The_Darkness Skrevet 28. mai 2010 Del Skrevet 28. mai 2010 Hei. Som dere sikkert har forstått har gamla (pcn altså, ikke min mor) begynt å bli litt treg, og tuller med alt. Lurte derfor på om noen hadde mulighet til å kjap se over disse to loggene for å se om det er noe skummelt som ligger å lurer, eller om det rett og slett bare er alderdom og på tide med en liten formatering. MBAM (her var det ikke noe skummelt) Malwarebytes' Anti-Malware 1.44 Databaseversjon: 3816 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18904 28.05.2010 21:22:49 mbam-log-2010-05-28 (21-22-49).txt Skanntype: Rask Skann Objekter skannet: 106826 Tid tilbakelagt: 3 minute(s), 58 second(s) Minneprosesser infisert: 0 Minnemoduler infisert: 0 Registernøkler infisert: 0 Registerverdier infisert: 0 Registerfiler infisert: 0 Mapper infisert: 0 Filer infisert: 0 Minneprosesser infisert: (Ingen mistenkelige filer funnet) Minnemoduler infisert: (Ingen mistenkelige filer funnet) Registernøkler infisert: (Ingen mistenkelige filer funnet) Registerverdier infisert: (Ingen mistenkelige filer funnet) Registerfiler infisert: (Ingen mistenkelige filer funnet) Mapper infisert: (Ingen mistenkelige filer funnet) Filer infisert: (Ingen mistenkelige filer funnet) DDS DDS (Ver_10-03-17.01) - NTFSX64 Run by Sondre at 21:23:29,76 on 28.05.2010 Internet Explorer: 8.0.6001.18904 BrowserJavaVersion: 1.6.0_15 Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.47.1044.18.4090.2129 [GMT 2:00] SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Program Files (x86)\Program DJ\Dualview Server\dualviewsvc.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Windows\system32\WLANExt.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Windows\system32\rundll32.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\agr64svc.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe -k bthsvcs C:\Program Files\Intel\WiFi\bin\EvtEng.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Windows\system32\SVC_LTT.exe C:\Windows\system32\lxcycoms.exe C:\Windows\SysWOW64\PnkBstrA.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe C:\Program Files (x86)\Program DJ\Smart Watchdog\SWDsvc.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files (x86)\Voddler\service\voddler.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RAVCpl64.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\LTT\FingerLogon\UACProcess.exe C:\Program Files\LTT\FingerLogon\FingerLogon.exe C:\Program Files\LTT\FingerLogon\ScreenSaver.exe C:\Program Files\LTT\FingerLogon\PswdFilterMsgDlg.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files (x86)\Program DJ\Wireless Switch\wlss.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files (x86)\Program DJ\Program DJ\ProgramDJ.exe C:\Program Files\Program DJ\Green Charger\GCTray.exe C:\Program Files (x86)\Program DJ\Safety Guard\SftgLnch.exe C:\Program Files (x86)\Program DJ\Wow Video&Audio\WVAMain.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Voddler\service\VNetManager.exe C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\Program Files (x86)\Program DJ\Program DJ\PdjAssistant64.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\EncryptWatchingService.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\msiexec.exe C:\Windows\servicing\TrustedInstaller.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Windows\SysWOW64\NOTEPAD.EXE C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\Sondre\Downloads\dds.scr C:\Windows\SysWOW64\conime.exe C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uSearch Page = uStart Page = hxxp://radio1.no/?by=trondheim uSearch Bar = mLocal Page = c:\windows\syswow64\blank.htm uURLSearchHooks: H - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files (x86)\microsoft office\office12\GrooveShellExtensions.dll BHO: Påloggingshjelp for Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files (x86)\daemon tools toolbar\DTToolbar.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [DAEMON Tools Lite] "c:\program files (x86)\daemon tools lite\daemon.exe" -autorun uRun: [sUPERAntiSpyware] c:\program files (x86)\superantispyware\SUPERAntiSpyware.exe uRun: [WMPNSCFG] c:\program files (x86)\windows media player\WMPNSCFG.exe uRun: [<NO NAME>] uRun: [msnmsgr] "c:\program files (x86)\windows live\messenger\msnmsgr.exe" /background uRun: [skype] "c:\program files (x86)\skype\phone\Skype.exe" /nosplash /minimized mRun: [WLSS] c:\program files (x86)\program dj\wireless switch\WLSS.exe mRun: [Program DJ] "c:\program files (x86)\program dj\program dj\ProgramDJ.exe" mRun: [GCTray] c:\program files\program dj\green charger\GCTray.exe mRun: [sftgLnch] c:\program files (x86)\program dj\safety guard\SftgLnch.exe mRun: [<NO NAME>] mRun: [Wow Video&Audio] c:\program files (x86)\program dj\wow video&audio\WVAMain.exe mRun: [WinampAgent] "c:\program files (x86)\winamp\winampa.exe" mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe mRun: [Adobe Acrobat Speed Launcher] "c:\program files (x86)\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe" mRun: [Acrobat Assistant 8.0] "c:\program files (x86)\adobe\acrobat 9.0\acrobat\Acrotray.exe" mRun: [QuickTime Task] "c:\program files (x86)\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files (x86)\itunes\iTunesHelper.exe" mRun: [GrooveMonitor] "c:\program files (x86)\microsoft office\office12\GrooveMonitor.exe" mRun: [VoddlerNet Manager] "c:\program files (x86)\voddler\service\VNetManager.exe" mRun: [NokiaMServer] c:\program files (x86)\common files\nokia\mplatform\NokiaMServer /watchfiles startup mRun: [samsung PanelMgr] c:\windows\samsung\panelmgr\SSMMgr.exe /autorun StartupFolder: c:\users\sondre\appdata\roaming\micros~1\windows\startm~1\programs\startup\btguar~1.lnk - c:\btguard\update_check.bat mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0) mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Append Link Target to Existing PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Append to Existing PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert Link Target to Adobe PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert to Adobe PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html IE: E&ksporter til Microsoft Excel - c:\progra~2\micros~1\office12\EXCEL.EXE/3000 IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files (x86)\pokerstars\PokerStarsUpdate.exe IE: {aad080d5-9287-40ed-bdec-2cbed012baaa} - c:\program files\ltt\fingerlogon\Toolbar.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~2\micros~1\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\micros~1\office12\REFIEBAR.DLL DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {25C29129-E95F-4564-BFE3-000000007100} - hxxp://www.123hjemmeside.no/builder/pages/KvikVideo-7-1-0-0.CAB DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files (x86)\microsoft office\office12\GrooveSystemServices.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~2\common~1\skype\SKYPE4~1.DLL Notify: !SASWinLogon - c:\program files (x86)\superantispyware\SASWINLO.dll SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files (x86)\superantispyware\SASSEH.DLL SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files (x86)\microsoft office\office12\GrooveShellExtensions.dll LSA: Notification Packages = scecli PasswordFilter {32099AAC-C132-4136-9E9A-4E364A424E17} TB-X64: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File EB-X64: {aad080d5-9287-40ed-bdec-2cbed012baaa} - No File mRun-x64: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun-x64: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun-x64: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun-x64: [RtHDVCpl] RAVCpl64.exe mRun-x64: [skytel] Skytel.exe mRun-x64: [sMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe mRun-x64: [FPTools] c:\program files\ltt\fingerlogon\FingerLogon.exe 1 mRun-x64: [CleanEncReg] c:\windows\system32\CleanEncReg.exe mRun-x64: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe IE-X64: {aad080d5-9287-40ed-bdec-2cbed012baaa} - c:\program files\ltt\fingerlogon\Toolbar.exe ================= FIREFOX =================== FF - ProfilePath - c:\users\sondre\appdata\roaming\mozilla\firefox\profiles\ixi7mc4n.default\ FF - prefs.js: browser.startup.homepage - google.com FF - plugin: c:\program files (x86)\mozilla firefox\plugins\NPAdbESD.dll FF - plugin: c:\program files (x86)\vizky\npVizky.dll FF - plugin: c:\program files (x86)\voddler\plugin\npvoddler.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} ---- FIREFOX POLICIES ---- c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("html5.enable", false); c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true); c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".no"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); ============= SERVICES / DRIVERS =============== R0 EMSC;COMPAL Embedded System Control;c:\windows\system32\drivers\EMSC.sys [2007-10-25 19752] R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [2006-7-5 77688] R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-1-10 89680] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-1-10 22096] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2009-1-10 65616] R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-1-10 138680] R2 DualView Server;DualView Server Service;c:\program files (x86)\program dj\dualview server\dualviewsvc.exe [2008-5-23 126976] R2 LTT_UAC_CTRL;Lightuning UAC Controller Service;c:\windows\system32\SVC_LTT.exe [2008-11-14 250880] R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?] R2 Smart Watchdog;Smart Watchdog Service;c:\program files (x86)\program dj\smart watchdog\SWDsvc.exe [2008-4-14 208896] R2 VoddlerNet;VoddlerNet;c:\program files (x86)\voddler\service\voddler.exe [2010-3-25 1160912] R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-1-10 254040] R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-1-10 352920] R3 DualViewFilter;DualViewFilter;c:\windows\system32\drivers\DualviewFilter.sys [2008-5-6 25088] R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2008-11-4 120720] R3 LTT_ENCRYPT_WATCHING;Lightuning Encrypt Watching Service;c:\windows\system32\encryptwatchingservice.exe -service --> c:\windows\system32\EncryptWatchingService.exe -service [?] R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam_x64.sys [2008-3-13 27136] R3 NETw5v64;Intel® Wireless WiFi Link Adapter Driver for Windows Vista 64 Bit ;c:\windows\system32\drivers\NETw5v64.sys [2008-4-28 4730368] R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2008-4-24 54816] R3 USB_FPRd;FingerPrinterReader;c:\windows\system32\drivers\UT_FPRd.sys [2008-11-14 19072] S1 SASDIFSV;SASDIFSV;c:\program files (x86)\superantispyware\sasdifsv.sys [2009-1-15 8944] S1 SASKUTIL;SASKUTIL;c:\program files (x86)\superantispyware\SASKUTIL.SYS [2009-1-15 55024] S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;c:\windows\microsoft.net\framework64\v2.0.50727\mscorsvw.exe [2009-9-11 89920] S3 FontCache;Windows skriftbuffertjeneste;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-11-3 27648] S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-6-29 40464] S3 PerfHost;Performance Counter DLL Host;c:\windows\syswow64\perfhost.exe [2008-11-3 19968] S3 SASENUM;SASENUM;c:\program files (x86)\superantispyware\SASENUM.SYS [2009-1-15 7408] S3 Symantec Core LC;Symantec Core LC;c:\progra~2\common~1\symant~1\ccpd-lc\symlcsvc.exe [2008-11-20 1251720] S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\drivers\usbaapl64.sys [2009-8-28 49152] ============== File Associations =============== JSEFile=c:\windows\syswow64\WScript.exe "%1" %* =============== Created Last 30 ================ 2010-05-28 18:48:06 0 d-----w- c:\temp\ML-2525W_Win7_Print 2010-05-28 18:11:30 0 d-----w- c:\users\sondre\{4edb4619-c6d9-45b5-ae8d-9e39b3cf68e0} 2010-05-28 17:11:36 0 d-----w- c:\temp\SamsungUniversalPrintDriver 2010-05-28 17:11:36 0 d-----w- C:\Temp 2010-05-28 15:49:00 482408 ----a-w- c:\windows\ssndii.exe 2010-05-28 15:48:23 74240 ----a-w- c:\windows\system32\ssdevm64.dll 2010-05-28 15:48:23 47104 ----a-w- c:\windows\system32\ssusbp64.dll 2010-05-28 15:48:21 81920 ----a-w- c:\windows\syswow64\ssdevm.dll 2010-05-28 15:48:21 49152 ----a-w- c:\windows\syswow64\ssusbpn.dll 2010-05-28 15:48:19 701440 ----a-w- c:\windows\syswow64\msxml2.dll 2010-05-28 15:48:19 38160 ----a-w- c:\windows\syswow64\msxml2r.dll 2010-05-28 15:48:19 21776 ----a-w- c:\windows\syswow64\msxml2a.dll 2010-05-28 15:47:13 5430 ------w- c:\windows\AnyWeb Print.ico 2010-05-28 15:47:13 133757 ------w- c:\windows\SmartCMS2.ico 2010-05-26 12:48:02 0 d-----w- c:\programdata\Google 2010-05-26 12:07:01 2048 ----a-w- c:\windows\syswow64\tzres.dll 2010-05-26 12:07:01 2048 ----a-w- c:\windows\system32\tzres.dll 2010-05-25 22:01:38 0 d-----w- c:\program files (x86)\DivX 2010-05-25 22:00:45 0 d-----w- c:\programdata\DivX 2010-05-24 14:10:19 0 d-----w- C:\BTGUARD 2010-05-12 07:26:54 974848 ----a-w- c:\windows\system32\inetcomm.dll 2010-05-12 07:26:54 738816 ----a-w- c:\windows\syswow64\inetcomm.dll ==================== Find3M ==================== 2010-05-28 19:16:45 76478 ----a-w- c:\windows\system32\perfc014.dat 2010-05-28 19:16:45 452334 ----a-w- c:\windows\system32\perfh014.dat 2010-05-28 19:10:22 176382 ----a-w- c:\programdata\nvModes.dat 2010-05-28 19:04:48 3983 ----a-w- c:\windows\bthservsdp.dat 2010-05-12 09:21:16 270208 ------w- c:\windows\system32\MpSigStub.exe 2010-03-05 14:32:42 612864 ----a-w- c:\windows\system32\vbscript.dll 2010-03-05 14:01:02 420352 ----a-w- c:\windows\syswow64\vbscript.dll 2010-02-17 13:07:50 51200 ----a-w- c:\windows\inf\infpub.dat 2010-02-17 13:07:48 86016 ----a-w- c:\windows\inf\infstor.dat 2010-02-17 13:07:44 143360 ----a-w- c:\windows\inf\infstrng.dat 2009-11-18 02:19:27 665600 ----a-w- c:\windows\inf\drvindex.dat 2008-11-03 22:21:22 174 --sha-w- c:\program files\desktop.ini 2008-11-03 22:21:22 174 --sha-w- c:\program files (x86)\desktop.ini 2006-11-21 06:19:17 35166 ----a-w- c:\windows\inf\perflib\0414\perfd.dat 2006-11-21 06:19:17 35166 ----a-w- c:\windows\inf\perflib\0414\perfc.dat 2006-11-21 06:19:17 294254 ----a-w- c:\windows\inf\perflib\0414\perfi.dat 2006-11-21 06:19:17 294254 ----a-w- c:\windows\inf\perflib\0414\perfh.dat 2006-11-02 10:52:12 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat 2006-11-02 10:52:12 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat 2006-11-02 10:52:10 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat 2006-11-02 10:52:10 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat 2009-11-22 21:27:48 245760 --sha-w- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat 2009-10-19 08:45:46 245760 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat 2009-10-15 07:36:10 245760 --sha-w- c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\windows\ietldcache\index.dat 2008-12-13 15:56:50 16384 --sha-w- c:\windows\temp\cookies\index.dat 2008-12-13 15:56:50 16384 --sha-w- c:\windows\temp\history\history.ie5\index.dat 2008-12-13 15:56:50 32768 --sha-w- c:\windows\temp\temporary internet files\content.ie5\index.dat ============= FINISH: 21:25:08,17 =============== På forhånd takk Lenke til kommentar
sveibuen Skrevet 28. mai 2010 Del Skrevet 28. mai 2010 Du kan nok uansett laste ned CCleaner å kjøre det. Det programmet renser pcen din rett å slett:) Link: http://www.filehippo.com/download_ccleaner/download/91b38312337b467da35f6db858f65c29/ Lenke til kommentar
snippsat Skrevet 30. mai 2010 Del Skrevet 30. mai 2010 DDS loggen viser ingen malware. Lenke til kommentar
The_Darkness Skrevet 30. mai 2010 Forfatter Del Skrevet 30. mai 2010 Allright, tusen takk for hjelpa Lenke til kommentar
Mr.Duklain Skrevet 30. mai 2010 Del Skrevet 30. mai 2010 (endret) Eller du kan bruke et program som heter Tune up funkte ganske bra for noen pcer jeg har Endret 30. mai 2010 av Mr.Duklain Lenke til kommentar
Anbefalte innlegg
Opprett en konto eller logg inn for å kommentere
Du må være et medlem for å kunne skrive en kommentar
Opprett konto
Det er enkelt å melde seg inn for å starte en ny konto!
Start en kontoLogg inn
Har du allerede en konto? Logg inn her.
Logg inn nå