To problemer: Virus og streaming av video

Agricola · 25. august 2008

Har fått et litt irriterende virus inn på pcen da det poppet opp en beskjed om at jeg måtte installere et viruprogram som jeg lukket. Har søkt med Avast og fant noen trojaner, men problemet er at disse trojanene hele tiden kommer tilbake hver gang jeg logger på pcen. Det eneste jeg har lagt merke til at det gjør er å skifte bakgrunnen min til en advarsel om spyware på pcen, og det går ikkje an å skifte bakgrunn. Et av virusene er blphcgqkj0ep03.scr. Tror det er det samme hver gang Avast finner det, men den finner og andre som heter .tt3D.tmp, men 3D er annerledes for hver gang det kommer tilbake. Ganske irriterene at Avast finner en ny trojan hvert kvarter.

Et annet problem er at når jeg ser videoer på nettet som f.eks på youtube, så fryser bildet 2-3 sekunder etter den starter og uten noe lyd. Det pleier å skje en etter at jeg har brukt nettet en stund, og jeg er nødt til å lukke ned browseren og åpne den på nytt for å få det til å fungere igjen. Ganske irriterende. Har ikke funnet noe virus på pcen som kan være årsaken og dette begynte lenge før det problemet som jeg skrev om ovenfor. Så aner ikkje hva det skyldes.

Noen som vet hvordan jeg løser disse problemene?

Tosha0007 · 25. august 2008

følg instruksjonane i denne tråden: https://www.diskusjon.no/index.php?showtopic=691246

Agricola · 25. august 2008

Oki, fulgte den veiledningen. Her er loggene fra SAS og Hijackthis. Brukte Combofix, men fant ikke den loggen slik det stod om i veiledningen...

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

Generated 08/25/2008 at 08:27 PM

Application Version : 4.20.1046

Core Rules Database Version : 3546

Trace Rules Database Version: 1535

Scan type : Quick Scan

Total Scan Time : 00:26:26

Memory items scanned : 524

Memory threats detected : 2

Registry items scanned : 355

Registry threats detected : 2

File items scanned : 18396

File threats detected : 276

Rogue.Dropper/Gen

C:\WINDOWS\SYSTEM32\LPHCGQKJ0EP03.EXE

[lphcgqkj0ep03] C:\WINDOWS\SYSTEM32\LPHCGQKJ0EP03.EXE

C:\WINDOWS\Prefetch\LPHCGQKJ0EP03.EXE-0CA75270.pf

Trojan.Unclassified/SysRest32

C:\WINDOWS\SYSTEM32\SYSREST32.EXE

[sysrest32.exe] C:\WINDOWS\SYSTEM32\SYSREST32.EXE

C:\WINDOWS\Prefetch\SYSREST32.EXE-2FA2622A.pf

Rogue.AntiVirus 2008

C:\WINDOWS\SYSTEM32\PHCGQKJ0EP03.BMP

Adware.Tracking Cookie

.adtech.de [ C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profilesxvvv4vy.default\cookies.txt ]

track.adform.net [ C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profilesxvvv4vy.default\cookies.txt ]

e2.emediate.se [ C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profilesxvvv4vy.default\cookies.txt ]

.telenorstartsiden.112.2o7.net [ C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profilesxvvv4vy.default\cookies.txt ]

.apmebf.com [ C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profilesxvvv4vy.default\cookies.txt ]

.mediaplex.com [ C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profilesxvvv4vy.default\cookies.txt ]

statse.webtrendslive.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

e2.emediate.se [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

track.adform.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.mediaplex.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

track.adform.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

e2.emediate.se [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.telenorstartsiden.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.adtech.de [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.doubleclick.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.stat.katalysatormedia.no [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

int.sitestat.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.advertising.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.tradedoubler.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.advertising.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

ad.yieldmanager.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.statcounter.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

webcount.sesam.no [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.atdmt.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.specificclick.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.tribalfusion.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.msnbc.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

bp.specificclick.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.msnportal.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

ad1.emediate.dk [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.imrworldwide.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.revsci.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

ads.revsci.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.revsci.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.zedo.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.adopt.specificclick.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.tacoda.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

server.iad.liveperson.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.ehg-campaignsolutions.hitbox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.hitbox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.bergenstidende.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.saxoorklamedia.122.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.overture.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.adecn.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.cbs.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.insightexpressai.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

ads.clicktoblue.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.fastclick.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.tracking.foxnews.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.interclick.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.ads.pointroll.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.cooking.adbureau.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.adbrite.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

ad.zanox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.telenor.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

www.addfreestats.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

media.adrevolver.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.adrevolver.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.casalemedia.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.questionmarket.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.hg1.hitbox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.roiservice.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.revenue.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

ads2.drivelinemedia.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.perf.overture.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.webstat.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

findexa.adbureau.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.indextools.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.hotelscom.122.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

media.hotels.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.atwola.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

hc2.humanclick.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.blinck.112.2o7.net [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.serving-sys.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.bs.serving-sys.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.serving-sys.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.ads.mediamayhemcorp.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.ehg-dig.hitbox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.ehg.hitbox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.apmebf.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

accounts.pkr.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

.phg.hitbox.com [ C:\Documents and Settings\Mildred\Application Data\Mozilla\Firefox\Profiles\lmkkcsb6.default\cookies.txt ]

C:\Documents and Settings\Mildred\Cookies\mildred@serving-sys[1].txt

C:\Documents and Settings\Mildred\Cookies\mildred@atwola[1].txt

C:\Documents and Settings\Mildred\Cookies\mildred@apmebf[1].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@fastclick[2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@serving-sys[2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@serving-sys[3].txt

C:\Documents and Settings\Mildred\Cookies\mildred@revsci[1].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@mediaplex[1].txt

C:\Documents and Settings\Mildred\Cookies\mildred@doubleclick[2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@tradedoubler[2].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][1].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@tribalfusion[1].txt

C:\Documents and Settings\Mildred\Cookies\mildred@2o7[2].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@atdmt[2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@adbrite[1].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][1].txt

C:\Documents and Settings\Mildred\Cookies\mildred@burstnet[2].txt

C:\Documents and Settings\Mildred\Cookies\mildred@advertising[1].txt

C:\Documents and Settings\Mildred\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@adserver[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@azjmp[2].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\system@smileycentral[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@interclick[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@apmebf[2].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][1].txt

C:\Documents and Settings\NetworkService\Cookies\system@spamblockerutility[2].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][1].txt

C:\Documents and Settings\NetworkService\Cookies\system@mediaplex[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@insightexpressai[1].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][1].txt

C:\Documents and Settings\NetworkService\Cookies\system@valueclick[1].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\system@fastclick[2].txt

C:\Documents and Settings\NetworkService\Cookies\system@zedo[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@zanox[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@hotbar[2].txt

C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[1].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][1].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[1].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][1].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][2].txt

C:\Documents and Settings\NetworkService\Cookies\system@specificclick[2].txt

C:\Documents and Settings\NetworkService\Cookies\system@tradedoubler[1].txt

C:\Documents and Settings\NetworkService\Cookies\system@advertising[2].txt

C:\Documents and Settings\NetworkService\Cookies\system@adrevolver[2].txt

C:\Documents and Settings\NetworkService\Cookies\[email protected][1].txt

C:\Documents and Settings\NetworkService\Cookies\system@atdmt[2].txt

.msnportal.112.2o7.net [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.microsoftwga.112.2o7.net [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.statcounter.com [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.doubleclick.net [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.mediaplex.com [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.atdmt.com [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

e2.emediate.se [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.tradedoubler.com [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.imrworldwide.com [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

.advertising.com [ C:\Documents and Settings\Nils-Kåre\Application Data\Mozilla\Firefox\Profiles\4and0tro.default\cookies.txt ]

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kå[email protected][2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@questionmarket[1].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@atdmt[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@tribalfusion[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@adultfriendfinder[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@2o7[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@hitbox[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@specificclick[1].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kå[email protected][1].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@adtech[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kå[email protected][2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kå[email protected][1].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@advertising[2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kå[email protected][2].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@tradedoubler[1].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kå[email protected][1].txt

C:\Documents and Settings\Nils-Kåre\Cookies\nils-kåre@doubleclick[1].txt

.msnportal.112.2o7.net [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

.advertising.com [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

.imrworldwide.com [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

e2.emediate.se [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

.doubleclick.net [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

.mediaplex.com [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

.tradedoubler.com [ C:\Documents and Settings\UiBhjemme\Application Data\Mozilla\Firefox\Profiles\72wv0htu.default\cookies.txt ]

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:58:33, on 25.08.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Symantec\Ghost\ngctw32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Analog Devices\Core\smax4pnp.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\QuickTime\QTTask.exe

D:\Eivind\iTunes\iTunesHelper.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\notepad.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Eivind\Desktop\tromme\tlomme.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: PrivBar - {300BC64A-BF32-4cc8-8917-91148CEFE700} - C:\WINDOWS\system32\privbar.dll

O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - d:\Eivind\Eivind\VeohTV\Veoh\Plugins\reg\VeohToolbar.dll

O4 - HKLM\..\Run: [NGClient] C:\Program Files\Symantec\Ghost\ngctw32.exe

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "D:\Eivind\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe (User 'Default user')

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll

O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\NPJPI150_04.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\NPJPI150_04.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O21 - SSODL: Keyuvzap - {6D2A5BB8-FF42-4F33-B654-0217A098D613} - C:\WINDOWS\system32\kerox3d.dll

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Symantec Ghost Win32 Client Agent (NGClient) - Symantec Corporation - C:\Program Files\Symantec\Ghost\ngctw32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--

End of file - 5946 bytes

Men etter å ha kjørt disse programmene så kan jeg nå skifte bakgrunn selv, og det virker som de virusene som var har forsvunnet. Om problemet med å streame video fortsatt er tilstede, er jeg usikker på, har ikke brukt pcen lenge nok til å ha funnet det ut.

EDIT: Har fortsatt problemer med å streame videoer på nettet.

Endret 25. august 2008 av Agricola

norbat · 26. august 2008

Last ned ny combofix og kjør programmet. Når det er ferdigkjørt, vil det åpnes en logg i notisblokk. Den poster du.

hjt-loggen ser rimelig grei ut. Det er en oppføring der som vi bør titte litt på (021-linja), men det kan vi komme tilbake til etter at combofix-loggen er postet.

Agricola · 28. august 2008

Kjørte Combofix igjen nå, og fant en logg denne gangen:

ComboFix 08-08-27.06 - Eivind 2008-08-28 16:15:56.2 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.618 [GMT 2:00]

Running from: C:\Documents and Settings\Eivind\Desktop\ComboFix.exe

* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\Documents and Settings\Mildred\Application Data\macromedia\Flash Player\#SharedObjects\XYYT3EEJ\bin.clearspring.com

C:\Documents and Settings\Mildred\Application Data\macromedia\Flash Player\#SharedObjects\XYYT3EEJ\bin.clearspring.com\clearspring.sol

C:\Documents and Settings\Mildred\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com

C:\Documents and Settings\Mildred\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol

.

((((((((((((((((((((((((( Files Created from 2008-07-28 to 2008-08-28 )))))))))))))))))))))))))))))))

.

2008-08-25 20:51 . 2008-08-25 20:51 <DIR> d-------- C:\Documents and Settings\Nils-KÕre

2008-08-25 19:58 . 2008-08-25 19:58 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com

2008-08-25 19:57 . 2008-08-25 19:57 <DIR> d-------- C:\Program Files\SUPERAntiSpyware

2008-08-25 19:57 . 2008-08-25 19:57 <DIR> d-------- C:\Documents and Settings\Eivind\Application Data\SUPERAntiSpyware.com

2008-08-25 19:50 . 2008-08-25 19:50 <DIR> d-------- C:\Program Files\CCleaner

2008-08-13 08:49 . 2008-08-13 08:49 3,532 --a------ C:\drmHeader.bin

2008-08-11 17:43 . 2008-08-11 17:43 <DIR> d-------- C:\Program Files\Freelancer Mod Manager

2008-08-04 22:48 . 2008-08-06 14:50 <DIR> d-------- C:\WINDOWS\system32\CatRoot_bak

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-08-25 18:35 --------- d-----w C:\Documents and Settings\Eivind\Application Data\Skype

2008-08-25 17:57 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard

2008-08-25 17:24 --------- d-----w C:\Documents and Settings\Eivind\Application Data\uTorrent

2008-08-12 15:00 --------- d-----w C:\Program Files\CA

2008-07-26 11:36 --------- d-----w C:\Program Files\PDFCreator

2008-07-21 19:17 --------- d-----w C:\Program Files\WIDI 3.3 Pro

2008-07-21 19:17 --------- d-----w C:\Documents and Settings\Eivind\Application Data\Music Recognition

2008-07-21 12:38 --------- d-----w C:\Documents and Settings\Eivind\Application Data\Ringtone

2008-07-21 12:14 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-07-18 12:05 --------- d-----w C:\Program Files\uTorrent

2008-07-17 22:26 --------- d-----w C:\Program Files\iPod

2008-07-17 22:25 --------- d-----w C:\Program Files\Bonjour

2008-07-17 22:24 --------- d-----w C:\Program Files\QuickTime

2008-07-15 19:13 --------- d-----w C:\Program Files\Electronic Arts

2008-07-12 06:59 --------- d-----w C:\Program Files\Apple Software Update

2008-07-11 16:58 --------- d-----w C:\Program Files\Safari

2008-07-10 07:35 32,000 ----a-w C:\WINDOWS\system32\drivers\usbaapl.sys

2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll

2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll

2008-06-23 15:38 659,456 ----a-w C:\WINDOWS\system32\wininet.dll

2008-06-20 17:36 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll

2008-06-17 11:39 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll

2008-05-30 12:19 507,400 ----a-w C:\WINDOWS\system32\XAudio2_1.dll

2008-05-30 12:18 238,088 ----a-w C:\WINDOWS\system32\xactengine3_1.dll

2008-05-30 12:17 65,032 ----a-w C:\WINDOWS\system32\XAPOFX1_0.dll

2008-05-30 12:17 25,608 ----a-w C:\WINDOWS\system32\X3DAudio1_4.dll

2008-05-30 12:11 467,984 ----a-w C:\WINDOWS\system32\d3dx10_38.dll

2008-05-30 12:11 3,850,760 ----a-w C:\WINDOWS\system32\D3DX9_38.dll

2008-05-30 12:11 1,491,992 ----a-w C:\WINDOWS\system32\D3DCompiler_38.dll

2007-09-15 09:42 4,303,040 -c--a-w C:\Program Files\vr.exe

2007-09-15 09:37 549,187 -c--a-w C:\Program Files\xipli.exe

2007-05-08 16:48 774,144 -c--a-w C:\Program Files\RngInterstitial.dll

2006-11-24 08:35 670 -c--a-w C:\Program Files\INSTALL.LOG

.

((((((((((((((((((((((((((((( snapshot@2008-08-25_20.51.29.43 )))))))))))))))))))))))))))))))))))))))))

.

- 2007-04-16 15:52:53 28,190 ---ha-w C:\WINDOWS\system32\secigdde\setobsys.dll

+ 2007-04-16 15:52:53 20,629 ---ha-w C:\WINDOWS\system32\secigdde\setobsys.dll

+ 2008-08-28 13:44:38 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_738.dat

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 12:54 5674352]

"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2006-11-24 17:16 20058152]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360]

"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-08-19 23:34 1576176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NGClient"="C:\Program Files\Symantec\Ghost\ngctw32.exe" [2005-11-28 18:26 440000]

"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 14:42 1404928]

"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-06-28 09:42 185896]

"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 09:47 116040]

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 10:50 413696]

"iTunesHelper"="D:\Eivind\iTunes\iTunesHelper.exe" [2008-07-10 10:51 289064]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"FlashPlayerUpdate"="C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe" [2007-03-27 16:04 190696]

C:\Documents and Settings\Nils-K†re\Start Menu\Programs\Startup\

Last.fm Helper.lnk - D:\Eivind\Eivind\Annet\Last.fm\LastFMHelper.exe [2007-07-29 23:41:13 106496]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\

Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 10:13 77824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

"Keyuvzap"= {6D2A5BB8-FF42-4F33-B654-0217A098D613} - C:\WINDOWS\system32\kerox3d.dll [2007-04-16 17:52 798720]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

2008-07-23 16:28 352256 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"msacm.avis"= C:\Program Files\ffdshow\ffdshow.ax

"vidc.ffds"= C:\Program Files\ffdshow\ffdshow.ax

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\Symantec\\Ghost\\ngctw32.exe"=

"C:\\Program Files\\Mozilla Thunderbird\\thunderbird.exe"=

"C:\\Program Files\\CA\\eTrust Antivirus\\InoNmSrv.exe"=

"D:\\Eivind\\MSN Messenger\\msnmsgr.exe"=

"D:\\Eivind\\Warcraft III\\Warcraft III.exe"=

"D:\\Eivind\\Eivind\\MSN Messenger\\msnmsgr.exe"=

"D:\\Eivind\\Eivind\\Annet\\Last.fm\\LastFM.exe"=

"D:\\Eivind\\Warcraft III\\Frozen Throne.exe"=

"D:\\Eivind\\Warcraft III\\World Editor.exe"=

"C:\\Program Files\\uTorrent\\uTorrent.exe"=

"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=

"C:\\Program Files\\MSN Messenger\\livecall.exe"=

"C:\\WINDOWS\\system32\\java.exe"=

"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=

"D:\\Eivind\\Eivind\\VeohTV\\Veoh\\VeohClient.exe"=

"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"D:\\Eivind\\iTunes\\iTunes.exe"=

"D:\\Eivind\\Eivind\\Freelancer\\Freelancer\\EXE\\Freelancer.exe"=

"D:\\Eivind\\Eivind\\Freelancer\\Freelancer\\EXE\\flserver.exe"=

"C:\\WINDOWS\\system32\\dpnsvr.exe"=

"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"445:TCP"= 445:TCP:129.177.0.0/255.255.0.0:Enabled:@xpsp2res.dll,-22005

"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

"4000:TCP"= 4000:TCP:et

"6112:TCP"= 6112:TCP:6112

"6113:TCP"= 6113:TCP:6113

"6115:TCP"= 6115:TCP:6115

"6116:TCP"= 6116:TCP:6116

"6117:TCP"= 6117:TCP:6117

"6118:TCP"= 6118:TCP:6118

"6119:TCP"= 6119:TCP:6119

"6119:UDP"= 6119:UDP:6119

"6118:UDP"= 6118:UDP:6118

"6117:UDP"= 6117:UDP:6117

"6116:UDP"= 6116:UDP:6116

"6115:UDP"= 6115:UDP:6115

"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

"10100:TCP"= 10100:TCP:uTorrent

"10100:UDP"= 10100:UDP:uTorrent

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]

"AllowInboundEchoRequest"= 1 (0x1)

R0 GhMon;GhostMountMonitor - Boot Phase Driver;C:\WINDOWS\system32\Drivers\ghmon.sys [2005-11-28 17:35]

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35]

R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]

R2 NGClient;Symantec Ghost Win32 Client Agent;C:\Program Files\Symantec\Ghost\ngctw32.exe [2005-11-28 18:26]

S0 GhPostConfig;GhostPostConfig - Boot Phase Driver;C:\WINDOWS\system32\Drivers\ghpcw2k.sys [2005-11-28 17:36]

S0 hpt374;hpt374;C:\WINDOWS\system32\DRIVERS\hpt374.sys [2003-04-21 11:47]

S0 hptpro;hptpro;C:\WINDOWS\system32\DRIVERS\hptpro.sys [2003-03-27 14:22]

S2 GhPostConfig_Auto;GhostPostConfig - Auto Phase Driver;C:\WINDOWS\system32\Drivers\ghpcw2k.sys [2005-11-28 17:36]

S3 USBAAPL;Apple Mobile USB Driver;C:\WINDOWS\system32\Drivers\usbaapl.sys [2008-07-10 09:35]

S4 hpt3xx;hpt3xx;C:\WINDOWS\system32\DRIVERS\hpt3xx.sys [2004-01-05 09:10]

*Newly Created Service* - CATCHME

.

Contents of the 'Scheduled Tasks' folder

2008-07-11 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]

.

------- Supplementary Scan -------

.

FireFox -: Profile - C:\Documents and Settings\Eivind\Application Data\Mozilla\Firefox\Profiles\0xvvv4vy.default\

FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.startsiden.no/

.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-28 16:17:40

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2008-08-28 16:18:45

ComboFix-quarantined-files.txt 2008-08-28 14:18:40

ComboFix2.txt 2008-08-25 18:51:55

Pre-Run: 6,157,336,576 bytes free

Post-Run: 6,171,156,480 bytes free

180 --- E O F --- 2008-08-14 17:01:56

norbat · 28. august 2008

Vet du hva dette er for filer/mapper:

C:\WINDOWS\system32\secigdde\setobsys.dll

C:\WINDOWS\system32\kerox3d.dll

Hvis ikke, kunne du lastet opp filene på følgende nettsted for sjekk:http://virusscan.jotti.org/

Endret 28. august 2008 av norbat

Agricola · 28. august 2008

Aner ikke hva de er. Scannet mappen/filen på den siden. Ingen av programmene fant noe på secigdde mappen, men kerox3d.dll ble oppdaget som malware/trojan av AntiVir og Dr.Web.

Bilde av scanningen:

norbat · 28. august 2008

Tror det kan være lurt å uskadeliggjøre disse to filene. Det kan du gjøre ved å forandre filendelse på dem:

C:\WINDOWS\system32\secigdde\setobsys.dll -> setobsys.dll.vir

C:\WINDOWS\system32\kerox3d.dll -> kerox3d.dll.vir

Hvis alt fungerer som vanlig, så kan du slette mappa secigdde og fila kerox3d.dll etter en stund.

Agricola · 29. august 2008

Gjorde som du sa. Pcen fungerer som vanlig, men problemet med å streame videoer er her fortsatt, så prøver å slette de og ser hvordan det går da.

Agricola · 31. august 2008

Argh -.- Problemet med å streame videoer er her fremdeles...

Tosha0007 · 31. august 2008

kva nettlesar bruker du? Kan ver det software feil som gjer det. Har det vore sånn heile tida, eller berre nyleg? Prøv med ein anna nettlesar, opera, firefox eller IE7 alt etter kva du bruker no. Bruker du ein av dei to førstnemde kan det vera ein reinstall hjelper.

Er det noko anna som "strupar" nettet ditt, f.eks torrent?

Agricola · 1. september 2008

Bruker Firefox. Har brukt det lenge. Problemet med å streame videoer har vært her en god stund. Oppgraderte til Firefox 3.0 for litt siden, uten at det hjalp. Tviler på at det er torrents, ettersom problemet kommer også når jeg ikke laster ned noe. Får vel kanskje bruke IE en stund å se hvordan det går der.

Agricola · 24. september 2008

Problemet med å streame videoer gjelder ikke bare Firefox. Har brukt Safari en del i det siste, og har de samme problemene der. Blir gal av dette problemet >.<

Tosha0007 · 24. september 2008

kan det ver så enkelt som problem med video plug in? Har lite kunnskap om dette, så her får andre kome med kodek/plug in som trengs

Agricola · 24. september 2008

Noen som har peiling på sånn plug in greie som tosha0007 snakker om? Har hatt dette problemet lenge, og håper på å få det fikset så fort som mulig.

Logg inn

To problemer: Virus og streaming av video

Anbefalte innlegg

Agricola

Lenke til kommentar

Videoannonse

Tosha0007

Lenke til kommentar

Agricola

Lenke til kommentar

norbat

Lenke til kommentar

Agricola

Lenke til kommentar

norbat

Lenke til kommentar

Agricola

Lenke til kommentar

norbat

Lenke til kommentar

Agricola

Lenke til kommentar

Agricola

Lenke til kommentar

Tosha0007

Lenke til kommentar

Agricola

Lenke til kommentar

Agricola

Lenke til kommentar

Tosha0007

Lenke til kommentar

Agricola

Lenke til kommentar

Opprett en konto eller logg inn for å kommentere

Opprett konto

Logg inn

Hvem er aktive 0 medlemmer