fil - ikon der ikke kan fjernes fra skrivebord

Har du prøvet i fejlsikret.

http://www.spywarefri.dk/tipsogtricks.htm#dr.delete

... så ka' du jo 'tænke' over hvilket snavs der har placeret filen der ?

Ses vi igen i virus kategorien ?

hvad hedder den, og er det en genvej eller en fil
jeg ville prøve at slette den i fejlsikret tilstand (log på som administrator)
evt skal du overtage ejerskab for den først

http://www.eksperten.dk/spm/580255 ???

majmarken -> har du fornemmelsen af at vi arbejder lidt i samme retning, ja, og jeg kommer længere og længere til at få det hele på plads.
...men mangler lige den her, dr.delete og ligende kan ikke fjerne det !

Prøver den der med fejlsikker, og admin !

Typiske genveje som man ikke selv har placeret på skrivebordet og ikke kan slettes igen kommer tit fra programmer som messenger plus! 3 og P2P software.
Har du sådan noget indstalleret kan du prøve at afinstallere dem så burde det være nok til at den forsinder med i afinstallationen.

Det kan selvfølgelig også være der er snavs på pc'en som sørger for at holde genvejen "aktiv" så den ikke kan slettes.

tror ligesom majsmarken og kalp at der kan være noget skidt
prøv at højreklikke på den. hvis der ikke kommer den normale dialogboks frem men fx kun muligheden for at vælge "delete" ligger der noget skidt der skal fjernes ... i går havde jeg en der lavede det samme, og jeg tror det var wildtangent der lavede det

Jeg har nu prøvet via fejlfri mode, og administrator ...men det er en sejllivet ikon.
Prøvede også om jeg kunne koble den sammen med et program, f.eks. notepad, men det ville den heller ikke.
Jeg er enig i at det er kommet ind som et eller andet snavs.
Men Ad-aware, spybot osv. finder intet, ej heller mit virusprogram.

Jeg havde håbet der var nogle der måske viste hvordan man f.eks. fik den lænket til registreringsdatabasen, for så må man jo ad den vej kunne fjerne den.

Har du prøvet at 'klippe' den og 'indsætte' den i din papirkurv ? Eller 'drag' til papirkurv ?

http://www.downloadportal.dk/showdownload.asp?rid=4212&sp=Hijackthis

Download hijackthis.. scan og kopir den logfil der bliver genereret herind..

Den er STOR:

