallere driveren, jeg prøvde å slette den gamle, rett etterpå ville den installere den igjen, jeg gjorde det og fortsatt ingen forandring. Prøvde også å søke etter driveroppdateringer, og jeg lastet ned en driver fra nvidia men fikk ikke installert den..

Endret 25. oktober 2008 av stega

[norbat]

I kjør/søk-feltet skriver du cmd

Høyreklikk på cmd og velg "Kjør som administrator"

Fra ledetekst, skriv sfc /scannow

[stega]

Greit Holder på å scanne den nå, går ut ifra at du vil ha en slags logg eller lignende etterpå?

 

Windows Ressursbeskyttelse fant skadede filer, men kunne ikke reparere noen av dem. Detaljer finnes i CBS.log windir\logs\cbs\cbs.log For eksempel C:\Windows\logs\CBS\CBS.log

 

Den loggen var JÆVLIG svær, dessuten er den på den andre pcen og jeg har ikke nett på den akkurat nå. Skal se om jeg får lastet den opp, takk igjen

 

Jeg tror filen er for stor, kan prøve å dele den opp..

Endret 25. oktober 2008 av stega

[norbat]

Hvis det ble funnet skadede filer som ikke kunne repareres, så tror jeg at du bør kjøre en repair av din Windows-installasjon. Har du Vista-dvd'en, så booter du med den og kjører en repair.

Endret 25. oktober 2008 av norbat

[stega]

Jeg har ikke windows cden, har acer pc -.- Tror ikke jeg har den ihvertfall, men vet du hva som kan være grunnen til at dette har skjedd? Er det virus eller kan det være en annen grunn? Vil du se den loggen forresten eller er ikke det nødvendig?

 

Forresten, er jeg nødt til å ha den cden som ble brukt til denne pcen eller kan jeg bare låne en windows vista dvd av en venn å reparere den med? Jeg har veldig lite lyst til å levere inn pcen til reparasjon, sist gang jeg leverte inn mobilen tok det nesten 2 måneder før de fant ut at de ikke klarte å fikse den og sendte meg en ny..

 

Tusen takk for hjelpen forresten, jeg setter virkelig pris på at du tar deg tid til det

Endret 25. oktober 2008 av stega

[norbat]

Hvorfor dette har skjedd er vanskelig å svare på. Enkelte ganger blir det bare slik, dessverre.

 

Mulig det ligger en gjenopprettingspartisjon på pc som du aktiverer ved å trykke på en tast (eks. F11, ALT+F11 etc). Hvis, så er det mulig at dette vil stille pc'n tilbake til fabrikktilstand. Du vil da miste det du evt. måtte ha av personlig data (bilder, dok, epost, kontakter etc.) om du ikke tar/har tatt backup av dette. Har en mistanke om at dette er løsningen du må nøye deg med

[stega]

Jeg prøvde å velge "Tilbakestill PCen til et tidspunkt da den fungerte" eller noe sånt, det funket ikke. Mener du jeg skal trykke f11 eller noe sånt når jeg starter den?

[norbat]

Det jeg mener er, ta backup av det du trenger og kjør evt. en repair/reinstallering om det er mulig via recovery-partisjonen om dette er noe som ligger på pc'n. Denne kan aktiveres under boot ved å trykke F11 eller ALT + F11 eller annen tast/kombinasjon. Dette står det sikkert noe om i manualen.

[stega]

Ok, jeg skal prøve, takk igjen Gir en lyd når jeg har sjekket opp hva jeg må gjøre.