Kazaksan - logger fra anti-malware, og hijack this. Nett detter ut eller går himla tregt.

[Kazaksan]

Hei,

 

Har et problem med nettet, så leste jeg guiden som er klistret. Nettet detter enten fullstendig ut ellers så går det himla tregt. Når jeg prøver å logge på msn, så får jeg feil ved Standard Gateway (vet ikke om det er noe til hjelp.) Det tilfeldig kommer og går i løpet av de siste ukene.

 

Har prøvd deres tre programmer og loggende er som følger:

 

 

Malwarebytes' Anti-Malware 1.32

Database version: 1647

Windows 5.1.2600 Service Pack 3

 

12.01.2009 21:50:03

mbam-log-2009-01-12 (21-50-03).txt

 

Scan type: Quick Scan

Objects scanned: 74921

Time elapsed: 11 minute(s), 6 second(s)

 

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

 

Memory Processes Infected:

(No malicious items detected)

 

Memory Modules Infected:

(No malicious items detected)

 

Registry Keys Infected:

(No malicious items detected)

 

Registry Values Infected:

(No malicious items detected)

 

Registry Data Items Infected:

(No malicious items detected)

 

Folders Infected:

(No malicious items detected)

 

Files Infected:

(No malicious items detected)

 

 

 

 

ComboFix 09-01-11.04 - admin 2009-01-12 21:52:43.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.2036 [GMT 1:00]

Running from: c:\documents and settings\admin\Desktop\ComboFix.exe

AV: avast! antivirus 4.8.1296 [VPS 090112-0] *On-access scanning disabled* (Updated)

* Created a new restore point

 

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

.

 

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat

c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat

C:\install.exe

 

----- BITS: Possible infected sites -----

 

hxxp://lp2.patch.station.sony.com:7000

.

((((((((((((((((((((((((( Files Created from 2008-12-12 to 2009-01-12 )))))))))))))))))))))))))))))))

.

 

2009-01-12 21:38 . 2009-01-12 21:38 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-01-12 21:38 . 2009-01-12 21:38 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-01-12 21:38 . 2009-01-12 21:38 <DIR> d-------- c:\documents and settings\admin\Application Data\Malwarebytes

2009-01-12 21:38 . 2009-01-04 18:38 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

2009-01-12 21:38 . 2009-01-04 18:38 15,504 --a------ c:\windows\system32\drivers\mbam.sys

2009-01-11 14:34 . 2009-01-11 14:34 <DIR> d-------- c:\program files\Gameforge4D

2009-01-11 14:34 . 2004-05-10 12:14 118,272 --a------ c:\windows\system32\SX5363S.DLL

2009-01-11 14:34 . 2004-05-10 12:14 102,400 --a------ c:\windows\system32\RV32RTP.dll

2009-01-11 14:34 . 2004-05-10 12:15 40 --a------ c:\windows\system32\Sx5363.ini

2009-01-10 14:16 . 2009-01-10 14:16 <DIR> d-------- c:\program files\Atari

2008-12-29 18:29 . 2008-12-29 18:29 0 --a------ c:\windows\nsreg.dat

2008-12-23 23:03 . 2008-12-23 23:03 <DIR> d-------- c:\documents and settings\All Users\Application Data\CyberLink

2008-12-23 23:03 . 2008-12-23 23:03 <DIR> d-------- c:\documents and settings\admin\Application Data\CyberLink

2008-12-23 23:02 . 2008-12-23 23:02 <DIR> d-------- c:\program files\CyberLink

2008-12-23 23:02 . 2008-12-23 23:02 <DIR> d-------- c:\program files\Common Files\CyberLink

2008-12-23 23:02 . 2008-12-23 23:01 29,480 --a------ c:\windows\system32\msxml3a.dll

2008-12-23 23:01 . 2008-12-23 23:01 <DIR> d-------- c:\documents and settings\All Users\Application Data\Temp

2008-12-23 22:48 . 2008-12-23 22:48 <DIR> d-------- c:\program files\PowerISO

2008-12-23 21:45 . 2008-12-23 21:56 <DIR> d-------- C:\Unreal Anthology

2008-12-23 21:45 . 1997-07-19 17:00 315,585 --a------ c:\windows\system32\COMCTL32.ocx

2008-12-23 21:45 . 1997-07-19 17:01 118,781 --a------ c:\windows\system32\TABCTL32.ocx

2008-12-23 21:45 . 1998-01-24 03:39 110,725 --a------ c:\windows\system32\RICHTX32.ocx

2008-12-23 21:45 . 1995-07-26 01:00 98,588 --a------ c:\windows\system32\THREED32.ocx

2008-12-23 21:45 . 2005-11-13 22:40 89,360 --a------ c:\windows\system32\VB5DB.DLL

2008-12-23 21:45 . 1997-07-19 17:00 66,924 --a------ c:\windows\system32\COMDLG32.ocx

2008-12-23 21:45 . 1995-07-26 01:00 48,640 --a------ c:\windows\system32\GRID32.ocx

2008-12-23 21:45 . 1997-01-16 10:11 44,831 --a------ c:\windows\system32\PICCLP32.ocx

2008-12-23 21:45 . 1995-07-26 01:00 43,502 --a------ c:\windows\system32\MSOUTL32.ocx

2008-12-17 21:00 . 2008-12-17 21:00 <DIR> d-------- c:\program files\MagicISO

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-01-12 20:26 --------- d-----w c:\documents and settings\admin\Application Data\Hamachi

2009-01-11 15:39 --------- d-----w c:\program files\Warcraft III

2009-01-10 21:12 --------- d-----w c:\program files\FinePixViewer

2009-01-10 13:25 107,888 ----a-w c:\windows\system32\CmdLineExt.dll

2009-01-10 12:53 --------- d-----w c:\documents and settings\admin\Application Data\Mount&Blade

2008-12-23 22:02 --------- d--h--w c:\program files\InstallShield Installation Information

2008-12-20 18:38 31 ----a-w c:\documents and settings\admin\jagex_runescape_preferences.dat

2008-12-17 20:01 --------- d-----w c:\program files\Guitar Pro 5

2008-11-29 21:44 --------- d-----w c:\program files\Mount&Blade

2008-11-16 17:30 --------- d-----w c:\program files\WC3Banlist

2008-11-15 08:27 --------- d-----w c:\documents and settings\admin\Application Data\SPORE Creature Creator

2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll

2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll

2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll

2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll

2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll

2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe

2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll

2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll

2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll

2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]

"MSConfig"="c:\windows\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2008-04-14 169984]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"vidc.tscc"= c:\progra~1\MpcStar\Codecs\tscc\tsccvid.dll

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ExifLauncher2.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ExifLauncher2.lnk

backup=c:\windows\pss\ExifLauncher2.lnkCommon Startup

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^hamachi.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\hamachi.lnk

backup=c:\windows\pss\hamachi.lnkCommon Startup

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Skyr@cer Pro PCI 154 Configuration Utility.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Skyr@cer Pro PCI 154 Configuration Utility.lnk

backup=c:\windows\pss\Skyr@cer Pro PCI 154 Configuration Utility.lnkCommon Startup

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

--a------ 2008-06-12 01:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]

--a------ 2008-07-17 14:50 2599224 c:\program files\BitComet\BitComet.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

--a------ 2008-04-14 01:12 15360 c:\windows\system32\ctfmon.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]

--a------ 2006-11-12 11:48 157592 c:\program files\DAEMON Tools\daemon.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

--a------ 2007-08-24 06:00 33648 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

--a------ 2008-05-16 13:01 13529088 c:\windows\system32\nvcpl.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

--a------ 2008-05-16 13:01 86016 c:\windows\system32\nvmctray.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]

--------- 2007-12-14 11:36 50472 c:\program files\CyberLink\PowerDVD8\Language\Language.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]

--a------ 2007-01-20 08:09 200704 c:\program files\PowerISO\PWRISOVM.EXE

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE]

--------- 2002-02-04 21:32 53248 c:\program files\REGSHAVE\REGSHAVE.EXE

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]

--------- 2008-03-20 20:23 83240 c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

--a------ 2008-06-10 03:27 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

-r------- 2005-05-03 11:43 69632 c:\windows\Alcmtr.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

--a------ 2008-05-16 13:01 1630208 c:\windows\system32\nwiz.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

-r------- 2007-03-21 07:49 16126464 c:\windows\RTHDCPL.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"FirewallOverride"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Stardock Games\\Sins of a Solar Empire\\Sins of a Solar Empire.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"c:\\Program Files\\Codemasters\\Turning Point - Fall of Liberty\\Binaries\\LTCG-TPGame.exe"=

"c:\\Program Files\\Eidos\\Kane and Lynch Dead Men\\kaneandlynch.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

"c:\\Program Files\\Microsoft Games\\Rise of Nations\\thrones.exe"=

"c:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander\\bin\\SupremeCommander.exe"=

"c:\\Program Files\\Electronic Arts\\The Battle for Middle-earth II\\game.dat"=

"c:\\Program Files\\Unreal Tournament 3\\Binaries\\UT3.exe"=

"c:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander - Forged Alliance\\bin\\ForgedAlliance.exe"=

"c:\\Program Files\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe"=

"c:\program files\Gameforge4D\AirRivals\Launcher.atm"= c:\program files\Gameforge4D\AirRivals\Launcher.atm:Enabled:GameExe2

"c:\program files\Gameforge4D\AirRivals\Res-Voip\SCVoIP.exe"= c:\program files\Gameforge4D\AirRivals\Res-Voip\SCVoIP.exe:Enabled:GameVoIP

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"8736:TCP"= 8736:TCP:BitComet 8736 TCP

"8736:UDP"= 8736:UDP:BitComet 8736 UDP

 

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-07-22 111184]

R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-07-22 20560]

S3 ALLOW-IO;ALLOW-IO;\??\d:\allow-io.sys --> d:\ALLOW-IO.sys [?]

S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2005-08-02 32512]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b8d8f7c3-5775-11dd-9414-806d6172696f}]

\Shell\AutoRun\command - D:\setup.exe /autorun

.

.

------- Supplementary Scan -------

.

IE: &D&ownload &with BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm

IE: &D&ownload all video with BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm

IE: &D&ownload all with BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\admin\Application Data\Mozilla\Firefox\Profiles\9i1kyzyc.default\

FF - plugin: c:\program files\MpcStar\Codecs\Real\browser\plugins\nppl3260.dll

FF - plugin: c:\program files\MpcStar\Codecs\Real\browser\plugins\nprpjplug.dll

 

---- FIREFOX POLICIES ----

c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".no");

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-01-12 21:55:08

Windows 5.1.2600 Service Pack 3 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Completion time: 2009-01-12 21:56:08

ComboFix-quarantined-files.txt 2009-01-12 20:56:06

 

Pre-Run: 277 210 734 592 bytes free

Post-Run: 278,867,050,496 bytes free

 

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

 

185 --- E O F --- 2008-09-05 22:13:33

 

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:57:29, on 12.01.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\bgsvcgen.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\CyberLink\Shared files\RichVideo.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Opera\opera.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\imapi.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Påloggingshjelp for Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll/206 (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo.../sysreqlab3.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

 

--

End of file - 5719 bytes

 

 

 

Mange takk!

[norbat]

Hvilket nettverksutstyr har du og hvordan er du tilkoblet , er det flere pc'er tilkoblet og evt. hvordan fungerer nettet på disse?

 

Loggene dine viser ikke noe malware, så nettverksproblemet skyldes antakelig noe annet.

[Kazaksan]

Jeg går ut ifra hovedkortet, via nettverks kabel til en svitsj som videre går til ruter.

 

Andre PC-er på nettet har samme nettverksproblem, så det tyder nok på at leverandøren har feil (selv om de har sagt at de skulle ha det korrigert i dag.)

[norbat]

Ja, du bør avklare om linja er ok fra leverandøren før videre feilsøk, men du kunne ha forsøkt å koblet deg rett på ruter for å utelukke at det ikke er svitsjen som er problemet.

[Kazaksan]

Takk, det skal jeg prøve.

 

Men det er da godt nok å avklare at det er ikke maskinen(ene) som er sannsynligvis problemet. Om linja er i ustand, da er saken avgjort, om ikke, blir det et puslespill.