Enkai Skrevet 14. juli 2009 Del Skrevet 14. juli 2009 Det har seg slik at for noen enkle dager siden kom et virus av ukjente grunner (da det ikke bare er jeg som bruker datan), kjente jeg svetten ta meg. Datan er en relativt ny laptop ASUS, og så datafrelst som jeg er, kjenner jeg nå at min verden går i knas. En BRA sommerferie uten optimalt fungerende data er som å løpe uten ben - umulig, og ikke minst forjævlig! Jeg sitter mye med data, men Gud så lite peiling jeg har på virus etc. Uansett, problemet tror jeg vi kan definere som Malvare, da alle ikonene på skrivebordet er borte og prosessbruken er meget høy. Datan er med andre ord treig. Jeg leste noen innlegg av norbat og prøvde å løse shiten selv, men jeg må nå bite i det sure eplet og komme hit for å ydmykt be dere om hjelp. Da jeg søkte for første gang (med Malvarebytes anti-malvare) fikk jeg denne loggen: Malwarebytes' Anti-Malware 1.38 Databaseversjon: 2413 Windows 6.0.6001 Service Pack 1 13.07.2009 09:33:19 mbam-log-2009-07-13 (09-33-12).txt Skanntype: Full Skann (C:\|D:\|) Objekter skannet: 217466 Tid tilbakelagt: 1 hour(s), 56 minute(s), 9 second(s) Minneprosesser infisert: 0 Minnemoduler infisert: 0 Registernøkler infisert: 0 Registerverdier infisert: 2 Registerfiler infisert: 0 Mapper infisert: 0 Filer infisert: 1 Minneprosesser infisert: (Ingen mistenkelige filer funnet) Minnemoduler infisert: (Ingen mistenkelige filer funnet) Registernøkler infisert: (Ingen mistenkelige filer funnet) Registerverdier infisert: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Hotfix-KB5504305 (Trojan.Agent) -> No action taken. HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\lsa\Hotfix-KB5504305 (Trojan.Agent) -> No action taken. Registerfiler infisert: (Ingen mistenkelige filer funnet) Mapper infisert: (Ingen mistenkelige filer funnet) Filer infisert: c:\Users\Haakiiz\AppData\Roaming\microsoft\Windows\update8123.cmp (Trojan.Agent) -> No action taken. Dette Har ikke løst problemet, ikonene har noen ganger vært der, men som oftest etter en reboot er ikonene igjen borte. Treg er den også fortsatt. Da jeg senere har søkt med samme Antivirus finner den ingen ting, og loggen sier det samme. Malwarebytes' Anti-Malware 1.38 Databaseversjon: 2413 Windows 6.0.6001 Service Pack 1 14.07.2009 18:39:30 mbam-log-2009-07-14 (18-39-30).txt Skanntype: Rask Skann Objekter skannet: 86960 Tid tilbakelagt: 18 minute(s), 21 second(s) Minneprosesser infisert: 0 Minnemoduler infisert: 0 Registernøkler infisert: 0 Registerverdier infisert: 0 Registerfiler infisert: 0 Mapper infisert: 0 Filer infisert: 0 Minneprosesser infisert: (Ingen mistenkelige filer funnet) Minnemoduler infisert: (Ingen mistenkelige filer funnet) Registernøkler infisert: (Ingen mistenkelige filer funnet) Registerverdier infisert: (Ingen mistenkelige filer funnet) Registerfiler infisert: (Ingen mistenkelige filer funnet) Mapper infisert: (Ingen mistenkelige filer funnet) Filer infisert: (Ingen mistenkelige filer funnet) Uansett, jeg ser at du også anbefaler at jeg legger ut hva Combofix(som av en eller annen grunn jeg ikke får innstallert) og bruker derfor HiJackThis, som har følgende logg og gi: Logfile of HijackThis v1.99.1 Scan saved at 18:15:16, on 14.07.2009 Platform: Unknown Windows (WinNT 6.00.1905 SP1) MSIE: Internet Explorer v7.00 (7.00.6001.18248) Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\ASUS\ASUS Live Update\ALU.exe C:\Program Files\ASUS\SmartLogon\sensorsrv.exe C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe C:\Windows\RtHDVCpl.exe C:\Program Files\ASUS\ATK Media\DMedia.exe C:\Windows\AsScrPro.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Windows\ehome\ehtray.exe D:\Spill\Steam\Steam.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\DAEMON Tools Lite\daemon.exe D:\Antivirus\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\Synaptics\SynTP\SynTPHelper.exe D:\Antivirus\Malwarebytes' Anti-Malware\mbam.exe C:\Windows\system32\conime.exe D:\Antivirus\Spybot - Search & Destroy\SpybotSD.exe D:\Antivirus\hijackthis\HijackThis.exe C:\Windows\system32\rundll32.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Koblingshjelpeprogram for Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Antivirus\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [COMODO Internet Security] "D:\Antivirus\Comodo\COMODO Internet Security\cfp.exe" -h O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [steam] D:\Spill\Steam\Steam.exe -silent O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [spybotSD TeaTimer] D:\Antivirus\Spybot - Search & Destroy\TeaTimer.exe O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Antivirus\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Antivirus\Spybot - Search & Destroy\SDHelper.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll O11 - Options group: [iNTERNATIONAL] International* O13 - Gopher Prefix: O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-09.sun.com/s/ESD7/JSCDL/jdk...ows-i586-jc.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - D:\Antivirus\Comodo\COMODO Internet Security\cmdagent.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE O23 - Service: LiveUpdate Notice - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - D:\Antivirus\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing) I tillegg har jeg prøvd diverse andre programmer (CCleaner, spybot search and destroy) , uten permanent effekt, og jeg skjønner at jeg må få fjernet denne shiten manuelt. Problemet er, jeg vet ikke hva jeg står ovenfor således hvordan jeg skal få gjort noe med det. Jeg har på følelsen av at dette emnet ble stort, men hey, det er sånn jeg er. Og forresten, møter jeg en brillefreak på et utested engang og som kan gi meg den informasjonen at han er en stolt virus lager så skal en få seg en neseviser! Sånne folk og organisasjoner og hele sulamitten må DØ! Tjen penger en annan plass! Håper dere kan hjelpe Lenke til kommentar
norbat Skrevet 14. juli 2009 Del Skrevet 14. juli 2009 Last ned dds.scr, kjør programmet og post loggen. dds.scr Lenke til kommentar
Enkai Skrevet 15. juli 2009 Forfatter Del Skrevet 15. juli 2009 (endret) DDS (Ver_09-06-26.01) - NTFSx86 Run by Haakiiz at 16:45:59,17 on 15.07.2009 Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_13 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.47.1044.18.3070.1593 [GMT 2:00] AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss D:\Antivirus\Comodo\COMODO Internet Security\cmdagent.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\SLsvc.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe C:\Windows\system32\WLANExt.exe C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe C:\Program Files\ATKGFNEX\GFNEXSrv.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\agrsmsvc.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Windows\system32\svchost.exe -k bthsvcs C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe D:\Antivirus\Spybot - Search & Destroy\SDWinSec.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Program Files\ASUS\ASUS Live Update\ALU.exe C:\Windows\Explorer.EXE C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe C:\Program Files\ASUS\SmartLogon\sensorsrv.exe C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe C:\Program Files\ASUS\ATK Hotkey\HControl.exe C:\Program Files\Wireless Console 2\wcourier.exe C:\Program Files\P4G\BatteryLife.exe C:\Program Files\ASUS\Splendid\ACMON.exe C:\Windows\System32\ACEngSvr.exe C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe C:\Program Files\ASUS\ATK Hotkey\WDC.exe C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe C:\Windows\RtHDVCpl.exe C:\Program Files\ASUS\ATK Media\DMedia.exe C:\Windows\AsScrPro.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\AVG\AVG8\avgtray.exe D:\Antivirus\Comodo\COMODO Internet Security\cfp.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe D:\Spill\Steam\Steam.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\DAEMON Tools Lite\daemon.exe D:\Antivirus\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Common Files\Steam\SteamService.exe \\?\C:\Windows\system32\wbem\WMIADAP.EXE D:\Antivirus\dds.scr C:\Windows\system32\conime.exe C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uSearch Page = hxxp://www.google.com uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS uSearch Bar = hxxp://www.google.com/ie mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s BHO: Koblingshjelpeprogram for Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - d:\antivirus\spybot - search & destroy\SDHelper.dll BHO: NCO 2.0 IE BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\common files\symantec shared\coshared\browser\2.5\coIEPlg.dll BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: Show Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\common files\symantec shared\coshared\browser\2.5\CoIEPlg.dll TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll uRun: [LightScribe Control Panel] c:\program files\common files\lightscribe\LightScribeControlPanel.exe -hidden uRun: [MsnMsgr] "c:\program files\msn messenger\MsnMsgr.Exe" /background uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [steam] d:\spill\steam\Steam.exe -silent uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun uRun: [spybotSD TeaTimer] d:\antivirus\spybot - search & destroy\TeaTimer.exe mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [CLMLServer] "c:\program files\cyberlink\power2go\CLMLSvc.exe" mRun: [P2Go_Menu] "c:\program files\cyberlink\power2go\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\power2go" updatewithcreateonce "software\cyberlink\power2go\6.0" mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe" mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup mRun: [HControlUser] c:\program files\asus\atk hotkey\HControlUser.exe mRun: [ATKOSD2] c:\program files\asus\atkosd2\ATKOSD2.exe mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [ATKMEDIA] c:\program files\asus\atk media\DMEDIA.EXE mRun: [ASUS Screen Saver Protector] c:\windows\AsScrPro.exe mRun: [ASUS Camera ScreenSaver] c:\windows\AsScrProlog.exe mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [sunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe mRun: [COMODO Internet Security] "d:\antivirus\comodo\comodo internet security\cfp.exe" -h StartupFolder: c:\users\haakiiz\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe uPolicies-explorer: TaskbarNoNotification = 0 (0x0) uPolicies-explorer: HideSCABattery = 0 (0x0) uPolicies-explorer: HideSCANetwork = 0 (0x0) uPolicies-explorer: HideSCAVolume = 0 (0x0) mPolicies-explorer: TaskbarNoThumbnail = 0 (0x0) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - d:\antivirus\spybot - search & destroy\SDHelper.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://dl8-cdn-09.sun.com/s/ESD7/JSCDL/jdk/6u13-b03/jinstall-6u13-windows-i586-jc.cab?e=1244390062642&h=4b7860ab7b9ddd6683e63a6dafee4e71/&filename=jinstall-6u13-windows-i586-jc.cab DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll ================= FIREFOX =================== FF - ProfilePath - c:\users\haakiiz\appdata\roaming\mozilla\firefox\profiles\tywm3c25.default\ FF - component: c:\program files\avg\avg8\firefox\components\avgssff.dll FF - component: c:\program files\mozilla firefox\components\coFFPlgn.dll FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll FF - plugin: c:\program files\picasa2\npPicasa2.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} ---- FIREFOX POLICIES ---- c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".no"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); ============= SERVICES / DRIVERS =============== R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-6-22 335752] R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-6-22 108552] R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2009-7-13 128888] R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2009-7-13 29520] R3 BTHprint;Microsoft Bluetooth Printer Class;c:\windows\system32\drivers\BTHPRINT.SYS [2008-1-21 29696] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2008-12-18 29736] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-4-29 101936] S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2008-1-12 23888] =============== Created Last 30 ================ 2009-07-15 13:01 268 a---h--- C:\sqmdata13.sqm 2009-07-15 13:01 244 a---h--- C:\sqmnoopt13.sqm 2009-07-15 10:09 156,672 a------- c:\windows\system32\t2embed.dll 2009-07-15 10:09 289,792 a------- c:\windows\system32\atmfd.dll 2009-07-15 10:09 72,704 a------- c:\windows\system32\fontsub.dll 2009-07-15 10:09 10,240 a------- c:\windows\system32\dciman32.dll 2009-07-14 17:37 268 a---h--- C:\sqmdata12.sqm 2009-07-14 17:37 244 a---h--- C:\sqmnoopt12.sqm 2009-07-13 17:26 <DIR> --d----- C:\32788R22FWJFW.0.tmp 2009-07-13 17:07 268 a---h--- C:\sqmdata11.sqm 2009-07-13 17:07 244 a---h--- C:\sqmnoopt11.sqm 2009-07-13 15:45 <DIR> --d----- c:\programdata\Spybot - Search & Destroy 2009-07-13 15:45 <DIR> --d----- c:\progra~2\Spybot - Search & Destroy 2009-07-13 15:30 <DIR> --d----- c:\program files\ESET 2009-07-13 15:20 102,664 a------- c:\windows\system32\drivers\tmcomm.sys 2009-07-13 15:18 <DIR> --d----- c:\users\haakiiz\.housecall6.6 2009-07-13 09:35 1,474,832 a------- c:\windows\system32\drivers\sfi.dat 2009-07-13 00:52 <DIR> --d----- c:\programdata\Comodo 2009-07-13 00:52 <DIR> --d----- c:\progra~2\Comodo 2009-07-13 00:51 179,792 a------- c:\windows\system32\guard32.dll 2009-07-13 00:51 128,888 a------- c:\windows\system32\drivers\cmdguard.sys 2009-07-13 00:51 29,520 a------- c:\windows\system32\drivers\cmdhlp.sys 2009-07-13 00:39 <DIR> --d----- c:\users\haakiiz\appdata\roaming\Malwarebytes 2009-07-13 00:39 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys 2009-07-13 00:39 <DIR> --d----- c:\programdata\Malwarebytes 2009-07-13 00:39 <DIR> --d----- c:\progra~2\Malwarebytes 2009-07-13 00:38 19,096 a------- c:\windows\system32\drivers\mbam.sys 2009-07-12 18:36 268 a---h--- C:\sqmdata10.sqm 2009-07-12 18:36 244 a---h--- C:\sqmnoopt10.sqm 2009-07-09 00:19 268 a---h--- C:\sqmdata09.sqm 2009-07-09 00:19 244 a---h--- C:\sqmnoopt09.sqm 2009-07-08 23:48 <DIR> --d----- c:\programdata\PC Suite 2009-07-08 21:46 268 a---h--- C:\sqmdata08.sqm 2009-07-08 21:46 244 a---h--- C:\sqmnoopt08.sqm 2009-07-08 21:45 <DIR> --d----- c:\program files\common files\PCSuite 2009-07-08 21:45 <DIR> --d----- c:\program files\common files\Nokia 2009-07-08 21:45 18,816 a------- c:\windows\system32\drivers\pccsmcfd.sys 2009-07-08 21:45 <DIR> --d----- c:\program files\PC Connectivity Solution 2009-07-08 21:44 <DIR> --d----- c:\program files\Nokia 2009-07-08 21:43 <DIR> --d----- c:\programdata\Installations 2009-07-08 21:14 <DIR> --d----- c:\programdata\Hewlett-Packard 2009-07-08 21:13 117,760 a------- c:\windows\system32\hpz3l5k2.dll 2009-07-07 22:09 268 a---h--- C:\sqmdata07.sqm 2009-07-07 22:09 244 a---h--- C:\sqmnoopt07.sqm 2009-07-07 01:04 268 a---h--- C:\sqmdata06.sqm 2009-07-07 01:04 244 a---h--- C:\sqmnoopt06.sqm 2009-07-06 21:26 268 a---h--- C:\sqmdata05.sqm 2009-07-06 21:26 244 a---h--- C:\sqmnoopt05.sqm 2009-07-03 20:00 268 a---h--- C:\sqmdata04.sqm 2009-07-03 20:00 244 a---h--- C:\sqmnoopt04.sqm 2009-07-01 23:47 268 a---h--- C:\sqmdata03.sqm 2009-07-01 23:47 244 a---h--- C:\sqmnoopt03.sqm 2009-06-26 04:22 268 a---h--- C:\sqmdata02.sqm 2009-06-26 04:22 244 a---h--- C:\sqmnoopt02.sqm 2009-06-24 22:24 21,840 a------- c:\windows\system32\SIntfNT.dll 2009-06-24 22:24 17,212 a------- c:\windows\system32\SIntf32.dll 2009-06-24 22:24 12,067 a------- c:\windows\system32\SIntf16.dll 2009-06-24 21:31 73,094 a------- c:\windows\DIIUnin.dat 2009-06-24 21:31 94,208 a------- c:\windows\DIIUnin.exe 2009-06-24 21:31 2,829 a------- c:\windows\DIIUnin.pif 2009-06-23 13:34 <DIR> --d-h--- C:\$AVG8.VAULT$ 2009-06-23 00:22 268 a---h--- C:\sqmdata01.sqm 2009-06-23 00:22 244 a---h--- C:\sqmnoopt01.sqm 2009-06-22 20:25 268 a---h--- C:\sqmdata00.sqm 2009-06-22 20:25 244 a---h--- C:\sqmnoopt00.sqm 2009-06-22 20:05 <DIR> --d----- c:\program files\Microsoft WSE 2009-06-22 20:05 2,414,360 a------- c:\windows\system32\d3dx9_31.dll 2009-06-22 19:32 108,552 a------- c:\windows\system32\drivers\avgtdix.sys 2009-06-22 19:32 11,952 a------- c:\windows\system32\avgrsstx.dll 2009-06-22 19:32 335,752 a------- c:\windows\system32\drivers\avgldx86.sys 2009-06-22 19:32 <DIR> --d----- c:\windows\system32\drivers\Avg 2009-06-22 19:32 <DIR> --d----- c:\programdata\avg8 2009-06-22 19:32 <DIR> --d----- c:\program files\AVG 2009-06-22 19:32 <DIR> --d----- c:\progra~2\avg8 2009-06-21 19:35 <DIR> --d----- c:\users\haakiiz\appdata\roaming\SPORE 2009-06-21 19:34 <DIR> --d----- c:\programdata\Electronic Arts 2009-06-21 19:34 <DIR> --d----- c:\progra~2\Electronic Arts 2009-06-21 19:34 2,772 a------- c:\windows\system32\ealregsnapshot1.reg 2009-06-21 19:20 107,888 a------- c:\windows\system32\CmdLineExt.dll 2009-06-21 18:52 <DIR> --d----- c:\programdata\DAEMON Tools Lite 2009-06-21 18:52 <DIR> --d----- c:\progra~2\DAEMON Tools Lite 2009-06-21 18:51 <DIR> --d----- c:\program files\DAEMON Tools Toolbar 2009-06-21 18:51 <DIR> --d----- c:\program files\DAEMON Tools Lite 2009-06-21 18:51 <DIR> --d----- c:\users\haakiiz\appdata\roaming\DAEMON Tools Lite 2009-06-21 18:43 <DIR> --d----- c:\programdata\DAEMON Tools Pro 2009-06-21 18:43 <DIR> --d----- c:\program files\DAEMON Tools Pro 2009-06-21 18:43 <DIR> --d----- c:\progra~2\DAEMON Tools Pro 2009-06-21 18:39 <DIR> --d----- c:\users\haakiiz\appdata\roaming\DAEMON Tools Pro 2009-06-16 22:01 0 a---h--- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf ==================== Find3M ==================== 2009-07-15 16:45 454,956 a------- c:\windows\system32\perfh014.dat 2009-07-15 16:45 77,462 a------- c:\windows\system32\perfc014.dat 2009-07-15 16:39 48,253 a------- c:\programdata\nvModes.dat 2009-07-15 16:39 48,253 a------- c:\progra~2\nvModes.dat 2009-07-15 16:39 45,056 a------- c:\windows\system32\acovcnt.exe 2009-07-13 00:55 143,360 a------- c:\windows\inf\infstrng.dat 2009-07-13 00:55 51,200 a------- c:\windows\inf\infpub.dat 2009-07-13 00:55 86,016 a------- c:\windows\inf\infstor.dat 2009-06-21 18:39 721,904 a------- c:\windows\system32\drivers\sptd.sys 2009-06-07 17:53 410,984 a------- c:\windows\system32\deploytk.dll 2009-05-10 11:39 84 a---h--- c:\programdata\aspg.dat 2009-05-10 11:39 84 a---h--- c:\progra~2\aspg.dat 2009-04-30 14:37 293,376 a------- c:\windows\system32\psisdecd.dll 2009-04-30 14:37 428,544 a------- c:\windows\system32\EncDec.dll 2009-04-28 20:08 10,366,976 a------- c:\windows\system32\nvoglv32.dll 2009-04-28 20:08 7,560,704 a------- c:\windows\system32\nvd3dum.dll 2009-04-28 20:08 3,128,320 a------- c:\windows\system32\nvwgf2um.dll 2009-04-28 20:08 1,720,320 a------- c:\windows\system32\nvcuda.dll 2009-04-28 20:08 1,314,816 a------- c:\windows\system32\nvcuvenc.dll 2009-04-28 20:08 983,040 a------- c:\windows\system32\nvapi.dll 2009-04-28 20:08 663,552 a------- c:\windows\system32\nvcuvid.dll 2009-04-28 20:08 457,248 a------- c:\windows\system32\nvudisp.exe 2009-04-28 20:08 143,360 a------- c:\windows\system32\nvcod146.dll 2009-04-28 20:08 143,360 a------- c:\windows\system32\nvcod.dll 2009-04-26 09:32 457,248 a------- c:\windows\system32\NVUNINST.EXE 2009-04-24 18:05 827,904 a------- c:\windows\system32\wininet.dll 2009-04-24 18:02 78,336 a------- c:\windows\system32\ieencode.dll 2009-04-24 15:44 26,624 a------- c:\windows\system32\ieUnatt.exe 2009-04-23 14:43 784,896 a------- c:\windows\system32\rpcrt4.dll 2009-04-23 14:42 636,928 a------- c:\windows\system32\localspl.dll 2009-04-21 13:55 2,033,152 a------- c:\windows\system32\win32k.sys 2008-12-18 00:20 665,600 a------- c:\windows\inf\drvindex.dat 2008-08-09 00:48 90,112 a------- c:\program files\common files\CPInstallAction.dll 2008-05-22 19:35 51,962 a------- c:\program files\common files\banner.jpg 2008-04-29 08:00 294,254 a------- c:\windows\inf\perflib414\perfi.dat 2008-04-29 08:00 294,254 a------- c:\windows\inf\perflib414\perfh.dat 2008-04-29 08:00 35,166 a------- c:\windows\inf\perflib414\perfd.dat 2008-04-29 08:00 35,166 a------- c:\windows\inf\perflib414\perfc.dat 2008-01-21 04:43 174 a--sh--- c:\program files\desktop.ini 2007-06-12 20:34 35,822 a------- c:\program files\common files\ASPG_icon.ico 2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib000\perfi.dat 2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib000\perfh.dat 2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib000\perfd.dat 2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib000\perfc.dat 2009-07-15 16:49 262,144 a--sh--- c:\windows\serviceprofiles\networkservice\NTUSER.DAT ============= FINISH: 16:51:55,66 =============== Endret 15. juli 2009 av Enkai Lenke til kommentar
norbat Skrevet 15. juli 2009 Del Skrevet 15. juli 2009 Klarer ikke å se noe malware i loggen. Mulig du kunne ha kjørt en systemgjenoppretting til før problemet oppsto, for derette å kjøre malwarebytes på ny. Systemgjenoppretting: Start->tilbehør->systemverktøy->systemgjenoppretting. Velg en dato før problemet oppsto. Lenke til kommentar
Enkai Skrevet 15. juli 2009 Forfatter Del Skrevet 15. juli 2009 Jeg fikk et lyst sinn da jeg så ditt svar, men det mørknet fort da jeg så at systemgjennoppretningen var Skrudd av og jeg derffor ikke har noen "checkpoint" for å opprette til Heldigvis har jeg en datafrelst bror, som om en uke eller så kommer hjem fra sverige som vi kan stole på kan fikse dette. Men om de fremdeles vil sette av tid til mitt problem setter jeg stor pris på det Lenke til kommentar
norbat Skrevet 16. juli 2009 Del Skrevet 16. juli 2009 Skriv chkdsk /r i kjør-feltet og følg anvisningen. Lenke til kommentar
Enkai Skrevet 16. juli 2009 Forfatter Del Skrevet 16. juli 2009 Dette er nå gjort, men resultatet uteblir. Fremdeles treg og uten ikoner :S Snart kaster jeg PC'en i veggen Lenke til kommentar
norbat Skrevet 16. juli 2009 Del Skrevet 16. juli 2009 Last ned ny combofix, restart i sikker modus og prøv og kjør programmet derfra. Lenke til kommentar
Enkai Skrevet 16. juli 2009 Forfatter Del Skrevet 16. juli 2009 Do not fear, the log is here! ComboFix 09-07-14.08 - Haakiiz 16.07.2009 21:41.1.2 - NTFSx86 MINIMAL Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.47.1044.18.3070.2661 [GMT 2:00] Kjører fra: d:\antivirus\ComboFix.exe AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((((((((((((( Andre slettinger ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\Installer\28776.msi c:\windows\system32\acovcnt.exe . ((((((((((((((((((((((((((( Filer Opprettet Fra 2009-06-16 til 2009-07-16 ))))))))))))))))))))))))))))))))) . 2009-07-16 19:46 . 2009-07-16 19:46 -------- d-----w- c:\users\Haakiiz\AppData\Local\temp 2009-07-16 19:46 . 2009-07-16 19:46 -------- d-----w- c:\users\Ivar\AppData\Local\temp 2009-07-16 09:19 . 2009-07-13 08:00 87888 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\NAVENG.SYS 2009-07-16 09:19 . 2009-07-13 08:00 875728 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\NAVEX15.SYS 2009-07-16 09:19 . 2009-04-15 11:16 177520 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\NAVENG32.DLL 2009-07-16 09:19 . 2009-04-15 11:16 1181040 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\NAVEX32A.DLL 2009-07-16 09:19 . 2009-04-15 11:16 101936 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\ERASER.SYS 2009-07-16 09:19 . 2009-04-15 11:16 371248 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\EECTRL.SYS 2009-07-16 09:19 . 2009-04-15 11:16 259368 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\ECMSVR32.DLL 2009-07-16 09:19 . 2009-04-15 11:16 2414128 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.067\CCERASER.DLL 2009-07-15 18:56 . 2009-07-13 08:00 87888 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\NAVENG.SYS 2009-07-15 18:56 . 2009-07-13 08:00 875728 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\NAVEX15.SYS 2009-07-15 18:56 . 2009-04-15 11:16 371248 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\EECTRL.SYS 2009-07-15 18:56 . 2009-04-15 11:16 259368 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\ECMSVR32.DLL 2009-07-15 18:56 . 2009-04-15 11:16 177520 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\NAVENG32.DLL 2009-07-15 18:56 . 2009-04-15 11:16 1181040 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\NAVEX32A.DLL 2009-07-15 18:56 . 2009-04-15 11:16 101936 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\ERASER.SYS 2009-07-15 18:56 . 2009-04-15 11:16 2414128 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090715.016\CCERASER.DLL 2009-07-15 15:46 . 2009-07-15 15:46 -------- d-----w- c:\users\Haakiiz\AppData\Local\WinZip 2009-07-15 15:43 . 2009-07-15 15:46 -------- d-----w- c:\programdata\WinZip 2009-07-15 08:09 . 2009-06-15 15:24 156672 ----a-w- c:\windows\system32\t2embed.dll 2009-07-15 08:09 . 2009-06-15 15:20 72704 ----a-w- c:\windows\system32\fontsub.dll 2009-07-15 08:09 . 2009-06-15 15:20 10240 ----a-w- c:\windows\system32\dciman32.dll 2009-07-15 08:09 . 2009-06-15 12:52 289792 ----a-w- c:\windows\system32\atmfd.dll 2009-07-14 14:50 . 2009-07-14 14:50 -------- d-----w- c:\users\Ivar\Ny mappe 2009-07-13 15:26 . 2009-07-15 10:06 -------- d-----w- C:\32788R22FWJFW.0.tmp 2009-07-13 13:45 . 2009-07-13 22:25 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2009-07-13 13:30 . 2009-07-13 13:30 -------- d-----w- c:\program files\ESET 2009-07-13 13:20 . 2009-07-13 13:18 102664 ----a-w- c:\windows\system32\drivers\tmcomm.sys 2009-07-13 13:18 . 2009-07-13 13:24 -------- d-----w- c:\users\Haakiiz\.housecall6.6 2009-07-13 07:35 . 2009-07-16 17:26 1474832 ----a-w- c:\windows\system32\drivers\sfi.dat 2009-07-13 02:16 . 2009-04-15 11:16 89104 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\NAVENG.SYS 2009-07-13 02:16 . 2009-04-15 11:16 876144 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\NAVEX15.SYS 2009-07-13 02:16 . 2009-04-15 11:16 371248 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\EECTRL.SYS 2009-07-13 02:16 . 2009-04-15 11:16 259368 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\ECMSVR32.DLL 2009-07-13 02:16 . 2009-04-15 11:16 2414128 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\CCERASER.DLL 2009-07-13 02:16 . 2009-04-15 11:16 177520 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\NAVENG32.DLL 2009-07-13 02:16 . 2009-04-15 11:16 1181040 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\NAVEX32A.DLL 2009-07-13 02:16 . 2009-04-15 11:16 101936 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20090712.035\ERASER.SYS 2009-07-12 22:51 . 2009-07-12 22:50 74328 ----a-w- c:\windows\system32\drivers\inspect.sys 2009-07-12 22:39 . 2009-07-12 22:39 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\Malwarebytes 2009-07-12 22:39 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-07-12 22:39 . 2009-07-12 22:39 -------- d-----w- c:\programdata\Malwarebytes 2009-07-12 22:38 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-07-11 10:24 . 2009-03-17 23:43 685432 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\IDSxpx86.dll 2009-07-11 10:24 . 2009-03-17 23:43 439672 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\Scxpx86.dll 2009-07-11 10:24 . 2009-03-17 23:43 370224 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\IDSviA64.sys 2009-07-11 10:24 . 2009-03-17 23:43 272432 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\IDSvix86.sys 2009-07-11 10:24 . 2009-03-17 23:43 251768 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\SymIDSCo.sys 2009-07-11 10:24 . 2009-03-17 23:43 173432 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\SymIDSI.dll 2009-07-11 10:24 . 2009-03-17 23:43 157120 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.006\IDS9xx86.dll 2009-07-10 21:07 . 2009-03-17 23:43 685432 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\IDSxpx86.dll 2009-07-10 21:07 . 2009-03-17 23:43 439672 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\Scxpx86.dll 2009-07-10 21:07 . 2009-03-17 23:43 370224 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\IDSviA64.sys 2009-07-10 21:07 . 2009-03-17 23:43 272432 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\IDSvix86.sys 2009-07-10 21:07 . 2009-03-17 23:43 251768 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\SymIDSCo.sys 2009-07-10 21:07 . 2009-03-17 23:43 173432 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\SymIDSI.dll 2009-07-10 21:07 . 2009-03-17 23:43 157120 ----a-w- c:\programdata\Symantec\Definitions\SymcData\ipsdefs\20090710.001\IDS9xx86.dll 2009-07-08 22:19 . 2009-07-08 22:19 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\PC Suite 2009-07-08 21:49 . 2009-07-08 21:49 -------- d-----w- c:\users\Ivar\AppData\Roaming\PC Suite 2009-07-08 21:48 . 2009-07-08 21:49 -------- d-----w- c:\users\Ivar\AppData\Roaming\Nokia 2009-07-08 21:48 . 2009-07-08 21:48 -------- d-----w- c:\programdata\PC Suite 2009-07-08 19:46 . 2009-07-08 19:46 -------- d-----w- c:\users\Ivar\{78d3b3cf-c595-402d-969c-5394322a099d} 2009-07-08 19:45 . 2009-07-08 19:45 -------- d-----w- c:\program files\Common Files\PCSuite 2009-07-08 19:45 . 2009-07-08 19:45 -------- d-----w- c:\program files\Common Files\Nokia 2009-07-08 19:45 . 2009-07-08 19:45 -------- d-----w- c:\program files\DIFX 2009-07-08 19:45 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2009-07-08 19:45 . 2009-07-08 19:45 -------- dc----w- c:\windows\system32\DRVSTORE 2009-07-08 19:45 . 2009-07-08 19:45 -------- d-----w- c:\program files\PC Connectivity Solution 2009-07-08 19:44 . 2009-07-08 19:45 -------- d-----w- c:\program files\Nokia 2009-07-08 19:43 . 2009-07-08 19:43 33843104 ----a-w- c:\programdata\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Nokia_PC_Suite_7_1_30_9_wu_nor.exe 2009-07-08 19:43 . 2009-07-08 19:43 95232 ----a-w- c:\programdata\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\pcswpcsi.exe 2009-07-08 19:43 . 2009-07-08 19:43 8192 ----a-w- c:\programdata\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\UninstCCD.exe 2009-07-08 19:43 . 2009-07-08 19:43 61440 ----a-w- c:\programdata\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\UninstPCSFEMsi.exe 2009-07-08 19:43 . 2009-07-08 19:43 10240 ----a-w- c:\programdata\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\UninstPCS.exe 2009-07-08 19:43 . 2009-07-08 19:43 -------- d-----w- c:\programdata\Installations 2009-07-08 19:14 . 2009-07-08 19:14 -------- d-----w- c:\programdata\Hewlett-Packard 2009-07-08 19:13 . 2007-06-18 10:38 117760 ----a-w- c:\windows\system32\hpz3l5k2.dll 2009-07-07 17:23 . 2009-07-10 15:04 680 ----a-w- c:\users\Ivar\AppData\Local\d3d9caps.dat 2009-06-24 20:24 . 2009-06-24 20:24 21840 ----a-w- c:\windows\system32\SIntfNT.dll 2009-06-24 20:24 . 2009-06-24 20:24 17212 ----a-w- c:\windows\system32\SIntf32.dll 2009-06-24 20:24 . 2009-06-24 20:24 12067 ----a-w- c:\windows\system32\SIntf16.dll 2009-06-24 19:31 . 2009-06-24 20:32 73094 ----a-w- c:\windows\DIIUnin.dat 2009-06-24 19:31 . 2009-06-24 19:31 94208 ----a-w- c:\windows\DIIUnin.exe 2009-06-24 19:31 . 2009-06-24 19:31 2829 ----a-w- c:\windows\DIIUnin.pif 2009-06-23 11:34 . 2009-07-16 16:19 -------- d--h--w- C:\$AVG8.VAULT$ 2009-06-23 10:52 . 2009-06-23 10:52 -------- d-----w- c:\windows\Sun 2009-06-22 18:20 . 2009-06-22 18:20 -------- d-----w- c:\users\Ivar\AppData\Roaming\DAEMON Tools Lite 2009-06-22 18:05 . 2009-06-22 18:05 10134 ----a-r- c:\users\Haakiiz\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe 2009-06-22 18:05 . 2009-06-22 18:05 -------- d-----w- c:\program files\Microsoft WSE 2009-06-22 18:05 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll 2009-06-22 17:32 . 2009-06-22 17:32 2837016 ----a-w- c:\users\Haakiiz\AppData\Roaming\Uniblue\DriverScanner\Download\pci_ven_8086_dev_29429_1_1_1013.exe 2009-06-22 17:32 . 2009-06-22 17:32 11952 ----a-w- c:\windows\system32\avgrsstx.dll 2009-06-22 17:32 . 2009-06-22 17:32 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2009-06-22 17:32 . 2009-07-16 08:55 -------- d-----w- c:\windows\system32\drivers\Avg 2009-06-22 17:32 . 2009-07-03 07:39 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2009-06-22 17:32 . 2009-06-22 17:32 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2009-06-22 17:32 . 2009-06-22 17:32 -------- d-----w- c:\programdata\avg8 2009-06-22 17:32 . 2009-06-22 17:32 -------- d-----w- c:\program files\AVG 2009-06-21 17:35 . 2009-06-21 17:35 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\SPORE 2009-06-21 17:30 . 2009-06-23 10:48 -------- d-----w- c:\program files\Electronic Arts 2009-06-21 17:20 . 2009-06-21 17:20 -------- d--h--r- c:\users\Haakiiz\AppData\Roaming\SecuROM 2009-06-21 17:20 . 2009-06-21 17:20 107888 ----a-w- c:\windows\system32\CmdLineExt.dll 2009-06-21 16:52 . 2009-06-21 16:52 -------- d-----w- c:\programdata\DAEMON Tools Lite 2009-06-21 16:51 . 2009-06-21 16:51 -------- d-----w- c:\program files\DAEMON Tools Toolbar 2009-06-21 16:51 . 2009-06-21 16:51 -------- d-----w- c:\program files\DAEMON Tools Lite 2009-06-21 16:51 . 2009-06-21 17:10 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\DAEMON Tools Lite 2009-06-21 16:43 . 2009-06-21 16:45 -------- d-----w- c:\program files\DAEMON Tools Pro 2009-06-21 16:43 . 2009-06-21 16:43 -------- d-----w- c:\programdata\DAEMON Tools Pro 2009-06-21 16:39 . 2009-06-21 16:39 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\DAEMON Tools Pro . (((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-16 19:35 . 2008-04-29 05:18 836 ----a-w- c:\windows\bthservsdp.dat 2009-07-16 19:33 . 2009-05-01 10:51 48253 ----a-w- c:\programdata\nvModes.dat 2009-07-16 19:28 . 2008-04-29 06:01 77462 ----a-w- c:\windows\system32\perfc014.dat 2009-07-16 19:28 . 2008-04-29 06:01 454956 ----a-w- c:\windows\system32\perfh014.dat 2009-07-16 17:52 . 2009-05-04 14:27 -------- d-----w- c:\programdata\TrackMania 2009-07-15 11:09 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2009-07-12 16:44 . 2009-04-29 16:01 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\uTorrent 2009-07-03 07:45 . 2009-05-10 11:52 -------- d-----w- c:\program files\Common Files\Steam 2009-06-26 13:16 . 2009-05-04 15:31 1 ----a-w- c:\users\Haakiiz\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys 2009-06-25 11:15 . 2009-05-04 17:02 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\Spotify 2009-06-23 10:48 . 2008-12-17 20:15 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-06-23 10:48 . 2009-06-21 17:34 2772 ----a-w- c:\windows\system32\ealregsnapshot1.reg 2009-06-22 17:17 . 2009-05-09 18:04 -------- d-----w- c:\programdata\DriverScanner 2009-06-21 17:34 . 2009-06-21 17:34 -------- d-----w- c:\programdata\Electronic Arts 2009-06-21 17:34 . 2008-12-17 20:15 -------- d-----w- c:\program files\Common Files\InstallShield 2009-06-21 16:39 . 2009-05-10 20:07 721904 ----a-w- c:\windows\system32\drivers\sptd.sys 2009-06-16 20:01 . 2009-06-16 20:01 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf 2009-06-16 13:57 . 2009-05-25 15:43 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\mIRC 2009-06-16 13:47 . 2008-12-17 20:16 -------- d-----w- c:\programdata\CyberLink 2009-06-16 13:44 . 2009-06-16 13:44 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\CyberLink 2009-06-09 22:40 . 2009-06-09 22:16 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\dvdcss 2009-06-07 15:53 . 2009-06-07 15:53 410984 ----a-w- c:\windows\system32\deploytk.dll 2009-06-07 15:53 . 2009-06-07 15:53 -------- d-----w- c:\program files\Java 2009-06-04 19:19 . 2009-06-04 19:19 -------- d-----w- c:\program files\Moeller 2009-05-31 11:37 . 2009-05-31 11:37 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\DivX 2009-05-27 16:48 . 2009-05-27 16:48 -------- d-----w- c:\users\Ivar\AppData\Roaming\Symantec 2009-05-27 16:48 . 2009-05-27 16:48 104040 ----a-w- c:\users\Ivar\AppData\Local\GDIPFONTCACHEV1.DAT 2009-05-26 20:37 . 2009-05-26 20:36 -------- d-----w- c:\program files\DivX 2009-05-26 20:37 . 2009-05-26 20:37 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2009-05-26 20:36 . 2009-05-26 20:36 -------- d-----w- c:\program files\Common Files\DivX Shared 2009-05-25 16:03 . 2009-05-25 15:31 -------- d-----w- c:\users\Haakiiz\AppData\Roaming\Ventrilo 2009-05-25 15:24 . 2009-05-25 15:24 -------- d-----w- c:\program files\Ventrilo 2009-05-25 15:24 . 2009-05-04 17:18 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-05-10 09:39 . 2009-05-10 09:39 84 ---ha-w- c:\programdata\aspg.dat 2009-05-09 18:14 . 2009-05-09 18:14 2837016 ----a-w- c:\users\Haakiiz\AppData\Roaming\Uniblue\DriverScanner\Download\pci_ven_8086_dev_29199_1_1_1013.exe 2009-05-07 15:27 . 2008-12-17 20:17 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2009-05-04 17:27 . 2009-04-29 15:21 104040 ----a-w- c:\users\Haakiiz\AppData\Local\GDIPFONTCACHEV1.DAT 2009-04-30 12:37 . 2009-06-13 23:19 293376 ----a-w- c:\windows\system32\psisdecd.dll 2009-04-30 12:37 . 2009-06-13 23:19 428544 ----a-w- c:\windows\system32\EncDec.dll 2009-04-28 18:08 . 2009-04-28 18:08 9838400 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2009-04-28 18:08 . 2009-04-28 18:08 663552 ----a-w- c:\windows\system32\nvcuvid.dll 2009-04-28 18:08 . 2009-04-28 18:08 457248 ----a-w- c:\windows\system32\nvudisp.exe 2009-04-28 18:08 . 2009-04-28 18:08 3128320 ----a-w- c:\windows\system32\nvwgf2um.dll 2009-04-28 18:08 . 2009-04-28 18:08 1720320 ----a-w- c:\windows\system32\nvcuda.dll 2009-04-28 18:08 . 2009-04-28 18:08 143360 ----a-w- c:\windows\system32\nvcod146.dll 2009-04-28 18:08 . 2009-04-28 18:08 143360 ----a-w- c:\windows\system32\nvcod.dll 2009-04-28 18:08 . 2009-04-28 18:08 1314816 ----a-w- c:\windows\system32\nvcuvenc.dll 2009-04-28 18:08 . 2009-04-28 18:08 10366976 ----a-w- c:\windows\system32\nvoglv32.dll 2009-04-28 18:08 . 2008-09-19 12:20 983040 ----a-w- c:\windows\system32\nvapi.dll 2009-04-28 18:08 . 2008-09-19 12:20 7560704 ----a-w- c:\windows\system32\nvd3dum.dll 2009-04-26 07:32 . 2008-12-17 21:51 457248 ----a-w- c:\windows\system32\NVUNINST.EXE 2009-04-24 16:05 . 2009-06-10 11:26 827904 ----a-w- c:\windows\system32\wininet.dll 2009-04-24 16:02 . 2009-06-10 11:26 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-04-24 13:44 . 2009-06-10 11:26 26624 ----a-w- c:\windows\system32\ieUnatt.exe 2009-04-23 13:15 . 2009-04-23 13:15 1134024 ----a-w- c:\users\Haakiiz\AppData\Roaming\Mozilla\Firefox\Profiles\tywm3c25.default\extensions\[email protected]\components\DTToolbarFF.dll 2009-04-23 12:43 . 2009-06-10 11:26 784896 ----a-w- c:\windows\system32\rpcrt4.dll 2009-04-23 12:42 . 2009-06-10 11:26 636928 ----a-w- c:\windows\system32\localspl.dll 2009-04-21 11:55 . 2009-06-10 11:27 2033152 ----a-w- c:\windows\system32\win32k.sys 2008-08-08 22:48 . 2008-08-08 22:48 90112 ----a-w- c:\program files\Common Files\CPInstallAction.dll 2008-05-22 17:35 . 2008-05-22 17:35 51962 ----a-w- c:\program files\Common Files\banner.jpg 2007-06-12 18:34 . 2007-06-12 18:34 35822 ----a-w- c:\program files\Common Files\ASPG_icon.ico 2009-06-24 17:28 . 2009-04-29 15:52 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll 2009-03-31 20:47 . 2009-04-29 17:01 324976 ----a-w- c:\program files\mozilla firefox\components\coFFPlgn.dll 2008-12-17 21:16 . 2009-04-29 15:58 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll 2009-04-15 20:24 . 2009-04-15 20:24 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-04-15 20:24 . 2009-04-15 20:24 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . (((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret ))))))))))))))))))))))))))))))))))))))))))))) . . *Merk* tomme oppføringer & gyldige standardoppføringer vises ikke REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1] @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}" [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}] 2007-06-02 01:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392] "MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "Steam"="d:\spill\Steam\Steam.exe" [2009-06-11 1217784] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "SpybotSD TeaTimer"="d:\antivirus\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184] "CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936] "P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216] "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-12-17 30192] "HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-08-18 98304] "ATKOSD2"="c:\program files\ASUS\ATKOSD2\ATKOSD2.exe" [2008-07-15 7651328] "ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2008-02-01 61440] "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2008-12-17 3054136] "ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2008-12-17 47672] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-28 13756960] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-06-07 148888] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-06-22 1948440] "RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-08-12 6265376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "GrpConv"="grpconv -o" [X] c:\users\Haakiiz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-7-30 752168] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "TaskbarNoThumbnail"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "TaskbarNoNotification"= 0 (0x0) "HideSCABattery"= 0 (0x0) "HideSCANetwork"= 0 (0x0) "HideSCAVolume"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\System32\avgrsstx.dll c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "mixer"=wdmaud.drv [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UacDisableNotify"=dword:00000001 "InternetSettingsDisableNotify"=dword:00000001 "AutoUpdateDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{D2F71FA8-A0FD-4F5E-854D-DECDCBEBF0BB}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook "{718D7D4C-07D1-42FB-85F2-8D085225CB3B}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{C38AF93A-A683-4291-AFA5-5957CD32C276}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In) "{0348C639-D460-42AA-807E-AC4AD073B68C}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In) "{C57D84B1-94D9-4798-B132-BA9E430724AB}"= UDP:c:\program files\Ventrilo\Ventrilo.exe:Ventrilo.exe "{0603D279-E029-4E70-873B-E8FF37688232}"= TCP:c:\program files\Ventrilo\Ventrilo.exe:Ventrilo.exe "{9A81C8FD-501B-4D00-BCE0-3EBAD5CC5312}"= UDP:c:\program files\Spotify\spotify.exe:Spotify "{E717B6B1-DC54-4CE4-8442-D7E8EEF8035B}"= TCP:c:\program files\Spotify\spotify.exe:Spotify "{393E9DD1-52F8-4692-9FF9-F8D6037A2DC2}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe "{186C36CA-41E7-42D3-9B3F-AFF64A676E87}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe "{8420DA49-D1BD-4C05-834D-2486879A9DED}"= UDP:c:\program files\Spotify\spotify.exe:Spotify "{8BA3A2F8-ECB2-4832-92BB-056EDFF567E9}"= TCP:c:\program files\Spotify\spotify.exe:Spotify [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) R0 lullaby;lullaby;c:\windows\System32\drivers\lullaby.sys [18.12.2008 00:28 15416] S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [22.06.2009 19:32 335752] S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [22.06.2009 19:32 108552] S1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20090710.006\IDSvix86.sys [11.07.2009 12:24 272432] S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [22.06.2009 19:32 298776] S2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [06.02.2008 21:47 149352] S2 SBSDWSCService;SBSD Security Center Service;d:\antivirus\Spybot - Search & Destroy\SDWinSec.exe [13.07.2009 15:46 1153368] S3 BTHprint;Microsoft Bluetooth Printer Class;c:\windows\System32\drivers\BTHPRINT.SYS [21.01.2008 04:23 29696] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [18.12.2008 00:12 29736] S3 COH_Mon;COH_Mon;c:\windows\System32\drivers\COH_Mon.sys [12.01.2008 21:31 23888] S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [17.12.2008 23:16 30192] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\System32\drivers\mbamswissarmy.sys [13.07.2009 00:39 38160] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [22.01.2009 15:43 52768] S3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [19.02.2009 13:31 41008] --- Andre tjenester/drivere lastet i minnet --- *NewlyCreated* - COMHOST *NewlyCreated* - ECACHE [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] "c:\program files\Common Files\LightScribe\LSRunOnce.exe" . Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver) 2009-07-13 c:\windows\Tasks\Norton Internet Security - Run Full System Scan - Haakiiz.job - c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2008-02-07 07:04] . - - - - TOMME PEKERE FJERNET - - - - HKLM-RunOnce-<NO NAME> - (no file) . ------- Tilleggsskanning ------- . uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\Haakiiz\AppData\Roaming\Mozilla\Firefox\Profiles\tywm3c25.default\ FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll FF - component: c:\program files\Mozilla Firefox\components\coFFPlgn.dll FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Picasa2\npPicasa2.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".no"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-16 21:46 Windows 6.0.6001 Service Pack 1 NTFS skanner skjulte prosesser ... skanner skjulte autostart-oppføringer ... skanner skjulte filer ... C:\ADSM_PData_0150 skanning vellykket skjulte filer: 1 ************************************************************************** . --------------------- LÅSTE REGISTERNØKLER --------------------- [HKEY_USERS\S-1-5-21-4098405696-2879596588-960340101-1000\Software\SecuROM\License information*] "datasecu"=hex:c9,cc,58,86,c7,a2,9e,a6,9b,7e,f0,7c,56,3f,05,f3,5c,85,82,b5,8b, 21,6f,53,fb,46,b3,e4,3c,3d,e1,3c,7b,bd,a3,13,a3,cd,06,79,a7,c6,92,60,ed,2b,\ "rkeysecu"=hex:ef,70,d2,ee,06,e6,7a,13,7b,1e,53,48,db,3b,80,71 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . Tidspunkt ferdig: 2009-07-16 21:48 ComboFix-quarantined-files.txt 2009-07-16 19:48 Pre-Run: 114 600 857 600 byte ledig Post-Run: 114 568 257 536 byte ledig 400 --- E O F --- 2009-07-15 11:10 Lenke til kommentar
norbat Skrevet 16. juli 2009 Del Skrevet 16. juli 2009 Ser greit ut. Du har både avg og norton. Bestem deg for ett og avinstaller det andre. Når iconene er borte, er det slik at oppgavelinja også er borte? Lenke til kommentar
Enkai Skrevet 16. juli 2009 Forfatter Del Skrevet 16. juli 2009 Mitt valg ble Norton. Bare ikonene som er borte, oppgavelinja er inntakt. Vet ikke om det er "placebo", men datan virker raskere, men jeg tok en "video stress test" på Counter-strike: Source (xD) og der jeg pleier å ha 140 i FPS på den beste grafikken, har jeg nå 40-50. Bare en tanke jeg ville dele Lenke til kommentar
norbat Skrevet 16. juli 2009 Del Skrevet 16. juli 2009 Det er en funksjon i Vista (i xp også) der man kan skjule skrivebordsikonene. Kanskje det er den funksjonen som roter? Når ikonene er borte, kan du høyreklikke på skrivebordet, velg Vis, og sjekk om det er hake/mangler hake ved "Vis skrivebordsikon. Vista har kommet med SP2. Mon tro om det kunne være en ide å oppdatere systemet ditt med denne: http://www.microsoft.com/downloads/details...a3-99ff6f22448d. Lenke til kommentar
Enkai Skrevet 16. juli 2009 Forfatter Del Skrevet 16. juli 2009 Hah, du finner ut ting Jeg gjorde som du sa og den hake greia var "på". Jeg skrudde den så av, for så å skru den på igjen og voila Jeg prøver en reboot for å sjekke om det holder. kk, Jeg skal oppdatere, men dataen en fremdeles en anelse treg, ikke mye, men fremdeles nok til å bli irritert av Noen tanker om hva det kan være? Lenke til kommentar
norbat Skrevet 16. juli 2009 Del Skrevet 16. juli 2009 (endret) Problemet inkl. tregheten skyldes sannsynligvis at det er en eller flere filer som har blitt korrupte etter infeksjonen du hadde. Ideen var derfor at om du oppgraderte til SP2, så vil i allefall de aller fleste systemfilene bli oppdatert. Edit: Du kunne også ha sett om det finnes noen oppdatering til skjermkortet ditt (driveren). Endret 16. juli 2009 av norbat Lenke til kommentar
Enkai Skrevet 16. juli 2009 Forfatter Del Skrevet 16. juli 2009 Laster ned og innstalerer drivere og SP nå Jaja, jeg lærer ihvertfall mye av denne hendelsen Lenke til kommentar
Enkai Skrevet 17. juli 2009 Forfatter Del Skrevet 17. juli 2009 Jeg har nå oppdatert drivere og innstallert SP 2. Dataen ER raskere nå (hele 65FPS på stress test i CSS ^^), men dessverre ikke optimalt som den var når jeg tok den ut av boksen. Før jeg sier at problemet er løst vil jeg spørre deg (eller andre) om det er noen siste lille ting som kan gjøre at datan blir optimal igjen. Men utenom det vil jeg egentlig si meg fornøyd og jeg har følt meg trygg under din veiledning, Norbat Du har vært konge! "Catch me later, and I'll buy you a beer" - Barney, Half-Life 1 <3 Lenke til kommentar
Anbefalte innlegg
Opprett en konto eller logg inn for å kommentere
Du må være et medlem for å kunne skrive en kommentar
Opprett konto
Det er enkelt å melde seg inn for å starte en ny konto!
Start en kontoLogg inn
Har du allerede en konto? Logg inn her.
Logg inn nå