Avatar billede duvander Juniormester
07. marts 2006 - 00:01 Der er 14 kommentarer og
4 løsninger

Jeg har virus hjælp

Hej eksperter

Jeg kan ikke H klikke på mit skrivebord. Tror skittet er blevet hijacket.

Hvordan løser Jeg det??

Her kommer log file

Logfile of HijackThis v1.99.1
Scan saved at 23:58:40, on 06-03-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programmer\Logitech\Video\LogiTray.exe
C:\Programmer\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\Logitech\MouseWare\system\em_exec.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\vg\Vg.exe
C:\Programmer\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Anders\.limewire\.NetworkShare\LimeWireWinInstaller.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Anders\Skrivebord\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\system32\private.exe internat.dll,LoadMouseCarpetProfile
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Programmer\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [NBJ] "C:\Programmer\Ahead\Nero BackItUp\NBJ.exe"
O4 - Startup: VirtuaGirl.lnk = C:\Programmer\vg\Vg.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130275074990
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Programmer\iPod\bin\iPodService.exe (file missing)
Avatar billede serverservice Praktikant
07. marts 2006 - 00:20 #1
Hej duvander - Hent opdate´r og scan hele disken med ewido - gem rapport http://www.spywarefri.dk/downloads1/ewido-setup.exe

Genstart og kom med en ny log og rapport fra ewido
Avatar billede duvander Juniormester
07. marts 2006 - 00:38 #2
Det prøver jeg lige
Avatar billede duvander Juniormester
07. marts 2006 - 00:59 #3
så det gjort

---------------------------------------------------------
ewido anti-malware - Scanningsrapport
---------------------------------------------------------

+ Oprettet den:            00:55:41, 07-03-2006
+ Rapport-Checksum:        95327D

+ Scanningsresultat:
    :mozilla.7:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Webtrendslive : Renset med backup
    :mozilla.8:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Webtrendslive : Renset med backup
    :mozilla.20:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.21:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.22:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.23:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.24:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.25:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.26:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.27:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.28:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Falkag : Renset med backup
    :mozilla.29:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Itrack : Renset med backup
    :mozilla.33:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Sexcounter : Renset med backup
    :mozilla.35:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Sexcounter : Renset med backup
    :mozilla.36:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Fastclick : Renset med backup
    :mozilla.37:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Fastclick : Renset med backup
    :mozilla.38:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Adserver : Renset med backup
    :mozilla.39:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Adserver : Renset med backup
    :mozilla.52:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Liveperson : Renset med backup
    :mozilla.53:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Liveperson : Renset med backup
    :mozilla.54:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Hitbox : Renset med backup
    :mozilla.55:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.65:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Adtech : Renset med backup
    :mozilla.66:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Adtech : Renset med backup
    :mozilla.69:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Burstnet : Renset med backup
    :mozilla.70:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
    :mozilla.71:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Hitbox : Renset med backup
    :mozilla.81:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Atdmt : Renset med backup
    :mozilla.87:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Mediaplex : Renset med backup
    :mozilla.88:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.89:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.90:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.91:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.92:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.93:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Advertising : Renset med backup
    :mozilla.104:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.105:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.106:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.107:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.108:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Serving-sys : Renset med backup
    :mozilla.109:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Masterstats : Renset med backup
    :mozilla.118:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Centrport : Renset med backup
    :mozilla.119:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Centrport : Renset med backup
    :mozilla.120:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Com : Renset med backup
    :mozilla.121:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Com : Renset med backup
    :mozilla.123:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
    :mozilla.124:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
    :mozilla.125:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.2o7 : Renset med backup
    :mozilla.137:C:\Documents and Settings\Anders\Application Data\Mozilla\Firefox\Profiles\u9bmyug0.default\cookies.txt -> TrackingCookie.Doubleclick : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@adbrite[1].txt -> TrackingCookie.Adbrite : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@adtech[1].txt -> TrackingCookie.Adtech : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@advertising[1].txt -> TrackingCookie.Advertising : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@as-us.falkag[1].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@atdmt[2].txt -> TrackingCookie.Atdmt : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@casalemedia[1].txt -> TrackingCookie.Casalemedia : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@com[2].txt -> TrackingCookie.Com : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@cz7.clickzs[2].txt -> TrackingCookie.Clickzs : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@doubleclick[1].txt -> TrackingCookie.Doubleclick : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@fastclick[2].txt -> TrackingCookie.Fastclick : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@image.masterstats[1].txt -> TrackingCookie.Masterstats : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@media.fastclick[2].txt -> TrackingCookie.Fastclick : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@mediaplex[1].txt -> TrackingCookie.Mediaplex : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@overture[2].txt -> TrackingCookie.Overture : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@questionmarket[2].txt -> TrackingCookie.Questionmarket : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@sel.as-us.falkag[2].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Anders\Cookies\anders@web-stat[2].txt -> TrackingCookie.Web-stat : Renset med backup


::Rapport slut
Avatar billede serverservice Praktikant
07. marts 2006 - 01:11 #4
ok en masse cookies - så loggen fra hijackthis - ser på den imorgen
Avatar billede serverservice Praktikant
07. marts 2006 - 15:43 #5
Kom bare med en ny log fra hijackthis
Avatar billede pos51 Nybegynder
07. marts 2006 - 17:04 #6
hvis du kan download ?? så gå ind på download.com og donnloade avg det er gratis og det er godt til at fjerne virus med og hvis du er villig til at betale for et virus program så downloade spyware doctor det er super
Avatar billede serverservice Praktikant
07. marts 2006 - 21:01 #7
svar ? - tror lige vi skal se den log fra hijackthis så det hele kommer med
Avatar billede duvander Juniormester
08. marts 2006 - 16:21 #8
Ok. der er scannet mange gange med avg antivirus, også i fejlsikret tilstand. Ligger en log ud senere!!
Avatar billede duvander Juniormester
08. marts 2006 - 17:32 #9
Logfile of HijackThis v1.99.1
Scan saved at 17:28:45, on 08-03-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programmer\Logitech\Video\LogiTray.exe
C:\Programmer\Winamp\winampa.exe
C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Logitech\MouseWare\system\em_exec.exe
C:\Programmer\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Programmer\ewido\security suite\ewidoctrl.exe
C:\Programmer\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Anders\Skrivebord\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Hyperlinks
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programmer\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [zBrowser Launcher]
C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair]
C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray]
C:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\system32\private.exe
internat.dll,LoadMouseCarpetProfile
O4 - HKLM\..\Run: [SunJavaUpdateSched]
C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe"
/background
O4 - HKCU\..\Run: [PcSync] C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe
/NoDialog
O4 - HKCU\..\Run: [LogitechSoftwareUpdate]
C:\Programmer\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [NBJ] "C:\Programmer\Ahead\Nero BackItUp\NBJ.exe"
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft
Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksporter til Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130275074990
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) -
http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks -
C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks -
C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: iPodService - Unknown owner -
C:\Programmer\iPod\bin\iPodService.exe (file missing)
Avatar billede serverservice Praktikant
08. marts 2006 - 18:31 #10
Slå systemgendannelse fra i system.

Luk alle andre vinduer end hijackthis.

Disse linier skal fixes i hijackthis – markér og vælg fix checked:
O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\system32\private.exe
internat.dll,LoadMouseCarpetProfile


Du skal lige ændre i stifinder - Mappeindstillinger:
Åbn en tilfældig mappe, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".

Kør denne fil for at tømme dine temp mapper -
www.spywareinfo.dk/download/cleantempxp2k.bat


Disse skal du slette i fejlsikret, du kommer i fejlsikret ved at trykke F8 ved opstart:

C:\WINDOWS\system32\private.exe<-filen



Start op i normal og kom med en ny log til tjek


Du har muligvis problemer med msn/windows messenger?
Avatar billede duvander Juniormester
09. marts 2006 - 18:51 #11
Sådan

Logfile of HijackThis v1.99.1
Scan saved at 18:48:02, on 09-03-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programmer\Logitech\MouseWare\system\em_exec.exe
C:\Programmer\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Programmer\ewido\security suite\ewidoctrl.exe
C:\Programmer\Winamp\winampa.exe
C:\Programmer\ewido\security suite\ewidoguard.exe
C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Logitech\Video\FxSvr2.exe
C:\Documents and Settings\Anders\Skrivebord\hijackthis.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Hyperlinks
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programmer\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [zBrowser Launcher]
C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair]
C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray]
C:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched]
C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe"
/background
O4 - HKCU\..\Run: [PcSync] C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe
/NoDialog
O4 - HKCU\..\Run: [LogitechSoftwareUpdate]
C:\Programmer\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [NBJ] "C:\Programmer\Ahead\Nero BackItUp\NBJ.exe"
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft
Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksporter til Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130275074990
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) -
http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks -
C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks -
C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: iPodService - Unknown owner -
C:\Programmer\iPod\bin\iPodService.exe (file missing)
Avatar billede duvander Juniormester
09. marts 2006 - 18:54 #12
Den laver stadig den samme ballade. Der er hvidt på skrivebord og man kan ikke højreklikke på skrivebord og få de sædvanlige faneblade under egenskaber:(
Avatar billede serverservice Praktikant
09. marts 2006 - 21:40 #13
Ok din log er ren , og det er da muligt at det kunne have været snavs , men der er ikke noget nu.
Har du evt. installeret driver til grafikkort for nylig eller directx - prøv evt. at geninstallere til originaldriver.
hvis det ikke er driver kan det være windows problem - her skal du starte med at køre scf /scannow og lægge din windows cd i drevet - så blir din dll cache repareret. Hjalp det ikke må du køre en windows repair ved at boote på cdén - der er en vejledning på www.dannyboyd.dk
Avatar billede ejvindh Ekspert
10. marts 2006 - 13:04 #14
Prøv evt. om dette hjælper dig:
Hent dette lille værktøj, og gem det på dit skrivebord:
http://danborg.org/spy/download/Deskfix.vbs

Dobbeltklik på den nye fil. Der vil komme en melding om, at brugen er på eget ansvar. Her skal du acceptere for at komme videre. Herefter forsvinder alt indhold fra dit skrivebord og proceslinien for et kort øjeblik. Når programmet melder at det har rettet din registrering, klikker du på OK. Genstart computeren.

Hvis dette ikke hjælper, så tror jeg stadig der er skidt på computeren. Det kan muligvis ses med Silentrunners:

Hent Silentrunners her: http://www.silentrunners.org/Silent%20Runners.vbs
Kør programmet, klik på Ja. Klik på OK. Vent så indtil der kommer en besked om at logfilen er færdig. Find log-filen, og læg den herind (den lægger sig i samme mappe som silentrunner programmet ligger i).
Avatar billede serverservice Praktikant
23. marts 2006 - 08:25 #15
hvordan gik det her ?
Avatar billede duvander Juniormester
21. maj 2006 - 21:06 #16
Den må lige vente, det er ikke min egen maskine. Det vare tid for at jeg kan afprøve det hos ham!
Avatar billede duvander Juniormester
21. oktober 2006 - 09:04 #17
Det hele ende desvære med en formatering. Den var godt nok crashet. Men takker for jeres tid!
Avatar billede serverservice Praktikant
21. oktober 2006 - 09:51 #18
ok ærgerligt - ja det kan også blive en nødvendig løsning en sjælden gang.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester