Gå til innhold

Treg pc. Mistenker malware

Donnie Darko

Anbefalte innlegg

Donnie Darko

Donnie Darko

Skrevet
Skrevet

Har nå kjørt CCleaner som fjernet rundt 320mb.

 

Logg av SAS:

 

Klikk for å se/fjerne innholdet nedenfor
SUPERAntiSpyware Scan Log

Generated 04/06/2007 at 00:59 AM

 

Application Version : 3.6.1000

 

Core Rules Database Version : 3190

Trace Rules Database Version: 1200

 

Scan type : Quick Scan

Total Scan Time : 00:21:29

 

Memory items scanned : 630

Memory threats detected : 0

Registry items scanned : 792

Registry threats detected : 1

File items scanned : 20108

File threats detected : 67

 

Trojan.WinAntiSpyware/WinAntiVirus 2006/2007

HKU\S-1-5-21-4090873354-3407724242-1505983115-1007\Software\WinAntiVirus Pro 2006

C:\WINDOWS\system32\stera.job

 

Adware.Tracking Cookie

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@adbrite[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@adultadworld[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@adultfriendfinder[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@athomesexnetwork[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@clicksor[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@eroticlick[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@indexstats[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@revsci[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@sexsearchcom[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@sextv1[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@sexylesbianaffairs[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@statcounter[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@stats[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@toplist[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@usenext[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@usenext[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@webpower[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver [email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver nielsen@yadro[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@atwola[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@clicktorrent[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@herfirstlesbiansex[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@indextools[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@keywordmax[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@roiservice[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@statsjobb[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@superstats[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@tacoda[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sø[email protected][1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@xiti[1].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@xxxsupersize[2].txt

C:\Documents and Settings\Sølver Nielsen\Cookies\sølver_nielsen@yourmedia[1].txt

 

 

HijacThis logg:

 

Klikk for å se/fjerne innholdet nedenfor
Logfile of HijackThis v1.99.1

Scan saved at 01:07:02, on 06.04.07

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

c:\Programfiler\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Eset\nod32krn.exe

c:\Programfiler\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Programfiler\Java\jre1.5.0_11\bin\jusched.exe

C:\Programfiler\MSI\Live Update 3\LMonitor.exe

C:\Programfiler\Eset\nod32kui.exe

C:\Programfiler\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

C:\Programfiler\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe

C:\Programfiler\Telenor\Online Start\Telenor.exe

C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

C:\Programfiler\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\iPod\bin\iPodService.exe

C:\Programfiler\Windows Media Player\WMPNSCFG.exe

C:\Programfiler\HP\Digital Imaging\bin\hpqtra08.exe

C:\Programfiler\Stardock\ObjectDock\ObjectDock.exe

C:\Programfiler\HP\Digital Imaging\bin\hpqimzone.exe

C:\Programfiler\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Programfiler\MSN Messenger\usnsvc.exe

C:\Programfiler\Steam\Steam.exe

C:\Programfiler\MSN Messenger\msnmsgr.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\Programfiler\Mozilla Firefox\firefox.exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\WINDOWS\system32\WISPTIS.EXE

C:\Program Files\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.no/0SENBNO/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startsiden.no/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.no/0SENBNO/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Programfiler\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_11\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Online Start Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Programfiler\Telenor\Online Start\IEFixItNowPlugin.dll

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.5.0_11\bin\jusched.exe"

O4 - HKLM\..\Run: [LiveMonitor] C:\Programfiler\MSI\Live Update 3\LMonitor.exe

O4 - HKLM\..\Run: [nod32kui] "C:\Programfiler\Eset\nod32kui.exe" /WAITSERVICE

O4 - HKLM\..\Run: [Adobe Version Cue CS2] "c:\Programfiler\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"

O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "c:\Programfiler\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"

O4 - HKLM\..\Run: [Telenor Online Start] "C:\Programfiler\Telenor\Online Start\Telenor.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Programfiler\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programfiler\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [LClock] C:\Programfiler\LClock\LClock.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Programfiler\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programfiler\Fellesfiler\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [steam] "c:\programfiler\steam\steam.exe" -silent

O4 - HKCU\..\Run: [Rainlendar2] C:\Programfiler\Rainlendar2\Rainlendar2.exe

O4 - HKCU\..\Run: [WMPNSCFG] C:\Programfiler\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - Startup: Stardock ObjectDock.lnk = C:\Programfiler\Stardock\ObjectDock\ObjectDock.exe

O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?

O4 - Global Startup: Adobe Gamma.lnk = C:\Programfiler\Fellesfiler\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programfiler\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: HP Photosmart Premier Hurtigstart.lnk = C:\Programfiler\HP\Digital Imaging\bin\hpqthb08.exe

O4 - Global Startup: Hurtigstart for Adobe Reader.lnk = C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: PC Alert 4.lnk = C:\Programfiler\MSI\PC Alert 4\PCAlert4.exe

O8 - Extra context menu item: Convert link target to Adobe PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert to existing PDF - res://c:\Programfiler\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_11\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_11\bin\ssv.dll

O9 - Extra button: Oppslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O18 - Protocol: fin - {5C472352-90D0-4214-BF20-8E4A2B82F980} - (no file)

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Programfiler\Fellesfiler\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Adobe Version Cue CS2 - Unknown owner - c:\Programfiler\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programfiler\iPod\bin\iPodService.exe

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programfiler\Eset\nod32krn.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

 

 

 

 

 

 

Jeg så jeg hadde mange cookies og noen trojaner, hva skal jeg`?

Lenke til kommentar

Videoannonse

Videoannonse
Annonse
norbat

norbat

Skrevet
Skrevet

Ser fint ut dette, MathiasF

 

Cookies får du alltid når du er på nettsider og disse er ufarlig.

 

WinAntiSpyware er et antispywareprogram som ikke er helt heldig å ha på pc'n da det gir falske meldinger m.fl.

 

SAS fant og tok de aktuelle filene så dette skal ikke plage deg særlig.

 

Du kan gjerne kjøre en rens med programmet CCleaner i ny og ne.

Lenke til kommentar
norbat

norbat

Skrevet
Skrevet

Kjenner dessverre litt lite til NOD32 og hvilke 'funksjoner' det har foruten at det er et antivirus-program. SAS er et antispyware-program og er flinkere til å ta slike type filer. WinAntiSpyware m.fl er ikke virus, så det er ikke sikkert at NOD32 o.l er satt opp til å oppdage slike type 'programmer'.

Lenke til kommentar
Donnie Darko

Donnie Darko

Skrevet
  • Forfatter
Skrevet

Loggen av HijackThis til en venn av meg:

 

Klikk for å se/fjerne innholdet nedenfor
Logfile of HijackThis v1.99.1

Scan saved at 19:07:05, on 06.04.2007

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Intel\Wireless\Bin\EvtEng.exe

C:\WINDOWS\Explorer.EXE

C:\Programfiler\Intel\Wireless\bin\ZCfgSvc.exe

C:\Programfiler\Intel\Wireless\Bin\ifrmewrk.exe

C:\WINDOWS\System32\igfxtray.exe

C:\WINDOWS\System32\hkcmd.exe

C:\WINDOWS\System32\igfxpers.exe

C:\Programfiler\DAEMON Tools\daemon.exe

C:\Programfiler\Java\jre1.5.0_11\bin\jusched.exe

C:\Programfiler\QuickTime\qttask.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Programfiler\Intel\Wireless\Bin\S24EvMon.exe

C:\Programfiler\MSN Messenger\MsnMsgr.Exe

C:\Programfiler\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

C:\Programfiler\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

C:\Programfiler\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Intel\Wireless\Bin\RegSrvc.exe

C:\Programfiler\Intel\Wireless\Bin\Dot1XCfg.exe

C:\Programfiler\VideoLAN\VLC\vlc.exe

C:\WINDOWS\System32\wuauclt.exe

C:\WINDOWS\System32\igfxsrvc.exe

C:\Programfiler\Internet Explorer\iexplore.exe

C:\Program Files\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.no/0SENONO/SAOS01

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_11\bin\ssv.dll

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programfiler\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\MSN Apps\MSN Toolbar\01.02.5000.1021\no\msntb.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\MSN Apps\MSN Toolbar\01.02.5000.1021\no\msntb.dll

O4 - HKLM\..\Run: [intelZeroConfig] "C:\Programfiler\Intel\Wireless\bin\ZCfgSvc.exe"

O4 - HKLM\..\Run: [intelWireless] "C:\Programfiler\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exe

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programfiler\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.5.0_11\bin\jusched.exe"

O4 - HKLM\..\Run: [Repair Registry Pro] C:\Programfiler\Repair Registry Pro\RepairRegistryPro.exe -s

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [MsnMsgr] "C:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - Global Startup: Bluetooth Manager.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_11\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_11\bin\ssv.dll

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Programfiler\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Programfiler\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Programfiler\Intel\Wireless\Bin\S24EvMon.exe

 

 

Noe feil?

Lenke til kommentar
Donnie Darko

Donnie Darko

Skrevet
  • Forfatter
Skrevet

Oppstart er vel grei, men tar litt tid når jeg har starta pcen for at den skal kjøre uten å lagge.

 

Den er vel generel treg når jeg skal åpne mapper osv.

 

Avslutningen er noe treg ja, det hender at den fryser seg når jeg skal slå av, den står bare stille på når den kommer til "Windows avsluttes".

Lenke til kommentar
norbat

norbat

Skrevet
Skrevet

Noen forslag:

 

Avinstaller programmer du ikke bruker

 

Kjør en rens med CCleaner

Kjør 'Saker' fra samme program. Kjør til det ikke finner flere feil.

 

Kjør en diskdefragmentering:

Tilbehør->systemverktøy->diskdefragmentering

 

Reparer evt. systemfiler:

Klikk: Start->Kjør

Skriv: sfc /scannow (mellomrom mellom sfc og / ). Du trenger antakelig WinXP cd'n

Lenke til kommentar

Opprett en konto eller logg inn for å kommentere

Du må være et medlem for å kunne skrive en kommentar

Opprett konto

Det er enkelt å melde seg inn for å starte en ny konto!

Start en konto

Logg inn

Har du allerede en konto? Logg inn her.

Logg inn nå
Gå til emneliste

  • Hvem er aktive   0 medlemmer

    • Ingen innloggede medlemmer aktive
×
×
  • Opprett ny...