Infisert med: W32/Virtumonde.ZGF

[Jan Fredrik]

Hei

Jeg har fått denne slitsomme Trojaneren/viruset. Norman + Spybooth og Ad-Aware finner dritten, men de klarer ikke fjerne det. Har funnet svært mange forslag på løsninger på nettet, men enten funker de ikke, eller de er utrolig kompliserte. Jeg er ingen IT ekspert, og trenger en løsning som vanlige dødelige kan forstå(hvis den finnes).

[norbat]

Kjør gjennom veiledningen i denne posten: https://www.diskusjon.no/index.php?showtopic=691246.

 

Loggene det spørres etter, poster du her i din egen tråd.

[Jan Fredrik]

Takk for svar.

 

Har gjort som guiden anbefaler. Et lite problem:jeg fant ikke loggen til SuperAntiSpyware.

 

Her er de andre:

 

ComboFix 08-08-21.02 - Sjefen 2008-08-23 21:41:30.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1044.18.350 [GMT 2:00]

Running from: C:\Documents and Settings\Sjefen\Skrivebord\VundoFjerning\ComboFix.exe

* Created a new restore point

* Resident AV is active

 

 

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

.

 

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\xcrashdump.dat

 

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_NSESVC

-------\Service_nsesvc

 

 

((((((((((((((((((((((((( Files Created from 2008-07-23 to 2008-08-23 )))))))))))))))))))))))))))))))

.

 

2008-08-23 21:14 . 2008-08-23 21:14 <DIR> dr-h----- C:\Documents and Settings\Sjefen\Siste

2008-08-23 20:57 . 2008-08-23 20:57 <DIR> d-------- C:\Programfiler\SUPERAntiSpyware

2008-08-23 20:57 . 2008-08-23 20:57 <DIR> d-------- C:\Documents and Settings\Sjefen\Programdata\SUPERAntiSpyware.com

2008-08-23 20:57 . 2008-08-23 20:57 <DIR> d-------- C:\Documents and Settings\All Users\Programdata\SUPERAntiSpyware.com

2008-08-23 20:56 . 2008-08-23 20:56 <DIR> d-------- C:\Programfiler\CCleaner

2008-08-21 11:25 . 2008-08-21 11:24 24,314,424 --a------ C:\Norman_Malware_Cleaner.exe

2008-08-21 09:13 . 2008-08-21 09:29 <DIR> d-a------ C:\Documents and Settings\All Users\Programdata\TEMP

2008-08-20 17:14 . 2008-08-20 17:14 <DIR> d-------- C:\VundoFix Backups

2008-08-19 23:25 . 2008-08-19 23:25 <DIR> d-------- C:\Programfiler\Windows Defender

2008-08-19 22:53 . 2008-08-21 12:43 144 --ah----- C:\aaw7boot.cmd

2008-08-19 22:02 . 2008-08-19 22:02 <DIR> d-------- C:\Programfiler\Lavasoft

2008-08-19 22:02 . 2008-08-19 22:04 <DIR> d-------- C:\Documents and Settings\All Users\Programdata\Lavasoft

2008-08-19 22:01 . 2008-08-23 20:57 <DIR> d-------- C:\Programfiler\Fellesfiler\Wise Installation Wizard

2008-08-19 08:31 . 2008-08-19 08:31 <DIR> d-------- C:\Documents and Settings\Administrator\Programdata\Grisoft

2008-08-19 08:30 . 2008-03-14 02:12 <DIR> dr------- C:\Documents and Settings\Administrator\Start-meny

2008-08-19 08:30 . 2008-03-14 02:12 <DIR> d--h----- C:\Documents and Settings\Administrator\Skrivere

2008-08-19 08:30 . 2008-03-14 02:12 <DIR> d-------- C:\Documents and Settings\Administrator\Skrivebord

2008-08-19 08:30 . 2008-08-21 12:43 <DIR> d--h----- C:\Documents and Settings\Administrator\Siste

2008-08-19 08:30 . 2008-08-19 08:31 <DIR> dr-h----- C:\Documents and Settings\Administrator\Programdata

2008-08-19 08:30 . 2008-03-14 02:12 <DIR> d-------- C:\Documents and Settings\Administrator\Mine dokumenter

2008-08-19 08:30 . 2008-03-14 01:19 <DIR> d--h----- C:\Documents and Settings\Administrator\Maler

2008-08-19 08:30 . 2008-08-23 21:44 <DIR> d--h----- C:\Documents and Settings\Administrator\Lokale innstillinger

2008-08-19 08:30 . 2008-03-14 02:12 <DIR> d-------- C:\Documents and Settings\Administrator\Favoritter

2008-08-19 08:30 . 2008-03-14 02:12 <DIR> d--h----- C:\Documents and Settings\Administrator\AndrMask

2008-08-19 08:30 . 2008-08-19 08:30 <DIR> d-------- C:\Documents and Settings\Administrator

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-08-23 19:45 --------- d-----w C:\Programfiler\Norman

2008-08-23 19:14 --------- d-----w C:\Documents and Settings\All Users\Programdata\Spybot - Search & Destroy

2008-08-20 19:51 --------- d-----w C:\Programfiler\Spybot - Search & Destroy

2008-08-19 10:03 --------- d-----w C:\Programfiler\Microsoft Silverlight

2008-08-05 14:23 --------- d-----w C:\Programfiler\Java

2008-07-18 18:38 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR

2008-07-07 20:33 253,952 ----a-w C:\WINDOWS\system32\es.dll

2008-07-06 10:23 --------- d-----w C:\Programfiler\Google

2008-06-24 16:24 74,240 ----a-w C:\WINDOWS\system32\mscms.dll

2008-06-23 15:41 658,944 ----a-w C:\WINDOWS\system32\wininet.dll

2008-06-20 17:43 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll

2008-05-26 17:51 82,432 ----a-w C:\WINDOWS\system32\msxml4r.dll

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360]

"swg"="C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-17 23:52 68856]

"SpybotSD TeaTimer"="C:\Programfiler\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 18:41 1832272]

"SUPERAntiSpyware"="C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-08-19 23:34 1576176]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Norman ZANDA"="C:\Programfiler\Norman\Npm\bin\ZLH.EXE" [2008-06-02 14:46 273520]

"PmProxy"="C:\Programfiler\Analog Devices\SoundMAX\PmProxy.exe" [2003-02-28 20:54 40960]

"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2003-04-07 01:19 155648]

"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2003-04-07 01:07 114688]

"SunJavaUpdateSched"="C:\Programfiler\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]

"Adobe Reader Speed Launcher"="C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]

"QuickTime Task"="C:\Programfiler\QuickTime\qttask.exe" [2008-03-28 23:37 413696]

"!AVG Anti-Spyware"="C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

"TFNF5"="TFNF5.exe" [2001-08-03 18:08 73728 C:\WINDOWS\system32\TFNF5.exe]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360]

 

C:\Documents and Settings\All Users\Start-meny\Programmer\Oppstart\

Microsoft Office.lnk - C:\Programfiler\Microsoft Office\Office\OSA9.EXE [1999-02-17 15:05:56 65588]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Programfiler\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 10:13 77824]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

2008-07-23 16:28 352256 C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

"C:\\Programfiler\\Windows Live\\Messenger\\livecall.exe"=

"C:\\Programfiler\\Valve\\Steam\\SteamApps\\raring\\counter-strike\\hl.exe"=

"C:\\Programfiler\\Valve\\Steam\\SteamApps\\raring\\condition zero deleted scenes\\hl.exe"=

"C:\\Programfiler\\Valve\\Steam\\SteamApps\\raring\\condition zero\\hl.exe"=

"C:\\Programfiler\\Valve\\Steam\\SteamApps\\raring\\day of defeat\\hl.exe"=

"C:\\Programfiler\\Valve\\Steam\\SteamApps\\ola1994\\counter-strike\\hl.exe"=

"C:\\Programfiler\\Valve\\Steam\\SteamApps\\ola1994\\condition zero\\hl.exe"=

"C:\\Documents and Settings\\Sjefen\\Application Data\\PowerChallenge\\PowerSoccer\\PowerSoccer.exe"=

"C:\\Programfiler\\Skype\\Phone\\Skype.exe"=

 

R2 Ndiskio;Ndiskio;C:\Programfiler\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 11:55]

R3 NvcMFlt;NvcMFlt;C:\WINDOWS\system32\DRIVERS\nvcw32mf.sys [2008-02-11 15:56]

R3 nvcoas;Norman Virus Control on-access component;C:\Programfiler\Norman\Nvc\bin\nvcoas.exe [2008-04-29 10:58]

R3 NVCScheduler;Norman Virus Control Scheduler;C:\Programfiler\Norman\Nvc\BIN\NVCSCHED.EXE [2008-03-11 15:00]

S3 ASPI;Advanced SCSI Programming Interface Driver;C:\WINDOWS\System32\DRIVERS\ASPI32.sys [2002-07-17 09:05]

.

Contents of the 'Scheduled Tasks' folder

 

2008-08-23 C:\WINDOWS\Tasks\MP Scheduled Scan.job

- C:\Programfiler\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]

.

- - - - ORPHANS REMOVED - - - -

 

Notify-__c007D2E8 - (no file)

 

 

.

------- Supplementary Scan -------

.

FireFox -: Profile - C:\Documents and Settings\Sjefen\Programdata\Mozilla\Firefox\Profiles\lv4pr32o.default\

.

 

**************************************************************************

 

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-23 21:46:05

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

------------------------ Other Running Processes ------------------------

.

C:\Programfiler\Windows Defender\MsMpEng.exe

C:\Programfiler\Norman\Npm\Bin\elogsvc.exe

C:\Programfiler\Norman\Npm\Bin\Zanda.exe

C:\Programfiler\Lavasoft\Ad-Aware\aawservice.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Programfiler\Analog Devices\SoundMAX\SMAgent.exe

C:\Programfiler\Norman\Npm\Bin\Njeeves.exe

C:\Programfiler\Norman\NVC\bin\Nip.exe

C:\Programfiler\Norman\NVC\bin\CClaw.exe

.

**************************************************************************

.

Completion time: 2008-08-23 21:49:38 - machine was rebooted

ComboFix-quarantined-files.txt 2008-08-23 19:49:28

 

Pre-Run: 52,573,839,360 byte ledig

Post-Run: 52,315,779,072 byte ledig

 

144 --- E O F --- 2008-08-19 10:03:54

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:52:44, on 23.08.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Programfiler\Norman\Npm\bin\ELOGSVC.EXE

C:\Programfiler\Norman\Npm\Bin\Zanda.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Norman\Npm\bin\ZLH.EXE

C:\Programfiler\Analog Devices\SoundMAX\PmProxy.exe

C:\WINDOWS\system32\TFNF5.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\Programfiler\Java\jre1.6.0_07\bin\jusched.exe

C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\Analog Devices\SoundMAX\SMAgent.exe

C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\WINDOWS\system32\svchost.exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programfiler\Norman\Npm\bin\NJEEVES.EXE

C:\WINDOWS\System32\alg.exe

C:\Programfiler\Norman\Nvc\BIN\NVCSCHED.EXE

C:\Programfiler\Norman\Nvc\bin\nvcoas.exe

C:\Programfiler\Norman\Nvc\BIN\NIP.EXE

C:\Programfiler\Norman\Nvc\bin\cclaw.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\Documents and Settings\Sjefen\Mine dokumenter\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

O2 - BHO: Koblingshjelpeprogram for Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Fellesfiler\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Påloggingshjelp for Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programfiler\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programfiler\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programfiler\google\googletoolbar1.dll

O4 - HKLM\..\Run: [Norman ZANDA] "C:\Programfiler\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH

O4 - HKLM\..\Run: [PmProxy] C:\Programfiler\Analog Devices\SoundMAX\PmProxy.exe

O4 - HKLM\..\Run: [TFNF5] TFNF5.exe

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] C:\Programfiler\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Programfiler\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Microsoft Office.lnk = C:\Programfiler\Microsoft Office\Office\OSA9.EXE

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Blogg dette - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programfiler\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Blogg dette i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programfiler\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1205508245748

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FELLES~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Programfiler\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Programfiler\Norman\Npm\bin\ELOGSVC.EXE

O23 - Service: Google Updater Service (gusvc) - Google - C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Norman NJeeves - Norman ASA - C:\Programfiler\Norman\Npm\bin\NJEEVES.EXE

O23 - Service: Norman ZANDA - Norman ASA - C:\Programfiler\Norman\Npm\Bin\Zanda.exe

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Programfiler\Norman\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Programfiler\Norman\Nvc\BIN\NVCSCHED.EXE

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programfiler\Analog Devices\SoundMAX\SMAgent.exe

 

--

End of file - 7368 bytes

[norbat]

Ser greit ut dette.

SAS-loggen burde finnes ved å starte programmet, velg arkfanen Preferences->Statistics/logs.

 

Du kan vurdere om Spybot, Adaware og AVG anti-spyware er noe du trenger. Anbefaler å beholde SAS.

 

Har du fortsatt problemer eller kjører pc'n som normalt?

[Jan Fredrik]

Takk for hjelpen. PC`n har kjørt normalt siste døgnet.

[norbat]

Fint.

 

Da fjerner du combofix (skriv combofix /u i kjør-feltet)

 

Surf trygt.