Gå til innhold

Critical system error popup...

lophus

Av lophus
i IKT-drift og sikkerhet

Anbefalte innlegg

lophus

lophus

Skrevet
Skrevet

har prøvd det meste av prog, blir ikkje kvitt det.. noen som kan sjekke hijackthis loggen...

 

 

 

 

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\csrss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\System32\Ati2evxx.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\ZoneLabs\vsmon.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

E:\WINDOWS\System32\CTsvcCDA.exe

E:\Programfiler\Spyware Doctor\sdhelp.exe

E:\WINDOWS\SOUNDMAN.EXE

E:\WINDOWS\system32\wscntfy.exe

E:\WINDOWS\System32\wbem\wmiprvse.exe

E:\WINDOWS\System32\alg.exe

E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

E:\Programfiler\Launch Manager\LaunchAp.exe

E:\Programfiler\Launch Manager\HotkeyApp.exe

E:\Programfiler\Launch Manager\OSD.exe

E:\Programfiler\Launch Manager\OSDCtrl.exe

E:\Programfiler\Launch Manager\Wbutton.exe

E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

E:\Programfiler\QuickTime\qttask.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe

E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

E:\WINDOWS\system32\ctfmon.exe

E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe

E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe

E:\Programfiler\Windows Media Player\wmplayer.exe

E:\Programfiler\Internet Explorer\iexplore.exe

E:\Documents and Settings\Roy\Skrivebord\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - E:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll

O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - E:\PROGRA~2\MACROG~1\SWEETI~1\toolbar.dll

O2 - BHO: Popup Free - {2EF37A01-884F-11d5-AC99-B112050ECB4F} - E:\Programfiler\Popup Free\htmledit.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - E:\PROGRA~2\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - E:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [ATIPTA] E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [LaunchAp] E:\Programfiler\Launch Manager\LaunchAp.exe

O4 - HKLM\..\Run: [HotkeyApp] E:\Programfiler\Launch Manager\HotkeyApp.exe

O4 - HKLM\..\Run: [LMgrVolOSD] E:\Programfiler\Launch Manager\OSD.exe

O4 - HKLM\..\Run: [LMgrOSD] E:\Programfiler\Launch Manager\OSDCtrl.exe

O4 - HKLM\..\Run: [Wbutton] "E:\Programfiler\Launch Manager\Wbutton.exe"

O4 - HKLM\..\Run: [synTPEnh] E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [CtrlVol] E:\Programfiler\Launch Manager\CtrlVol.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] E:\Programfiler\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [Adobe Photo Downloader] "E:\Programfiler\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [QuickTime Task] "E:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] E:\Programfiler\Fellesfiler\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [TkBellExe] "E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Zone Labs Client] "E:\Programfiler\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] ~"E:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKCU\..\Run: [Creative Detector] E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe /R

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Programfiler\Fellesfiler\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [AWMON] "E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - E:\Documents and Settings\Roy\Start-meny\Programmer\IMVU\Run IMVU.lnk (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1158511317612

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll

O21 - SSODL: contrabandists - {dfa61db1-388e-4c87-8d56-540fa229bcb4} - E:\WINDOWS\system32\dpfwu.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTsvcCDA.exe

O23 - Service: NBService - Nero AG - E:\Programfiler\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - E:\Programfiler\Spyware Doctor\sdhelp.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

Lenke til kommentar

Videoannonse

Videoannonse
Annonse
norbat

norbat

Skrevet
Skrevet (endret)

Last ned Smitfraudfix, pakk det ut på skrivebordet

 

Last ned SAS, installer og oppdater.

 

Restart i sikker modus (tapp f8 under oppstart)

 

Åpne smitfraudfix-mappa og kjør smitfraudfix.cmd. Tast 2.

 

kjør deretter en full scan med SAS (så du hadde avg anti-spy og det er et godt alt. til SAS)

 

Restart i normal modus og post en ny HJT-logg sammen med SAS-loggen (preferences->statistics/logs) / evt. AVG sin logg.

 

(PS. Når du poster HJT-loggen tar du med det som står øverst i loggen også, altså versjon etc.. :thumbup: )

Endret av norbat
Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet

SUPERAntiSpyware Scan Log

Generated 12/01/2006 at 08:53 PM

 

Application Version : 3.3.1020

 

Core Rules Database Version : 3107

Trace Rules Database Version: 1133

 

Scan type : Complete Scan

Total Scan Time : 02:09:40

 

Memory items scanned : 165

Memory threats detected : 0

Registry items scanned : 4621

Registry threats detected : 0

File items scanned : 53064

File threats detected : 23

 

Adware.Tracking Cookie

E:\Documents and Settings\Roy\Cookies\roy@1071974422[1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\roy@revsci[1].txt

E:\Documents and Settings\Roy\Cookies\roy@superstats[1].txt

E:\Documents and Settings\Roy\Cookies\roy@indexstats[2].txt

E:\Documents and Settings\Roy\Cookies\roy@clicksor[1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][2].txt

E:\Documents and Settings\Roy\Cookies\roy@kanoodle[1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\roy@serialz[1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\roy@1070847646[2].txt

E:\Documents and Settings\Roy\Cookies\[email protected][2].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

E:\Documents and Settings\Roy\Cookies\roy@partypoker[2].txt

E:\Documents and Settings\Roy\Cookies\[email protected][1].txt

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 20:58:20, on 01.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\explorer.exe

E:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

E:\WINDOWS\system32\notepad.exe

E:\WINDOWS\system32\NOTEPAD.EXE

E:\Documents and Settings\Roy\Skrivebord\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - E:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll

O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - E:\PROGRA~2\MACROG~1\SWEETI~1\toolbar.dll

O2 - BHO: Popup Free - {2EF37A01-884F-11d5-AC99-B112050ECB4F} - E:\Programfiler\Popup Free\htmledit.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - E:\PROGRA~2\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - E:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [ATIPTA] E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [LaunchAp] E:\Programfiler\Launch Manager\LaunchAp.exe

O4 - HKLM\..\Run: [HotkeyApp] E:\Programfiler\Launch Manager\HotkeyApp.exe

O4 - HKLM\..\Run: [LMgrVolOSD] E:\Programfiler\Launch Manager\OSD.exe

O4 - HKLM\..\Run: [LMgrOSD] E:\Programfiler\Launch Manager\OSDCtrl.exe

O4 - HKLM\..\Run: [Wbutton] "E:\Programfiler\Launch Manager\Wbutton.exe"

O4 - HKLM\..\Run: [synTPEnh] E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [CtrlVol] E:\Programfiler\Launch Manager\CtrlVol.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] E:\Programfiler\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [Adobe Photo Downloader] "E:\Programfiler\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [QuickTime Task] "E:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] E:\Programfiler\Fellesfiler\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [TkBellExe] "E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Zone Labs Client] "E:\Programfiler\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe E:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "E:\DOCUME~1\Roy\LOKALE~1\Temp\IXP000.TMP\"

O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "E:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKCU\..\Run: [Creative Detector] E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe /R

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Programfiler\Fellesfiler\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [AWMON] "E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - E:\Documents and Settings\Roy\Start-meny\Programmer\IMVU\Run IMVU.lnk (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1158511317612

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - E:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTsvcCDA.exe

O23 - Service: NBService - Nero AG - E:\Programfiler\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - E:\Programfiler\Spyware Doctor\sdhelp.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
Ser bra ut dette. Kan du kjøre HJT fra normal modus så tar vi litt opprydding.

7403761[/snapback]

 

 

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 22:30:46, on 01.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\csrss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\System32\Ati2evxx.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\ZoneLabs\vsmon.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

E:\WINDOWS\System32\CTsvcCDA.exe

E:\Programfiler\Spyware Doctor\sdhelp.exe

E:\WINDOWS\System32\wbem\wmiprvse.exe

E:\WINDOWS\System32\alg.exe

E:\WINDOWS\system32\wscntfy.exe

E:\WINDOWS\SOUNDMAN.EXE

E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

E:\Programfiler\Launch Manager\LaunchAp.exe

E:\Programfiler\Launch Manager\HotkeyApp.exe

E:\Programfiler\Launch Manager\OSD.exe

E:\Programfiler\Launch Manager\OSDCtrl.exe

E:\Programfiler\Launch Manager\Wbutton.exe

E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

E:\Programfiler\QuickTime\qttask.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe

E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

E:\Programfiler\MSN Messenger\MsnMsgr.Exe

E:\WINDOWS\system32\ctfmon.exe

E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe

E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe

E:\Programfiler\Internet Explorer\iexplore.exe

E:\Programfiler\Real\RealPlayer\RealPlay.exe

E:\Documents and Settings\Roy\Skrivebord\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - E:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll

O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - E:\PROGRA~2\MACROG~1\SWEETI~1\toolbar.dll

O2 - BHO: Popup Free - {2EF37A01-884F-11d5-AC99-B112050ECB4F} - E:\Programfiler\Popup Free\htmledit.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - E:\PROGRA~2\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - E:\Programfiler\Macrogaming\SweetIMBarForIE\toolbar.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [ATIPTA] E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [LaunchAp] E:\Programfiler\Launch Manager\LaunchAp.exe

O4 - HKLM\..\Run: [HotkeyApp] E:\Programfiler\Launch Manager\HotkeyApp.exe

O4 - HKLM\..\Run: [LMgrVolOSD] E:\Programfiler\Launch Manager\OSD.exe

O4 - HKLM\..\Run: [LMgrOSD] E:\Programfiler\Launch Manager\OSDCtrl.exe

O4 - HKLM\..\Run: [Wbutton] "E:\Programfiler\Launch Manager\Wbutton.exe"

O4 - HKLM\..\Run: [synTPEnh] E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [CtrlVol] E:\Programfiler\Launch Manager\CtrlVol.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] E:\Programfiler\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [Adobe Photo Downloader] "E:\Programfiler\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [QuickTime Task] "E:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] E:\Programfiler\Fellesfiler\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [TkBellExe] "E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Zone Labs Client] "E:\Programfiler\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] ~"E:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKCU\..\Run: [Creative Detector] E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe /R

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Programfiler\Fellesfiler\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [AWMON] "E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programfiler\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - E:\Documents and Settings\Roy\Start-meny\Programmer\IMVU\Run IMVU.lnk (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1158511317612

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - E:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTsvcCDA.exe

O23 - Service: NBService - Nero AG - E:\Programfiler\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - E:\Programfiler\Spyware Doctor\sdhelp.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
SweetIM ville ikke jeg hatt i min maskin... ;)

7403783[/snapback]

 

Er forsåvidt enig. Regner med at de som bruker SweetIM har lest dette :roll:

7403840[/snapback]

 

men jeg får meg ikke inn på msn, noe med defult gateway ?

 

er det noe meir som gjør at opkoblingen min blir fucka?

Lenke til kommentar
norbat

norbat

Skrevet
Skrevet

Kjør HJT og mer for sletting (fix)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - E:\Documents and Settings\Roy\Start-meny\Programmer\IMVU\Run IMVU.lnk (file missing)

 

Hvis du ikke på død og liv må ha Macrogaming sitt SweetIM, er dette noe du bør avinstallere (fra legg til/fjern programmer). Hvis du fjerner det så kan du kjøre HJT og se om det ligger noe igjen der som du da merker for sletting.

 

Last ned CCleaner, installer og kjør en rens samt noen ganger 'Saker'.

 

Ang. oppkoblinga: Gjelder dette oppkoblinga generelt eller er det kun MSN? Om det kun er MSN, ville jeg har avinstaller det og lastet ned på nytt og installer. Om det gjelder oppkoblinga generelt kan du prøve å laste ned og kjøre Winsockfix

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
Kjør HJT og mer for sletting (fix)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - E:\Documents and Settings\Roy\Start-meny\Programmer\IMVU\Run IMVU.lnk (file missing)

 

Hvis du ikke på død og liv må ha Macrogaming sitt SweetIM, er dette noe du bør avinstallere (fra legg til/fjern programmer). Hvis du fjerner det så kan du kjøre HJT og se om det ligger noe igjen der som du da merker for sletting.

 

Last ned CCleaner, installer og kjør en rens samt noen ganger 'Saker'.

 

Ang. oppkoblinga: Gjelder dette oppkoblinga generelt eller er det kun MSN? Om det kun er MSN, ville jeg har avinstaller det og lastet ned på nytt og installer. Om det gjelder oppkoblinga generelt kan du prøve å laste ned og kjøre Winsockfix

7403982[/snapback]

 

:) takk , har slettet sweetIm. men har problemer med å komme på nett med msn, og firefox, men internett explorer går det greit med

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
Har du noen sikkerhetsprogrammer som kanskje 'stenger' for disse?

 

Hvorfor ikke prøve å avinstallere MSN og Firefox fra legg til/fjern programmer, restart pc'n, last ned prog. på nytt og installer dem.

 

En siste titt på en HJT-logg er ønskelig  :)

7404686[/snapback]

 

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 00:19:00, on 02.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\csrss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\System32\Ati2evxx.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\ZoneLabs\vsmon.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

E:\WINDOWS\System32\CTsvcCDA.exe

E:\Programfiler\Spyware Doctor\sdhelp.exe

E:\WINDOWS\System32\wbem\wmiprvse.exe

E:\WINDOWS\System32\alg.exe

E:\WINDOWS\system32\wscntfy.exe

E:\WINDOWS\SOUNDMAN.EXE

E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

E:\Programfiler\Launch Manager\LaunchAp.exe

E:\Programfiler\Launch Manager\HotkeyApp.exe

E:\Programfiler\Launch Manager\OSD.exe

E:\Programfiler\Launch Manager\OSDCtrl.exe

E:\Programfiler\Launch Manager\Wbutton.exe

E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

E:\Programfiler\QuickTime\qttask.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe

E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe

E:\Programfiler\MSN Messenger\MsnMsgr.Exe

E:\WINDOWS\system32\ctfmon.exe

E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe

E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe

E:\Programfiler\Windows Media Player\wmplayer.exe

E:\WINDOWS\system32\wuauclt.exe

E:\WINDOWS\system32\svchost.exe

E:\Programfiler\Real\RealPlayer\RealPlay.exe

E:\Programfiler\Internet Explorer\iexplore.exe

E:\WINDOWS\System32\wbem\wmiprvse.exe

E:\Documents and Settings\Roy\Skrivebord\hijackthis\HijackThis.exe

 

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - E:\Programfiler\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: ViewSource Class - {2EF37A01-884F-11d5-AC99-B112050ECB4F} - E:\Programfiler\Popup Free\htmledit.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - E:\PROGRA~2\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Programfiler\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [ATIPTA] E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [LaunchAp] E:\Programfiler\Launch Manager\LaunchAp.exe

O4 - HKLM\..\Run: [HotkeyApp] E:\Programfiler\Launch Manager\HotkeyApp.exe

O4 - HKLM\..\Run: [LMgrVolOSD] E:\Programfiler\Launch Manager\OSD.exe

O4 - HKLM\..\Run: [LMgrOSD] E:\Programfiler\Launch Manager\OSDCtrl.exe

O4 - HKLM\..\Run: [Wbutton] "E:\Programfiler\Launch Manager\Wbutton.exe"

O4 - HKLM\..\Run: [synTPEnh] E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [CtrlVol] E:\Programfiler\Launch Manager\CtrlVol.exe

O4 - HKLM\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [QuickTime Task] "E:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] E:\Programfiler\Fellesfiler\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~2\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [TkBellExe] "E:\Programfiler\Fellesfiler\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Zone Labs Client] "E:\Programfiler\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] ~"E:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKCU\..\Run: [Creative Detector] E:\Programfiler\Creative\MediaSource\Detector\CTDetect.exe /R

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Programfiler\Fellesfiler\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [AWMON] "E:\Programfiler\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\shdocvw.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\shdocvw.dll

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - E:\PROGRA~2\SPYWAR~1\tools\iesdpb.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1158511317612

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - E:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTsvcCDA.exe

O23 - Service: NBService - Nero AG - E:\Programfiler\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - E:\Programfiler\Spyware Doctor\sdhelp.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

Lenke til kommentar
norbat

norbat

Skrevet
Skrevet

Avinstaller Macrogaming/SweetIM fra legg til/fjern programmer (om du finner det der)

 

Kjør HJT og merk for slett:

O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)

O4 - HKLM\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

O4 - HKLM\..\Run: [sweetIM] E:\Programfiler\Macrogaming\SweetIM\SweetIM.exe

 

Sørg for at du kan se skjulte filer og mapper (kontrollpanel->mappealt.->Vis->"vis skjulte filer og mapper"

 

Slett (mest sannsynlig må du ut i sikker modus) mappa (i bold):

E:\Programfiler\Macrogaming\

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
Ser bra ut dette. Kan du kjøre HJT fra normal modus så tar vi litt opprydding.

7403761[/snapback]

 

Logfile of HijackThis v1.99.1

Scan saved at 22:30:46, on 01.12.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\csrss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\System32\Ati2evxx.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\ZoneLabs\vsmon.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgamsvr.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgupsvc.exe

E:\PROGRA~2\Grisoft\AVGFRE~1\avgemc.exe

E:\WINDOWS\System32\CTsvcCDA.exe

E:\Programfiler\Spyware Doctor\sdhelp.exe

E:\WINDOWS\System32\wbem\wmiprvse.exe

E:\WINDOWS\System32\alg.exe

E:\WINDOWS\system32\wscntfy.exe

E:\WINDOWS\SOUNDMAN.EXE

E:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

E:\Programfiler\Launch Manager\LaunchAp.exe

E:\Programfiler\Launch Manager\HotkeyApp.exe

E:\Programfiler\Launch Manager\OSD.exe

E:\Programfiler\Launch Manager\OSDCtrl.exe

E:\Programfiler\Launch Manager\Wbutton.exe

E:\Programfiler\Synaptics\SynTP\SynTPEnh.exe

E:\Programfiler\Macrog

Lenke til kommentar
norbat

norbat

Skrevet
Skrevet

Ser du har forsøkt å legge ut HJT-logg, men det ble visst bare halvparten :).

 

Om alt annet nettbasert virker unntatt firefox og msn, har jeg villet sett på brannmuren om den ikke har blokkert for disse.

 

Er popupen borte (Critical system error) og kjører maskinen ok ellers?

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
Ser du har forsøkt å legge ut HJT-logg, men det ble visst bare halvparten  :).

 

Om alt annet nettbasert virker unntatt firefox og msn, har jeg villet sett på brannmuren om den ikke har blokkert for disse.

 

Er popupen borte (Critical system error) og kjører maskinen ok ellers?

7405951[/snapback]

 

 

ja popup er borte... skal sjekke

Lenke til kommentar
lophus

lophus

Skrevet
  • Forfatter
Skrevet
Ser du har forsøkt å legge ut HJT-logg, men det ble visst bare halvparten  :).

 

Om alt annet nettbasert virker unntatt firefox og msn, har jeg villet sett på brannmuren om den ikke har blokkert for disse.

 

Er popupen borte (Critical system error) og kjører maskinen ok ellers?

7405951[/snapback]

 

 

ja popup er borte... skal sjekke

7407476[/snapback]

 

 

 

Done ;) takk for hjelpen :)

Lenke til kommentar

Opprett en konto eller logg inn for å kommentere

Du må være et medlem for å kunne skrive en kommentar

Opprett konto

Det er enkelt å melde seg inn for å starte en ny konto!

Start en konto

Logg inn

Har du allerede en konto? Logg inn her.

Logg inn nå
Gå til emneliste
×
×
  • Opprett ny...