Avatar billede svenne182 Nybegynder
08. marts 2004 - 14:29 Der er 14 kommentarer og
1 løsning

Svenne182 HijacThis Log - Hjælp mig

Har fået anbefalet dette program og kørte en scan, men har næsten ingen anelse om hvad jeg ikke skal røre og hvad jeg virkelig skal passe på.

her er min log:

Logfile of HijackThis v1.97.7
Scan saved at 14:26:08, on 08-03-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Programmer\Norton Internet Security\IAMAPP.EXE
C:\WINDOWS\System32\atiptaxx.exe
C:\Programmer\Messenger Plus! 2\MsgPlus.exe
F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgcc32.exe
C:\Programmer\Logitech\Video\LogiTray.exe
F:\Programmer\Lyd, Billede & Video\Nero\InCD\InCD.exe
F:\Programmer\Andre Nyttige\NetLimiter\NetLimiter.exe
C:\Programmer\TGTSoft\StyleXP\StyleXP.exe
F:\Programmer\Diskhealth\IE Privacy Keeper\IEPrivacyKeeper.exe
E:\Programmer\Tweak-XP Pro\transtask.exe
E:\Programmer\Tweak-XP Pro\tranicon.exe
C:\Documents and Settings\Svenne\Application Data\beir.exe
C:\WINDOWS\System32\wnsintsv.exe
C:\WINDOWS\System32\LVComS.exe
F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgserv.exe
F:\Programmer\Diskhealth\Diskeeper Lite\DKService.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\Norton Internet Security\NISUM.EXE
C:\Programmer\Logitech\Video\LowLight.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Norton Internet Security\SymProxySvc.exe
C:\Programmer\Norton Internet Security\NISSERV.EXE
C:\Programmer\Internet Explorer\iexplore.exe
F:\Programmer\Lyd, Billede & Video\Afspillere\Lyd\Winamp\winamp.exe
F:\Programmer\Download Progs\Odc 5.3\oDC.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Svenne\Lokale indstillinger\Temporary Internet Files\Content.IE5\K9YBO1E3\hijackthis[1].exe


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=134272
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=134272
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=134272
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.armsved.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - f:\programmer\andre nyttige\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - F:\Programmer\Diskhealth\IE Privacy Keeper\IEPKbho.dll
O2 - BHO: (no name) - {41353F8B-78CE-48A5-BE44-153ED293D192} - F:\Programmer\Diskhealth\PopupPopper\PopLib.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [iamapp] C:\Programmer\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [CTStartup] C:\Programmer\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [Jet Detection] C:\Programmer\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Programmer\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\Run: [AVG_CC] F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "F:\Programmer\Andre Nyttige\Deamon Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [InCD] F:\Programmer\Lyd, Billede & Video\Nero\InCD\InCD.exe
O4 - HKLM\..\Run: [NetLimiter] F:\Programmer\Andre Nyttige\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [THGuard] "F:\Programmer\Diskhealth\TrojanHunter 3.8\THGuard.exe"
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Programmer\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [STYLEXP] C:\Programmer\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Jet Detection] C:\Programmer\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKCU\..\Run: [IE Privacy Keeper] "F:\Programmer\Diskhealth\IE Privacy Keeper\IEPrivacyKeeper.exe" -stcleanup
O4 - HKCU\..\Run: [TransTask] "E:\Programmer\Tweak-XP Pro\transtask.exe"
O4 - HKCU\..\Run: [TransparentIcons] "E:\Programmer\Tweak-XP Pro\tranicon.exe" -ex
O4 - HKCU\..\Run: [Tilc] C:\Documents and Settings\Svenne\Application Data\beir.exe
O4 - HKCU\..\Run: [WNSC] C:\WINDOWS\System32\wnsintsv.exe
O4 - HKCU\..\RunOnce: [PopupPopper Registration] iexplore http://www.bayden.com/register.asp?app=PopupPopper&l=DAN
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Download with &DAP - F:\PROGRA~1\DOWNLO~1\DOWNLO~1\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - F:\PROGRA~1\DOWNLO~1\DOWNLO~1\dapextie2.htm
O9 - Extra button: PopupPopper Kontrol Panel (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Avatar billede arlet Juniormester
08. marts 2004 - 14:30 #1
løber den igennem
Avatar billede arlet Juniormester
08. marts 2004 - 14:31 #2
Der er en variant af coolwebsearch og den kan tages af CWSHredder, som du finder her:
http://www.arlet.dk/cwshredder.htm

genstart og ny log bagefter
Avatar billede svenne182 Nybegynder
08. marts 2004 - 14:40 #3
Ny Log:

