Avatar billede mercyful Nybegynder
11. oktober 2004 - 09:19 Der er 10 kommentarer og
1 løsning

WinXP kører meget langsomt..

Hej

Da min computer er blevet extrem langsom ville jeg være meget taknemlig, hvis du/I gider kigge min log igennem for evt. snavs eller andet der hugger energien fra min computer.. Tak

Her er min logfile så:

Logfile of HijackThis v1.98.2
Scan saved at 09:18:34, on 11-10-2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
C:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Dit.exe
C:\Programmer\Medion\PowerCinema\My_TV\Agent.exe
C:\Programmer\Classic PhoneTools\CapFax.EXE
D:\Programmer\Winamp2.77\Winampa.exe
C:\WINDOWS\DitExp.exe
C:\Programmer\Fælles filer\Logitech\QCDriver2\LVCOMS.EXE
C:\Programmer\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\System32\hphmon04.exe
C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmer\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Programmer\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
D:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programmer\Logitech\ImageStudio\LowLight.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Programmer\Internet Explorer\iexplore.exe
D:\Programmer\Programmer\hijackthis.exe
C:\Programmer\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://find.tdconline.dk/msie_google.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tdconline.dk/start
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tdconline.dk/start
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://signon.stofanet.dk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: SuperBar - {2066C060-DBF6-42A9-A6A5-BFC97888EFDD} - C:\Programmer\SuperBar\SuperBar.Dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Agent] C:\Programmer\Medion\PowerCinema\My_TV\Agent.exe
O4 - HKLM\..\Run: [CapFax] C:\Programmer\Classic PhoneTools\CapFax.EXE
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Programmer\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [WinampAgent] "D:\Programmer\Winamp2.77\Winampa.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Programmer\Fælles filer\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programmer\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Programmer\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Programmer\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [MMTray] C:\Programmer\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Programmer\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Programmer\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [LDM] C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tdconline.dk/start
O16 - DPF: {4FCFF034-6F56-4D65-8C31-70D98C475428} (ddm_download.ddm_control) - http://bins.dynamicdesktopmedia.com/cab/ddm_control.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
Avatar billede andersenph Nybegynder
11. oktober 2004 - 12:33 #1
Hejsa

Umiddelbart er der ikke noget "slemt" i din log, men du skal fjerne lidt alligevel.

Start Hijackthis po. Tryk scan. Sæt vinde ud for disse linier:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O3 - Toolbar: SuperBar - {2066C060-DBF6-42A9-A6A5-BFC97888EFDD} - C:\Programmer\SuperBar\SuperBar.Dll (file missing)
O4 - HKLM\..\Run: [MMTray] C:\Programmer\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Programmer\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKCU\..\Run: [LDM] C:\Programmer\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

Luk alle andre programmer ned.
Tryk fix checked.

Genstart og send ny log ind til kontrol.
Avatar billede mercyful Nybegynder
11. oktober 2004 - 13:44 #2
Så er det gjort.

Og her er den nye logfil:

Logfile of HijackThis v1.98.2
Scan saved at 13:48:19, on 11-10-2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Dit.exe
C:\Programmer\Medion\PowerCinema\My_TV\Agent.exe
C:\Programmer\Classic PhoneTools\CapFax.EXE
D:\Programmer\Winamp2.77\Winampa.exe
C:\Programmer\Fælles filer\Logitech\QCDriver2\LVCOMS.EXE
C:\Programmer\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\DitExp.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\System32\hphmon04.exe
C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
D:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Programmer\Logitech\ImageStudio\LowLight.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\Programmer\SpywareGuard\sgmain.exe
D:\Programmer\SpywareGuard\sgbhp.exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\Empty Temp Folders 2.8.3\emprun.exe
D:\Programmer\HijackThis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://find.tdconline.dk/msie_google.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tdconline.dk/start
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tdconline.dk/start
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://signon.stofanet.dk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - D:\Programmer\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Agent] C:\Programmer\Medion\PowerCinema\My_TV\Agent.exe
O4 - HKLM\..\Run: [CapFax] C:\Programmer\Classic PhoneTools\CapFax.EXE
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Programmer\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [WinampAgent] "D:\Programmer\Winamp2.77\Winampa.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Programmer\Fælles filer\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programmer\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Programmer\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Programmer\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Programmer\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: SpywareGuard.lnk = D:\Programmer\SpywareGuard\sgmain.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tdconline.dk/start
O16 - DPF: {4FCFF034-6F56-4D65-8C31-70D98C475428} (ddm_download.ddm_control) - http://bins.dynamicdesktopmedia.com/cab/ddm_control.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
Avatar billede andersenph Nybegynder
11. oktober 2004 - 14:15 #3
Det ser jo meget bedre ud nu.

Hent denne scanner og sæt den til at undersøge alle drev, filer og programmer.
http://www.spywareinfo.dk/download/mwav.exe

Fortæl om du finder noget
Avatar billede mercyful Nybegynder
11. oktober 2004 - 14:18 #4
Ok - vender tilbage om lidt - tak for hjælpen indtil videre. ;o)
Avatar billede mercyful Nybegynder
11. oktober 2004 - 14:27 #5
Den er ikke færdig med at scanne endnu, men programmet kunne dårligt nok nå at starte op før de her dukkede op...