Logfile of HijackThis v1.98.2
Scan saved at 12:24:12, on 19-01-2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Executive Software\DiskeeperWorkstation\DKService.exe
C:\DMUSB\DMUSBSVC.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
C:\WINDOWS\Explorer.EXE
C:\Norman\Nvc\Bin\Zanda.exe
C:\Programmer\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Programmer\SAP Manage\SAP Business One\LicenseServer\License.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\Tablet.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\NORMAN\Nvc\BIN\nvcoas.exe
C:\NORMAN\Nvc\BIN\nipsvc.exe
C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
C:\NORMAN\Nvc\BIN\NJEEVES.EXE
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\NORMAN\Nvc\BIN\ZLH.EXE
C:\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\DMUSB\DMUSBCLI.exe
C:\NORMAN\Nvc\BIN\NYMSE.EXE
C:\NORMAN\Nvc\BIN\NIP.EXE
C:\DMUSB\DMUSBCTI.exe
C:\NORMAN\Nvc\BIN\cclaw.exe
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
C:\NORMAN\Nvc\BIN\npfmsg2.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\Programmer\Microsoft AntiSpyware\gcasDtServ.exe
C:\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\MacOpener\MacName.exe
C:\Programmer\SAP Manage\SAP Business One\Service Manager\ServerManager.exe
C:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Programmer\Silicon Prairie Software\MemTurbo\memturbo.exe
C:\Programmer\Project1\Soltek_HM.exe
C:\WINDOWS\System32\WISPTIS.EXE
C:\NORMAN\Nvc\BIN\NVCOD.EXE
C:\Programmer\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: IEPlugin Class - {CF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Programmer\Advanced System Optimizer\IEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {5AA06644-BC46-4220-A460-47A6EB47C96D} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MacLicense] "C:\Program Files\MacOpener\MacLic.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\Nvc\BIN\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [DMUSB Client] C:\DMUSB\DMUSBCLI.exe -reg
O4 - HKLM\..\Run: [DMUSB Clicon] C:\DMUSB\DMUSBCTI.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Programmer\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: MemTurbo.lnk = C:\Programmer\Silicon Prairie Software\MemTurbo\memturbo.exe
O4 - Startup: Soltek HM V2.04 (2).LNK = C:\Programmer\Project1\Soltek_HM.exe
O4 - Global Startup: Acrobat-assistenten.lnk = C:\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MacName.lnk = C:\Program Files\MacOpener\MacName.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SAP Business One Service manager.lnk = C:\Programmer\SAP Manage\SAP Business One\Service Manager\ServerManager.exe
O4 - Global Startup: Service Manager.lnk = C:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: Download alle med FlashGet - C:\Programmer\FlashGet\jc_all.htm
O8 - Extra context menu item: Download med FlashGet - C:\Programmer\FlashGet\jc_link.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Decompiler - C:\Programmer\SourceTec\Sothink SWF Decompiler\InternetExplorer.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\PROGRAMMER\VISUALROUTE\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\PROGRAMMER\VISUALROUTE\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - Shdocvw.dll (file missing)
O9 - Extra button: SWFDecompiler - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Programmer\SourceTec\Sothink SWF Decompiler\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Decompiler - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Programmer\SourceTec\Sothink SWF Decompiler\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - (no file) (HKCU)
O12 - Plugin for .asf: C:\PROGRAMMER\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O12 - Plugin for .avi: C:\Programmer\Netscape\Communicator\Program\PLUGINS\npavi32.dll
O12 - Plugin for .IVS: C:\PROGRA~1\INTERN~1\PLUGINS\NPRIFF.DLL
O12 - Plugin for .swt: C:\PROGRAMMER\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npswf32.dll
O16 - DPF: {0075546E-5D3D-11D2-A3E5-0060971304D8} (WTX_Installer Class) - http://www.webtrends.com/Download/Browser/Plugins/WordUtils/v3.5/Microsoft/wtx_setup.dll
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {0D4B9606-1FEF-43B0-B76E-43150B060AEB} (JPEG2000 Decoder ActiveX) - http://www.algovision-luratech.com/download/bin/jp2x.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (IPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=34738&clcid=0x409
O16 - DPF: {19597B66-2CCF-11D4-B6C9-00C0F04E6DA8} (e-Vue MPEG-4 Image) - http://www.e-vue.com/plugins/downloads/mpeg4img.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
O16 - DPF: {36E4E9BC-4D0C-41B4-90C9-37AFDBFAAD3C} (InforbitHelper Class) - http://download.infotriever.com/bin/ifhelper.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1536/52/20011119/qtinstall.info.apple.com/qt503/dk/win/QuickTimeInstaller.exe
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {6717CD4A-6B79-4442-9703-A1ED995124D5} (instctrl Class) - http://download.verisign-grs.com/plug-in/i-navInstCtrl.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://www.toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A590956F-AE99-4419-BB39-3C721276C625} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-0504.exe
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedContent/sc/bin/cabsa.cab
O16 - DPF: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0) -
O16 - DPF: {D389CF85-6ACD-11D5-8DCA-0020188D446E} (EphoxEditLive2.EditLive) - http://support.dynasite.dk/downloads/editlive/21//editlive20.cab
O16 - DPF: {D94D151A-2B8F-469B-867E-DFEB0FA5C6BA} (EphoxEditLive3.EditLive) - http://support.dynasite.dk/downloads/editlive/30/editlive3.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.gabs.dk/diginet/XUpload.ocx
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4367/mcfscan.cab
O16 - DPF: {FC25B780-75BE-11CF-8B01-444553540000} (Chart Object) - http://activex.microsoft.com/activex/controls/iexplorer/x86/iechart.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{223479C6-73BA-4A09-AFFC-32396A109A0B}: NameServer = 194.239.134.83,193.162.153.164
O17 - HKLM\System\CCS\Services\Tcpip\..\{4928BBBB-75DC-4E9B-95D1-273D0F2C0C1E}: NameServer = 194.239.134.83,193.162.153.164
O17 - HKLM\System\CCS\Services\Tcpip\..\{7BE6DA3A-0895-4B04-B22B-9C92D7504792}: NameServer = 194.239.134.83,193.162.153.164
O17 - HKLM\System\CCS\Services\Tcpip\..\{8689813E-F677-44E1-BEA2-D53BABA74B67}: NameServer = 194.239.134.83,193.162.153.164

Nogen spørgsmål
er

C:\DMUSB\DMUSBSVC.exe
herfra?
http://www.flenik.com/en/DMUSB/Overview.html

og har du selv lavet denne?
C:\Programmer\Project1\Soltek_HM.exe

Genstart i fejlsikret tilstand

Kør HijackThis, scan og sæt et flueben ud for denne linie - luk øvrige programvinduer - klik "Fix checked":

