[Løst]Brus og sus på data =virus?

[rstrr]

To dager siden fikk jeg rar e-post fra vennen min som sikkert ikke var send av ham(Hotmail).Nå har jeg rytmisk brus og jevn baksus i lyden. Hva en man gjør på skerm lager mer brus.Kan noen hjelpe? Please.

 

Malwarebytes' Anti-Malware 1.41

Databaseversjon: 3204

Windows 5.1.2600 Service Pack 3

 

21.11.2009 00:51:40

mbam-log-2009-11-21 (00-51-40).txt

 

Skanntype: Rask Skann

Objekter skannet: 94784

Tid tilbakelagt: 3 minute(s), 46 second(s)

 

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 0

Registerverdier infisert: 0

Registerfiler infisert: 0

Mapper infisert: 0

Filer infisert: 0

 

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

 

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

 

Registernøkler infisert:

(Ingen mistenkelige filer funnet)

 

Registerverdier infisert:

(Ingen mistenkelige filer funnet)

 

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

 

Mapper infisert:

(Ingen mistenkelige filer funnet)

 

Filer infisert:

(Ingen mistenkelige filer funnet)

 

ComboFix 09-11-20.02 - torsti 21.11.2009 1:21.1.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.47.1044.18.502.159 [GMT 1:00]

Kjører fra: c:\documents and settings\torsti\Skrivebord\Combo.exe

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

.

 

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\windows\system32\drivers\pciide.sys

 

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2009-10-21 til 2009-11-21 )))))))))))))))))))))))))))))))))

.

 

2009-11-20 23:37 . 2009-11-20 23:37 -------- d-----w- c:\windows\system32\wbem\Repository

2009-11-20 23:37 . 2009-11-20 23:37 -------- d--h--r- c:\documents and settings\torsti\Siste

2009-11-16 09:34 . 2009-11-16 09:34 -------- d-----w- c:\windows\myVRmfcax

2009-11-13 07:31 . 2009-11-13 07:31 -------- d-----w- c:\documents and settings\torsti\Programdata\ScanSoft

2009-11-13 07:31 . 2009-11-13 07:31 -------- d-----w- c:\documents and settings\All Users\Programdata\SSScanWizard

2009-11-13 07:31 . 2009-11-13 07:31 -------- d-----w- c:\documents and settings\All Users\Programdata\SSScanAppDataDir

2009-11-13 07:30 . 2009-11-13 07:31 -------- d-----w- c:\programfiler\Fellesfiler\ScanSoft Shared

2009-11-13 07:30 . 2009-11-13 07:30 -------- d-----w- c:\programfiler\ScanSoft

2009-11-13 07:29 . 2009-11-13 07:29 -------- d-----w- c:\programfiler\ArcSoft

2009-11-13 07:29 . 1995-08-01 03:44 212480 ----a-w- c:\windows\PCDLIB32.DLL

2009-11-13 07:27 . 2003-09-18 13:32 499712 ----a-w- c:\windows\system32\msvcp71.dll

2009-11-13 07:27 . 2003-09-18 13:32 348160 ----a-w- c:\windows\system32\msvcr71.dll

2009-11-13 07:27 . 2003-09-18 13:32 1060864 ----a-w- c:\windows\system32\MFC71.dll

2009-11-13 07:27 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe

2009-11-13 07:27 . 2009-11-13 07:27 -------- d-----w- c:\windows\StartHtmico

2009-11-13 07:26 . 2009-11-13 07:26 -------- d--h--w- c:\windows\system32\CanonMP Uninstaller Information

2009-11-13 07:26 . 2009-11-13 07:28 -------- d-----w- c:\programfiler\Canon

2009-11-06 11:16 . 2009-11-06 11:16 -------- d-----w- c:\documents and settings\torsti\Programdata\Apple Computer

2009-11-05 02:24 . 2009-11-05 02:24 152576 ----a-w- c:\documents and settings\torsti\Programdata\Sun\Java\jre1.6.0_17\lzma.dll

2009-11-03 14:54 . 2009-11-17 09:00 -------- d-----w- c:\documents and settings\torsti\Lokale innstillinger\Programdata\Temp

2009-11-01 23:35 . 2009-11-05 02:26 411368 ----a-w- c:\windows\system32\deploytk.dll

2009-11-01 23:34 . 2009-11-01 23:34 152576 ----a-w- c:\documents and settings\torsti\Programdata\Sun\Java\jre1.6.0_15\lzma.dll

2009-11-01 13:11 . 2009-11-01 13:11 -------- d-----w- c:\windows\Sun

2009-11-01 13:10 . 2009-11-05 02:26 -------- d-----w- c:\programfiler\Java

2009-11-01 13:09 . 2009-11-01 13:09 -------- d-----w- c:\programfiler\Fellesfiler\Java

2009-11-01 12:34 . 2005-08-25 20:00 8704 ----a-w- c:\windows\system32\CNMVS7L.DLL

2009-11-01 12:34 . 2005-08-25 20:00 140288 ----a-w- c:\windows\system32\CNMLM7L.DLL

2009-11-01 12:34 . 2008-04-13 19:47 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys

2009-11-01 12:34 . 2008-04-13 19:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys

2009-11-01 12:34 . 2008-04-13 19:45 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys

2009-11-01 12:34 . 2008-04-13 19:45 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

2009-11-01 12:32 . 2008-04-13 19:45 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys

2009-11-01 12:32 . 2008-04-13 19:45 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys

2009-10-29 23:43 . 2009-10-29 23:43 -------- d-----w- c:\documents and settings\torsti\Programdata\Windows Search

2009-10-29 17:48 . 2009-10-29 17:48 130 ----a-w- c:\documents and settings\torsti\Lokale innstillinger\Programdata\fusioncache.dat

2009-10-29 17:48 . 2009-10-29 17:55 -------- d-----w- c:\documents and settings\torsti\Lokale innstillinger\Programdata\ApplicationHistory

2009-10-29 17:43 . 2009-10-29 17:43 -------- d-----w- c:\programfiler\Fellesfiler\Apple

2009-10-29 17:42 . 2009-10-29 17:42 -------- d-----w- c:\documents and settings\torsti\Lokale innstillinger\Programdata\Apple

2009-10-29 17:42 . 2009-10-29 17:42 -------- d-----w- c:\programfiler\Apple Software Update

2009-10-29 17:42 . 2009-10-29 17:42 -------- d-----w- c:\documents and settings\All Users\Programdata\Apple

2009-10-29 17:37 . 2005-10-14 13:50 139264 ----a-w- c:\windows\system32\igfxres.dll

2009-10-29 17:35 . 2009-10-29 17:35 -------- d-----w- c:\programfiler\Microsoft Silverlight

2009-10-29 17:34 . 2009-10-29 17:34 -------- d-----w- c:\documents and settings\torsti\Programdata\Windows Desktop Search

2009-10-29 17:34 . 2009-10-29 17:52 -------- d-----w- c:\programfiler\Windows Desktop Search

2009-10-29 17:34 . 2009-10-29 17:34 -------- d-----w- c:\windows\system32\GroupPolicy

2009-10-29 17:33 . 2008-03-07 17:02 98304 -c----w- c:\windows\system32\dllcache\nlhtml.dll

2009-10-29 17:33 . 2008-03-07 17:02 29696 -c----w- c:\windows\system32\dllcache\mimefilt.dll

2009-10-29 17:33 . 2008-03-07 17:02 192000 -c----w- c:\windows\system32\dllcache\offfilt.dll

2009-10-29 17:32 . 2009-10-29 17:32 -------- d-----w- c:\windows\system32\URTTEMP

2009-10-29 17:29 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll

2009-10-27 13:36 . 2009-10-27 13:36 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys

2009-10-27 13:36 . 2009-10-27 13:36 93360 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Drivers\SBREDrv.sys

2009-10-27 13:36 . 2009-10-27 13:36 554280 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\sbap.dll

2009-10-27 13:36 . 2009-10-27 13:36 15880 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\lsdelete.exe

2009-10-27 13:36 . 2009-10-31 13:36 212480 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\VipreBridge.dll

2009-10-27 13:36 . 2009-10-27 13:36 283944 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Vipre.dll

2009-10-27 13:36 . 2009-10-27 13:36 1223976 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\SBTE.dll

2009-10-27 13:36 . 2009-10-27 13:36 242984 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\SBRE.dll

2009-10-27 13:36 . 2009-10-27 13:36 5908024 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Resources.dll

2009-10-25 00:56 . 2009-10-25 00:56 -------- d-----w- c:\documents and settings\torsti\Lokale innstillinger\Programdata\Apple Computer

2009-10-22 07:42 . 2009-10-27 13:36 15880 ----a-w- c:\windows\system32\lsdelete.exe

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-19 19:14 . 2009-10-17 13:33 -------- d-----w- c:\documents and settings\torsti\Programdata\Spotify

2009-11-18 16:30 . 2009-10-20 19:55 -------- d-----w- c:\documents and settings\torsti\Programdata\foobar2000

2009-11-13 07:29 . 2009-10-17 10:27 -------- d--h--w- c:\programfiler\InstallShield Installation Information

2009-11-12 02:46 . 2009-10-17 12:47 -------- d-----w- c:\programfiler\SUPERAntiSpyware

2009-11-06 11:17 . 2009-10-18 11:43 -------- d-----w- c:\documents and settings\All Users\Programdata\Apple Computer

2009-11-05 11:33 . 2009-10-17 12:47 117760 ----a-w- c:\documents and settings\torsti\Programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL

2009-11-04 16:02 . 2009-10-15 13:07 14248 ----a-w- c:\documents and settings\torsti\Lokale innstillinger\Programdata\GDIPFONTCACHEV1.DAT

2009-11-01 12:35 . 2009-11-01 12:35 -------- d--h--w- c:\documents and settings\All Users\Programdata\CanonBJ

2009-10-31 13:36 . 2009-10-17 12:36 862040 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\threatwork.exe

2009-10-31 13:36 . 2009-10-17 12:36 206944 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\lavamessage.dll

2009-10-31 13:36 . 2009-10-17 12:36 390288 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\lavalicense.dll

2009-10-31 13:36 . 2009-10-17 12:36 163728 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\ShellExt.dll

2009-10-31 13:36 . 2009-10-17 12:36 194104 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Savapibridge.dll

2009-10-31 13:36 . 2009-10-17 12:36 1638104 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Ad-Aware.exe

2009-10-31 13:36 . 2009-10-17 12:36 788368 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\AAWTray.exe

2009-10-31 13:36 . 2009-10-17 12:36 1179232 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\AAWService.exe

2009-10-29 17:48 . 2006-03-02 12:00 88120 ----a-w- c:\windows\system32\perfc014.dat

2009-10-29 17:48 . 2006-03-02 12:00 464336 ----a-w- c:\windows\system32\perfh014.dat

2009-10-29 12:55 . 2009-10-17 15:47 664 ----a-w- c:\windows\system32\d3d9caps.dat

2009-10-27 13:36 . 2009-10-17 12:36 537576 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\aawapi.dll

2009-10-27 13:36 . 2009-10-17 12:36 370744 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\UpdateManager.dll

2009-10-27 13:36 . 2009-10-17 12:36 327000 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\RPAPI.dll

2009-10-27 13:36 . 2009-10-17 12:36 87496 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\PrivacyClean.dll

2009-10-27 13:36 . 2009-10-17 12:36 933120 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\CEAPI.dll

2009-10-27 13:36 . 2009-10-17 12:36 640608 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\AutoLaunch.exe

2009-10-27 13:36 . 2009-10-17 12:36 815760 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe

2009-10-27 13:36 . 2009-10-17 12:36 822904 ----a-w- c:\documents and settings\All Users\Programdata\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe

2009-10-20 19:55 . 2009-10-20 19:55 -------- d-----w- c:\programfiler\foobar2000

2009-10-19 07:02 . 2009-10-17 11:41 -------- d-----w- c:\programfiler\Fellesfiler\InstallShield

2009-10-18 11:47 . 2009-10-18 11:47 -------- d-----w- c:\programfiler\DIFX

2009-10-18 11:47 . 2009-10-18 11:41 -------- d-----w- c:\programfiler\OLYMPUS

2009-10-18 11:40 . 2009-10-18 11:40 -------- d-----w- c:\programfiler\MSXML 4.0

2009-10-18 09:35 . 2009-10-18 09:35 -------- d-----w- c:\programfiler\Windows Media Connect 2

2009-10-17 13:33 . 2009-10-17 13:33 -------- d-----w- c:\programfiler\Spotify

2009-10-17 12:49 . 2009-10-17 12:34 -------- d-----w- c:\programfiler\Google

2009-10-17 12:47 . 2009-10-17 12:47 -------- d-----w- c:\documents and settings\All Users\Programdata\SUPERAntiSpyware.com

2009-10-17 12:47 . 2009-10-17 12:47 -------- d-----w- c:\documents and settings\torsti\Programdata\SUPERAntiSpyware.com

2009-10-17 12:46 . 2009-10-17 12:46 -------- d-----w- c:\programfiler\Fellesfiler\Wise Installation Wizard

2009-10-17 12:42 . 2009-10-17 12:42 -------- d-----w- c:\documents and settings\torsti\Programdata\Malwarebytes

2009-10-17 12:42 . 2009-10-17 12:42 -------- d-----w- c:\programfiler\Malwarebytes' Anti-Malware

2009-10-17 12:42 . 2009-10-17 12:42 -------- d-----w- c:\documents and settings\All Users\Programdata\Malwarebytes

2009-10-17 12:34 . 2009-10-17 12:34 -------- dc-h--w- c:\documents and settings\All Users\Programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}

2009-10-17 12:34 . 2009-10-17 12:34 -------- d-----w- c:\programfiler\Lavasoft

2009-10-17 12:34 . 2009-10-17 12:34 -------- d-----w- c:\documents and settings\All Users\Programdata\Lavasoft

2009-10-17 12:29 . 2009-10-17 12:29 -------- d-----w- c:\programfiler\FileHippo.com

2009-10-17 12:28 . 2009-10-17 12:28 -------- d-----w- c:\programfiler\CCleaner

2009-10-17 12:06 . 2009-10-17 12:06 -------- d-----w- c:\programfiler\MSBuild

2009-10-17 12:06 . 2009-10-17 12:06 -------- d-----w- c:\programfiler\Reference Assemblies

2009-10-17 11:58 . 2009-10-17 11:56 -------- d-----w- c:\programfiler\Windows Live

2009-10-17 11:57 . 2009-10-17 11:57 -------- d-----w- c:\programfiler\Microsoft SQL Server Compact Edition

2009-10-17 11:56 . 2009-10-17 11:56 -------- d-----w- c:\programfiler\Microsoft

2009-10-17 11:56 . 2009-10-17 11:56 -------- d-----w- c:\programfiler\Windows Live SkyDrive

2009-10-17 11:51 . 2009-10-17 11:51 -------- d-----w- c:\programfiler\Fellesfiler\Windows Live

2009-10-17 11:41 . 2009-10-17 11:41 -------- d-----w- c:\programfiler\Broadcom

2009-10-17 11:37 . 2009-10-17 10:53 -------- d-----w- c:\programfiler\Broadcom(2)

2009-10-17 10:45 . 2009-10-17 10:27 -------- d-----w- c:\programfiler\Analog Devices

2009-10-17 10:11 . 2009-10-17 10:11 -------- d-----w- c:\programfiler\Intel

2009-10-17 10:09 . 2009-10-17 10:09 -------- d-----w- c:\programfiler\Dell

2009-10-17 09:15 . 2009-10-15 12:50 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat

2009-10-17 08:29 . 2009-10-17 08:29 -------- d-----w- c:\programfiler\Avira

2009-10-17 08:29 . 2009-10-17 08:29 -------- d-----w- c:\documents and settings\All Users\Programdata\Avira

2009-10-17 08:24 . 2009-10-17 08:24 1961720 ----a-w- c:\documents and settings\torsti\Programdata\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe

2009-10-15 21:15 . 2009-10-15 21:15 552 ----a-w- c:\windows\system32\d3d8caps.dat

2009-10-15 12:52 . 2009-10-15 12:52 -------- d-----w- c:\programfiler\microsoft frontpage

2009-10-15 12:50 . 2009-10-15 12:50 -------- d-----w- c:\programfiler\Elektroniske tjenester

2009-10-15 12:49 . 2009-10-15 12:49 -------- d-----w- c:\programfiler\Fellesfiler\Tjenester

2009-10-15 12:48 . 2009-10-15 12:48 21704 ----a-w- c:\windows\system32\emptyregdb.dat

2009-10-08 13:57 . 2008-07-29 17:59 612352 ----a-w- c:\windows\system32\uiautomationcore.dll

2009-10-08 13:57 . 2006-03-02 12:00 20992 ----a-w- c:\windows\system32\oleaccrc.dll

2009-10-08 13:57 . 2006-03-02 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll

2009-10-03 08:15 . 2009-10-17 12:34 2924848 -c--a-w- c:\documents and settings\All Users\Programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe

2009-09-25 05:48 . 2009-09-25 05:48 81920 ------w- c:\windows\system32\ieencode.dll

2009-09-23 12:55 . 2009-10-17 12:36 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys

2009-09-11 14:20 . 2006-03-02 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-10 12:54 . 2009-10-17 12:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2009-09-10 12:53 . 2009-10-17 12:42 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2009-09-04 21:05 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\msasn1.dll

2009-08-29 08:00 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll

2009-08-26 08:02 . 2006-03-02 12:00 247326 ----a-w- c:\windows\system32\strmdll.dll

.

 

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="c:\programfiler\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

"FileHippo.com"="c:\programfiler\FileHippo.com\UpdateChecker.exe" [2009-09-28 155648]

"SUPERAntiSpyware"="c:\programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-11-12 2001648]

"OM2_Monitor"="c:\programfiler\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2009-04-17 95536]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avgnt"="c:\programfiler\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

"SoundMAXPnP"="c:\programfiler\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]

"OM2_Monitor"="c:\programfiler\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2009-04-17 54576]

"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-10-14 94208]

"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-10-14 77824]

"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-10-14 114688]

"SunJavaUpdateSched"="c:\programfiler\Java\jre6\bin\jusched.exe" [2009-11-05 149280]

"OpwareSE2"="c:\programfiler\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]

"OPSE reminder"="c:\programfiler\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe" [2003-07-07 729088]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

c:\documents and settings\All Users\Start-meny\Programmer\Oppstart\

Windows Search.lnk - c:\programfiler\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programfiler\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programfiler\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

2009-09-03 13:21 548352 ----a-w- c:\programfiler\SUPERAntiSpyware\SASWINLO.dll

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Programfiler\\Messenger\\msmsgs.exe"=

"c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Programfiler\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"c:\\Programfiler\\Spotify\\spotify.exe"=

"c:\\WINDOWS\\system32\\mmc.exe"=

 

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [17.10.2009 13:36 64288]

R1 SASDIFSV;SASDIFSV;c:\programfiler\SUPERAntiSpyware\sasdifsv.sys [12.10.2009 20:24 9968]

R1 SASKUTIL;SASKUTIL;c:\programfiler\SUPERAntiSpyware\SASKUTIL.SYS [12.10.2009 20:24 74480]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\programfiler\Avira\AntiVir Desktop\sched.exe [17.10.2009 09:29 108289]

R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\programfiler\Lavasoft\Ad-Aware\AAWService.exe [24.09.2009 12:17 1179232]

R3 SASENUM;SASENUM;c:\programfiler\SUPERAntiSpyware\SASENUM.SYS [12.10.2009 20:24 7408]

S2 gupdate1ca4f2637265fb6;Google Update Service (gupdate1ca4f2637265fb6);c:\programfiler\Google\Update\GoogleUpdate.exe [17.10.2009 13:34 133104]

.

Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)

 

2009-11-21 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\programfiler\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 13:36]

 

2009-11-14 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\programfiler\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

 

2009-11-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\programfiler\Google\Update\GoogleUpdate.exe [2009-10-17 12:34]

 

2009-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\programfiler\Google\Update\GoogleUpdate.exe [2009-10-17 12:34]

.

.

------- Tilleggsskanning -------

.

uStart Page = hxxp://www.slimstart.no/

IE: Easy-WebPrint Add To Print List - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

IE: Easy-WebPrint High Speed Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

IE: Easy-WebPrint Preview - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

IE: Easy-WebPrint Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

.

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-21 01:28

Windows 5.1.2600 Service Pack 3 NTFS

 

skanner skjulte prosesser ...

 

skanner skjulte autostart-oppføringer ...

 

skanner skjulte filer ...

 

skanning vellykket

skjulte filer: 0

 

**************************************************************************

.

--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

 

- - - - - - - > 'winlogon.exe'(672)

c:\programfiler\SUPERAntiSpyware\SASWINLO.dll

 

- - - - - - - > 'explorer.exe'(360)

c:\programfiler\ScanSoft\OmniPageSE2.0\ophookSE2.dll

c:\programfiler\Windows Desktop Search\deskbar.dll

c:\programfiler\Windows Desktop Search\nb-no\dbres.dll.mui

c:\programfiler\Windows Desktop Search\dbres.dll

c:\programfiler\Windows Desktop Search\wordwheel.dll

c:\programfiler\Windows Desktop Search\nb-no\msnlExtRes.dll.mui

c:\programfiler\Windows Desktop Search\msnlExtRes.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Andre Kjørende Prosesser ------------------------

.

c:\programfiler\Java\jre6\bin\jqs.exe

c:\windows\system32\SearchIndexer.exe

c:\windows\system32\wscntfy.exe

c:\windows\system32\wbem\unsecapp.exe

c:\windows\system32\SearchProtocolHost.exe

c:\programfiler\Windows Live\Contacts\wlcomm.exe

c:\windows\system32\SearchFilterHost.exe

c:\programfiler\Lavasoft\Ad-Aware\AAWTray.exe

.

**************************************************************************

.

Tidspunkt ferdig: 2009-11-21 01:35 - maskinen ble startet på nytt

ComboFix-quarantined-files.txt 2009-11-21 00:35

 

Pre-Run: 39 995 785 216 byte ledig

Post-Run: 40 179 912 704 byte ledig

 

WindowsXP-KB310994-SP2-Pro-BootDisk-NOR.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

 

- - End Of File - - D1D75548FB935A4C8A2D82FBA089AAE2

 

Mvh rstrr

[norbat]

Du kunne ha kjørt en systemgjenoppretting til før problemet oppsto og se om ikke det løser problemet (tilbehør->systemverktøy->systemgjenoppretting).

[rstrr]

Har gjort det men hjelpte ikke. Nå "starter ikke uten feil"... Men OS opner seg ikke i vanlig modus eller i sikkermodus. Vill ikke konfigurere til siste fungerende tidspunt heller.

Påstår at maskinvare endring eller endring i programmet er grunnen til at Windows har feil.Ingen maskinvare endring er gjort.

Endret 21. november 2009 av rstrr

[rstrr]

Har gjort det men hjelpte ikke. Nå "starter ikke uten feil"... Men OS opner seg ikke i vanlig modus eller i sikkermodus. Vill ikke konfigurere til siste fungerende tidspunt heller.

Påstår at maskinvare endring eller endring i programmet er grunnen til at Windows har feil.Ingen maskinvare endring er gjort.

 

Jeg har en extra harddisk og denne pcn som virker. Hvis jeg setter HDn som ikke virker inni extra HD-boxen, kan jeg da tømme den med noen program og installere OS pånytt? Den skadede harddisken er bare to monter gammel. Hvilken programm skulee jeg da bruke? har aldrig gjort sont før.

[norbat]

Velg å starte opp i gjennopprettingskonsollen (du får valget helt i starten av oppstarten av pc - vær rask da valget bare vises i 2 sek.)

 

Fra ledetekst, skriver du chkdsk /r

[rstrr]

Velg å starte opp i gjennopprettingskonsollen (du får valget helt i starten av oppstarten av pc - vær rask da valget bare vises i 2 sek.)

 

Fra ledetekst, skriver du chkdsk /r

 

Mine valg er F2 System og F12 Bootmeny.Tenkte du på de? Dette er DELL Optiplex XP. Jeg kommer in i begge men etter start av hver prosess kommer jeg tilbake til Systemmeny.Kommer dit automatiskt også da jeg bare strarter meskinen.Kan bare bruke pil og enter.

[norbat]

Da du kjørte Combofix ble Microsoft Windows Recovery Console lagt inn. Dette skulle være et valg når pc'n starter opp.

 

Har du en XP cd?

[rstrr]

Da du kjørte Combofix ble Microsoft Windows Recovery Console lagt inn. Dette skulle være et valg når pc'n starter opp.

 

Har du en XP cd?

[/quote

 

 

XP cd har jeg men den begynner ikke å kjøre.

[rstrr]

Da du kjørte Combofix ble Microsoft Windows Recovery Console lagt inn. Dette skulle være et valg når pc'n starter opp.

 

Har du en XP cd?

 

Fant den Recovery Consollen.Det er to alternativer der:

Skriv EXIT for å avslutte og starte maskinen på nytt.Men jeg kan ikke skrive.

Hvilken installasjons program du vill logge på men uten valgmylighet.(Trykk EXIT får å avbryte)

[rstrr]

Da du kjørte Combofix ble Microsoft Windows Recovery Console lagt inn. Dette skulle være et valg når pc'n starter opp.

 

Har du en XP cd?

Kom til Recovery Konsollen:

Kunde skrive kun ein bokstav "c"

[norbat]

NÅr du kommer inn i konsollen får du spørsmål om hvilken installasjon du ønsker å logge på. Normalt er det kun en, så tast 1

 

Du vil nå komme inn og ha mulighet til å skrive chkdsk /r. Gjør det.

Endret 25. november 2009 av norbat

[rstrr]

NÅr du kommer inn i konsollen får du spørsmål om hvilken installasjon du ønsker å logge på. Normalt er det kun en, så tast 1

 

Du vil nå komme inn og ha mulighet til å skrive chkdsk /r. Gjør det.

"kjenner ikke kommandoen"! Men kjenner fex. chkdsk

Endret 27. november 2009 av rstrr

[rstrr]

NÅr du kommer inn i konsollen får du spørsmål om hvilken installasjon du ønsker å logge på. Normalt er det kun en, så tast 1

 

Du vil nå komme inn og ha mulighet til å skrive chkdsk /r. Gjør det.

 

Kan jeg starte xp cd her?

 

Jeg har en extern HD og En annen pc. Også en xp cd.

 

Ny HD kan vere en løsning.

Endret 27. november 2009 av rstrr

[rstrr]

Jeg koblett harddisken til en annen pc som extern hd. Fikk ljyd av ny maskinvare men finner den ikke på "min datamaskin".

 

Finns det noen vei videre?

[norbat]

Sett hd tilbake i original-pc'n og gjør følgende:

 

Start opp i gjenopprettingskonsollen

Når denne er startet opp vil du antakelig stå i følgende mappa: C:/Windows

 

Skriv følgende og trykk Enter etter hver linje:

 

cd ERDNT\hiv-backup

batch erdnt.con

[rstrr]

Sett hd tilbake i original-pc'n og gjør følgende:

 

Start opp i gjenopprettingskonsollen

Når denne er startet opp vil du antakelig stå i følgende mappa: C:/Windows

 

Skriv følgende og trykk Enter etter hver linje:

 

cd ERDNT\hiv-backup

batch erdnt.con

Nej. Det går ikke. Får svar "parameteren er ikke gyldig"

[rstrr]

Jeg har nå formetert og installert Wxp. Uansett kommer jeg ikke til nett.Og da jeg prøver installere driverne finner ikke "Installeren"

 

Hvor kan man lese mer om det?

 

mvh

[rstrr]

Viruset som jeg fikk fra hotmail epost var norsk.Den var fra "politiet" med anbefaling og sende post videre til alle som jeg kjenner. Der var det en lang liste over alle bekante. Og med anbefaling "ikke å opne post med navn ...." Ellers får man virus som ødelegger HDD sånt at det ikke går å reparere!

 

Som sagt er HDD nå formatert. Ny Wxp installert og driverne lastet jeg fra DELL med en annen maskin. Jeg mistet ingen innehåll av data (pga ny HDD=en uke gammel). Bare stor frustrering med uten ferdigheter får å fikse feil.

 

Meldingen var riktig: går ikke å reparere!

 

Mange takk for hjelpen. mvh