Logfile of HijackThis v1.97.7
Scan saved at 14:38:32, on 08-03-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Programmer\Norton Internet Security\IAMAPP.EXE
C:\WINDOWS\System32\atiptaxx.exe
C:\Programmer\Messenger Plus! 2\MsgPlus.exe
F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgcc32.exe
C:\Programmer\Logitech\Video\LogiTray.exe
F:\Programmer\Lyd, Billede & Video\Nero\InCD\InCD.exe
F:\Programmer\Andre Nyttige\NetLimiter\NetLimiter.exe
F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgserv.exe
F:\Programmer\Diskhealth\Diskeeper Lite\DKService.exe
C:\Programmer\TGTSoft\StyleXP\StyleXP.exe
F:\Programmer\Diskhealth\IE Privacy Keeper\IEPrivacyKeeper.exe
E:\Programmer\Tweak-XP Pro\transtask.exe
E:\Programmer\Tweak-XP Pro\tranicon.exe
C:\Documents and Settings\Svenne\Application Data\beir.exe
C:\WINDOWS\System32\wnsintsv.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\LVComS.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Internet Explorer\iexplore.exe
G:\Programmer\DiskHealth\AntiSpyware, Reg Cleaners, TempCleaners, Antivirus, ect\Hijack This.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.armsved.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - f:\programmer\andre nyttige\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - F:\Programmer\Diskhealth\IE Privacy Keeper\IEPKbho.dll
O2 - BHO: (no name) - {41353F8B-78CE-48A5-BE44-153ED293D192} - F:\Programmer\Diskhealth\PopupPopper\PopLib.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [iamapp] C:\Programmer\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [CTStartup] C:\Programmer\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [Jet Detection] C:\Programmer\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Programmer\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\Run: [AVG_CC] F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "F:\Programmer\Andre Nyttige\Deamon Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [InCD] F:\Programmer\Lyd, Billede & Video\Nero\InCD\InCD.exe
O4 - HKLM\..\Run: [NetLimiter] F:\Programmer\Andre Nyttige\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [THGuard] "F:\Programmer\Diskhealth\TrojanHunter 3.8\THGuard.exe"
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Programmer\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [STYLEXP] C:\Programmer\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Jet Detection] C:\Programmer\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKCU\..\Run: [IE Privacy Keeper] "F:\Programmer\Diskhealth\IE Privacy Keeper\IEPrivacyKeeper.exe" -stcleanup
O4 - HKCU\..\Run: [TransTask] "E:\Programmer\Tweak-XP Pro\transtask.exe"
O4 - HKCU\..\Run: [TransparentIcons] "E:\Programmer\Tweak-XP Pro\tranicon.exe" -ex
O4 - HKCU\..\Run: [Tilc] C:\Documents and Settings\Svenne\Application Data\beir.exe
O4 - HKCU\..\Run: [WNSC] C:\WINDOWS\System32\wnsintsv.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Download with &DAP - F:\PROGRA~1\DOWNLO~1\DOWNLO~1\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - F:\PROGRA~1\DOWNLO~1\DOWNLO~1\dapextie2.htm
O9 - Extra button: PopupPopper Kontrol Panel (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Avatar billede svenne182 Nybegynder
08. marts 2004 - 14:41 #4
Nu vil mit Norton Internet Security 2002 ikke aktiveres....?????
Avatar billede arlet Juniormester
08. marts 2004 - 14:50 #5
Det kigger vi på bagefter. Tjekker lige din log igennem
Avatar billede arlet Juniormester
08. marts 2004 - 14:59 #6
Du skal nu til at i gang med at fixe:

Deaktiver systemgendannelse:
http://www.arlet.dk/systemgendannelsen.htm

Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, luk hijackthis igen.
Dobbelttjek, så alt kommer med.



O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKCU\..\Run: [Tilc] C:\Documents and Settings\Svenne\Application Data\beir.exe
O4 - HKCU\..\Run: [WNSC] C:\WINDOWS\System32\wnsintsv.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE

O8 - Extra context menu item: &Download with &DAP - F:\PROGRA~1\DOWNLO~1\DOWNLO~1\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - F:\PROGRA~1\DOWNLO~1\DOWNLO~1\dapextie2.htm



--------------------------------------------------------------------

Åbn en tilfældig mappe, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".

--------------------------------------------------------------------

Find og slet i fejlsikret(f8 ved opstart):


C:\WINDOWS\Updreg.exe
C:\Documents and Settings\Svenne\Application Data\beir.exe
C:\WINDOWS\System32\wnsintsv.exe


Derefter genstarter du og sender en ny log herind, for at se om vi har fået den helt ren.
Først når din log er endelig godkendt, må du aktiver din systemgendannelse igen.
Avatar billede svenne182 Nybegynder
08. marts 2004 - 15:16 #7
Så er

Updreg.exe, beir.exe og wnsintsv.exe slettet

Ny Log:

Logfile of HijackThis v1.97.7
Scan saved at 15:15:37, on 08-03-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Programmer\Norton Internet Security\IAMAPP.EXE
C:\WINDOWS\System32\atiptaxx.exe
C:\Programmer\Messenger Plus! 2\MsgPlus.exe
F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgcc32.exe
C:\Programmer\Logitech\Video\LogiTray.exe
F:\Programmer\Lyd, Billede & Video\Nero\InCD\InCD.exe
F:\Programmer\Andre Nyttige\NetLimiter\NetLimiter.exe
C:\Programmer\TGTSoft\StyleXP\StyleXP.exe
F:\Programmer\Diskhealth\IE Privacy Keeper\IEPrivacyKeeper.exe
C:\WINDOWS\System32\LVComS.exe
E:\Programmer\Tweak-XP Pro\transtask.exe
E:\Programmer\Tweak-XP Pro\tranicon.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgserv.exe
F:\Programmer\Diskhealth\Diskeeper Lite\DKService.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\Internet Explorer\iexplore.exe
G:\Programmer\DiskHealth\AntiSpyware, Reg Cleaners, TempCleaners, Antivirus, ect\Hijack This.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.armsved.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - f:\programmer\andre nyttige\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - F:\Programmer\Diskhealth\IE Privacy Keeper\IEPKbho.dll
O2 - BHO: (no name) - {41353F8B-78CE-48A5-BE44-153ED293D192} - F:\Programmer\Diskhealth\PopupPopper\PopLib.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [iamapp] C:\Programmer\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [CTStartup] C:\Programmer\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [Jet Detection] C:\Programmer\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Programmer\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\Run: [AVG_CC] F:\PROGRA~1\DISKHE~1\AVG6~1.0\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmer\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programmer\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "F:\Programmer\Andre Nyttige\Deamon Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [InCD] F:\Programmer\Lyd, Billede & Video\Nero\InCD\InCD.exe
O4 - HKLM\..\Run: [NetLimiter] F:\Programmer\Andre Nyttige\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [THGuard] "F:\Programmer\Diskhealth\TrojanHunter 3.8\THGuard.exe"
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Programmer\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [STYLEXP] C:\Programmer\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Jet Detection] C:\Programmer\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKCU\..\Run: [IE Privacy Keeper] "F:\Programmer\Diskhealth\IE Privacy Keeper\IEPrivacyKeeper.exe" -stcleanup
O4 - HKCU\..\Run: [TransTask] "E:\Programmer\Tweak-XP Pro\transtask.exe"
O4 - HKCU\..\Run: [TransparentIcons] "E:\Programmer\Tweak-XP Pro\tranicon.exe" -ex
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: PopupPopper Kontrol Panel (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab


Mit Internet Security virker stadig ikke ... :(
Avatar billede arlet Juniormester
08. marts 2004 - 15:18 #8
Så er du ren og kan aktiver din systemgendannelse igen

For at beskytte dig mod snavs har jeg lavet en sikkerhedspakke,
som du kan hente her : www.arlet.dk/pakke.htm


Har du både nis02 antivirus og firewall  og  AVG antivirus ???
Avatar billede svenne182 Nybegynder
08. marts 2004 - 15:22 #9
Af sikkerhedsprogrammer har jeg:

- Norton Anti Virus + IS 2002
- Ad-Aware 6.0 Pro
- SpyBot
- HDCleaner
- AVG 6.0
- IE Privacy Keeper
- Spyware Blaster
- Reg Clean


hvis du hentyder til at is ikke virker hvis jeg også har AVG, vil jeg sige at det har virket lige indtil jeg lavede den der cwshredder
Avatar billede svenne182 Nybegynder
08. marts 2004 - 15:25 #10
Jeg har deaktiveret XPs egen firewall....

betyder det noget at jeg altid har haft Systemgendannelse deaktiveret ?
Avatar billede arlet Juniormester
08. marts 2004 - 15:26 #11
Hmm. Ja, det vil jeg hentyde til, at du ikke må have 2 antivirus programmer på computeren samtidig. De vil konkligte og du risikerer at de bloker for hinanden og slet ikke virker.
Hvad cwshredder har fjernet ved jeg ikke, men det lyder meget mærkeligt og har ikke været ude for det før.

Prøv at reindstaller din norton og se om den kommer til at virke.


Nej, det betyder ikke noget at man altid køre med systemgendannelsen deaktiveret.
Avatar billede svenne182 Nybegynder
08. marts 2004 - 15:35 #12
Okay jeg har installeret SpywareGuard og afinstalleret AVG og er igang med at geninstallere IS....
vender lige tilbage når jeg er klar igen. :)
Avatar billede arlet Juniormester
08. marts 2004 - 15:37 #13
ok
Avatar billede svenne182 Nybegynder
08. marts 2004 - 17:02 #14
Pc'en kører meget hurtigere nu... før havde jeg også et problem med at HD'en larmede når den arbejdede, men det gør den slet ikke mere...

skriv lige noget som et svar :D


Tusind tak for hjælpen!!
Avatar billede arlet Juniormester
08. marts 2004 - 17:41 #15
Så gerne*S*
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester