Avatar billede targa55 Praktikant
05. december 2011 - 00:54 Der er 9 kommentarer og
1 løsning

Check af logs

Kan ikke inst. Wlsetup-web ...
Får at vide, det IKKE er et gyldigt Win32-program.

Styresystem XP.

***************************************************************


Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8302

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

04-12-2011 12:11:37
mbam-log-2011-12-04 (12-11-37).txt

Skanningstype: Fuldstændig skanning (C:\|)
Objekter skannet: 222993
Tid gået: 2 time(e), 24 minut(ter), 38 sekund(er)

Hukommelses Processorer Inficeret: 0
Hukommelses Moduler Inficeret: 0
Registreringsdatabasenøgler Inficeret: 0
Registreringsdatabaseværdier Inficeret: 0
Registreringsdatabasedata Objekter Inficeret: 0
Inficerede Mapper: 0
Inficerede Filer: 1

Hukommelses Processorer Inficeret:
(Ingen skadelige objekter blev fundet)

Hukommelses Moduler Inficeret:
(Ingen skadelige objekter blev fundet)

Registreringsdatabasenøgler Inficeret:
(Ingen skadelige objekter blev fundet)

Registreringsdatabaseværdier Inficeret:
(Ingen skadelige objekter blev fundet)

Registreringsdatabasedata Objekter Inficeret:
(Ingen skadelige objekter blev fundet)

Inficerede Mapper:
(Ingen skadelige objekter blev fundet)

Inficerede Filer:
c:\documents and settings\Yez\skrivebord\start up run.exe (PUP.StartUpManager) -> Quarantined and deleted successfully.

****************************************************************



ComboFix 11-12-04.04 - Yez 04-12-2011  23:29:28.1.1 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.45.1030.18.1023.649 [GMT 1:00]
Kører fra: c:\documents and settings\Yez\Skrivebord\Combofix\ComboFix.exe
Kommandoer benyttet :: c:\documents and settings\Yez\Skrivebord\Combofix\CFScript.txt
.
advarsel -DENNE MASKINE HAR IKKE GENOPRETTELSESKONSOL INSTALLERET !!
.
.
(((((((((((((((((((((((((((((((((((((((  Andet, der er slettet  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\All Users\Application Data\TEMP\AVG\avgmfapx.exe
c:\documents and settings\All Users\Application Data\TEMP\AVG\avgmfarx.dll
c:\documents and settings\All Users\Application Data\TEMP\AVG\avgntdumpx.exe
c:\documents and settings\All Users\Application Data\TEMP\AVG\avgrunasx.exe
c:\documents and settings\All Users\Application Data\TEMP\AVG\avi7.avg
c:\documents and settings\All Users\Application Data\TEMP\AVG\compat.ini
c:\documents and settings\All Users\Application Data\TEMP\AVG\htmlayout.dll
c:\documents and settings\All Users\Application Data\TEMP\AVG\incavi.avm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_cz.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_da.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_es.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_fr.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_ge.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_hu.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_id.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_in.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_it.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_jp.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_ko.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_ms.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_nl.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_pb.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_pl.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_pt.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_ru.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_sc.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_sk.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_sp.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_tr.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_us.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_zh.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\license_zt.htm
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfaconf.txt
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfacz.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfada.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfaes.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfafr.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfage.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfahu.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfaid.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfain.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfait.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfajp.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfako.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfams.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfanl.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfapb.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfapl.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfapt.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfaru.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfasc.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfask.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfasp.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfatr.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfaus.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfavera.txt
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfaverx.txt
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfazh.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\mfazt.lns
c:\documents and settings\All Users\Application Data\TEMP\AVG\microavi.avg
c:\documents and settings\All Users\Application Data\TEMP\AVG\miniavi.avg
c:\documents and settings\All Users\Application Data\TEMP\AVG\setup.exe
c:\documents and settings\All Users\Application Data\TEMP\AVG\setup.ini
c:\documents and settings\Yez\WINDOWS
c:\windows\IsUn0406.exe
c:\windows\unin0406.exe
.
.
(((((((((((((((((((((((((((((  Filer skabt fra 2011-11-04 til 2011-12-04  )))))))))))))))))))))))))))))))))))
.
.
2011-12-04 22:20 . 2011-12-04 22:20    --------    d-sh--w-    c:\documents and settings\Yez\IECompatCache
2011-12-04 01:54 . 2011-12-04 01:54    388096    ----a-r-    c:\documents and settings\Yez\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-12-04 01:46 . 2011-08-31 16:00    22216    ----a-w-    c:\windows\system32\drivers\mbam.sys
2011-12-04 01:46 . 2011-12-04 01:46    --------    d-----w-    c:\programmer\Malwarebytes' Anti-Malware
2011-12-01 00:11 . 2011-12-01 00:11    --------    d-sh--w-    c:\documents and settings\Yez\PrivacIE
2011-12-01 00:08 . 2011-12-01 00:08    --------    d-sh--w-    c:\documents and settings\LocalService\IETldCache
2011-12-01 00:07 . 2011-12-01 00:07    --------    d-sh--w-    c:\documents and settings\Yez\IETldCache
2011-11-30 23:51 . 2011-11-30 23:57    --------    dc-h--w-    c:\windows\ie8
2011-11-30 23:43 . 2011-11-30 23:43    --------    d-----w-    c:\programmer\Fælles filer\Windows Live
2011-11-30 23:39 . 2011-12-01 00:26    --------    d-----w-    c:\programmer\Microsoft Silverlight
2011-11-30 23:30 . 2011-08-16 10:45    6144    -c----w-    c:\windows\system32\dllcache\iecompat.dll
2011-11-30 23:29 . 2011-08-22 23:41    12800    -c----w-    c:\windows\system32\dllcache\xpshims.dll
2011-11-30 23:29 . 2011-08-22 23:41    247808    -c----w-    c:\windows\system32\dllcache\ieproxy.dll
2011-11-30 23:29 . 2011-08-22 23:41    743424    -c----w-    c:\windows\system32\dllcache\iedvtool.dll
2011-11-22 00:26 . 2011-11-22 00:27    --------    d-----w-    c:\documents and settings\All Users\Application Data\Norton
2011-11-22 00:26 . 2011-11-22 00:26    --------    d-----w-    c:\windows\system32\drivers\NSS
2011-11-22 00:26 . 2011-11-22 00:26    --------    d-----w-    c:\documents and settings\All Users\Application Data\Symantec
2011-11-09 23:54 . 2011-11-22 00:33    --------    d-----w-    c:\programmer\TimeTool
2011-11-09 18:25 . 2011-11-09 18:25    --------    d-----w-    c:\documents and settings\Yez\Application Data\AVG
2011-11-08 23:45 . 2011-11-08 23:45    --------    d-----w-    c:\programmer\Trend Micro
2011-11-08 22:46 . 2011-11-08 22:46    --------    d-----w-    c:\programmer\VS Revo Group
2011-11-08 22:45 . 2011-11-08 22:45    --------    d-----w-    c:\documents and settings\Yez\Application Data\Malwarebytes
2011-11-08 22:44 . 2011-11-08 22:44    --------    d-----w-    c:\documents and settings\All Users\Application Data\Malwarebytes
2011-11-07 15:42 . 2011-12-04 22:16    --------    d-----w-    c:\documents and settings\All Users\Application Data\AVG2012
2011-11-07 15:42 . 2011-12-04 22:13    --------    d-----w-    c:\windows\system32\drivers\AVG
2011-11-07 15:24 . 2011-12-04 22:15    --------    d-----w-    c:\documents and settings\All Users\Application Data\MFAData
2011-11-05 12:45 . 2011-11-05 12:45    --------    d-----w-    c:\documents and settings\All Users\Application Data\Canneverbe Limited
2011-11-05 12:45 . 2011-11-05 12:45    --------    d-----w-    c:\documents and settings\Yez\Application Data\Canneverbe Limited
2011-11-05 12:44 . 2009-11-12 13:48    5504    ----a-w-    c:\windows\system32\drivers\StarOpen.sys
2011-11-05 12:44 . 2011-11-05 12:44    --------    d-----w-    c:\programmer\CDBurnerXP
2011-11-05 12:22 . 2011-11-16 23:31    --------    d-----w-    c:\programmer\Defraggler
2011-11-05 12:18 . 2011-11-05 12:18    --------    d-----w-    c:\documents and settings\Yez\Application Data\FastStone
2011-11-05 12:18 . 2011-11-05 12:18    --------    d-----w-    c:\programmer\FastStone Image Viewer
2011-11-05 12:15 . 2011-11-24 23:54    414368    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-05 03:37 . 2011-06-24 14:10    139656    -c----w-    c:\windows\system32\dllcache\rdpwd.sys
2011-11-05 03:36 . 2011-07-08 14:02    10496    -c----w-    c:\windows\system32\dllcache\ndistapi.sys
2011-11-05 03:34 . 2011-04-21 13:37    105472    -c----w-    c:\windows\system32\dllcache\mup.sys
2011-11-05 03:25 . 2010-11-02 15:17    40960    -c----w-    c:\windows\system32\dllcache\ndproxy.sys
2011-11-05 03:25 . 2010-10-11 14:59    45568    -c----w-    c:\windows\system32\dllcache\wab.exe
2011-11-05 03:23 . 2010-09-18 06:53    953856    -c----w-    c:\windows\system32\dllcache\mfc40u.dll
2011-11-05 03:23 . 2011-02-08 13:33    978944    -c----w-    c:\windows\system32\dllcache\mfc42.dll
2011-11-05 03:22 . 2010-08-23 16:12    617472    -c----w-    c:\windows\system32\dllcache\comctl32.dll
2011-11-05 01:26 . 2011-11-05 01:26    --------    d-----w-    c:\windows\l2schemas
2011-11-05 01:26 . 2011-11-05 01:26    --------    d-----w-    c:\windows\system32\da
2011-11-05 01:26 . 2011-11-05 01:26    --------    d-----w-    c:\windows\system32\bits
2011-11-04 23:57 . 2011-11-04 23:57    --------    d-----w-    c:\programmer\CCleaner
2011-11-04 22:54 . 2011-11-04 22:54    --------    d--h--w-    c:\documents and settings\All Users\Application Data\Common Files
.
.
.
((((((((((((((((((((((((((((((((((((((((  Find3M Rapport  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-30 20:43 . 2011-10-30 20:43    1409    ----a-w-    c:\windows\QTFont.for
2011-10-10 14:22 . 2007-03-24 16:41    692736    ----a-w-    c:\windows\system32\inetcomm.dll
2011-10-03 04:06 . 2010-06-21 12:19    472808    ----a-w-    c:\windows\system32\deployJava1.dll
2011-10-03 01:37 . 2009-06-24 05:41    73728    ----a-w-    c:\windows\system32\javacpl.cpl
2011-09-28 07:06 . 2002-09-16 12:00    602112    ----a-w-    c:\windows\system32\crypt32.dll
2011-09-26 10:41 . 2008-07-29 17:59    613376    ----a-w-    c:\windows\system32\uiautomationcore.dll
2011-09-26 10:41 . 2002-09-16 12:00    21504    ----a-w-    c:\windows\system32\oleaccrc.dll
2011-09-26 10:41 . 2002-09-16 12:00    220160    ----a-w-    c:\windows\system32\oleacc.dll
2011-09-06 14:10 . 2002-09-16 12:00    1858944    ----a-w-    c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((((  Start steder i reg.basen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Malwarebytes' Anti-Malware"="c:\programmer\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\FLLESF~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]
.
c:\documents and settings\All Users\Menuen Start\Programmer\Start\~Disabled
Adobe Gamma Loader.lnk - c:\programmer\Fælles filer\Adobe\Calibration\Adobe Gamma Loader.exe [2010-4-9 113664]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Documents and Settings\\All Users\\Dokumenter\\Insane - Unzipped\\Game.exe"=
"c:\\Programmer\\DNA\\btdna.exe"=
"c:\\Documents and Settings\\Yez\\Dokumenter\\Downloads\\Battlefield.1942.PC.Game(djDEVASTATE™)\\Battlefield.1942.PC.Game(djDEVASTATE™)\\Battlefield.1942.PC.Game(djDEVASTATE™)\\BF1942.exe"=
"c:\\Programmer\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Programmer\\LucasArts\\Star Wars Jedi Knight Jedi Academy\\GameData\\jamp.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57888:TCP"= 57888:TCP:Pando Media Booster
"57888:UDP"= 57888:UDP:Pando Media Booster
"1035:TCP"= 1035:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [25-07-2010 19:49 691696]
R2 MBAMService;MBAMService;c:\programmer\Malwarebytes' Anti-Malware\mbamservice.exe [04-12-2011 02:46 366152]
R2 WUSB54GSVC;WUSB54GSVC;c:\programmer\WUSB54G Wireless-G Adapter\WLService.exe [08-02-2010 19:36 41027]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [04-12-2011 02:46 22216]
S2 gupdate;Tjenesten Google Update (gupdate);c:\programmer\Google\Update\GoogleUpdate.exe [08-03-2010 14:56 135664]
S2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\windows\system32\DRIVERS\nvtvsnd.sys --> c:\windows\system32\DRIVERS\nvtvsnd.sys [?]
S3 gupdatem;Google Update Tjeneste (gupdatem);c:\programmer\Google\Update\GoogleUpdate.exe [08-03-2010 14:56 135664]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 rt70x86;%WUSB54Gv4.Service.DispName%;c:\windows\system32\drivers\netr70.sys [29-12-2006 02:01 243200]
S4 Msfvsc0pi;Msfvsc0pi; [x]
.
Indhold af mappen 'Planlagte Opgaver'
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmer\Google\Update\GoogleUpdate.exe [2010-03-08 13:55]
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmer\Google\Update\GoogleUpdate.exe [2010-03-08 13:55]
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1004336348-1708537768-854245398-1003Core.job
- c:\documents and settings\Yez\Lokale indstillinger\Application Data\Google\Update\GoogleUpdate.exe [2009-06-10 13:12]
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1004336348-1708537768-854245398-1003UA.job
- c:\documents and settings\Yez\Lokale indstillinger\Application Data\Google\Update\GoogleUpdate.exe [2009-06-10 13:12]
.
2011-12-04 c:\windows\Tasks\User_Feed_Synchronization-{26C29320-1185-4D7C-BD6A-27962136AADE}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Yderligere scanning -------
.
uStart Page = hxxp://www.google.dk/
uSearchMigratedDefaultUrl = hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZJ&fl=0&ptb=JO_nlfZBva29ur2HIlZCZQ&url=http://edits.mywebsearch.com/toolbaredits/barsearch.jhtml&st=sb&searchfor={searchTerms}
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Google Sidewiki ... - c:\programmer\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
TCP: DhcpNameServer = 193.162.153.164 194.239.134.83
TCP: Interfaces\{C066AE65-373D-4384-86F0-5A2797A4E4FE}: NameServer = 192.168.0.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
- - - - TOMME GENVEJE FJERNET - - - -
.
HKLM-Run-NvCplDaemon - :RUNDLL32.EXE
HKLM-Run-nwiz - :nwiz.exe
HKLM-Run-NvMediaCenter - :RUNDLL32.EXE
HKLM-Run-QuickTime Task - :c:\programmer\QuickTime\qttask.exe
HKLM-Run-amd_dc_opt - :c:\programmer\AMD\Dual-Core Optimizer\amd_dc_opt.exe
HKLM-Run-SunJavaUpdateSched - :c:\programmer\Fælles filer\Java\Java Update\jusched.exe
HKLM-Run-Adobe Reader Speed Launcher - :c:\programmer\Adobe\Reader 8.0\Reader\Reader_sl.exe
HKLM-Run-Adobe ARM - :c:\programmer\Fælles filer\Adobe\ARM\1.0\AdobeARM.exe
Notify-AtiExtEvent - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-12-04 23:44
Windows 5.1.2600 Service Pack 3 NTFS
.
scanner skjulte processer ... 
.
scanner skjulte autostarter ...
.
scanner skjulte filer ... 
.
scanning gennemført med succes
skjulte filer: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LÅSTE REGISTRERINGS NØGLER ---------------------
.
[HKEY_USERS\S-1-5-21-1004336348-1708537768-854245398-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:9a,9b,ca,5c,bd,1e,9a,b0,62,5e,0e,0f,dc,64,14,91,d1,a2,22,31,91,2d,95,
  2a,f6,46,29,e6,08,ab,ca,76,58,5e,d7,28,ac,6e,53,c5,b7,ce,02,a1,7c,e1,c3,f1,\
"??"=hex:92,5f,c0,34,3e,60,eb,63,e2,21,dd,2d,e2,48,32,12
.
[HKEY_USERS\S-1-5-21-1004336348-1708537768-854245398-1003\Software\SecuROM\License information*]
"datasecu"=hex:45,87,7f,08,c7,dd,ea,1f,15,42,7e,ba,5c,c3,47,7e,2c,f3,df,7b,29,
  14,b9,bd,e3,9c,34,a4,6a,a1,5f,83,4d,45,b9,b5,76,35,ce,f8,28,8c,80,fc,ba,e6,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
--------------------- DLLs startet under kørende Processer ---------------------
.
- - - - - - - > 'explorer.exe'(444)
c:\windows\system32\webcheck.dll
.
------------------------ Andre kørende processer ------------------------
.
c:\programmer\Java\jre6\bin\jqs.exe
c:\programmer\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\nvsvc32.exe
c:\programmer\WUSB54G Wireless-G Adapter\WUSB54G.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Gennemført tid: 2011-12-04  23:53:58 - maskinen blev genstartet
ComboFix-quarantined-files.txt  2011-12-04 22:53
.
Pre-Kørsel: 55.624.663.040 byte ledig
Post-Kørsel: 55.615.877.120 byte ledig
.
- - End Of File - - 379BBF6DEC92F4916DC1887124DF3EEC


*****************************************************************


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 00:29:10, on 05-12-2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Programmer\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Programmer\AVG\AVG2012\avgtray.exe
C:\Programmer\AVG\AVG2012\avgfws.exe
C:\Programmer\AVG\AVG2012\avgwdsvc.exe
C:\Programmer\Java\jre6\bin\jqs.exe
C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Programmer\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\WUSB54G Wireless-G Adapter\WLService.exe
C:\Programmer\WUSB54G Wireless-G Adapter\WUSB54G.exe
C:\Programmer\AVG\AVG2012\AVGIDSAgent.exe
C:\Programmer\AVG\AVG2012\avgnsx.exe
C:\Programmer\AVG\AVG2012\avgemcx.exe
C:\Programmer\AVG\AVG2012\avgcsrvx.exe
C:\Programmer\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmer\AVG\AVG2012\avgssie.dll
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Programmer\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\FLLESF~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ~Disabled
O8 - Extra context menu item: Google Sidewiki ... - res://C:\Programmer\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/da/uno1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C066AE65-373D-4384-86F0-5A2797A4E4FE}: NameServer = 192.168.0.1
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmer\AVG\AVG2012\avgpp.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Programmer\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmer\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmer\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Tjenesten Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmer\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Tjeneste (gupdatem) (gupdatem) - Google Inc. - C:\Programmer\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmer\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NMSAccess - Unknown owner - C:\Programmer\CDBurnerXP\NMSAccessU.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: WUSB54GSVC - GEMTEKS - C:\Programmer\WUSB54G Wireless-G Adapter\WLService.exe

--
End of file - 6272 bytes
Avatar billede f-arn Guru
05. december 2011 - 03:29 #1
Er du sikker på den er bergnet til XP?
Avatar billede targa55 Praktikant
05. december 2011 - 22:44 #2
Ups ... Det var en "fejl 40"... Du har fuldstændig ret, den var til Vista.
Fandt den rigtige, og så var problemet løst.

Men vil gerne ha checket logs alligevel, der har nemlig været diverse snavs på maskinen.
Er også lang tid om at starte op.
Avatar billede f-arn Guru
06. december 2011 - 09:02 #3
der har nemlig været diverse snavs på maskinen

Kan du ikke beskrive det lidt nærmere.

Hent og kør DDS

Den laver to logs,(DDS.txt og Attach.txt) gem dem på skrivebordet og kopier indholdet af begge  herind.

OBS - DDS skal gemmes på computeren og ikke køres fra nettet.
Avatar billede targa55 Praktikant
06. december 2011 - 14:13 #4
Kan ikke beskrive det nærmere, grundet at jeg først er kommet ind i billedet senere.....Men der har været noget virus.
Den kører ok nu, er bare lidt længe om at starte op, efter min mening.

Her er logs fra DDS.....

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Yez at 12:10:37 on 2011-12-06
Microsoft Windows XP Professional  5.1.2600.3.1252.45.1030.18.1023.694 [GMT 1:00]
.
AV: AVG Internet Security 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *Enabled*
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Programmer\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\AVG\AVG2012\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
svchost.exe
C:\Programmer\AVG\AVG2012\avgfws.exe
C:\Programmer\AVG\AVG2012\avgwdsvc.exe
C:\Programmer\Java\jre6\bin\jqs.exe
C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Programmer\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Programmer\WUSB54G Wireless-G Adapter\WLService.exe
C:\Programmer\AVG\AVG2012\avgnsx.exe
C:\Programmer\WUSB54G Wireless-G Adapter\WUSB54G.exe
C:\Programmer\AVG\AVG2012\avgemcx.exe
C:\Programmer\AVG\AVG2012\AVGIDSAgent.exe
C:\Programmer\AVG\AVG2012\avgcsrvx.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.dk/
uSearchMigratedDefaultUrl = hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZJ&fl=0&ptb=JO_nlfZBva29ur2HIlZCZQ&url=http://edits.mywebsearch.com/toolbaredits/barsearch.jhtml&st=sb&searchfor={searchTerms}
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\programmer\fælles filer\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\programmer\avg\avg2012\avgssie.dll
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [msnmsgr] :"c:\programmer\windows live\messenger\msnmsgr.exe" /background
mRun: [Malwarebytes' Anti-Malware] :"c:\programmer\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [AVG_TRAY] "c:\programmer\avg\avg2012\avgtray.exe"
mRun: [NvCplDaemon] :RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRun: [DWQueuedReporting] "c:\progra~1\fllesf~1\micros~1\dw\dwtrig20.exe" -t
StartupFolder: c:\docume~1\alluse~1\menuen~1\progra~1\start\~disab~1\adobeg~1.lnk - c:\programmer\fælles filer\adobe\calibration\Adobe Gamma Loader.exe
IE: Google Sidewiki ... - c:\programmer\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programmer\messenger\msmsgs.exe
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - hxxp://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/da/uno1/GAME_UNO1.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
TCP: DhcpNameServer = 193.162.153.164 194.239.134.83
TCP: Interfaces\{1C9FB431-11D9-420E-AB5A-405C0410D39F} : DhcpNameServer = 193.162.153.164 194.239.134.83
TCP: Interfaces\{478114F8-7FC1-4F90-AB0C-7E5E2E8471C9} : DhcpNameServer = 192.168.0.1
TCP: Interfaces\{BE4601C3-7618-409D-A344-04708EB82C67} : DhcpNameServer = 192.168.0.1
TCP: Interfaces\{C066AE65-373D-4384-86F0-5A2797A4E4FE} : NameServer = 192.168.0.1
TCP: Interfaces\{FB2949D9-7008-4561-AC72-043A19706DE2} : DhcpNameServer = 192.168.0.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\programmer\avg\avg2012\avgpp.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-7-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-9-13 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-10-7 230608]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-8-8 40016]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-7-11 295248]
R2 avgfws;AVG Firewall;c:\programmer\avg\avg2012\avgfws.exe [2011-10-24 2398512]
R2 AVGIDSAgent;AVGIDSAgent;c:\programmer\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog;c:\programmer\avg\avg2012\avgwdsvc.exe [2011-8-2 192776]
R2 MBAMService;MBAMService;c:\programmer\malwarebytes' anti-malware\mbamservice.exe [2011-12-4 366152]
R2 WUSB54GSVC;WUSB54GSVC;c:\programmer\wusb54g wireless-g adapter\WLService.exe [2010-2-8 41027]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2011-5-23 30944]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-7-11 134608]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-7-11 24272]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-10-4 16720]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-12-4 22216]
S2 gupdate;Tjenesten Google Update (gupdate);c:\programmer\google\update\GoogleUpdate.exe [2010-3-8 135664]
S2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\windows\system32\drivers\nvtvsnd.sys --> c:\windows\system32\drivers\nvtvsnd.sys [?]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2011-5-23 30944]
S3 gupdatem;Google Update Tjeneste (gupdatem);c:\programmer\google\update\GoogleUpdate.exe [2010-3-8 135664]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 rt70x86;%WUSB54Gv4.Service.DispName%;c:\windows\system32\drivers\netr70.sys [2006-12-29 243200]
S4 Msfvsc0pi;Msfvsc0pi; [x]
.
=============== Created Last 30 ================
.
2011-12-05 16:06:35    --------    d-----w-    c:\programmer\Microsoft
2011-12-05 16:06:22    --------    d-----w-    c:\programmer\Windows Live SkyDrive
2011-12-04 22:25:40    98816    ----a-w-    c:\windows\sed.exe
2011-12-04 22:25:40    518144    ----a-w-    c:\windows\SWREG.exe
2011-12-04 22:25:40    256000    ----a-w-    c:\windows\PEV.exe
2011-12-04 22:25:40    208896    ----a-w-    c:\windows\MBR.exe
2011-12-04 22:20:32    --------    d-sh--w-    c:\documents and settings\yez\IECompatCache
2011-12-04 01:54:22    388096    ----a-r-    c:\documents and settings\yez\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-12-04 01:46:48    22216    ----a-w-    c:\windows\system32\drivers\mbam.sys
2011-12-04 01:46:47    --------    d-----w-    c:\programmer\Malwarebytes' Anti-Malware
2011-12-01 00:11:16    --------    d-sh--w-    c:\documents and settings\yez\PrivacIE
2011-12-01 00:07:45    --------    d-sh--w-    c:\documents and settings\yez\IETldCache
2011-11-30 23:58:12    --------    d-----w-    c:\windows\ie8updates
2011-11-30 23:51:59    --------    dc-h--w-    c:\windows\ie8
2011-11-30 23:46:39    4927864    ----a-w-    c:\programmer\fælles filer\windows live\.cache\4e1f49501ccafba\Silverlight.2.0.exe
2011-11-30 23:43:41    --------    d-----w-    c:\programmer\fælles filer\Windows Live
2011-11-30 23:30:35    6144    -c----w-    c:\windows\system32\dllcache\iecompat.dll
2011-11-30 23:29:16    247808    -c----w-    c:\windows\system32\dllcache\ieproxy.dll
2011-11-30 23:29:16    12800    -c----w-    c:\windows\system32\dllcache\xpshims.dll
2011-11-30 23:29:15    743424    -c----w-    c:\windows\system32\dllcache\iedvtool.dll
2011-11-22 00:26:50    --------    d-----w-    c:\windows\system32\drivers\nss\0207030.022
2011-11-22 00:26:50    --------    d-----w-    c:\windows\system32\drivers\NSS
2011-11-22 00:26:50    --------    d-----w-    c:\documents and settings\all users\application data\Symantec
2011-11-22 00:26:50    --------    d-----w-    c:\documents and settings\all users\application data\Norton
2011-11-22 00:26:37    --------    d-----w-    c:\documents and settings\all users\application data\NortonInstaller
2011-11-09 23:54:41    --------    d-----w-    c:\programmer\TimeTool
2011-11-09 18:25:18    --------    d-----w-    c:\documents and settings\yez\application data\AVG
2011-11-08 23:45:45    --------    d-----w-    c:\programmer\Trend Micro
2011-11-08 22:46:55    --------    d-----w-    c:\programmer\VS Revo Group
2011-11-08 22:45:52    --------    d-----w-    c:\documents and settings\yez\application data\Malwarebytes
2011-11-08 22:44:36    --------    d-----w-    c:\documents and settings\all users\application data\Malwarebytes
2011-11-07 15:48:38    --------    d-----w-    c:\documents and settings\yez\application data\AVG2012
2011-11-07 15:42:45    --------    d-----w-    c:\windows\system32\drivers\AVG
2011-11-07 15:42:45    --------    d-----w-    c:\documents and settings\all users\application data\AVG2012
2011-11-07 15:24:27    --------    d-----w-    c:\documents and settings\all users\application data\MFAData
.
==================== Find3M  ====================
.
2011-11-24 23:54:23    414368    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-30 20:43:59    1409    ----a-w-    c:\windows\QTFont.for
2011-10-10 14:22:51    692736    ----a-w-    c:\windows\system32\inetcomm.dll
2011-10-07 05:23:48    230608    ----a-w-    c:\windows\system32\drivers\avgldx86.sys
2011-10-04 05:21:42    16720    ----a-w-    c:\windows\system32\drivers\AVGIDSShim.sys
2011-10-03 04:06:03    472808    ----a-w-    c:\windows\system32\deployJava1.dll
2011-10-03 01:37:52    73728    ----a-w-    c:\windows\system32\javacpl.cpl
2011-09-28 07:06:47    602112    ----a-w-    c:\windows\system32\crypt32.dll
2011-09-26 10:41:36    613376    ----a-w-    c:\windows\system32\uiautomationcore.dll
2011-09-26 10:41:36    21504    ----a-w-    c:\windows\system32\oleaccrc.dll
2011-09-26 10:41:20    220160    ----a-w-    c:\windows\system32\oleacc.dll
2011-09-13 05:30:10    32592    ----a-w-    c:\windows\system32\drivers\avgrkx86.sys
.
============= FINISH: 12:12:22,65 ===============



        ******************************************


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 24-03-2007 17:50:36
System Uptime: 06-12-2011 11:57:27 (1 hours ago)
.
Motherboard: Dell Computer Corporation |  | Precision 330               
Processor:              Intel(R) Pentium(R) 4 CPU 1400MHz | Microprocessor | 1395/100mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 75 GiB total, 51,059 GiB free.
D: is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1: 04-12-2011 23:25:30 - Systemkontrolpunkt
RP2: 05-12-2011 00:02:51 - AVG 2012 installeret.
RP3: 05-12-2011 00:05:26 - AVG 2012 installeret.
.
==== Installed Programs ======================
.
802.11g Wireless LAN
802.11g Wireless LAN Adapter
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Photoshop CS
Adobe Reader 8.3.1 - Dansk
Adobe Shockwave Player 11.6
AVG 2012
CCleaner
CDBurnerXP
Defraggler
DNA
Dual-Core Optimizer
EA Download Manager
FastStone Image Viewer 3.9
Google Chrome
Google Update Helper
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB976002-v5)
Hotfix til Windows XP (KB2570791)
Hotfix til Windows XP (KB952287)
Hotfix til Windows XP (KB961118)
Hotfix til Windows XP (KB981793)
HTC Driver
HTC Sync
J2SE Runtime Environment 5.0 Update 3
Java Auto Updater
Java(TM) 6 Update 29
Junk Mail filter update
Linksys Wireless-G USB Network Adapter
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Windows Journal Viewer
Microsoft WSE 3.0 Runtime
MSVCRT
MSXML 6 Service Pack 2 (KB973686)
NVIDIA Drivers
NVIDIA PhysX v8.10.29
Opdatering til Windows Internet Explorer 8 (KB2598845)
Opdatering til Windows XP (KB2345886)
Opdatering til Windows XP (KB2467659)
Opdatering til Windows XP (KB2541763)
Opdatering til Windows XP (KB2616676-v2)
Opdatering til Windows XP (KB2641690)
Opdatering til Windows XP (KB951978)
Opdatering til Windows XP (KB955759)
Opdatering til Windows XP (KB961503)
Opdatering til Windows XP (KB967715)
Opdatering til Windows XP (KB968389)
Opdatering til Windows XP (KB971029)
Opdatering til Windows XP (KB971737)
Opdatering til Windows XP (KB973687)
Opdatering til Windows XP (KB973815)
Overførselsværktøj til Windows Live
Pando Media Booster
QuickTime
Revo Uninstaller 1.93
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Segoe UI
Sikkerhedsopdatering til Microsoft Windows (KB2564958)
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB2544521)
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB2586448)
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB938127-v2)
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB982381)
Sikkerhedsopdatering til Windows Internet Explorer 8 (KB2510531)
Sikkerhedsopdatering til Windows Internet Explorer 8 (KB2544521)
Sikkerhedsopdatering til Windows Internet Explorer 8 (KB2586448)
Sikkerhedsopdatering til Windows Internet Explorer 8 (KB982381)
Sikkerhedsopdatering til Windows Media Player (KB2378111)
Sikkerhedsopdatering til Windows Media Player (KB952069)
Sikkerhedsopdatering til Windows Media Player (KB954155)
Sikkerhedsopdatering til Windows Media Player (KB973540)
Sikkerhedsopdatering til Windows Media Player (KB975558)
Sikkerhedsopdatering til Windows Media Player (KB978695)
Sikkerhedsopdatering til Windows Media Player (KB979402)
Sikkerhedsopdatering til Windows XP (KB2079403)
Sikkerhedsopdatering til Windows XP (KB2115168)
Sikkerhedsopdatering til Windows XP (KB2229593)
Sikkerhedsopdatering til Windows XP (KB2296011)
Sikkerhedsopdatering til Windows XP (KB2347290)
Sikkerhedsopdatering til Windows XP (KB2360937)
Sikkerhedsopdatering til Windows XP (KB2387149)
Sikkerhedsopdatering til Windows XP (KB2393802)
Sikkerhedsopdatering til Windows XP (KB2412687)
Sikkerhedsopdatering til Windows XP (KB2419632)
Sikkerhedsopdatering til Windows XP (KB2423089)
Sikkerhedsopdatering til Windows XP (KB2440591)
Sikkerhedsopdatering til Windows XP (KB2443105)
Sikkerhedsopdatering til Windows XP (KB2476490)
Sikkerhedsopdatering til Windows XP (KB2478960)
Sikkerhedsopdatering til Windows XP (KB2478971)
Sikkerhedsopdatering til Windows XP (KB2479943)
Sikkerhedsopdatering til Windows XP (KB2481109)
Sikkerhedsopdatering til Windows XP (KB2483185)
Sikkerhedsopdatering til Windows XP (KB2485663)
Sikkerhedsopdatering til Windows XP (KB2506212)
Sikkerhedsopdatering til Windows XP (KB2507618)
Sikkerhedsopdatering til Windows XP (KB2507938)
Sikkerhedsopdatering til Windows XP (KB2508272)
Sikkerhedsopdatering til Windows XP (KB2508429)
Sikkerhedsopdatering til Windows XP (KB2509553)
Sikkerhedsopdatering til Windows XP (KB2510581)
Sikkerhedsopdatering til Windows XP (KB2535512)
Sikkerhedsopdatering til Windows XP (KB2536276-v2)
Sikkerhedsopdatering til Windows XP (KB2544893-v2)
Sikkerhedsopdatering til Windows XP (KB2544893)
Sikkerhedsopdatering til Windows XP (KB2562937)
Sikkerhedsopdatering til Windows XP (KB2566454)
Sikkerhedsopdatering til Windows XP (KB2567053)
Sikkerhedsopdatering til Windows XP (KB2567680)
Sikkerhedsopdatering til Windows XP (KB2570222)
Sikkerhedsopdatering til Windows XP (KB2570947)
Sikkerhedsopdatering til Windows XP (KB2592799)
Sikkerhedsopdatering til Windows XP (KB923561)
Sikkerhedsopdatering til Windows XP (KB946648)
Sikkerhedsopdatering til Windows XP (KB950760)
Sikkerhedsopdatering til Windows XP (KB950762)
Sikkerhedsopdatering til Windows XP (KB950974)
Sikkerhedsopdatering til Windows XP (KB951376-v2)
Sikkerhedsopdatering til Windows XP (KB951748)
Sikkerhedsopdatering til Windows XP (KB952004)
Sikkerhedsopdatering til Windows XP (KB952954)
Sikkerhedsopdatering til Windows XP (KB955069)
Sikkerhedsopdatering til Windows XP (KB956572)
Sikkerhedsopdatering til Windows XP (KB956744)
Sikkerhedsopdatering til Windows XP (KB956802)
Sikkerhedsopdatering til Windows XP (KB956803)
Sikkerhedsopdatering til Windows XP (KB956844)
Sikkerhedsopdatering til Windows XP (KB958644)
Sikkerhedsopdatering til Windows XP (KB958869)
Sikkerhedsopdatering til Windows XP (KB959426)
Sikkerhedsopdatering til Windows XP (KB960225)
Sikkerhedsopdatering til Windows XP (KB960803)
Sikkerhedsopdatering til Windows XP (KB960859)
Sikkerhedsopdatering til Windows XP (KB961501)
Sikkerhedsopdatering til Windows XP (KB969059)
Sikkerhedsopdatering til Windows XP (KB970238)
Sikkerhedsopdatering til Windows XP (KB970430)
Sikkerhedsopdatering til Windows XP (KB971468)
Sikkerhedsopdatering til Windows XP (KB971657)
Sikkerhedsopdatering til Windows XP (KB971961)
Sikkerhedsopdatering til Windows XP (KB972270)
Sikkerhedsopdatering til Windows XP (KB973507)
Sikkerhedsopdatering til Windows XP (KB973869)
Sikkerhedsopdatering til Windows XP (KB973904)
Sikkerhedsopdatering til Windows XP (KB974112)
Sikkerhedsopdatering til Windows XP (KB974318)
Sikkerhedsopdatering til Windows XP (KB974392)
Sikkerhedsopdatering til Windows XP (KB974571)
Sikkerhedsopdatering til Windows XP (KB975025)
Sikkerhedsopdatering til Windows XP (KB975467)
Sikkerhedsopdatering til Windows XP (KB975560)
Sikkerhedsopdatering til Windows XP (KB975561)
Sikkerhedsopdatering til Windows XP (KB975562)
Sikkerhedsopdatering til Windows XP (KB975713)
Sikkerhedsopdatering til Windows XP (KB977816)
Sikkerhedsopdatering til Windows XP (KB977914)
Sikkerhedsopdatering til Windows XP (KB978037)
Sikkerhedsopdatering til Windows XP (KB978338)
Sikkerhedsopdatering til Windows XP (KB978542)
Sikkerhedsopdatering til Windows XP (KB978601)
Sikkerhedsopdatering til Windows XP (KB978706)
Sikkerhedsopdatering til Windows XP (KB979309)
Sikkerhedsopdatering til Windows XP (KB979482)
Sikkerhedsopdatering til Windows XP (KB979559)
Sikkerhedsopdatering til Windows XP (KB979683)
Sikkerhedsopdatering til Windows XP (KB979687)
Sikkerhedsopdatering til Windows XP (KB980195)
Sikkerhedsopdatering til Windows XP (KB980218)
Sikkerhedsopdatering til Windows XP (KB980232)
Sikkerhedsopdatering til Windows XP (KB980436)
Sikkerhedsopdatering til Windows XP (KB981322)
Sikkerhedsopdatering til Windows XP (KB981349)
Sikkerhedsopdatering til Windows XP (KB981997)
Sikkerhedsopdatering til Windows XP (KB982132)
Sikkerhedsopdatering til Windows XP (KB982381)
Sikkerhedsopdatering til Windows XP (KB982665)
Star Wars Jedi Knight Jedi Academy
Stone's TimeTool 3.0.1
swMSM
Tilmeldingsassistent til Windows Live
Unity Web Player
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VLC media player 1.0.2
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Imaging Component
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows XP Service Pack 3
.
==== End Of File ===========================
Avatar billede f-arn Guru
06. december 2011 - 21:48 #5
Du bør Afinstallere Malwarebytes, når du bruger AVG Internet Security.

Der er ikke tegn på aktiv Malware.

Jeg er ikke sikker, men jeg tror 1GB Ram er for lidt, når du bruger AVG Internet Security.
Avatar billede targa55 Praktikant
07. december 2011 - 00:06 #6
AVG er bare en prøve vertion,mener det er Avast der kommer på senere.
Siger tak for din hjælp ..... læg et svar så du kan få dine point.
Avatar billede f-arn Guru
07. december 2011 - 05:51 #7
Klik start, kør og kopier dette ind: combofix /uninstall
Tryk enter
Det vil fjerne Combofix og nulstille urets indstillinger.
Nulstille systemgendannelsen.
Skjule filtypenavne hvis det kræves.
Skjule System/skjulte filer hvis det kræves.
Avatar billede targa55 Praktikant
08. december 2011 - 00:52 #8
ok.. det er hermed gjort.
Tak for hjælpen............
Avatar billede f-arn Guru
08. december 2011 - 08:54 #9
Velbekomme.
Avatar billede targa55 Praktikant
20. december 2011 - 01:34 #10
Ups .... Sorry, fik aldrig givet dig dine velfortjente point.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester