Pcen lagger (logger inkl. i posten)

[Gnotten]

Pcen lagger en del til tider. Jeg har renset maskinen med ccleaner, defragmentert den... Er generelt flink på dette.

 

Her har dere loggene:

 

 

MBAM

Klikk for å se/fjerne innholdet nedenfor

Malwarebytes' Anti-Malware 1.37

Databaseversjon: 2225

Windows 5.1.2600 Service Pack 3

 

03.06.2009 22:15:30

mbam-log-2009-06-03 (22-15-30).txt

 

Skanntype: Rask Skann

Objekter skannet: 81355

Tid tilbakelagt: 4 minute(s), 4 second(s)

 

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 2

Registerverdier infisert: 2

Registerfiler infisert: 0

Mapper infisert: 0

Filer infisert: 1

 

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

 

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

 

Registernøkler infisert:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{801ecc10-aec2-3cec-adcb-d73ef73d3df4} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{801ecc10-aec2-3cec-adcb-d73ef73d3df4} (Trojan.BHO) -> Quarantined and deleted successfully.

 

Registerverdier infisert:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\XML2u (Spyware.OnlineGames) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\w32id (Spyware.OnlineGames) -> Quarantined and deleted successfully.

 

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

 

Mapper infisert:

(Ingen mistenkelige filer funnet)

 

Filer infisert:

c:\programfiler\Uninstall Ask Toolbar.dll (Adware.AskSBAR) -> Quarantined and deleted successfully.

 

Combofix

Klikk for å se/fjerne innholdet nedenfor

ComboFix 09-06-03.01 - Chris 03.06.2009 22:27.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.47.1044.18.1014.549 [GMT 2:00]

Kjører fra: c:\documents and settings\Chris\Skrivebord\ComboFix.exe

AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

FW: ZoneAlarm Security Suite Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

 

ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!

.

 

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\programfiler\WinPCap

c:\programfiler\WinPCap\daemon_mgm.exe

c:\programfiler\WinPCap\npf_mgm.exe

c:\programfiler\WinPCap\rpcapd.exe

c:\windows\struct~.ini

c:\windows\system32\AutoRun.inf

c:\windows\system32\drivers\npf.sys

c:\windows\system32\Packet.dll

c:\windows\system32\pthreadVC.dll

c:\windows\system32\WanPacket.dll

c:\windows\system32\wpcap.dll

 

.

((((((((((((((((((((((((((((((((((((((( Drivere/Tjenester )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_NPF

 

 

((((((((((((((((((((((((((( Filer Opprettet Fra 2009-05-03 til 2009-06-03 )))))))))))))))))))))))))))))))))

.

 

2009-06-03 20:09 . 2009-06-03 20:09 -------- d-----w- c:\documents and settings\Chris\Programdata\Malwarebytes

2009-06-03 20:09 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2009-06-03 20:09 . 2009-06-03 20:09 -------- d-----w- c:\documents and settings\All Users\Programdata\Malwarebytes

2009-06-03 20:09 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys

2009-06-03 20:09 . 2009-06-03 20:09 -------- d-----w- c:\programfiler\Malwarebytes' Anti-Malware

2009-06-03 20:02 . 2009-06-03 20:18 -------- d--h--r- c:\documents and settings\Chris\Siste

2009-05-24 10:04 . 2009-06-03 20:20 433432 ----a-w- c:\documents and settings\LocalService\Lokale innstillinger\Programdata\FontCache3.0.0.0.dat

2009-05-15 22:58 . 2009-05-15 22:58 -------- d-----w- c:\documents and settings\Chris\Programdata\BraCa_Soft

2009-05-15 22:58 . 2009-05-15 22:58 -------- d-----w- c:\documents and settings\Chris\Lokale innstillinger\Programdata\BraCa_Soft

2009-05-09 21:25 . 2009-05-09 22:05 -------- d-----w- c:\documents and settings\Chris\Programdata\vlc

2009-05-07 19:14 . 2009-05-04 13:07 2298680 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\npTVUAx.dll

2009-05-07 19:14 . 2008-03-04 16:52 286720 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\libcurl.dll

2009-05-07 19:14 . 2007-10-31 07:39 59904 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\zlib1.dll

2009-05-07 19:14 . 2007-05-17 11:58 143360 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\libexpatw.dll

2009-05-07 19:14 . 2006-10-18 15:32 499712 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\msvcp71.dll

2009-05-07 19:14 . 2006-10-18 15:32 348160 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\msvcr71.dll

2009-05-07 19:14 . 2006-10-16 16:44 196608 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\ssleay32.dll

2009-05-07 19:14 . 2006-10-16 16:44 1028096 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\libeay32.dll

2009-05-07 18:03 . 2009-05-07 18:06 -------- d-----w- c:\documents and settings\Chris\Programdata\JonDo

2009-05-07 18:00 . 2009-05-07 18:00 -------- d-----w- c:\programfiler\JonDo

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-06-03 20:35 . 2008-08-30 22:35 962736160 --sha-w- c:\windows\system32\drivers\fidbox.dat

2009-06-03 20:31 . 2008-08-30 22:35 11283296 --sha-w- c:\windows\system32\drivers\fidbox.idx

2009-06-03 18:00 . 2009-02-18 21:06 -------- d-----w- c:\programfiler\SopFilter

2009-06-02 13:04 . 2008-08-30 16:13 -------- d-----w- c:\programfiler\Acer

2009-06-02 13:02 . 2008-11-05 14:41 -------- d-----w- c:\documents and settings\Chris\Programdata\WinTrade

2009-06-02 12:48 . 2009-01-14 20:31 -------- d---a-w- c:\documents and settings\All Users\Programdata\TEMP

2009-06-02 12:39 . 2006-08-25 23:10 80868 ----a-w- c:\windows\system32\perfc014.dat

2009-06-02 12:39 . 2006-08-25 23:10 445844 ----a-w- c:\windows\system32\perfh014.dat

2009-05-24 10:06 . 2008-12-29 22:29 14934193 ----a-w- c:\windows\Internet Logs\tvDebug.Zip

2009-05-22 16:59 . 2008-08-31 15:02 -------- d-----w- c:\documents and settings\Chris\Programdata\LimeWire

2009-05-20 23:37 . 2008-08-30 21:32 -------- d-----w- c:\documents and settings\Chris\Programdata\uTorrent

2009-05-19 08:35 . 2008-08-30 21:49 -------- d-----w- c:\programfiler\PeerGuardian2

2009-05-16 17:11 . 2008-10-25 23:00 -------- d-----w- c:\documents and settings\Chris\Programdata\MiniLyrics

2009-05-16 12:40 . 2009-05-02 11:56 -------- d-----w- c:\programfiler\FilmOn HDi Player

2009-05-14 22:16 . 2009-02-07 16:44 -------- d-----w- c:\programfiler\Railroad Tycoon 3

2009-05-14 22:15 . 2009-02-07 17:13 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll

2009-05-13 13:03 . 2008-08-30 18:50 -------- d-----w- c:\documents and settings\All Users\Programdata\Microsoft Help

2009-05-07 20:00 . 2009-01-14 20:31 -------- d-----w- c:\programfiler\Spyware Doctor

2009-05-07 18:00 . 2009-05-02 22:49 -------- d-----w- c:\documents and settings\Chris\Programdata\Hide IP NG

2009-05-07 17:42 . 2009-05-02 22:50 857990 ----a-w- c:\documents and settings\Chris\Programdata\Hide IP NG\hideipng-update.exe

2009-05-04 19:45 . 2009-04-13 21:08 -------- d-----w- c:\programfiler\SpeedFan

2009-05-03 01:07 . 2008-10-21 13:14 -------- d-----w- c:\programfiler\Audacity

2009-05-02 01:39 . 2008-08-30 21:54 -------- d-----w- c:\programfiler\Windows Media Connect 2

2009-05-02 01:39 . 2008-08-31 14:57 -------- d-----w- c:\programfiler\LimeWire

2009-05-02 01:39 . 2009-01-24 17:32 -------- d-----w- c:\programfiler\TVUPlayer

2009-05-02 01:39 . 2009-03-15 18:15 -------- d-----w- c:\programfiler\Easy CD-DA Extractor 12

2009-04-26 19:04 . 2009-01-16 17:26 -------- d-----w- c:\documents and settings\Chris\Programdata\Move Networks

2009-04-26 19:04 . 2009-04-26 19:04 965344 ----a-w- c:\documents and settings\Chris\Programdata\Move Networks\MoveMediaPlayer_win_mozilla_071303000006.exe

2009-04-25 17:13 . 2009-04-25 16:49 -------- d-----w- c:\programfiler\Hotspot Shield

2009-04-20 22:51 . 2008-08-30 21:16 4212 ---ha-w- c:\windows\system32\zllictbl.dat

2009-04-20 22:50 . 2009-04-20 22:51 2857984 ----a-w- c:\windows\Internet Logs\xDBB.tmp

2009-04-20 22:50 . 2009-04-20 22:51 2828800 ----a-w- c:\windows\Internet Logs\xDBA.tmp

2009-04-20 22:40 . 2009-04-20 22:40 10134 ----a-r- c:\documents and settings\Chris\Programdata\Microsoft\Installer\{35725FBC-A136-4A46-9F29-091759D9BB93}\ARPPRODUCTICON.exe

2009-04-20 22:40 . 2008-08-30 16:14 -------- d-----w- c:\programfiler\Fellesfiler\Logitech

2009-04-20 22:40 . 2009-04-20 22:40 10134 ----a-r- c:\documents and settings\Chris\Programdata\Microsoft\Installer\{EA516024-D84D-41F1-814F-83175A6188F2}\ARPPRODUCTICON.exe

2009-04-16 00:17 . 2009-04-15 23:58 -------- d-----w- c:\programfiler\Easy-Hide-IP

2009-04-13 23:31 . 2008-08-30 16:09 67992 ----a-w- c:\documents and settings\Chris\Lokale innstillinger\Programdata\GDIPFONTCACHEV1.DAT

2009-04-02 00:40 . 2009-04-02 01:31 2779136 ----a-w- c:\windows\Internet Logs\xDB9.tmp

2009-04-02 00:40 . 2009-04-02 01:31 2975744 ----a-w- c:\windows\Internet Logs\xDB8.tmp

2009-03-31 17:20 . 2008-08-30 21:16 72584 ----a-w- c:\windows\zllsputility.exe

2009-03-31 17:20 . 2008-08-30 21:15 1221512 ----a-w- c:\windows\system32\zpeng25.dll

2009-03-31 17:20 . 2008-08-30 21:16 69000 ----a-w- c:\windows\system32\zlcomm.dll

2009-03-31 17:20 . 2008-08-30 21:16 103816 ----a-w- c:\windows\system32\zlcommdb.dll

2009-03-19 09:45 . 2007-12-21 06:21 93848 ----a-w- c:\windows\system32\drivers\epfwtdir.sys

2009-03-19 09:44 . 2009-03-19 09:44 107256 ----a-w- c:\windows\system32\drivers\ehdrv.sys

2009-03-19 09:41 . 2007-12-21 06:19 113960 ----a-w- c:\windows\system32\drivers\eamon.sys

2009-03-18 05:40 . 2009-03-18 05:40 2936832 ----a-w- c:\windows\Internet Logs\xDB6.tmp

2009-03-18 05:40 . 2009-03-18 05:40 2752512 ----a-w- c:\windows\Internet Logs\xDB7.tmp

2009-03-09 09:34 . 2009-04-26 19:09 971776 ----a-w- c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\platform\WINNT_x86-msvc\plugins\npmnqmp071303000006.dll

2009-03-09 03:43 . 2009-03-09 03:44 4835328 ----a-w- c:\windows\Internet Logs\xDB5.tmp

2009-03-06 14:24 . 2004-08-04 18:00 284160 ----a-w- c:\windows\system32\pdh.dll

.

 

------- Sigcheck -------

 

[7] 2008-06-20 11:59 361600 AD978A1B783B5719720CFF204B666C8E c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys

[7] 2004-08-04 18:00 359040 9F4B36614A0FC234525BA224957DE55C c:\windows\$NtServicePackUninstall$\tcpip.sys

[7] 2008-04-13 10:20 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\$NtUninstallKB951748$\tcpip.sys

[7] 2008-04-13 10:20 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\ServicePackFiles\i386\TCPIP.SYS

[7] 2004-08-04 18:00 359040 9F4B36614A0FC234525BA224957DE55C c:\windows\SoftwareDistribution\Download\f31ef7a156dc9fcabd2ddadc26ec4705\backup\tcpip.sys

[-] 2008-08-30 21:48 361600 D24EA301E2B36C4E975FD216CA85D8E7 c:\windows\system32\dllcache\TCPIP.SYS

[-] 2008-08-30 21:48 361600 D24EA301E2B36C4E975FD216CA85D8E7 c:\windows\system32\drivers\TCPIP.SYS

.

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\programfiler\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 761946]

"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-08-10 352256]

"ZoneAlarm Client"="c:\programfiler\Zone Labs\ZoneAlarm\zlclient.exe" [2009-03-31 982408]

"egui"="c:\programfiler\ESET\ESET NOD32 Antivirus\egui.exe" [2009-03-19 2029640]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0autocheck lsdelete

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

@=""

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

@=""

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start-meny^Programmer^Oppstart^Adobe Reader Speed Launch.lnk]

path=c:\documents and settings\All Users\Start-meny\Programmer\Oppstart\Adobe Reader Speed Launch.lnk

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start-meny^Programmer^Oppstart^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Start-meny\Programmer\Oppstart\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

 

[HKLM\~\startupfolder\C:^Documents and Settings^Chris^Start-meny^Programmer^Oppstart^OneNote 2007 Screen Clipper og Launcher.lnk]

path=c:\documents and settings\Chris\Start-meny\Programmer\Oppstart\OneNote 2007 Screen Clipper og Launcher.lnk

backup=c:\windows\pss\OneNote 2007 Screen Clipper og Launcher.lnkStartup

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"BthServ"=2 (0x2)

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Programfiler\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Programfiler\\uTorrent\\uTorrent.exe"=

"c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Programfiler\\Windows Live\\Messenger\\livecall.exe"=

"c:\\Programfiler\\Sports Interactive\\Football Manager 2009\\fm.exe"=

"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=

 

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [19.03.2009 11:44 107256]

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [21.12.2007 08:21 93848]

R2 ekrn;ESET Service;c:\programfiler\ESET\ESET NOD32 Antivirus\ekrn.exe [19.03.2009 11:44 731840]

R3 lv321av;Logitech USB PC Camera (VC0321);c:\windows\system32\drivers\lv321av.sys [19.06.2006 12:20 847392]

S3 HssTrayService;Hotspot Shield Tray Service;c:\programfiler\Hotspot Shield\bin\HssTrayService.EXE --> c:\programfiler\Hotspot Shield\bin\HssTrayService.EXE [?]

S3 sdAuxService;PC Tools Auxiliary Service;c:\programfiler\Spyware Doctor\pctsAuxs.exe [14.01.2009 22:31 356920]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

- - - - TOMME PEKERE FJERNET - - - -

 

SafeBoot-procexp90.Sys

 

 

.

------- Tilleggsskanning -------

.

uStart Page = hxxp://www.startsiden.no/

uInternet Settings,ProxyServer = socks=

uInternet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,

IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\

FF - prefs.js: browser.startup.homepage - www.startsiden.no

FF - plugin: c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\plugins\npTVUAx.dll

FF - plugin: c:\documents and settings\Chris\Programdata\Mozilla\Firefox\Profiles\b5rtr0of.default\extensions\[email protected]\platform\WINNT_x86-msvc\plugins\npmnqmp071303000006.dll

 

---- FIREFOX POLICIES ----

c:\programfiler\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".no");

.

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-06-03 22:34

Windows 5.1.2600 Service Pack 3 NTFS

 

skanner skjulte prosesser ...

 

skanner skjulte autostart-oppføringer ...

 

skanner skjulte filer ...

 

skanning vellykket

skjulte filer: 0

 

**************************************************************************

.

--------------------- LÅSTE REGISTERNØKLER ---------------------

 

[HKEY_USERS\S-1-5-21-3238304265-2234244104-147875286-1006\Software\G*e*n*i*e*"!\FM Genie Scout 2009 XE]

"Currency"=dword:0000003a

"GameDir"="c:\\Documents and Settings\\Chris\\Mine dokumenter\\Sports Interactive\\Football Manager 2009\\games"

"ShortlistDir"=""

"ScreenshotsDir"="c:\\Documents and Settings\\Chris\\Mine dokumenter\\Sports Interactive\\Football Manager 2009"

"SaveDir"="c:\\Documents and Settings\\Chris\\Mine dokumenter\\Sports Interactive\\Football Manager 2009\\"

"HistoryDir"="c:\\Documents and Settings\\Chris\\Skrivebord\\FM Genie Scout 2009 XE\\History Points"

"LangDB"="c:\\Programfiler\\Sports Interactive\\Football Manager 2009\\data\\updates\\update-930\\db\\930\\lang_db.dat"

"LastSaveGame"="c:\\Documents and Settings\\Chris\\Mine dokumenter\\Sports Interactive\\Football Manager 2009\\games\\Chris (Leeds).fm"

"Language"="English"

"LoadLangDB"=dword:00000001

"CompressHistoryPoints"=dword:00000000

"HighlightedAttributes"=dword:00000000

"MinCondition"=dword:00000032

"GraphStep"=dword:00000000

"SkinName"="Champions League"

"LastUpdateCheck"=dword:00000000

"HighQualityGUI"=dword:00000001

"AutomaticallyUpdateCheck"=dword:00000001

"AdvancedGeneration"=dword:00000000

"TranslateStaffSkills"=dword:00000001

"TranslatePlayerSkills"=dword:00000001

"TranslatePositions"=dword:00000001

"ShowHistory"=dword:00000001

"Version"=dword:00000067

"UniqueID"="54-74FF-CF0D"

"UseProxy"=dword:00000000

"ProxyHost"=""

"ProxyPort"=""

"UseAuthentication"=dword:00000000

"UserName"=""

"UserPassword"=""

 

[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]

@Denied: (2) (LocalSystem)

"AppDataDir"="c:\\Documents and Settings\\All Users\\Programdata\\ESET\\ESET NOD32 Antivirus\\"

"DataDir"="ESET\\ESET NOD32 Antivirus\\"

"EditionName"="TemDono FiX 1.1 (Free Updates - Expire in 2050)"

"InstallDir"="c:\\Programfiler\\ESET\\ESET NOD32 Antivirus\\"

"LanguageId"=dword:00000409

"PackageTag"=dword:6090e758

"ProductBase"=dword:00000000

"ProductCode"="{FE9C13F6-6BBD-47D3-B939-F7E061BC4930}"

"ProductName"="ESET NOD32 Antivirus"

"ProductType"="eav"

"ProductVersion"="4.0.417.0"

"UniqueId"="33BB1AFC49FA3A70"

"ScannerBuild"=dword:0000121d

"ScannerVersionId"=dword:00000f6c

"ScannerVersion"="Open window for status."

.

--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

 

- - - - - - - > 'explorer.exe'(2116)

c:\acer\Empowering Technology\ePower\SysHook.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Andre Kjørende Prosesser ------------------------

.

c:\windows\system32\ZoneLabs\vsmon.exe

c:\programfiler\Lavasoft\Ad-Aware\aawservice.exe

c:\acer\Empowering Technology\admServ.exe

c:\programfiler\Diskeeper Corporation\Diskeeper\DkService.exe

c:\programfiler\Fellesfiler\LightScribe\LSSrvc.exe

c:\windows\system32\wbem\unsecapp.exe

.

**************************************************************************

.

Tidspunkt ferdig: 2009-06-03 22:37 - maskinen ble startet på nytt

ComboFix-quarantined-files.txt 2009-06-03 20:37

 

Pre-Run: 15 110 807 552 byte ledig

Post-Run: 15 032 520 704 byte ledig

 

266 --- E O F --- 2009-05-13 13:03

 

Takk på forhånd

[norbat]

Er det noen spesiell prosess som bruker mye cpu når det lagger?

[Gnotten]

Er det noen spesiell prosess som bruker mye cpu når det lagger?

Det kunne være under surfing (bruker firefox) eller spilling. Da spesielt FM (football manager 2009 - igrunnen det eneste jeg spiller). Her kunne loadingen ta veldig lang tid, og jeg opplevde veldig lagging når jeg bladde i menyen og trykket på knappene. Maskinen min skal helt greit ta spillet på fin flyt. Men jevnt over lagget det til tider. Det var som om cpuen ikke ville arbeide så hardt den burde. Når pcen lagget og var treig, så jobbet ikke cpuen 100% (eller i nærheten av det). Heller var ikke rammen helt opptatt. Altså virket det som pcen var holdt igjen av noe (ikke gadd arbeide så hardt som den burde).

 

Du merker kanskje at jeg skriver "var" og i fortid - det er fordi jeg nå etter å ha kjørt de to programmene jeg postet loggene til ovenfor, så virker det som om problemet langt på vei er borte. Men det er enda tidlig å si. Kan du evt. se at noe programmene fjernet, kan ha forårsaket problemene?

 

Uansett, takk for hjelp. Håper jo at problemene nå viser seg å være tatt. Men jeg har altså tidligere gjort alt av: defragmentert hdd, brukt ad-aware, spyware doctor, pc booster, ccleaner.

 

PS: Ok, ser at jeg leste spørsmålet ditt litt feil. Svaret er nei, det var/er ikke noen prosess som har tatt mye cpu eller ram når det har lagget. Tvert imot, alt har virket som om det har vært i skjønneste orden når jeg sjekket prosessene i oppgavebehandling.

Endret 4. juni 2009 av Lansky