File C:\WINDOWS\system32\HotVideo_dk-uninstall.exe tagged as not-a-virus:RiskWare.Dialer.gen. No Action Taken.

File C:\Documents and Settings\Jimmi\Application Data\Mozilla\Profiles\default\1zw8xnt2.slt\Mail\mail1.stofanet-1.dk\Inbox infected by "I-Worm.Swen" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Jimmi\Application Data\Mozilla\Profiles\default\1zw8xnt2.slt\Mail\mail1.stofanet-1.dk\Junk infected by "I-Worm.Swen" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Jimmi\Application Data\Mozilla\Profiles\default\1zw8xnt2.slt\Mail\mail1.stofanet-1.dk\Trash infected by "I-Worm.Swen" Virus. Action Taken: File Deleted.
Avatar billede andersenph Nybegynder
11. oktober 2004 - 14:35 #6
Den første er en melding om at den har fundet noget der ligner virus, men er det ikke, så det skal du ikke bekymre dig om.

De andre er rapport på at den har fjernet noget virus, så det er godt nok.

De kan godt tage lang tid inden den er færdig med at scanne......
Avatar billede mercyful Nybegynder
11. oktober 2004 - 17:07 #7
Så er den endelig færdig.. og her er hvad den har fundet - 16 ialt.

File C:\WINDOWS\system32\HotVideo_dk-uninstall.exe tagged as not-a-virus:RiskWare.Dialer.gen. No Action Taken.
File C:\Documents and Settings\Jimmi\Application Data\Mozilla\Profiles\default\1zw8xnt2.slt\Mail\mail1.stofanet-1.dk\Inbox infected by "I-Worm.Swen" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Jimmi\Application Data\Mozilla\Profiles\default\1zw8xnt2.slt\Mail\mail1.stofanet-1.dk\Junk infected by "I-Worm.Swen" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Jimmi\Application Data\Mozilla\Profiles\default\1zw8xnt2.slt\Mail\mail1.stofanet-1.dk\Trash infected by "I-Worm.Swen" Virus. Action Taken: File Deleted.
File C:\Programmer\Norton AntiVirus\Quarantine\28B93811.exe infected by "TrojanDownloader.Win32.Realtens.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP259\A0024747.dll infected by "not-a-virus:AdvWare.NewDotNet" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP268\A0029722.dll infected by "TrojanDownloader.Win32.Dyfuca.k" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP268\A0029723.dll infected by "TrojanDownloader.Win32.Dyfuca.j" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP268\A0029724.exe infected by "TrojanDownloader.Win32.IstBar.ap" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP276\A0030720.exe infected by "not-a-virus:AdvWare.TimeSink" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP276\A0030740.exe tagged as not-a-virus:RiskWare.Dialer.gen. No Action Taken.
File C:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP283\A0032353.exe infected by "TrojanDownloader.Win32.Realtens.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\Downloaded Program Files\DDM_CONTROL.OCX infected by "not-a-virus:AdvWare.DynaDesk" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\HotVideo_dk-uninstall.exe tagged as not-a-virus:RiskWare.Dialer.gen. No Action Taken.
File D:\Programmer\Audio\pk263wsp.exe infected by "not-a-virus:AdvWare.TimeSink" Virus. Action Taken: File Renamed.
File D:\System Volume Information\_restore{7095D484-EDA3-4985-B4D6-6ADFDACA0C3D}\RP283\A0032354.exe infected by "not-a-virus:AdvWare.TimeSink" Virus. Action Taken: File Renamed.

Hvordan mener du det ser ud..?
Avatar billede mercyful Nybegynder
11. oktober 2004 - 17:48 #8
Bør jeg ikke fjerne de filer programmet ikke automatisk fjerner..??
Avatar billede andersenph Nybegynder
11. oktober 2004 - 21:32 #9
Jo da.
De skal væk :O)
Start op i fejlsikret tilstand og slet denne:
File C:\WINDOWS\system32\HotVideo_dk-uninstall.exe>>>> slet kun HotVideo_dk-uninstall.exe

Derefter genstarter du.

Efter sådan en tur er det altid en god ide og rydde op i systemgendannelses filerne. Deaktiver systemgendannelse (http://www.spywarefri.dk/virusscannere.htm#alle) - genstart din computer - aktiver systemgendannelse.

Så skulle du være home free
:O)
Avatar billede mercyful Nybegynder
11. oktober 2004 - 23:01 #10
Så er det også blevet klaret... du skal ha´ rigtig mange tak for hjælpen.. ;o)
Dog har det ikke gjort computeren meget hurtigere, men har en mistanke om at det er min nye Norton AntiVirus 2005 der bruger alt computerens energi..

Men ryddet op på computeren fik vi da, og sørme også en stribe virus som det nyeste Norton ikke engang kunne finde... :o(

Men endnu engang tak for hjælpen.... ;o)
Avatar billede andersenph Nybegynder
12. oktober 2004 - 15:25 #11
Det var så lidt og tak for point :O)

Det er korrekt at Norton er "tung".
Der findes andre og "lettere" antivirusprogrammer. De er tilmed gratis.
AVG og Avast for eksempel.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester