Søg
Avatar billede snowman Nybegynder
12. februar 2005 - 12:11 Der er 18 kommentarer og
2 løsninger

Hijack this log

En af jer der vil checke det her skidt - jeg har scannet med Spybot og derefter med Adaware
Der er slet ingen forbindelse til nettet - på forhaånd tak

Logfile of HijackThis v1.97.7
Scan saved at 12:11:08, on 12-02-05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\PTSNOOP.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMMER\MEDIASCAPE\TOUCH MANAGER\TOUCHMGR.EXE
C:\PROGRAMMER\TEXTBRIDGE CLASSIC 2.0\BIN\INSTANTACCESS.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAMMER\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SNCNTR.EXE
C:\WINDOWS\SYSTEM\SP2CTR.EXE
C:\WINDOWS\SYSTEM\EVTHTM.EXE
C:\AMITECH\ONNOW.EXE
C:\PROGRAM FILES\QEXPT\HLNIRKI.EXE
C:\WINDOWS\SYSTEM\TESZAABN.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\AMITECH\FORTRYD.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SKRIVEBORD\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.opasia.dk/msie_search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jubii.dk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F1 - win.ini: load=ptsnoop.exe
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\NEM220.DLL (file missing)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMER\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Vshwin32EXE] C:\PROGRAMMER\MCAFEE\VSHWIN32.EXE
O4 - HKLM\..\Run: [VsStatEXE] C:\Programmer\McAfee\VSSTAT.EXE /SHOWWARNING
O4 - HKLM\..\Run: [KBD MediaCenter] C:\Programmer\Mediascape\Touch Manager\TouchMgr.exe
O4 - HKLM\..\Run: [Startup] C:\Amitech\Startup /START
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [NAV DefAlert] C:\PROGRA~1\NORTON~1\DEFALERT.EXE
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [Norton eMail Protect] C:\Programmer\Norton AntiVirus\POPROXY.EXE
O4 - HKLM\..\Run: [Members area] c:\Program Files\DiallerProgram\010469.exe -r
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Programmer\MusicMatch\MusicMatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [sncntr] c:\windows\system\sncntr.exe /nocomm
O4 - HKLM\..\Run: [sp2ctr] c:\windows\system\sp2ctr.exe /nocomm
O4 - HKLM\..\Run: [EvtHtm] c:\windows\system\evthtm.exe /nocomm
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
O4 - HKLM\..\Run: [Mattub] C:\PROGRAM FILES\QEXPT\HLNIRKI.EXE
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TESZAABN] c:\windows\system\teszaabn.exe /install
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAMMER\MCAFEE\VSHWIN32.EXE
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Programmer\Fælles filer\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [Grviewex] c:\windows\system\grviewex.exe
O4 - HKLM\..\RunServices: [Mswavedll] c:\windows\system\mswavedll.exe
O4 - HKLM\..\RunServices: [Unldr16] c:\windows\system\unldr16.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibpib100.cab
O16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) - http://fdl.msn.com/public/investor/v9.5/ticker.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD10020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1310ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1320ib100.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1401ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00616BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1600ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD02020} (Nordjyske Banks Netbank) - https://www.nordbank.dk/segnsbanknordibp1502ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00620BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2000ib100.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00625BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2500ib100.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37917.2551041667
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 192.168.1.254
Avatar billede arlet Juniormester
12. februar 2005 - 12:14 #1
tjekker den nu
Avatar billede johnstigers Seniormester
12. februar 2005 - 12:16 #2
Lav lige en scanning med nyeste hijackthis: http://www.arlet.dk/hjt.exe
Avatar billede johnstigers Seniormester
12. februar 2005 - 12:16 #3
arlet> det er din log ;)
Avatar billede arlet Juniormester
12. februar 2005 - 12:19 #4
ok, john..

snowman ->Men rigtigt som john siger, så lav lige en ny log, da det er en gammel version, den du har lagt ind
Avatar billede snowman Nybegynder
12. februar 2005 - 12:22 #5
Her kommer den med den nye scanner

Logfile of HijackThis v1.99.0
Scan saved at 12:28:25, on 12-02-05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\PTSNOOP.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMMER\MEDIASCAPE\TOUCH MANAGER\TOUCHMGR.EXE
C:\PROGRAMMER\TEXTBRIDGE CLASSIC 2.0\BIN\INSTANTACCESS.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAMMER\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SNCNTR.EXE
C:\WINDOWS\SYSTEM\SP2CTR.EXE
C:\WINDOWS\SYSTEM\EVTHTM.EXE
C:\AMITECH\ONNOW.EXE
C:\PROGRAM FILES\QEXPT\HLNIRKI.EXE
C:\WINDOWS\SYSTEM\TESZAABN.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\AMITECH\FORTRYD.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SKRIVEBORD\HJT.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.opasia.dk/msie_search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jubii.dk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F1 - win.ini: load=ptsnoop.exe
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\NEM220.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMER\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Vshwin32EXE] C:\PROGRAMMER\MCAFEE\VSHWIN32.EXE
O4 - HKLM\..\Run: [VsStatEXE] C:\Programmer\McAfee\VSSTAT.EXE /SHOWWARNING
O4 - HKLM\..\Run: [KBD MediaCenter] C:\Programmer\Mediascape\Touch Manager\TouchMgr.exe
O4 - HKLM\..\Run: [Startup] C:\Amitech\Startup /START
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [NAV DefAlert] C:\PROGRA~1\NORTON~1\DEFALERT.EXE
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [Norton eMail Protect] C:\Programmer\Norton AntiVirus\POPROXY.EXE
O4 - HKLM\..\Run: [Members area] c:\Program Files\DiallerProgram\010469.exe -r
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Programmer\MusicMatch\MusicMatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [sncntr] c:\windows\system\sncntr.exe /nocomm
O4 - HKLM\..\Run: [sp2ctr] c:\windows\system\sp2ctr.exe /nocomm
O4 - HKLM\..\Run: [EvtHtm] c:\windows\system\evthtm.exe /nocomm
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
O4 - HKLM\..\Run: [Mattub] C:\PROGRAM FILES\QEXPT\HLNIRKI.EXE
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TESZAABN] c:\windows\system\teszaabn.exe /install
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAMMER\MCAFEE\VSHWIN32.EXE
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Programmer\Fælles filer\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [Grviewex] c:\windows\system\grviewex.exe
O4 - HKLM\..\RunServices: [Mswavedll] c:\windows\system\mswavedll.exe
O4 - HKLM\..\RunServices: [Unldr16] c:\windows\system\unldr16.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibpib100.cab
O16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) - http://fdl.msn.com/public/investor/v9.5/ticker.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD10020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1310ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1320ib100.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1401ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00616BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1600ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD02020} (Nordjyske Banks Netbank) - https://www.nordbank.dk/segnsbanknordibp1502ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00620BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2000ib100.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00625BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2500ib100.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 192.168.1.254
Avatar billede arlet Juniormester
12. februar 2005 - 12:27 #6
Du har både norton og mcafee som antivirusprogram, det er ikke godt. Kun et af dem, det andet skal du afinstaller i tilføj/fjern, inden du går videre..

Du skal nu til at i gang med at fixe:

Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, luk hijackthis igen.
Dobbelttjek, så alt kommer med.


R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\NEM220.DLL (file missing)

O4 - HKLM\..\Run: [Members area] c:\Program Files\DiallerProgram\010469.exe -r
O4 - HKLM\..\Run: [sncntr] c:\windows\system\sncntr.exe /nocomm
O4 - HKLM\..\Run: [sp2ctr] c:\windows\system\sp2ctr.exe /nocomm
O4 - HKLM\..\Run: [EvtHtm] c:\windows\system\evthtm.exe /nocomm
O4 - HKLM\..\Run: [Mattub] C:\PROGRAM FILES\QEXPT\HLNIRKI.EXE
O4 - HKLM\..\Run: [TESZAABN] c:\windows\system\teszaabn.exe /install
O4 - HKLM\..\RunServices: [Grviewex] c:\windows\system\grviewex.exe
O4 - HKLM\..\RunServices: [Mswavedll] c:\windows\system\mswavedll.exe
O4 - HKLM\..\RunServices: [Unldr16] c:\windows\system\unldr16.exe
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab


Find og slet manuelt i fejlsikret(f8 ved opstart):


C:\WINDOWS\SYSTEM\SNCNTR.EXE
C:\WINDOWS\SYSTEM\SP2CTR.EXE
C:\WINDOWS\SYSTEM\EVTHTM.EXE
C:\PROGRAM FILES\QEXPT\HLNIRKI.EXE
C:\WINDOWS\SYSTEM\TESZAABN.EXE
c:\windows\system\grviewex.exe
c:\windows\system\mswavedll.exe
c:\windows\system\unldr16.exe
C:\Programmer\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe


--------------------------------------------------

Hent og kør ad-aware herfra: http://www.arlet.dk/spywarescanner.htm
scan hele computeren og slet alt hvad den finder


----------------------------------------------------------

Hent og kør denne scanner fra Kaspersky : http://www.spywareinfo.dk/download/mwav.exe
Sæt flueben i følgende: Memory, Startup folders, drive, Registry, System folders og Services.
Sæt prik i følgende: All local drives og Scan all files
Og så trykker du på Scan Clean


----------------------------------------------------------


Derefter genstarter du og sender en ny log herind, for at se om vi har fået den helt ren.
Avatar billede snowman Nybegynder
12. februar 2005 - 12:51 #7
Tak for det Arlet - er lige hjemme nu, checker kl. 1600 efter afinstallering, når jeg kommer på arbejde igen
Avatar billede snowman Nybegynder
12. februar 2005 - 16:54 #8
Hej Arlet - Jeg bliver ikke færdig med at scanne med Kaspersky idag, vender tilbage imorgen tidlig
Avatar billede arlet Juniormester
12. februar 2005 - 17:05 #9
Helt i orden..
Avatar billede snowman Nybegynder
14. februar 2005 - 09:20 #10
Så er jeg tilbage - kunne slet ikke komme på Eksperten igår.
Jeg glemte helt fra starten at fortælle at ejeren sagde at den i lang tid har poppet op med (går ud fra det er Norton) Download.Trojan
Jeg har nu fulgt instrukserne, selvom der var nogle linier samt exe filer jeg ikke kunne finde, derimod ca 90 spots samt 58 fjernede virus i Kaspersky, har endvidere kørt CWSCREDDER der fjernede en del.
Jeg kan stadig ikke komme på nettet, men her er den sidste logfil,

Logfile of HijackThis v1.99.0
Scan saved at 07:54:46, on 13-02-05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\PTSNOOP.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMMER\MEDIASCAPE\TOUCH MANAGER\TOUCHMGR.EXE
C:\PROGRAMMER\TEXTBRIDGE CLASSIC 2.0\BIN\INSTANTACCESS.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAMMER\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\AMITECH\ONNOW.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\AMITECH\FORTRYD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SKRIVEBORD\HJT.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
F1 - win.ini: load=C:\WINDOWS\ptsnoop.exe
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMER\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [VsStatEXE] C:\Programmer\McAfee\VSSTAT.EXE /SHOWWARNING
O4 - HKLM\..\Run: [KBD MediaCenter] C:\Programmer\Mediascape\Touch Manager\TouchMgr.exe
O4 - HKLM\..\Run: [Startup] C:\Amitech\Startup /START
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Programmer\MusicMatch\MusicMatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Programmer\Fælles filer\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibpib100.cab
O16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) - http://fdl.msn.com/public/investor/v9.5/ticker.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD10020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1310ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1320ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1401ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00616BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1600ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD02020} (Nordjyske Banks Netbank) - https://www.nordbank.dk/segnsbanknordibp1502ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00620BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2000ib100.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00625BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2500ib100.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 192.168.1.254
Avatar billede snowman Nybegynder
16. februar 2005 - 15:33 #11
Arlet er du stadig til rådighed - Var lige nødt til at rejse i et par dage, sidste log ligger der nu
Avatar billede arlet Juniormester
18. februar 2005 - 15:55 #12
Jeg har været på kursus, derfor den lange svartid..

disse skal lige fikses:
F1 - win.ini: load=C:\WINDOWS\ptsnoop.exe
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 192.168.1.254

genstart og ny log
Avatar billede snowman Nybegynder
18. februar 2005 - 19:06 #13
Jeg har også været væk, og er det i aften til søndag aften, jeg fixer lige dette og vender tilbage med en ny log, kan være det først bliver søndag eller mandag.
Avatar billede arlet Juniormester
18. februar 2005 - 19:08 #14
Helst søndag, da jeg smutter søndag kl 17 igen og hele næste uge..
Avatar billede snowman Nybegynder
18. februar 2005 - 20:00 #15
Her kommer ny log efter fjernelsen af de 2 linier - stadig ikke på nettet

Logfile of HijackThis v1.99.0
Scan saved at 20:04:20, on 18-02-05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMMER\MEDIASCAPE\TOUCH MANAGER\TOUCHMGR.EXE
C:\PROGRAMMER\TEXTBRIDGE CLASSIC 2.0\BIN\INSTANTACCESS.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAMMER\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\PROGRAMMER\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAMMER\MSN MESSENGER\MSNMSGR.EXE
C:\AMITECH\ONNOW.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\AMITECH\FORTRYD.EXE
C:\WINDOWS\SKRIVEBORD\HJT.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMER\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [VsStatEXE] C:\Programmer\McAfee\VSSTAT.EXE /SHOWWARNING
O4 - HKLM\..\Run: [KBD MediaCenter] C:\Programmer\Mediascape\Touch Manager\TouchMgr.exe
O4 - HKLM\..\Run: [Startup] C:\Amitech\Startup /START
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Programmer\MusicMatch\MusicMatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Programmer\Fælles filer\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKCU\..\Run: [MsnMsgr] "c:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00600BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibpib100.cab
O16 - DPF: {DC765522-D5BE-49C9-AF5F-8C715A44BA28} (MS Investor Ticker) - http://fdl.msn.com/public/investor/v9.5/ticker.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD10020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1310ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00613BD20020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1320ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00614BD01020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1401ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00616BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1600ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp1500ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00615BD02020} (Nordjyske Banks Netbank) - https://www.nordbank.dk/segnsbanknordibp1502ib100.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00620BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2000ib100.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {1A8790BD-AEBD-11BD-A2BD-00625BD00020} (Egnsbank Nords Netbank) - https://www.nordbank.dk/segnsbanknordibp2500ib100.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
Avatar billede arlet Juniormester
18. februar 2005 - 20:02 #16
Så er loggen helt ren..

Det er ikke snavs der bloker din netforbindelse..

Er det kabelmodem du har??
Avatar billede snowman Nybegynder
18. februar 2005 - 20:10 #17
Han er på bredbånd så jeg har bare sat til her på arbejde, plejer da ikke at være problemer, jeg mener det er vedkommedes søn der har været på "spil"
Arlet jeg siger tusind tak for din hjælp, kikker lidt på hardwaren
Avatar billede arlet Juniormester
18. februar 2005 - 20:41 #18
Velbekommen..

Og ang hardwarer er ikke rigtigt inde for mit fagområde desværre.

Håber det lykkes for dig..

Fortsat god weekend..
Avatar billede snowman Nybegynder
18. februar 2005 - 22:24 #19
Det var en ret banal ting - Vedkommende havde af en eller anden grund i netværksforbindelser slået tcp/ip adresser til, så et flueben ved søg automatisk - så kørte den igen - Endnu engang tak og også god weekend til dig
Avatar billede arlet Juniormester
18. februar 2005 - 23:10 #20
Jamen så kan du både komme på nettet og har en ren maskine*S*

Husk at lukke her igen, ved at marker mit navn i boksen til venstre og trykke accepter..
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
Se alle it-kurser fra Computerworld Kurser
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.
Se alle it-kurser

Flere spørgsmål fra Windows kategorien

Titel Indlæg Oprettet Seneste aktivitet
oprette et installationsmedie Af Malm i Windows 4 16/09/202618:13 23/09/202617:38
Popup ved opstart Af mort1 i Windows 1 06/09/202611:21 06/09/202611:31
Slet lokal konto Af ErikHg i Windows 9 04/09/202618:50 07/09/202615:51
Dette er ikke en kommerciel session i Windows 11 Af eksmojo i Windows 3 04/09/202613:47 05/09/202622:31
installere windows på separat diskpartition Af Malm i Windows 2 20/08/202614:16 21/08/202622:01
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester

Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
I går 21:29 Vedr. Windows 11 version 26H2 Af ErikHg i Fri debat
I går 18:16 Tømme gammel PC for indhold, kan ikke tændes Af Mai i Andet software
01/1017:41 NVIDIA Geforce GTX 1060 6 GB som "snakker" Af dcedata1977 i Andet hardware
27/0916:43 Nomad Tracking Car Af fleknes i Apps til Android
25/0916:15 Internet forsvinder hele tiden Af TTA i Internetforbindelser
White papers
Flere white papers »