XP pro opstart

Download Ewido
http://shop.element5.com/product.html?productid=531168

Installer og opdater programmet.

Scan din pc.. du må gerne kopire den log den opretter når den er færdig herind til sidst.

Noget kunne tyde på du har FOR mange programmer med i opstarten. Har du kørt diskoprydning - defagmentering. MEN, det er ikke mange oplysninger du giver, går den helt i stå, eller kan du se den arbejder. Skriver den noget på skærmen? Prøv at kommme med lidt flere oplysninger, hvis der er flere, eller gør som kalp anbefaler.

Så har jeg prøvet begge dele, Ewido fandt en del spyware som nu er fjernet. Der er en del kørende processer, som der måske skal rydes op i:

      0: System Process
      4: System Process
    152: C:\Programmer\MSN Messenger\MsnMsgr.Exe
    220: C:\WINDOWS\System32\alg.exe
    272: C:\Programmer\ewido\security suite\ewidoctrl.exe
    388: C:\Programmer\Plaxo\2.2.3.1\InstallStub.exe
    472: C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe
    516: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10RN2.EXE
    668: C:\WINDOWS\system32\spoolsv.exe
    744: C:\PROGRA~1\Ahead\Ahead\data\Xtras\mssysmgr.exe
    784: C:\Programmer\Skype\Phone\Skype.exe
    816: \SystemRoot\System32\smss.exe
    904: C:\Programmer\Norton AntiVirus\navapsvc.exe
    912: C:\PROGRA~1\FLLESF~1\PCSuite\Services\SERVIC~1.EXE
    928: \??\C:\WINDOWS\system32\csrss.exe
    1012: \??\C:\WINDOWS\system32\winlogon.exe
    1060: C:\WINDOWS\system32\services.exe
    1072: C:\WINDOWS\system32\lsass.exe
    1140: C:\WINDOWS\system32\Ati2evxx.exe
    1180: C:\Programmer\ewido\security suite\ewidoguard.exe
    1240: C:\WINDOWS\system32\Ati2evxx.exe
    1256: C:\WINDOWS\system32\svchost.exe
    1312: C:\WINDOWS\system32\svchost.exe
    1372: C:\WINDOWS\Explorer.EXE
    1456: C:\WINDOWS\System32\svchost.exe
    1544: C:\Programmer\ASUS\WLAN Card Utilities\Center.exe
    1556: C:\WINDOWS\system32\svchost.exe
    1564: C:\WINDOWS\system32\RunDll32.exe
    1600: C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
    1632: C:\WINDOWS\system32\svchost.exe
    1672: C:\Programmer\Microsoft IntelliType Pro\type32.exe
    1684: C:\Programmer\Microsoft IntelliPoint\point32.exe
    1720: C:\WINDOWS\ATKKBService.exe
    1736: C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
    1768: C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
    1776: C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
    1824: C:\Programmer\D-Tools\daemon.exe
    1848: C:\WINDOWS\system32\svchost.exe
    1892: C:\Programmer\iTunes\iTunesHelper.exe
    1900: C:\Programmer\TRUST\Bluetooth Software\bin\btwdins.exe
    1904: C:\Programmer\QuickTime\qttask.exe
    1956: C:\WINDOWS\system32\rundll32.exe
    1964: C:\Programmer\Nokia\Nokia PC Suite 6\Launch Application 2.exe
    2008: C:\PROGRA~1\FLLESF~1\PCSuite\DATALA~1\DATALA~1.EXE
    2012: C:\Programmer\Fælles filer\EPSON\EBAPI\SAgent2.exe
    2044: C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
    2072: C:\Programmer\TRUST\Bluetooth Software\BTTray.exe
    2204: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    2228: C:\WINDOWS\system32\svchost.exe
    2240: C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
    2328: C:\PROGRA~1\FLLESF~1\Nokia\MPAPI\MPAPI3s.exe
    2420: C:\WINDOWS\system32\wdfmgr.exe
    2604: C:\Programmer\Fælles filer\Symantec Shared\Security Center\SymWSC.exe
    2644: C:\Programmer\ewido\security suite\SecuritySuite.exe
    3088: C:\Programmer\iPod\bin\iPodService.exe
    3584: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10MT2.EXE
    3952: C:\Programmer\Internet Explorer\iexplore.exe
    4048: C:\Programmer\Norton AntiVirus\SAVScan.exe

Ang. opstarten, så står den og "tygger" ved det sorte skærmbillede med windows logoet og det er faktisk det jeg ved!

Download hijackthis herfra og gem det i en folder for sig selv på dit skrivebord

http://www.downloadportal.dk/viewinfo.asp?rid=1658
Eller
http://www.arlet.dk/hjt.exe

Start programmet og vælge, at udføre en scan samt gemme en log fil.
Når hijackthis er færdig med, at scanne vil den bede dig om en placering hvor du vil gemme "hijackthis" en tekst fil.
Gem den i samme folder som hijackthis. Når du har sagt okay hopper der et nyt vindue frem nemlig notepad med en masse tekst linjer. Marker alle linjerne og kopir dem herind så jeg kan kigge på dem. Du må ikke selv begynde, at fikse noget i hijackthis.

Logfile of HijackThis v1.99.1
Scan saved at 16:46:54, on 24-09-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\ASUS\WLAN Card Utilities\Center.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
C:\Programmer\Microsoft IntelliType Pro\type32.exe
C:\Programmer\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\ATKKBService.exe
C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmer\D-Tools\daemon.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\TRUST\Bluetooth Software\bin\btwdins.exe
C:\Programmer\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmer\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\FLLESF~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Programmer\Fælles filer\EPSON\EBAPI\SAgent2.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\ewido\security suite\ewidoctrl.exe
C:\Programmer\Plaxo\2.2.3.1\InstallStub.exe
C:\Programmer\ewido\security suite\ewidoguard.exe
C:\PROGRA~1\Ahead\Ahead\data\Xtras\mssysmgr.exe
C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Programmer\Skype\Phone\Skype.exe

der mangler en del af loggen

Logfile of HijackThis v1.99.1
Scan saved at 16:46:54, on 24-09-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\ASUS\WLAN Card Utilities\Center.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
C:\Programmer\Microsoft IntelliType Pro\type32.exe
C:\Programmer\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\ATKKBService.exe
C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmer\D-Tools\daemon.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\TRUST\Bluetooth Software\bin\btwdins.exe
C:\Programmer\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmer\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\FLLESF~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Programmer\Fælles filer\EPSON\EBAPI\SAgent2.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\ewido\security suite\ewidoctrl.exe
C:\Programmer\Plaxo\2.2.3.1\InstallStub.exe
C:\Programmer\ewido\security suite\ewidoguard.exe
C:\PROGRA~1\Ahead\Ahead\data\Xtras\mssysmgr.exe
C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Programmer\Skype\Phone\Skype.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\PROGRA~1\FLLESF~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Programmer\TRUST\Bluetooth Software\BTTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\system32\svchost.exe
C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\PROGRA~1\FLLESF~1\Nokia\MPAPI\MPAPI3s.exe
C:\Programmer\Fælles filer\Symantec Shared\Security Center\SymWSC.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10MT2.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10RN2.EXE
C:\Programmer\Internet Explorer\iexplore.exe
\Hundborghus\our documents\Dan\installs\System_installs\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmer\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Control Center] C:\Programmer\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Genvej til egenskabsside for High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ccApp] "C:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [type32] "C:\Programmer\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Programmer\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Programmer\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Programmer\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programmer\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FLLESF~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Programmer\Plaxo\2.2.3.1\InstallStub.exe -a
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\Ahead\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [PcSync] C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Skype] "C:\Programmer\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Acrobat Assistant.lnk = C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res://c:\programmer\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\programmer\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmer\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmer\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Send til &Bluetooth - C:\Programmer\WIDCOMM\Bluetooth-software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Programmer\TRUST\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Similar Pages - res://c:\programmer\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmer\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\TRUST\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\TRUST\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: TvGuide - {E6850551-1B82-47cd-BBF3-8E7D6099F9B3} - www.tvguide.dk (file missing)
O9 - Extra 'Tools' menuitem: TvGuide.dk - {E6850551-1B82-47cd-BBF3-8E7D6099F9B3} - www.tvguide.dk (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) - https://netbank.danskebank.dk/html/activex/DB/Menu.cab
O16 - DPF: {3D6DDD23-870A-4FC8-B3AF-5F67C935A9B7} - https://udstedelse.certifikat.tdc.dk/csp/authenticode/PrimeInkCSP-1204.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmer\TRUST\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmer\Fælles filer\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Programmer\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programmer\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FLLESF~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\Security Center\SymWSC.exe

Der er desværre intet i loggen.

Gå herefter i Start -> Programmer -> Tilbehør -> Systemværktøjer -> Diskoprydning og slet temp-filer, temporary internet files og papirkurv.

Genstart og se om det gør en forskel

det gør det desværre ikke!

Jeg kan ikke se hvad problemet kan være desværre, men vil foreslå at du enten forsøger dig med en systemgendannelse eller en repair af windows.

Det er også prøvet, men nu efter så langtid, har jeg geninstalleret mit grafikkort og nu kør' min makine som "Hans i Grethe"!!!