O3 - Toolbar: (no name) - {5AA06644-BC46-4220-A460-47A6EB47C96D} - (no file)
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O16 - DPF: {0075546E-5D3D-11D2-A3E5-0060971304D8} (WTX_Installer Class) - http://www.webtrends.com/Download/Browser/Plugins/WordUtils/v3.5/Microsoft/wtx_setup.dll
O16 - DPF: {0D4B9606-1FEF-43B0-B76E-43150B060AEB} (JPEG2000 Decoder ActiveX) - http://www.algovision-luratech.com/download/bin/jp2x.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (IPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
O16 - DPF: {36E4E9BC-4D0C-41B4-90C9-37AFDBFAAD3C} (InforbitHelper Class) - http://download.infotriever.com/bin/ifhelper.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1536/52/20011119/qtinstall.info.apple.com/qt503/dk/win/QuickTimeInstaller.exe
O16 - DPF: {6717CD4A-6B79-4442-9703-A1ED995124D5} (instctrl Class) - http://download.verisign-grs.com/plug-in/i-navInstCtrl.cab


genstart normalt og ny log.. så tager jeg det sidste.

Hej kalp -> hermed en ny kørsel

DMUSB ...ja, du har ret, backupsystemmet som skriger om fejl
Soltek_HM ...program til overvågning af bundkort osv.

Men her er den nye, efter at have slette efter dine anvisninger, og kigget godt efter hvad der blev slettet ;-)

Logfile of HijackThis v1.98.2
Scan saved at 09:32:52, on 20-01-2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Executive Software\DiskeeperWorkstation\DKService.exe
C:\DMUSB\DMUSBSVC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
C:\Norman\Nvc\Bin\Zanda.exe
C:\Programmer\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Programmer\SAP Manage\SAP Business One\LicenseServer\License.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\Tablet.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
C:\NORMAN\Nvc\BIN\nvcoas.exe
C:\NORMAN\Nvc\BIN\nipsvc.exe
C:\NORMAN\Nvc\BIN\NJEEVES.EXE
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\NORMAN\Nvc\BIN\ZLH.EXE
C:\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\DMUSB\DMUSBCLI.exe
C:\DMUSB\DMUSBCTI.exe
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\NORMAN\Nvc\BIN\NYMSE.EXE
C:\NORMAN\Nvc\BIN\NIP.EXE
C:\NORMAN\Nvc\BIN\cclaw.exe
C:\NORMAN\Nvc\BIN\npfmsg2.exe
C:\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\MacOpener\MacName.exe
C:\Programmer\SAP Manage\SAP Business One\Service Manager\ServerManager.exe
C:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Programmer\Silicon Prairie Software\MemTurbo\memturbo.exe
C:\Programmer\Project1\Soltek_HM.exe
C:\Programmer\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: IEPlugin Class - {CF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Programmer\Advanced System Optimizer\IEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MacLicense] "C:\Program Files\MacOpener\MacLic.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\Nvc\BIN\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [DMUSB Client] C:\DMUSB\DMUSBCLI.exe -reg
O4 - HKLM\..\Run: [DMUSB Clicon] C:\DMUSB\DMUSBCTI.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: MemTurbo.lnk = C:\Programmer\Silicon Prairie Software\MemTurbo\memturbo.exe
O4 - Startup: Soltek HM V2.04 (2).LNK = C:\Programmer\Project1\Soltek_HM.exe
O4 - Global Startup: Acrobat-assistenten.lnk = C:\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: MacName.lnk = C:\Program Files\MacOpener\MacName.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SAP Business One Service manager.lnk = C:\Programmer\SAP Manage\SAP Business One\Service Manager\ServerManager.exe
O4 - Global Startup: Service Manager.lnk = C:\Programmer\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: Download alle med FlashGet - C:\Programmer\FlashGet\jc_all.htm
O8 - Extra context menu item: Download med FlashGet - C:\Programmer\FlashGet\jc_link.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Decompiler - C:\Programmer\SourceTec\Sothink SWF Decompiler\InternetExplorer.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\PROGRAMMER\VISUALROUTE\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\PROGRAMMER\VISUALROUTE\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - Shdocvw.dll (file missing)
O9 - Extra button: SWFDecompiler - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Programmer\SourceTec\Sothink SWF Decompiler\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Decompiler - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Programmer\SourceTec\Sothink SWF Decompiler\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - (no file) (HKCU)
O12 - Plugin for .asf: C:\PROGRAMMER\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O12 - Plugin for .avi: C:\Programmer\Netscape\Communicator\Program\PLUGINS\npavi32.dll
O12 - Plugin for .IVS: C:\PROGRA~1\INTERN~1\PLUGINS\NPRIFF.DLL
O12 - Plugin for .swt: C:\PROGRAMMER\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npswf32.dll
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=34738&clcid=0x409
O16 - DPF: {19597B66-2CCF-11D4-B6C9-00C0F04E6DA8} (e-Vue MPEG-4 Image) - http://www.e-vue.com/plugins/downloads/mpeg4img.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://www.toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A590956F-AE99-4419-BB39-3C721276C625} (Util Class) - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-0504.exe
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedContent/sc/bin/cabsa.cab
O16 - DPF: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0) -
O16 - DPF: {D389CF85-6ACD-11D5-8DCA-0020188D446E} (EphoxEditLive2.EditLive) - http://support.dynasite.dk/downloads/editlive/21//editlive20.cab
O16 - DPF: {D94D151A-2B8F-469B-867E-DFEB0FA5C6BA} (EphoxEditLive3.EditLive) - http://support.dynasite.dk/downloads/editlive/30/editlive3.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.gabs.dk/diginet/XUpload.ocx
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4367/mcfscan.cab
O16 - DPF: {FC25B780-75BE-11CF-8B01-444553540000} (Chart Object) - http://activex.microsoft.com/activex/controls/iexplorer/x86/iechart.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{223479C6-73BA-4A09-AFFC-32396A109A0B}: NameServer = 194.239.134.83,193.162.153.164
O17 - HKLM\System\CCS\Services\Tcpip\..\{4928BBBB-75DC-4E9B-95D1-273D0F2C0C1E}: NameServer = 194.239.134.83,193.162.153.164
O17 - HKLM\System\CCS\Services\Tcpip\..\{7BE6DA3A-0895-4B04-B22B-9C92D7504792}: NameServer = 194.239.134.83,193.162.153.164
O17 - HKLM\System\CCS\Services\Tcpip\..\{8689813E-F677-44E1-BEA2-D53BABA74B67}: NameServer = 194.239.134.83,193.162.153.164

Download og gem denne scanner på skrivebordet.
http://www.spywareinfo.dk/download/mwav.exe

genstart i fejlsikret tilstand

Klik på mwav.exe som du hentede, programmet pakker sig selv ud og starter.
Sæt flueben i følgende:
Memory, Startup folders, drive, Registry, System folders og Services.
Sæt prik i følgende:
All local drives og Scan all files

Slet alt den finder..


Din log er ren og scanneren er kun hvis du vil sikre dig der ikke er mere virus

har du prøvet at slette iconerne? hvis ikke prøv når du er i fejlsikret tilstand

Det er gjort, men desværre "ikonen" er der stadig.

Jeg tror ikke det har noget med virus eller den slags at gøre, men et eller anden windows-fejl, som I også vil se i mit spørgsmål.

Smid dog lige et svar "kalp" bare for en sikkerheds skyld!!! ;-)

Prøv lige dette:
Gå i fejlsikret tilstand, tast F8 under opstart.

Klik start | kør, skriv cmd og tryk enter.
Skriv så disse kommandoer en efter en og tryk enter.
c:
cd "Documents and settings/All Users/Skrivebord"
dir *.* > c:\fejl.txt

Åbn så en stifinder og dobbeltklik c:\fejl.txt.
Kopier indholdet herind, så vi kan se hvad filnavnet er.

Det giver en endnu bedre forklaring på hvorfor jeg gerne vil have fjernet fra skrivebordet:

09-02-2002  07:28              164 Vivian Silverstone, vivian silvertone nudes, vivian silverstone pictures picture, vivian silverstone pic pics, vivian silverstone naked nudes gallery hardcore free porn stars hot sex pictures xxx video silverstone

Nu kender jeg hende ikke, så det kunne da være at du skulle lade hende blive ? *G*

Genstart igen i fejlsikret tilstand.

Klik start | kør, skriv cmd og tryk enter.
Skriv så disse kommandoer en efter en og tryk enter.
c:
attrib -h -r -s "Documents and settings\All Users\Skrivebord\*vivian*"
del /f "Documents and settings\All Users\Skrivebord\*vivian*"

Forsvandt den ?

Hvis ikke så prøv med disse kommandoer:

attrib -h -r -s "Documents and settings\All Users\Skrivebord\*vivian*.*"
del /f "Documents and settings\All Users\Skrivebord\*vivian*.*"

Jeg kender hende "desværre" heller ikke, men ku' selvfølgelig ikke dy mig for lige at søge på navnet!

Nåh alvor, den skrev "filen kunne ikk findes", men da jeg bagefter skrev del osv. så forsvand den!!!

Du får en kæmpe tak fra mig, smid et svar!

Det har irriteret mig rigtig længe, og så kunne nogle gamle Dos-koder hjælpe!

Tjaa.. Nogle gange er det det simple der får bugt med tingene *s*

Jeg lægger så et svar ..

Takker for point :)