Avatar billede tgs Nybegynder
26. september 2004 - 10:45 Der er 18 kommentarer og
2 løsninger

Er det spyware ?

Jeg har følgende problemer :

1. Når jeg går ind i kontrolpanel (det sker ikke kun her - men her ved jeg det sker hver gang), får jeg en fejlmeddelelsen "Explorer har udført en ulovlig handling og afsluttes" - når jeg siger luk kommer jeg så ind i kontrolpanelet ?
2. Når jeg starter computeren op, får jeg at vide jeg mangler en eztext.dll fil - hvad hører den til ?
3. Og det sidste - når jeg vil genstarte computeren sker der en alvorlig undtagelse på en adresse og jeg bliver efterfølgende nødt til at slukke på kontakten ?

Jeg har kørt escan+adaware+spybot og her er min logfil (hvis den kan bruges til noget :

Logfile of HijackThis v1.97.7
Scan saved at 10:45:42, on 26-09-04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\CSAFE\AUTOCHK.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAMMER\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\PROGRAMMER\FæLLES FILER\SHUTTL~1\LEDTRAY.EXE
C:\PROGRAMMER\FæLLES FILER\SHUTTL~1\ICONFIG.EXE
C:\PROGRAMMER\LOGITECH\ITOUCH\ITOUCH.EXE
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\WINDOWS\SHUTDOWNAWARE.EXE
C:\WINDOWS\SDISKMON.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\VPTRAY.EXE
C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
C:\PROGRAMMER\WEB_REBATES\WEBREBATES0.EXE
C:\PROGRAMMER\FæLLES FILER\ADAPTEC SHARED\CREATECD\CREATECD50.EXE
C:\PROGRAMMER\MICROSOFT ACTIVESYNC\WCESCOMM.EXE
C:\PROGRAM FILES\WINDOWS SYNCROAD\WINSYNC.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAMMER\WEB_REBATES\WEBREBATES1.EXE
C:\stofa\STOFANET.EXE
C:\WINDOWS\SYSTEM\WSASRV.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SKRIVEBORD\SCANNEPROGRAMMER\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aktienyt.dk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = Cache-hors.stofanet.dk:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEINT.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ConfigSafe] C:\CSAFE\AUTOCHK.EXE
O4 - HKLM\..\Run: [AEZBProc] c:\ibmtools\aptezbtn\aptezbp.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\SYSTEM\QTTASK.EXE
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmer\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LEDTRAY.EXE] C:\PROGRA~1\FæLLES~1\SHUTTL~1\LEDTRAY.EXE
O4 - HKLM\..\Run: [ICONFIG.EXE] C:\PROGRA~1\FæLLES~1\SHUTTL~1\ICONFIG.EXE "Software\Shuttle Technology\epmmc9x\MMC"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [shutdownaware] C:\WINDOWS\shutdownaware.exe
O4 - HKLM\..\Run: [SDiskDaemon] C:\WINDOWS\sdiskmon.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Windows SyncroAd] C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
O4 - HKLM\..\Run: [WebRebates0] "C:\PROGRAMMER\WEB_REBATES\WebRebates0.exe"
O4 - HKLM\..\Run: [CreateCD50] C:\PROGRA~1\FÆLLES~1\ADAPTE~1\CREATECD\CREATE~1.EXE -r
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\SYMANT~1\SYMANT~1\rtvscn95.exe
O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\SYMANT~1\SYMANT~1\defwatch.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRAMMER\MICROSOFT ACTIVESYNC\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Star Downloader Free] C:\PROGRAMMER\STAR DOWNLOADER\STARDOWN.EXE
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRAMMER\STAR DOWNLOADER\sdie.htm
O8 - Extra context menu item: Web Rebates - file://C:\PROGRAMMER\WEB_REBATES\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Create Mobile Favorite (HKLM)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... (HKLM)
O12 - Plugin for .prp: C:\PROGRA~1\INTERN~1\PLUGINS\npopal32.dll
O12 - Plugin for .ivr: C:\PROGRA~1\INTERN~1\PLUGINS\NPRVRT32.dll
O16 - DPF: {25F5AA75-B6D8-11CF-B348-00002422759D} (DataPoolSV10.CDataPool) - file://G:\win32\EBankWeb\Software\dpserver.CAB
O16 - DPF: {CF48D854-EC79-11D0-9EDC-00A0245DA6F6} (OfcCtl Class) - http://195.184.35.91/homebanking/Software/Ofx.cab
O16 - DPF: {47FCD744-28E2-11D1-A13A-000024601F43} (EB_CommonUtilities.Common1) - http://195.184.35.91/homebanking/Software/EB_CommonUtilities.CAB
O16 - DPF: {0B4A9EB4-332F-11D1-BEA2-00A0245DA6F8} (FitCrypto Class) - file://G:\win32\EBankWeb\Software\FitSecure.cab
O16 - DPF: {E5CAA475-5F45-11D1-8064-A01A01C10000} (EBPrintSupport.HtmlTemplate) - file://G:\win32\EBankWeb\Software\EBPrintSupport.CAB
O16 - DPF: {3C4C2F07-5F6F-11D2-A525-00A024651F92} (EB_System.CData) - file://G:\win32\EBankWeb\Software\BDRTL.CAB
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {E89366AF-2E44-11D1-91AE-006097D602F7} (FileAccess Control) - http://www45.visto.com/static/activex/vfile07.dll
O16 - DPF: {0D6451B3-FDDA-11D3-BFEC-00D0B725EB0B} (Yahoo! Vision) - http://download.yahoo.com/dl/fv/yv.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibpib100.cab
O16 - DPF: {CE00B72E-986F-11D3-BC3C-E29223000000} (ZLibCls Class) - http://hb.bgbank.dk/ebankweb/Software/FitZip.cab
O16 - DPF: {F6A56D95-A3A3-11D2-AC26-400000058481} (Danske e-Sec) - https://netbank.bgbank.dk/bgnetbank/activex/DanskeSikker.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1320ib100.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.axis.com/products/camera_servers/AxisCamControl.ocx
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1400ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1401ib100.cab
O16 - DPF: {59B18099-4C1D-4A08-A9F7-ED0554006749} (Select Class) - http://foto.jubii.dk/components/photoupload.ocx
O16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) - http://130.228.2.107/speedtest/SpeedTest_2.cab
O16 - DPF: {0A7F4407-A1C8-496A-9670-F13370CAAACC} (SysReg_DK Control) - http://130.228.2.107/system/SysREG_DK.cab
O16 - DPF: {E36C5562-C4E0-4220-BCB2-1C671E3A5916} (Seagate SeaTools Online) - http://www.seagate.com/support/seatools/online/bin/npSeaTools.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00617BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1700ib100.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37864.3212384259
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00618BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1800ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00619BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1900ib100.cab
O16 - DPF: Nordea Online investering - https://www.onlineinvestering.nordea.dk/oiclient.nsf/files/client/$FILE/oiclient.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
O16 - DPF: {7AEBACC1-D7E4-4360-B520-6DA4C565B42C} (UploaderCtrl Class) - http://www.fotoalbum.politiken.dk/upload-classes/Uploader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey®) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www.pc.ibm.com/egather/IbmEgath.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) - https://netbank.bgbank.dk/html/activex/BG/Menu.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {AABB591F-CEB3-404A-A979-AA30B16CB914} (IPLabs Image Uploader 2.5) - http://asp03.photoprintit.de/microsite/10023/defaults/activex/ImageUploader2.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=6e1d88da1d51f77eb132c045609b1ae19eccee9501ea2f8c7ea680e2ea5f44e6b494207f4a6203b2fac449861db710ff31f38429d6f232227b2a5905c689:24515e734f677cac594f3fdc891b75c6
Avatar billede arlet Juniormester
26. september 2004 - 10:46 #1
Hent lige nyeste version af hijackthis(1.98.2) herfra:
http://www.arlet.dk/hjt.exe
og lav en ny log
Avatar billede tgs Nybegynder
26. september 2004 - 10:47 #2
ok - lige et øjeblik
Avatar billede tgs Nybegynder
26. september 2004 - 10:50 #3
Den er her :

Logfile of HijackThis v1.98.2
Scan saved at 10:51:59, on 26-09-04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\CSAFE\AUTOCHK.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAMMER\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\PROGRAMMER\FæLLES FILER\SHUTTL~1\LEDTRAY.EXE
C:\PROGRAMMER\FæLLES FILER\SHUTTL~1\ICONFIG.EXE
C:\PROGRAMMER\LOGITECH\ITOUCH\ITOUCH.EXE
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\WINDOWS\SHUTDOWNAWARE.EXE
C:\WINDOWS\SDISKMON.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\VPTRAY.EXE
C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
C:\PROGRAMMER\WEB_REBATES\WEBREBATES0.EXE
C:\PROGRAMMER\FæLLES FILER\ADAPTEC SHARED\CREATECD\CREATECD50.EXE
C:\PROGRAMMER\MICROSOFT ACTIVESYNC\WCESCOMM.EXE
C:\PROGRAM FILES\WINDOWS SYNCROAD\WINSYNC.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAMMER\WEB_REBATES\WEBREBATES1.EXE
C:\stofa\STOFANET.EXE
C:\WINDOWS\SYSTEM\WSASRV.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SKRIVEBORD\SCANNEPROGRAMMER\HJT.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aktienyt.dk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = Cache-hors.stofanet.dk:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEINT.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ConfigSafe] C:\CSAFE\AUTOCHK.EXE
O4 - HKLM\..\Run: [AEZBProc] c:\ibmtools\aptezbtn\aptezbp.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\SYSTEM\QTTASK.EXE
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmer\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LEDTRAY.EXE] C:\PROGRA~1\FæLLES~1\SHUTTL~1\LEDTRAY.EXE
O4 - HKLM\..\Run: [ICONFIG.EXE] C:\PROGRA~1\FæLLES~1\SHUTTL~1\ICONFIG.EXE "Software\Shuttle Technology\epmmc9x\MMC"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [shutdownaware] C:\WINDOWS\shutdownaware.exe
O4 - HKLM\..\Run: [SDiskDaemon] C:\WINDOWS\sdiskmon.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Windows SyncroAd] C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
O4 - HKLM\..\Run: [WebRebates0] "C:\PROGRAMMER\WEB_REBATES\WebRebates0.exe"
O4 - HKLM\..\Run: [CreateCD50] C:\PROGRA~1\FÆLLES~1\ADAPTE~1\CREATECD\CREATE~1.EXE -r
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\SYMANT~1\SYMANT~1\rtvscn95.exe
O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\SYMANT~1\SYMANT~1\defwatch.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRAMMER\MICROSOFT ACTIVESYNC\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Star Downloader Free] C:\PROGRAMMER\STAR DOWNLOADER\STARDOWN.EXE
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRAMMER\STAR DOWNLOADER\sdie.htm
O8 - Extra context menu item: Web Rebates - file://C:\PROGRAMMER\WEB_REBATES\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRAMMER\MICROSOFT ACTIVESYNC\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRAMMER\MICROSOFT ACTIVESYNC\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRAMMER\MICROSOFT ACTIVESYNC\INETREPL.DLL
O12 - Plugin for .prp: C:\PROGRA~1\INTERN~1\PLUGINS\npopal32.dll
O12 - Plugin for .ivr: C:\PROGRA~1\INTERN~1\PLUGINS\NPRVRT32.dll
O16 - DPF: {25F5AA75-B6D8-11CF-B348-00002422759D} (DataPoolSV10.CDataPool) - file://G:\win32\EBankWeb\Software\dpserver.CAB
O16 - DPF: {CF48D854-EC79-11D0-9EDC-00A0245DA6F6} (OfcCtl Class) - http://195.184.35.91/homebanking/Software/Ofx.cab
O16 - DPF: {47FCD744-28E2-11D1-A13A-000024601F43} (EB_CommonUtilities.Common1) - http://195.184.35.91/homebanking/Software/EB_CommonUtilities.CAB
O16 - DPF: {0B4A9EB4-332F-11D1-BEA2-00A0245DA6F8} (FitCrypto Class) - file://G:\win32\EBankWeb\Software\FitSecure.cab
O16 - DPF: {E5CAA475-5F45-11D1-8064-A01A01C10000} (EBPrintSupport.HtmlTemplate) - file://G:\win32\EBankWeb\Software\EBPrintSupport.CAB
O16 - DPF: {3C4C2F07-5F6F-11D2-A525-00A024651F92} (EB_System.CData) - file://G:\win32\EBankWeb\Software\BDRTL.CAB
O16 - DPF: {E89366AF-2E44-11D1-91AE-006097D602F7} (FileAccess Control) - http://www45.visto.com/static/activex/vfile07.dll
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibpib100.cab
O16 - DPF: {CE00B72E-986F-11D3-BC3C-E29223000000} (ZLibCls Class) - http://hb.bgbank.dk/ebankweb/Software/FitZip.cab
O16 - DPF: {F6A56D95-A3A3-11D2-AC26-400000058481} (Danske e-Sec) - https://netbank.bgbank.dk/bgnetbank/activex/DanskeSikker.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1320ib100.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.axis.com/products/camera_servers/AxisCamControl.ocx
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1400ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1401ib100.cab
O16 - DPF: {59B18099-4C1D-4A08-A9F7-ED0554006749} (Select Class) - http://foto.jubii.dk/components/photoupload.ocx
O16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) - http://130.228.2.107/speedtest/SpeedTest_2.cab
O16 - DPF: {0A7F4407-A1C8-496A-9670-F13370CAAACC} (SysReg_DK Control) - http://130.228.2.107/system/SysREG_DK.cab
O16 - DPF: {E36C5562-C4E0-4220-BCB2-1C671E3A5916} (Seagate SeaTools Online) - http://www.seagate.com/support/seatools/online/bin/npSeaTools.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00617BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1700ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00618BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1800ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00619BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1900ib100.cab
O16 - DPF: Nordea Online investering - https://www.onlineinvestering.nordea.dk/oiclient.nsf/files/client/$FILE/oiclient.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
O16 - DPF: {7AEBACC1-D7E4-4360-B520-6DA4C565B42C} (UploaderCtrl Class) - http://www.fotoalbum.politiken.dk/upload-classes/Uploader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey®) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www.pc.ibm.com/egather/IbmEgath.cab
O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) - https://netbank.bgbank.dk/html/activex/BG/Menu.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {AABB591F-CEB3-404A-A979-AA30B16CB914} (IPLabs Image Uploader 2.5) - http://asp03.photoprintit.de/microsite/10023/defaults/activex/ImageUploader2.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=6e1d88da1d51f77eb132c045609b1ae19eccee9501ea2f8c7ea680e2ea5f44e6b494207f4a6203b2fac449861db710ff31f38429d6f232227b2a5905c689:24515e734f677cac594f3fdc891b75c6
Avatar billede tgs Nybegynder
26. september 2004 - 12:12 #4
Og så lige et tillægsspørgsmål :

Jeg har lige konstateret, at jeg ikke kan bruge æ, ø og å i DOS-navigator 3.55, kan det være pga. den manglende eztext.dll fil ?

Og hvordan løser jeg det ?
Avatar billede tgs Nybegynder
26. september 2004 - 12:52 #5
æ,ø og å spørgsmålet er oprettet særskilt...
Avatar billede tgs Nybegynder
26. september 2004 - 13:51 #6
Andre må også gerne hjælpe :-)
Avatar billede arlet Juniormester
26. september 2004 - 13:51 #7
Måtte ud af døren et par timer, men er nu tilbage*S*

Flyt først filen Hijackthis til en mappe oprettet kun til den.

Du skal nu til at i gang med at fixe:

Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, luk hijackthis igen.
Dobbelttjek, så alt kommer med.

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

O4 - HKLM\..\Run: [Windows SyncroAd] C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE
O4 - HKLM\..\Run: [WebRebates0] "C:\PROGRAMMER\WEB_REBATES\WebRebates0.exe"

O8 - Extra context menu item: Web Rebates - file://C:\PROGRAMMER\WEB_REBATES\Sy1150\Tp1150\scri1150a.htm

O16 - DPF: {E89366AF-2E44-11D1-91AE-006097D602F7} (FileAccess Control) - http://www45.visto.com/static/activex/vfile07.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=6e1d88da1d51f77eb132c045609b1ae19eccee9501ea2f8c7ea680e2ea5f44e6b494207f4a6203b2fac449861db710ff31f38429d6f232227b2a5905c689


Find og slet manuelt i fejlsikret(f8 ved opstart):


C:\PROGRAMMER\WEB_REBATES <- hele mappen
C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE

--------------------------------------------------

Hent og kør ad-aware herfra: http://www.arlet.dk/spywarescanner.htm
slet alt hvad den finder

----------------------------------------------------------

Hent og kør denne scanner fra Kaspersky : http://www.arlet.dk/mwti.htm
Slet alt hvad den finder

----------------------------------------------------------


Derefter genstarter du og sender en ny log herind, for at se om vi har fået den helt ren.
Avatar billede tgs Nybegynder
26. september 2004 - 13:56 #8
tak - det prøver jeg og vender tilbage.
Avatar billede tgs Nybegynder
26. september 2004 - 14:33 #9
Jeg kan ikke slette :
O4 - HKLM\..\Run: [Windows SyncroAd] C:\PROGRAM FILES\WINDOWS SYNCROAD\SYNCROAD.EXE

og hvordan starter jeg op i fejlsikret tilstand, der sker ikke noget med F8 - skal jeg ind i setup-menuen (ctrl+s tror jeg) ?

Hvad gør jeg ?
Avatar billede fromsej Praktikant
26. september 2004 - 14:35 #10
Genstart og hold <Ctrl> nede, så burde du få en menu.
Avatar billede tgs Nybegynder
26. september 2004 - 14:52 #11
Når jeg holder ctrl+s ned for at få en setupmenu bipper computeren bare demonstrativt og fortsætter med at starte op normalt...
Avatar billede fromsej Praktikant
26. september 2004 - 15:04 #12
Find MSdos.sys og tilføj disse tre linier lige under [options]
[Options]
Bootmenu=1 ;Tillader bootmenu.
BootMenuDelay=10 ;Sætter tiden inden windows starter op.
Bootmenudefault=1 ;Når tiden er udløbet starter windows op normalt.

Du skal nok lige højreklikke på MSdos.sys og fjerne fluebenet i skrivebeskyttet.
Avatar billede tgs Nybegynder
26. september 2004 - 18:56 #13
Jeg tror jeg har fået gjort det hele nu.

Nedenfor kommer logfilen til kontrol.

Jeg har dog stadig et af de oprindelige problemer :
3. Når jeg vil genstarte computeren sker der en alvorlig undtagelsesfejl i OE ved 0028:C2A0C212  i VXD CAM_PDR(02) + 00000152 og det aktive program vil blive afsluttet (hvilket program ??!!) og jeg bliver efterfølgende nødt til at slukke på kontakten ?

Til sidst kunne jeg godt tænke mig en opskrift på, hvordan jeg undgår alt det spyware m.v. i fremtiden, for jeg synes næsten ikke jeg foretager mig andet en at rense computeren :-(

logfilen :
Logfile of HijackThis v1.98.2
Scan saved at 18:47:45, on 26-09-04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\CSAFE\AUTOCHK.EXE
C:\IBMTOOLS\APTEZBTN\APTEZBP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAMMER\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\PROGRAMMER\FæLLES FILER\SHUTTL~1\LEDTRAY.EXE
C:\PROGRAMMER\FæLLES FILER\SHUTTL~1\ICONFIG.EXE
C:\PROGRAMMER\LOGITECH\ITOUCH\ITOUCH.EXE
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\WINDOWS\SHUTDOWNAWARE.EXE
C:\WINDOWS\SDISKMON.EXE
C:\PROGRAMMER\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\VPTRAY.EXE
C:\PROGRAMMER\FæLLES FILER\ADAPTEC SHARED\CREATECD\CREATECD50.EXE
C:\PROGRAMMER\MICROSOFT ACTIVESYNC\WCESCOMM.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\stofa\STOFANET.EXE
C:\WINDOWS\SYSTEM\WSASRV.EXE
C:\PROGRAMMER\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SKRIVEBORD\HIJACKTHIS\HJT.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aktienyt.dk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = Cache-hors.stofanet.dk:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEINT.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ConfigSafe] C:\CSAFE\AUTOCHK.EXE
O4 - HKLM\..\Run: [AEZBProc] c:\ibmtools\aptezbtn\aptezbp.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\SYSTEM\QTTASK.EXE
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmer\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LEDTRAY.EXE] C:\PROGRA~1\FæLLES~1\SHUTTL~1\LEDTRAY.EXE
O4 - HKLM\..\Run: [ICONFIG.EXE] C:\PROGRA~1\FæLLES~1\SHUTTL~1\ICONFIG.EXE "Software\Shuttle Technology\epmmc9x\MMC"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [shutdownaware] C:\WINDOWS\shutdownaware.exe
O4 - HKLM\..\Run: [SDiskDaemon] C:\WINDOWS\sdiskmon.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [CreateCD50] C:\PROGRA~1\FÆLLES~1\ADAPTE~1\CREATECD\CREATE~1.EXE -r
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\SYMANT~1\SYMANT~1\rtvscn95.exe
O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\SYMANT~1\SYMANT~1\defwatch.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRAMMER\MICROSOFT ACTIVESYNC\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Star Downloader Free] C:\PROGRAMMER\STAR DOWNLOADER\STARDOWN.EXE
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRAMMER\STAR DOWNLOADER\sdie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRAMMER\MICROSOFT ACTIVESYNC\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRAMMER\MICROSOFT ACTIVESYNC\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRAMMER\MICROSOFT ACTIVESYNC\INETREPL.DLL
O12 - Plugin for .prp: C:\PROGRA~1\INTERN~1\PLUGINS\npopal32.dll
O12 - Plugin for .ivr: C:\PROGRA~1\INTERN~1\PLUGINS\NPRVRT32.dll
O16 - DPF: {25F5AA75-B6D8-11CF-B348-00002422759D} (DataPoolSV10.CDataPool) - file://G:\win32\EBankWeb\Software\dpserver.CAB
O16 - DPF: {CF48D854-EC79-11D0-9EDC-00A0245DA6F6} (OfcCtl Class) - http://195.184.35.91/homebanking/Software/Ofx.cab
O16 - DPF: {47FCD744-28E2-11D1-A13A-000024601F43} (EB_CommonUtilities.Common1) - http://195.184.35.91/homebanking/Software/EB_CommonUtilities.CAB
O16 - DPF: {0B4A9EB4-332F-11D1-BEA2-00A0245DA6F8} (FitCrypto Class) - file://G:\win32\EBankWeb\Software\FitSecure.cab
O16 - DPF: {E5CAA475-5F45-11D1-8064-A01A01C10000} (EBPrintSupport.HtmlTemplate) - file://G:\win32\EBankWeb\Software\EBPrintSupport.CAB
O16 - DPF: {3C4C2F07-5F6F-11D2-A525-00A024651F92} (EB_System.CData) - file://G:\win32\EBankWeb\Software\BDRTL.CAB
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibpib100.cab
O16 - DPF: {CE00B72E-986F-11D3-BC3C-E29223000000} (ZLibCls Class) - http://hb.bgbank.dk/ebankweb/Software/FitZip.cab
O16 - DPF: {F6A56D95-A3A3-11D2-AC26-400000058481} (Danske e-Sec) - https://netbank.bgbank.dk/bgnetbank/activex/DanskeSikker.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1320ib100.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.axis.com/products/camera_servers/AxisCamControl.ocx
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1400ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1401ib100.cab
O16 - DPF: {59B18099-4C1D-4A08-A9F7-ED0554006749} (Select Class) - http://foto.jubii.dk/components/photoupload.ocx
O16 - DPF: {D3426292-3750-4D80-9D0F-2816F61A6D15} (SpeedTest Control) - http://130.228.2.107/speedtest/SpeedTest_2.cab
O16 - DPF: {0A7F4407-A1C8-496A-9670-F13370CAAACC} (SysReg_DK Control) - http://130.228.2.107/system/SysREG_DK.cab
O16 - DPF: {E36C5562-C4E0-4220-BCB2-1C671E3A5916} (Seagate SeaTools Online) - http://www.seagate.com/support/seatools/online/bin/npSeaTools.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00617BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1700ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00618BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1800ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00619BD00001} (Sydbanks NetBank) - https://netbank.sydbank.dk/ssydbankibp1900ib100.cab
O16 - DPF: Nordea Online investering - https://www.onlineinvestering.nordea.dk/oiclient.nsf/files/client/$FILE/oiclient.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
O16 - DPF: {7AEBACC1-D7E4-4360-B520-6DA4C565B42C} (UploaderCtrl Class) - http://www.fotoalbum.politiken.dk/upload-classes/Uploader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey®) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www.pc.ibm.com/egather/IbmEgath.cab
O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) - https://netbank.bgbank.dk/html/activex/BG/Menu.cab
O16 - DPF: {AABB591F-CEB3-404A-A979-AA30B16CB914} (IPLabs Image Uploader 2.5) - http://asp03.photoprintit.de/microsite/10023/defaults/activex/ImageUploader2.cab
Avatar billede fromsej Praktikant
27. september 2004 - 21:59 #14
Så er din log ren.
Vi har skrevet et par artikler om sikkerhed på nettet.
http://www.eksperten.dk/artikler/144
http://www.eksperten.dk/artikler/254
Som minimum anbefaler jeg Spywareguard, Spywareblaster, IE-Spyad og IE Privacy Keeper.
Mvh:
Fromsej/Team Spywarefri.
Avatar billede tgs Nybegynder
27. september 2004 - 23:45 #15
Tak for hjælpen.

Jeg tror jeg har fået installeret de programmer I anbefaler, så jeg håber jeg kan forblive ren :-)

Hvis I lægger et svar kan I dele pointene - håber det er OK.
Avatar billede fromsej Praktikant
28. september 2004 - 22:43 #16
Det er fint med mig, 20 til mig, 40 til Arlet.*S*
Avatar billede arlet Juniormester
30. september 2004 - 19:28 #17
Halvdelen er fint nok med mig...
Avatar billede tgs Nybegynder
02. oktober 2004 - 00:07 #18
30 point til hver :o)
Avatar billede fromsej Praktikant
02. oktober 2004 - 11:38 #19
Tak for point. :o)
Avatar billede arlet Juniormester
02. oktober 2004 - 14:35 #20
Jeg takker også..
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester