Startmeny fungerer ikke, iexplore lukker seg

[Vizla]

Hei! Har et problem som oppstod etter jeg hadde besøk av en liten trojaner som logget til svchost i Windows/System32 mappa. Den sluttet ettter jeg kjørte ComboFix, men nå har jeg et annet problem etter reboot. ( Har gått gjennom loggen og ser ingen grunn til at det skal være forårsaket av ComboFix )

Startmenyen fungerer ikke ved normal oppstart, samme med explorer. I safeboot ( som jeg kjører nå ) fungerer snarveiene windowsknapp+e/r, og når jeg da kjørte internet explorer manuelt dukket startmenyen opp. Dog, den har ingen faner ( Alt+tab fungerer ). Internet explorer lukket seg også automatisk rett etter den startet opp, Firefox fungerer uten problemer.

Ved oppstart "hviler" maskinen 10-20 sekunder etter login ( Samme i safemode ), før den går videre til å laste NOD32 som tar 30-60 sekunder. Normalt tar en oppstart 5-10 sekunder på det meste. Har gått gjennom msconfig+hijackthis og fjernet alt unødvendig uten at det hjalp.

 

Forslag til hva jeg bør sjekke ? Famler i blinde her.

 

Mvh

Gunnar

Endret 4. februar 2009 av Vizla

[norbat]

Synes du skal post combofix-loggen. Du finner den på c:\combofix.txt

[Vizla]

Hvis du ønsker snapshot, si fra

La forøvrig merke til to ting til: Copy/Paste i Firefox fungerer ikke, og søk-funksjonen i windows fungerer ikke.

 

ComboFix 09-02-02.04 - Gunnar 2009-02-03 16:22:38.5 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1044.18.2046.1453 [GMT 1:00]

Kjører fra: d:\firefox downloads\ComboFix.exe

AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated)

* Opprettet nytt gjenopprettingspunkt

 

ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!

.

 

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\All Users\Programdata\Microsoft\Network\Downloader\qmgr0.dat

c:\documents and settings\All Users\Programdata\Microsoft\Network\Downloader\qmgr1.dat

C:\install.exe

 

----- BITS: Mulige infiserte sider -----

 

hxxp://au.download.windowj+|Cv+@J:NGD_DQ{zcxLJS@pT=G`f%WU Client DownloadS-1-5-18`HT4?? 6VwoQZCDHM6VwoQZCDHMXu^^^^^wcxLJS@GD_DQ{zGD_DQ{zGD_DQ{z+@J:Nj+|Cvwsupdate.com

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2009-01-03 til 2009-02-03 )))))))))))))))))))))))))))))))))

.

 

2009-02-03 14:54 . 2009-02-03 16:19 4,362 --a------ c:\windows\system32\svchost

2009-01-31 16:55 . 2008-10-16 14:06 268,648 --a------ c:\windows\system32\mucltui.dll

2009-01-31 16:55 . 2008-10-16 14:06 208,744 --a------ c:\windows\system32\muweb.dll

2009-01-31 16:55 . 2008-10-16 14:06 27,496 --a------ c:\windows\system32\mucltui.dll.mui

2009-01-31 07:37 . 2009-01-31 07:37 <DIR> d-------- c:\documents and settings\Gunnar\Tracing

2009-01-31 07:35 . 2009-01-31 07:35 <DIR> d-------- c:\programfiler\Microsoft

2009-01-31 07:34 . 2009-01-31 07:34 <DIR> d-------- c:\programfiler\Windows Live SkyDrive

2009-01-31 07:34 . 2009-01-31 07:35 <DIR> d-------- c:\programfiler\Windows Live

2009-01-31 07:32 . 2009-01-31 07:32 <DIR> d-------- c:\programfiler\Fellesfiler\Windows Live

2009-01-29 12:33 . 2009-01-29 12:33 4,096 --a------ c:\windows\system32\crash

2009-01-27 18:23 . 2008-10-10 04:52 4,379,984 --a------ c:\windows\system32\D3DX9_40.dll

2009-01-27 18:23 . 2008-10-27 10:04 514,384 --a------ c:\windows\system32\XAudio2_3.dll

2009-01-27 18:23 . 2008-10-27 10:04 70,992 --a------ c:\windows\system32\XAPOFX1_2.dll

2009-01-27 18:23 . 2008-10-27 10:04 23,376 --a------ c:\windows\system32\X3DAudio1_5.dll

2009-01-26 22:05 . 2009-01-26 22:05 <DIR> d-------- c:\documents and settings\Gunnar\Programdata\atitray

2009-01-26 19:04 . 2009-01-26 19:04 <DIR> d-------- c:\documents and settings\Gunnar\Programdata\ATI

2009-01-26 19:04 . 2009-01-26 19:04 <DIR> d-------- c:\documents and settings\All Users\Programdata\ATI

2009-01-26 19:01 . 2008-12-01 14:35 593,920 --------- c:\windows\system32\ati2sgag.exe

2009-01-26 19:01 . 2009-01-26 19:02 1,131 --a------ c:\windows\ATICIM.INI

2009-01-26 18:56 . 2009-01-26 18:56 0 --a------ c:\windows\ativpsrm.bin

2009-01-26 18:54 . 2009-01-26 21:55 <DIR> d-------- c:\programfiler\ATI Technologies

2009-01-26 18:53 . 2009-01-26 18:53 <DIR> d-------- C:\ATI

2009-01-21 15:03 . 2009-01-21 15:03 <DIR> d-------- c:\windows\system32\xlive

2009-01-21 15:02 . 2009-01-21 15:03 <DIR> d-------- c:\programfiler\Microsoft Games for Windows - LIVE

2009-01-15 03:21 . 2009-01-15 03:27 <DIR> d-------- c:\programfiler\The Lord of the Rings - Conquest

2009-01-15 03:15 . 2009-01-15 03:15 <DIR> d-------- c:\documents and settings\All Users\Programdata\Electronic Arts

2009-01-14 21:53 . 2009-01-26 18:45 <DIR> d-------- c:\programfiler\RivaTuner v2.22

2009-01-14 20:59 . 2009-01-14 20:59 <DIR> d-------- c:\programfiler\RivaTuner v2.09

2009-01-14 03:08 . 2009-01-26 05:37 <DIR> d-------- C:\Games

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-02-01 12:44 137,688 ----a-w c:\windows\system32\drivers\PnkBstrK.sys

2009-02-01 12:43 202,040 ----a-w c:\windows\system32\PnkBstrB.exe

2009-02-01 03:17 --------- d-----w c:\documents and settings\All Users\Programdata\Microsoft Help

2009-01-30 15:12 --------- d-----w c:\documents and settings\Gunnar\Programdata\uTorrent

2009-01-27 21:20 --------- d-----w c:\documents and settings\Gunnar\Programdata\Winamp

2009-01-27 17:23 --------- d--h--w c:\programfiler\InstallShield Installation Information

2009-01-27 05:56 --------- d-----w c:\programfiler\Fellesfiler\Wise Installation Wizard

2009-01-22 20:46 --------- d-----w c:\documents and settings\Gunnar\Programdata\Hamachi

2009-01-08 00:02 --------- d-----w c:\documents and settings\Gunnar\Programdata\MSN6

2008-12-30 14:59 --------- d-----w c:\documents and settings\All Users\Programdata\nView_Profiles

2008-12-17 18:16 --------- d-----w c:\programfiler\Ubisoft

2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys

2008-12-11 00:33 86,016 ----a-w c:\windows\system32\dpl100.dll

2008-12-11 00:33 200,704 ----a-w c:\windows\system32\dtu100.dll

2008-12-09 02:28 593,920 ----a-w c:\windows\system32\dpuGUI11.dll

2008-12-09 02:28 57,344 ----a-w c:\windows\system32\dpv11.dll

2008-12-09 02:28 344,064 ----a-w c:\windows\system32\dpus11.dll

2008-12-09 02:28 294,912 ----a-w c:\windows\system32\dpu11.dll

2008-12-02 22:11 801,312 ----a-w c:\windows\system32\nvcplui.exe

2008-12-02 22:11 45,056 ----a-w c:\windows\system32\nvmccsrs.dll

2008-12-02 22:11 2,744,320 ----a-w c:\windows\system32\nvwss.dll

2008-12-02 22:11 1,560,576 ----a-w c:\windows\system32\nvcuda.dll

2008-12-02 21:37 49,480 ----a-w c:\windows\system32\sirenacm.dll

2008-12-01 20:52 425,984 ----a-w c:\windows\system32\ATIDEMGX.dll

2008-12-01 20:51 318,464 ----a-w c:\windows\system32\ati2dvag.dll

2008-12-01 20:46 11,304,960 ----a-w c:\windows\system32\atioglxx.dll

2008-12-01 20:41 188,416 ----a-w c:\windows\system32\atipdlxx.dll

2008-12-01 20:40 43,520 ----a-w c:\windows\system32\ati2edxx.dll

2008-12-01 20:40 26,112 ----a-w c:\windows\system32\Ati2mdxx.exe

2008-12-01 20:40 147,456 ----a-w c:\windows\system32\Oemdspif.dll

2008-12-01 20:40 143,360 ----a-w c:\windows\system32\ati2evxx.dll

2008-12-01 20:38 598,016 ----a-w c:\windows\system32\ati2evxx.exe

2008-12-01 20:37 53,248 ----a-w c:\windows\system32\ATIDDC.DLL

2008-12-01 20:27 4,120,384 ----a-w c:\windows\system32\ati3duag.dll

2008-12-01 20:19 307,200 ----a-w c:\windows\system32\atiiiexx.dll

2008-12-01 20:11 2,495,360 ----a-w c:\windows\system32\ativvaxx.dll

2008-12-01 19:57 48,640 ----a-w c:\windows\system32\amdpcom32.dll

2008-12-01 19:53 45,056 ----a-w c:\windows\system32\amdcalrt.dll

2008-12-01 19:53 45,056 ----a-w c:\windows\system32\amdcalcl.dll

2008-12-01 19:53 401,408 ----a-w c:\windows\system32\atikvmag.dll

2008-12-01 19:52 86,016 ----a-w c:\windows\system32\atiadlxx.dll

2008-12-01 19:52 17,408 ----a-w c:\windows\system32\atitvo32.dll

2008-12-01 19:50 3,252,224 ----a-w c:\windows\system32\Amdcaldd.dll

2008-12-01 19:50 286,720 ----a-w c:\windows\system32\atiok3x2.dll

2008-12-01 19:45 577,536 ----a-w c:\windows\system32\ati2cqag.dll

2008-11-13 14:21 600,576 ----a-w c:\windows\system32\crypt32.dll

2008-11-13 14:21 177,664 ----a-w c:\windows\system32\wintrust.dll

2008-11-10 12:44 682,280 ----a-w c:\windows\system32\pbsvc.exe

2008-11-10 12:44 66,872 ----a-w c:\windows\system32\PnkBstrA.exe

2008-11-10 12:44 22,328 ----a-w c:\documents and settings\Gunnar\Programdata\PnkBstrK.sys

2008-11-06 16:37 524,288 ----a-w c:\windows\system32\DivXsm.exe

2008-11-06 16:37 3,596,288 ----a-w c:\windows\system32\qt-dx331.dll

2008-11-06 16:35 200,704 ----a-w c:\windows\system32\ssldivx.dll

2008-11-06 16:35 1,044,480 ----a-w c:\windows\system32\libdivx.dll

2008-11-06 16:33 823,296 ----a-w c:\windows\system32\divx_xx0c.dll

2008-11-06 16:33 823,296 ----a-w c:\windows\system32\divx_xx07.dll

2008-11-06 16:33 815,104 ----a-w c:\windows\system32\divx_xx0a.dll

2008-11-06 16:33 802,816 ----a-w c:\windows\system32\divx_xx11.dll

2008-11-06 16:33 684,032 ----a-w c:\windows\system32\DivX.dll

2008-11-06 16:33 12,288 ----a-w c:\windows\system32\DivXWMPExtType.dll

2003-12-18 10:33 20,102 ----a-w c:\programfiler\Readme.txt

2003-09-03 06:46 10,960 ----a-w c:\programfiler\EULA.txt

.

 

------- Sigcheck -------

 

2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys

2004-08-04 07:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtServicePackUninstall$\tcpip.sys

2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\$NtUninstallKB951748$\tcpip.sys

2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\ServicePackFiles\i386\TCPIP.SYS

2008-07-14 18:36 361600 d24ea301e2b36c4e975fd216ca85d8e7 c:\windows\system32\dllcache\TCPIP.SYS

2008-07-14 18:36 361600 d24ea301e2b36c4e975fd216ca85d8e7 c:\windows\system32\drivers\TCPIP.SYS

.(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"egui"="d:\programfiler\ESET\egui.exe" [2008-02-20 1443072]

"RivaTuner"="d:\programfiler\RivaTuner v2.22\RivaTuner.exe" [2008-12-29 2732032]

"RTHDCPL"="RTHDCPL.EXE" [2008-03-26 c:\windows\RTHDCPL.exe]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"VIDC.XFR1"= xfcodec.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]

--a------ 2008-04-14 17:22 15360 c:\windows\system32\ctfmon.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]

--a------ 2008-10-09 13:53 200136 d:\programfiler\DAEMON Tools Pro\DTProAgent.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

--a------ 2008-08-29 17:11 61440 c:\programfiler\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"SandraTheSrv"=3 (0x3)

"SandraDataSrv"=3 (0x3)

"Bonjour Service"=2 (0x2)

"WMPNetworkSvc"=3 (0x3)

"Viewpoint Manager Service"=2 (0x2)

"rpcapd"=3 (0x3)

"mpich2_smpd"=2 (0x2)

"idsvc"=3 (0x3)

"FLEXnet Licensing Service"=3 (0x3)

"appdrvrem01"=2 (0x2)

"Crypkey License"=2 (0x2)

"SharedAccess"=2 (0x2)

"ose"=3 (0x3)

"odserv"=3 (0x3)

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

"UpdatesDisableNotify"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\WINDOWS\\system32\\PnkBstrA.exe"=

"c:\\WINDOWS\\system32\\PnkBstrB.exe"=

"d:\\Programfiler\\SiSoftware Sandra Pro Business XII\\Win32\\RpcDataSrv.exe"=

"d:\\Programfiler\\SiSoftware Sandra Pro Business XII\\RpcSandraSrv.exe"=

"d:\\Programfiler\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=

"d:\\Programfiler\\uTorrent\\uTorrent.exe"=

"c:\\Programfiler\\Messenger\\msmsgs.exe"=

"c:\\Programfiler\\uTorrent\\uTorrent.exe"=

"c:\\Programfiler\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]

"AllowInboundEchoRequest"= 1 (0x1)

 

R1 Ai2sXP;Ai2sXP;c:\windows\system32\drivers\Ai2sXP.sys [2008-09-10 7296]

R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [2008-09-15 2915944]

R1 atitray;atitray;d:\programfiler\ATI Tray Tools\atitray.sys [2008-09-08 18336]

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-02-20 33800]

R2 ekrn;Eset Service;d:\programfiler\ESET\ekrn.exe [2008-02-20 472320]

S1 TVicPort64;TVicPort64;\??\c:\windows\SysWOW64\drivers\TVicPort64.sys --> c:\windows\SysWOW64\drivers\TVicPort64.sys [?]

S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2001-10-09 3584]

S3 DBKDRVR54;DBKDRVR54;\??\d:\programfiler\Cheat Engine\dbk32.sys --> d:\programfiler\Cheat Engine\dbk32.sys [?]

S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]

S3 RTCore32;RTCore32;\??\d:\programfiler\RMClock\RTCore32.sys --> d:\programfiler\RMClock\RTCore32.sys [?]

S4 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]

S4 mpich2_smpd;MPICH2 Process Manager, Argonne National Lab;d:\programfiler\Folding@Home Windows SMP Client V1.01\smpd.exe --> d:\programfiler\Folding@Home Windows SMP Client V1.01\smpd.exe [?]

S4 Viewpoint Manager Service;Viewpoint Manager Service;c:\programfiler\Viewpoint\Common\ViewpointService.exe [2008-09-01 24652]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6e915a39-bf01-11dd-af17-00508dbcaed5}]

\Shell\AutoRun\command - H:\Setup.exe /autorun

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b641323-bef2-11dd-af14-00508dbcaed5}]

\Shell\AutoRun\command - G:\Setup.exe /autorun

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b641324-bef2-11dd-af14-00508dbcaed5}]

\Shell\AutoRun\command - G:\Setup.exe /autorun

 

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{11B762AF-09CC-8DB8-0706-030102020402}]

c:\windows\system32\svchost.exe

.

- - - - TOMME PEKERE FJERNET - - - -

 

MSConfigStartUp-NvCplDaemon - c:\windows\system32\NvCpl.dll

MSConfigStartUp-NvMediaCenter - c:\windows\system32\NvMcTray.dll

 

 

.

------- Tilleggsskanning -------

.

IE: Sothink SWF Catcher - c:\programfiler\Fellesfiler\SourceTec\SWF Catcher\InternetExplorer.htm

TCP: {3332421E-F112-43D7-AEFF-BE55074F0022} = 67.15.193.167,195.12.4.247

FF - ProfilePath - c:\documents and settings\Gunnar\Programdata\Mozilla\Firefox\Profiles\2fmttd4m.default\

FF - prefs.js: browser.startup.homepage - www.google.no

FF - plugin: c:\programfiler\Viewpoint\Viewpoint Media Player\npViewpoint.dll

FF - plugin: d:\programfiler\Adobe\Reader 8.0\Reader\browser\nppdf32.dll

FF - plugin: d:\programfiler\DivX\DivX Web Player\npdivx32.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\np-mswmp.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\np32dsw.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\npdivx32.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\npLegitCheckPlugin.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\npnul32.dll

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\NPOFF12.DLL

FF - plugin: d:\programfiler\Mozilla Firefox\plugins\npViewpoint.dll

FF - plugin: d:\programfiler\VideoLAN\VLC\npvlc.dll

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-02-03 16:23:24

Windows 5.1.2600 Service Pack 3 NTFS

 

skanner skjulte prosesser ...

 

skanner skjulte autostart-oppføringer ...

 

skanner skjulte filer ...

 

skanning vellykket

skjulte filer: 0

 

**************************************************************************

.

--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

 

- - - - - - - > 'winlogon.exe'(928)

c:\windows\system32\Ati2evxx.dll

.

Tidspunkt ferdig: 2009-02-03 16:24:27

ComboFix-quarantined-files.txt 2009-02-03 15:24:20

ComboFix2.txt 2008-12-04 16:10:09

ComboFix3.txt 2008-09-17 00:02:17

ComboFix4.txt 2008-09-16 23:37:26

ComboFix5.txt 2008-12-09 17:17:54

 

Pre-Run: 31,548,760,064 byte ledig

Post-Run: 31,612,174,336 byte ledig

 

1232 --- E O F --- 2009-02-01 03:17:29

Endret 4. februar 2009 av Vizla

[norbat]

Åpne notisblokk og kopier inn det som står i fet skrift under, lagre fila på skrivebordet som CFScript.txt.

Dra deretter fila over Combofix-iconet. Combofix vil starte igjen. Post loggen.

 

 

Registry::

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{11B762AF-09CC-8DB8-0706-030102020402}]

 

FCopy::

c:\windows\ServicePackFiles\i386\TCPIP.SYS|c:\windows\system32\drivers\TCPIP.SYS

c:\windows\ServicePackFiles\i386\TCPIP.SYS|c:\windows\system32\dllcache\TCPIP.SYS

 

DirLook::

c:\windows\system32\svchost

 

FileLook::

c:\windows\system32\svchost

[Vizla]

Kan ikke si annet enn tusen takk for hjelpen norbat, men jeg endte opp med å gjøre en kjapp format c:. Det var fler og fler problemer som dukket opp jo mer jeg rotet rundt i Windows, så til slutt på det som en tapt sak

 

Dog lekse lært: Aldri bruke NOD32 igjen!

Endret 5. februar 2009 av Vizla