Computeren slukker af sig selv?

Varmeproblem ?
http://www.spywareinfo.dk/#/tip-og-tricks/rens_taern.htm
???

Har du fuld WindowsUpdate ?

Med de problemer du har med genoprettelse, vil jeg foreslå, at du brænder dig en
Ubuntu Linux. Man behøver ikke at installere den, den kan køre direkte fra CD/DVD.
Meningen er, at hvis du kan køre Ubuntu uden problemer, så er dit problem, software
fejl, på grund af din ridsede CD.
http://releases.ubuntu.com/8.04/

lav en ny cd via denne side. du vil aldrig få den til at køre optimalt hvis den udelader filer.

http://www.boegebjerg.dk/lars/sata2.htm


at en pc genstarter uden påviselig grund skyldes som det er skrevet som "regel" et varme problem men det kan også godt være en dårlig ramkreds så få den/dem testet.


m.v.h

http://support.microsoft.com/kb/330132

Hvad er det for en computer, bærbar/stationær? mærke?

Hej, slukke problemet er blevet løst efter jeg rengørede mit tårn, men jeg har stadig problemmer med den der tekst der popper op når jeg logger på, nogle der kan forklare hvad det der? :-),
og gør det noget ved computeren?
Også lige en ting til, den der genoprettelses cd jeg kan oprette via det link treatmenice sendte, hvis jeg nu gør det, er min windows så stadig lovligt?
Det kunne jo godt virke lidt pirat kopi agtigt, men er det det?

... for en go' ordens skyld; stik os/mig en HiJackThis ->
http://www.spywareinfo.dk/index.htm#/manualer/hijackthis.htm

Bemærk at HiJackThis.exe programmet skal gemmes i en dertil oprettet mappe og IKKE køres direkte fra nettet...

PS: Brug denne version af HJT -> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

(Mest for at se/læse hvad der bliver startet op på din putter...)

Hej, jeg har fulgt beskrivelsen helt præcist nu, har læst alt igennem i linket du sendte mig, og har gemt den på skrivebordet i en ny mappe :-)..

teksten der kom frem, direkte kopieret:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:27:01, on 05-05-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
c:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\eHome\ehmsas.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Administrator\Desktop\HiJackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\HP_Administrator\Desktop\Ny mappe\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {F073BDC9-0D67-4ff0-879E-27241C843828} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Register Reminder 7 day] c:\\hp\\bin\\spawn.exe c:\\windows\\system32\\pcintro\\autorun.exe c:\\windows\\system32\\pcintro\\remind.cmd Register7d.html
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Tilslutningshjælp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Tilslutningshjælp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 10437 bytes

Afinstaller

* BitTorrent
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=40284

via
[Start][Indstilninger][Kontrolpanel][Tilføj/fjern programmer]

Genstart for at fuldføre afinstalationen...

---------------------------------------

... Nu er det ikke alle (u)ønskede elementer som viser sig med en HiJackThis Log; så gennemfør proceduren herfra -> http://www.eksperten.dk/artikler/1123
PS: Brug denne version af HJT -> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

(Specielt når du har gang i P2P programmer !!!)

Hej..
Ja jeg er godt klar over det med bit torrent virker mistænkeligt, men jeg kan 100% love for at jeg kun har downloadet EN ting med det program, nogle af mine venner fra Kolding spiller musik, og de lægger altid deres nyeste numre ud på thepiratebay.com, hvorfra jeg downloader dem, det er 100% noget de selv gør, og 100% lovligt og virus frit vil jeg gerne understrege, men jeg har slettet det alligevel lige før jeg tog den nye skanning her :-).

Foresten hvis det kan være til gavn har jeg Media Center versionen af XP..

Jeg har jo fulgt den, og nu kopiere jeg så begge logs ind, både den jeg fik fra HIjackThis, også den fra Combo Fix :-), den første jeg kopiere ind er fra HIJackThis, og den kommer her:

Logfile of HijackThis v1.99.1
Scan saved at 21:54:41, on 07-05-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Administrator\Desktop\hejdu eksperten.dk\alternativ.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DA_DK&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {F073BDC9-0D67-4ff0-879E-27241C843828} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Tilslutningshjælp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Tilslutningshjælp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe



LOGGEN SLUTTER HER..

den næste jeg fik fra Combo Fic kommer her:

ComboFix 08-05-01.3 - HP_Administrator 2008-05-07 21:56:42.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.606 [GMT 2:00]
Running from: C:\Documents and Settings\HP_Administrator\Desktop\hejdu eksperten.dk\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((((((  Other Deletions  )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
D:\Autorun.inf

.
(((((((((((((((((((((((((  Files Created from 2008-04-07 to 2008-05-07  )))))))))))))))))))))))))))))))
.

2008-05-07 20:21 . 2008-05-07 20:21    <DIR>    d--------    C:\Program Files\SUPERAntiSpyware
2008-05-07 20:21 . 2008-05-07 20:21    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com
2008-05-07 20:21 . 2008-05-07 20:21    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-05-07 20:20 . 2008-05-07 20:20    <DIR>    d--------    C:\Program Files\Common Files\Wise Installation Wizard
2008-05-07 20:17 . 2008-05-07 20:17    <DIR>    d--------    C:\Program Files\CCleaner
2008-05-06 18:16 . 2008-05-06 18:16    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\AdobeUM
2008-05-04 22:20 . 2008-05-04 22:20    <DIR>    d--------    C:\Program Files\Guitar Pro 5
2008-05-04 01:56 . 2008-05-07 16:30    <DIR>    d--------    C:\tmp
2008-05-04 00:49 . 2008-05-04 00:49    <DIR>    d--------    C:\WORDS
2008-05-03 22:00 . 2008-05-03 22:00    <DIR>    d--------    C:\Program Files\Blender Foundation
2008-05-03 21:58 . 2008-05-03 21:58    <DIR>    d--------    C:\WINDOWS\Sun
2008-05-03 21:44 . 2008-05-03 21:44    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-05-03 20:46 . 2008-05-03 20:46    <DIR>    d--------    C:\Program Files\Bonjour
2008-05-03 20:37 . 2008-05-03 20:37    <DIR>    d--------    C:\Program Files\Common Files\Macrovision Shared
2008-05-03 16:23 . 2008-05-03 16:23    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\.hydrogen
2008-05-03 16:10 . 2008-05-03 16:10    <DIR>    d--------    C:\Program Files\Hydrogen
2008-05-03 00:39 . 2008-05-03 00:39    <DIR>    d--------    C:\Program Files\DNA
2008-05-03 00:39 . 2008-05-07 21:57    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\DNA
2008-05-02 23:36 . 2008-05-02 23:36    <DIR>    d--------    C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-05-02 23:36 . 2007-07-30 19:19    271,224    --a------    C:\WINDOWS\system32\mucltui.dll
2008-05-02 23:36 . 2007-07-30 19:19    207,736    --a------    C:\WINDOWS\system32\muweb.dll
2008-05-02 23:36 . 2007-07-30 19:19    30,072    --a------    C:\WINDOWS\system32\mucltui.dll.mui
2008-05-01 23:27 . 2008-05-01 23:27    <DIR>    d----c---    C:\WINDOWS\system32\DRVSTORE
2008-05-01 22:39 . 2008-05-03 01:41    <DIR>    dr-hs----    C:\WINDOWS\system32\dllcache
2008-05-01 21:19 . 2008-05-01 21:19    <DIR>    d--------    C:\Program Files\Sun
2008-05-01 21:19 . 2008-02-22 02:33    69,632    --a------    C:\WINDOWS\system32\javacpl.cpl
2008-05-01 15:27 . 2007-02-28 11:10    2,180,352    ---------    C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-05-01 15:27 . 2007-02-28 11:08    2,136,064    ---------    C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-05-01 15:27 . 2007-02-28 10:38    2,057,600    ---------    C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-05-01 15:27 . 2007-02-28 10:38    2,015,744    ---------    C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-05-01 15:26 . 2006-05-05 11:41    453,120    ---------    C:\WINDOWS\system32\dllcache\mrxsmb.sys
2008-05-01 15:26 . 2006-06-01 20:47    163,840    ---------    C:\WINDOWS\system32\dllcache\jgdw400.dll
2008-05-01 15:26 . 2006-03-17 03:05    28,672    ---------    C:\WINDOWS\system32\verclsid.exe
2008-05-01 15:26 . 2006-06-01 20:47    27,648    ---------    C:\WINDOWS\system32\dllcache\jgpl400.dll
2008-05-01 15:08 . 2004-08-03 22:58    15,104    --a------    C:\WINDOWS\system32\drivers\usbscan.sys
2008-05-01 15:08 . 2004-08-03 22:58    15,104    --a------    C:\WINDOWS\system32\dllcache\usbscan.sys
2008-05-01 15:06 . 2008-05-01 15:06    1,160    --a------    C:\WINDOWS\mozver.dat
2008-05-01 14:37 . 2008-05-01 14:37    <DIR>    d--------    C:\Program Files\Apple Software Update
2008-05-01 14:37 . 2008-05-01 14:37    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-01 14:37 . 2008-05-01 14:37    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\Apple
2008-05-01 14:36 . 2008-05-01 14:38    <DIR>    d--------    C:\Program Files\QuickTime
2008-05-01 14:05 . 2008-05-01 14:05    1,870    -rahs----    C:\WINDOWS\system32\drivers\103C_HP_CPC_RA832AA-ABY m7529.dk_YC_0Pavi_QCZX628_E63DKemMPA1_48_IAsterope2_SECS_V1.03_B3.23_T061130_WXP2_L409_M1024_J200_7Intel_8Pentium 4_93.06_#080428_N10EC8139_Z_G10DE01D1_OTSSTcorp CD DVDW TS-H552D_DIBM1993.MRK
2008-05-01 14:04 . 2006-06-27 12:14    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\WINDOWS
2008-05-01 14:04 . 2008-05-01 14:06    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\Symantec
2008-05-01 14:04 . 2008-05-07 20:17    <DIR>    d--------    C:\Documents and Settings\HP_Administrator
2008-05-01 14:04 . 2008-05-07 21:59    233,472    --a------    C:\Documents and Settings\HP_Administrator\ntuser.dat.LOG
2008-05-01 14:03 . 2006-06-27 12:14    <DIR>    d--------    C:\WINDOWS\system32\config\systemprofile\WINDOWS
2008-05-01 13:59 . 2004-08-04 00:56    21,504    --a------    C:\WINDOWS\system32\hidserv.dll
2008-05-01 13:59 . 2004-08-03 22:58    14,848    --a------    C:\WINDOWS\system32\drivers\kbdhid.sys
2008-05-01 13:59 . 2001-08-17 13:48    12,160    --a------    C:\WINDOWS\system32\drivers\mouhid.sys
2008-05-01 13:59 . 2001-08-17 14:02    9,600    --a------    C:\WINDOWS\system32\drivers\hidusb.sys
2008-05-01 13:59 . 2001-08-17 22:36    8,704    --a------    C:\WINDOWS\system32\kbdjpn.dll
2008-05-01 13:59 . 2001-08-17 14:55    6,144    --a------    C:\WINDOWS\system32\kbd106.dll
2008-05-01 13:57 . 2008-05-07 20:07    90,112    --a------    C:\WINDOWS\DUMP4f68.tmp
2008-05-01 13:57 . 2008-05-07 20:13    90,112    --a------    C:\WINDOWS\DUMP46bd.tmp
2008-05-01 13:57 . 2008-05-07 21:56    1,024    --ah-----    C:\WINDOWS\system32\config\systemprofile\NTUSER.DAT.LOG
2008-05-01 13:35 . 2008-05-01 13:35    <DIR>    d--------    C:\temp
2008-05-01 13:22 . 2008-05-01 13:22    <DIR>    d---s----    C:\Documents and Settings\HP_Administrator\UserData
2008-05-01 00:41 . 2008-05-01 00:41    <DIR>    d--------    C:\Program Files\MSXML 4.0
2008-04-30 23:46 . 2008-04-30 23:46    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Contacts
2008-04-30 23:44 . 2008-04-30 23:46    <DIR>    d--------    C:\Program Files\Windows Live
2008-04-30 23:44 . 2008-04-30 23:45    <DIR>    d--hsc---    C:\Program Files\Common Files\WindowsLiveInstaller
2008-04-30 23:43 . 2008-05-01 23:24    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-30 23:34 . 2008-04-30 23:34    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\Propellerhead Software
2008-04-30 23:34 . 2008-04-30 23:34    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\Propellerhead Software
2008-04-30 23:33 . 2008-04-30 23:33    <DIR>    d--------    C:\Program Files\Propellerhead
2008-04-30 23:14 . 2008-05-03 00:52    524,709    --a------    C:\Documents and Settings\HP_Administrator\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log
2008-04-30 23:14 . 2008-04-30 23:14    227    --a------    C:\WINDOWS\HP_CounterReport_Update_HPSU.ini
2008-04-30 23:10 . 2008-04-30 23:10    <DIR>    d--------    C:\SystemRoot
2008-04-29 17:31 . 2008-04-30 22:59    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\HPQ
2008-04-28 21:27 . 2006-03-21 05:23    23,040    ---------    C:\WINDOWS\kb913800.exe
2008-04-28 20:49 . 2008-04-28 20:49    <DIR>    d--------    C:\Program Files\Audacity 1.3 Beta (Unicode)
2008-04-28 20:49 . 2008-05-06 18:47    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\Audacity
2008-04-28 20:33 . 2008-04-28 20:38    <DIR>    d--------    C:\Documents and Settings\HP_Administrator\Application Data\Line 6
2008-04-28 20:33 . 2008-04-28 20:33    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\Line 6
2008-04-28 20:32 . 2008-04-28 20:33    <DIR>    d--------    C:\Program Files\Line6
2008-04-28 20:15 . 2008-04-28 20:15    0    --a------    C:\WINDOWS\nsreg.dat
2008-04-28 20:08 . 2006-06-27 12:14    <DIR>    d--------    C:\Documents and Settings\Default User\WINDOWS
2008-04-28 20:08 . 2008-05-01 14:03    1,024    --ah-----    C:\Documents and Settings\All Users\NTUSER.DAT.LOG
2008-04-28 20:07 . 2008-05-07 21:39    242    --a------    C:\WINDOWS\system\hpsysdrv.dat
2008-04-28 20:04 . 2008-04-30 22:51    90,112    --a------    C:\WINDOWS\DUMP41fa.tmp
2008-04-28 20:04 . 2008-04-29 17:22    90,112    --a------    C:\WINDOWS\DUMP3e80.tmp

.
((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-03 18:45    ---------    d-----w    C:\Program Files\Common Files\Adobe
2008-05-01 19:19    ---------    d-----w    C:\Program Files\Java
2008-05-01 13:14    ---------    d-----w    C:\Program Files\Google
2008-03-19 09:47    1,845,248    ----a-w    C:\WINDOWS\system32\win32k.sys
2008-03-19 09:47    1,845,248    ------w    C:\WINDOWS\system32\dllcache\win32k.sys
2008-02-20 06:51    282,624    ----a-w    C:\WINDOWS\system32\gdi32.dll
2008-02-20 06:51    282,624    ------w    C:\WINDOWS\system32\dllcache\gdi32.dll
2008-02-20 05:32    45,568    ----a-w    C:\WINDOWS\system32\dnsrslvr.dll
2008-02-20 05:32    45,568    ------w    C:\WINDOWS\system32\dllcache\dnsrslvr.dll
2008-02-20 05:32    148,992    ------w    C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-02-15 09:07    18,432    ------w    C:\WINDOWS\system32\dllcache\iedw.exe
.

(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-05-03 00:39 289088]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-02-29 16:03 1481968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-06 05:56 64512]
"ftutil2"="ftutil2.dll" [2004-06-07 23:05 106496 C:\WINDOWS\system32\ftutil2.dll]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-08 13:54 16010240 C:\WINDOWS\RTHDCPL.EXE]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-03 08:19 77312 C:\WINDOWS\arpwrmsg.exe]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-02-14 06:05 7557120]
"nwiz"="nwiz.exe" [2006-02-14 06:05 1519616 C:\WINDOWS\system32\nwiz.exe]
"HPHUPD08"="c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 08:35 49152]
"DMAScheduler"="c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-03-20 09:05 90112]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 22:14 237568]
"PCDrProfiler"="" []
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2005-09-17 00:27 52848]
"IS CfgWiz"="c:\Program Files\Norton Internet Security\cfgwiz.exe" [2005-09-29 23:33 120464]
"SSC_UserPrompt"="c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-11-08 12:42 218240]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 22:34 249856]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPwuSchd2.exe" [2005-12-15 18:18 49152]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-01 14:36 413696]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-06-27 12:08 180269]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 18:40:44 282624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 12:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\DNA\\btdna.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=

R1 lusbaudio;Logitech USB Microphone;C:\WINDOWS\system32\drivers\OVSound2.sys [2001-08-17 14:05]
R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-02-15 04:07]
R3 QCEmerald;Logitech QuickCam Web;C:\WINDOWS\system32\DRIVERS\OVCE.sys [2001-08-17 14:05]

*Newly Created Service* - CATCHME
*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2008-05-01 12:37:40 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2006-06-27 10:31:48 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
"2008-05-01 12:05:31 C:\WINDOWS\Tasks\Warranty Reminder 11 month.job"
- c:\windows\system32\pcintro\reminder\Warranty_Reminder_11_month\Warranty_Reminder_11_month.bat
"2008-05-01 12:05:31 C:\WINDOWS\Tasks\Warranty Reminder 15 day.job"
- c:\windows\system32\pcintro\reminder\Warranty_Reminder_15_day\Warranty_Reminder_15_day.bat
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-07 21:59:04
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

C:\WINDOWS\explorer.exe [284] 0x85F8E798

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 32

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> ?:\WINDOWS\system32\rtutils.dll
-> ?:\WINDOWS\system32\rtutils.dll
-> ?:\WINDOWS\system32\rtutils.dll
.
Completion time: 2008-05-07 21:59:41
ComboFix-quarantined-files.txt  2008-05-07 19:59:36

Pre-Run: 169,712,132,096 bytes free
Post-Run: 169,698,631,680 bytes free

208    --- E O F ---    2008-05-02 21:36:40

Foresten opstod slukke problemet igen her idag, jeg vil gerne følge din procudere treatmenice, men hvordan skal jeg få de filer fra min genoprettelses dvd over på computeren, så jeg kan ligge dem i den mappe der står jeg skal? :-).

Og til dig helgec er det en HP, mere præcist denne her:

http://www.shopping.hp.com/scat/desktops/m8300_series/rts/3/computer_store#

PS: Ved du selv hvad dette er ->

O4 - HKLM\..\RunOnce: [Register Reminder 7 day] c:\\hp\\bin\\spawn.exe c:\\windows\\system32\\pcintro\\autorun.exe c:\\windows\\system32\\pcintro\\remind.cmd Register7d.html

- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
"2008-05-01 12:05:31 C:\WINDOWS\Tasks\Warranty Reminder 11 month.job"
- c:\windows\system32\pcintro\reminder\Warranty_Reminder_11_month\Warranty_Reminder_11_month.bat
"2008-05-01 12:05:31 C:\WINDOWS\Tasks\Warranty Reminder 15 day.job"
- c:\windows\system32\pcintro\reminder\Warranty_Reminder_15_day\Warranty_Reminder_15_day.bat

----------

Har du fuld WindowsUpdate ? Tror du mangler en hel del ->
http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=da

Til karise_larry

Hej, ja jeg har fuld windowsUpdate nu, og jeg har ingen som helst anelse om hvad de ting der du sendte er, den eneste jeg har et bud på er:
"C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE"

kan det ikke være mit Norton Anti Virus?

.... jo - selvfølgelig. Den skulle ikke have være med ...

Hej.. jeg kan nu meddele at min computer er fuldstændig gået ned, jeg kan have den tændt i 5 sekunder når jeg er heldig, så skriver den mit xp er korrupt, jeg har afleveret den til reparation her idag, så jeg må hellere lukke tråden da problemet (forhåbentlig) er løst når jeg får computeren tilbage..