Søg
Avatar billede botha Nybegynder
14. december 2005 - 17:50 Der er 11 kommentarer og
1 løsning

Tjek HiJackThis log

Hejsa - nogen der kan tjekke denne?


Logfile of HijackThis v1.99.1
Scan saved at 17:49:50, on 14-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\javadj.exe
E:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
E:\Programmer\Norton AntiVirus\navapsvc.exe
E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
E:\WINDOWS\Explorer.EXE
E:\PROGRA~1\QUANTA~1\QtEwLMng.EXE
E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
E:\WINDOWS\system32\igfxtray.exe
E:\WINDOWS\system32\hkcmd.exe
E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\5.tmp.exe
E:\WINDOWS\system32\atlhd32.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Programmer\MSN Messenger\MsnMsgr.Exe
E:\Programmer\Internet Explorer\iexplore.exe
E:\WINDOWS\system32\wuauclt.exe
E:\Programmer\Messenger\msmsgs.exe
E:\Documents and Settings\Win XP\Skrivebord\hjt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://E:\WINDOWS\fqbgc.dll/sp.html#83556
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: Class - {DD4B3DBF-0AB8-5093-B13E-7DBD61D00778} - E:\WINDOWS\system32\ieyh.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [QtEwLMng] E:\PROGRA~1\QUANTA~1\QtEwLMng.EXE
O4 - HKLM\..\Run: [SynTPLpr] E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [sdkrq32.exe] E:\WINDOWS\sdkrq32.exe
O4 - HKLM\..\Run: [4.tmp] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
O4 - HKLM\..\Run: [5.tmp] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\5.tmp.exe
O4 - HKLM\..\Run: [ntif.exe] E:\WINDOWS\ntif.exe
O4 - HKLM\..\Run: [4.tmp.exe] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
O4 - HKLM\..\Run: [5.tmp.exe] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\5.tmp.exe
O4 - HKLM\..\Run: [atlhd32.exe] E:\WINDOWS\system32\atlhd32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9DA59483-5A67-4400-8D21-62C09455B737}: NameServer = 194.239.134.83
O20 - Winlogon Notify: igfxcui - E:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - E:\WINDOWS\javadj.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - E:\Programmer\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Programmer\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FLLESF~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
Avatar billede halvamatoer Nybegynder
14. december 2005 - 18:25 #1
Det ser ud til du har Coolwebsearch:

1. Download og kør CWS-fjerner: (Brugsanvisning på hjemmeside).
http://www.siena.edu/antivirus/spyware/cws.asp

2. Download og kør Ewido: Du finder den & brugsanvisning på www.exp.dk/artikler/755

3. Kopier loggen fra Ewido + En ny HJT herind
Avatar billede botha Nybegynder
15. december 2005 - 16:47 #2
ewido raport :
---------------------------------------------------------
ewido security suite - Scanningsrapport
---------------------------------------------------------

+ Oprettet den:            16:46:13, 15-12-2005
+ Rapport-Checksum:        E26D38A7

+ Scanningsresultat:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SE -> Spyware.CoolWebSearch : Renset med backup
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SW -> Spyware.CoolWebSearch : Renset med backup
    [244] E:\WINDOWS\javadj.exe -> Trojan.Agent.bi : Renset med backup
    E:\Documents and Settings\Win XP\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\counter.jpg-1232ae26-504f1180.zip/Gummy.class -> Trojan.Java.Femad : Renset med backup
    E:\Documents and Settings\Win XP\Cookies\win xp@adtech[2].txt -> Spyware.Cookie.Adtech : Renset med backup
    E:\Documents and Settings\Win XP\Cookies\win xp@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Renset med backup
    E:\Documents and Settings\Win XP\Cookies\win xp@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\1.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\10.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\2.tmp -> Hijacker.Spywad.l : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\5.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\5.tmp.exe -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\6.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\7.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\8.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\9.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\A.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\B.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\C.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\D.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\DH2004Setup-dm[1].exe -> Spyware.Trymedia : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\E.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\F.tmp -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temp\temp.fr18AE -> Trojan.Small.ga : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temporary Internet Files\Content.IE5\5Q8ZBXS1\start[1].exe -> Downloader.Small.caq : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temporary Internet Files\Content.IE5\GNRZUS99\DH2004Setup-dm[1].exe -> Spyware.Trymedia : Renset med backup
    E:\Documents and Settings\Win XP\Lokale indstillinger\Temporary Internet Files\Content.IE5\GNRZUS99\input[1].htm -> Not-A-Virus.Exploit.HTML.DragDrop : Renset med backup
    E:\WINDOWS\desktop.html -> Hijacker.Generic : Renset med backup
    E:\WINDOWS\divnd.dll -> Adware.SearchPage : Renset med backup
    E:\WINDOWS\javadj.exe -> Trojan.Agent.bi : Renset med backup
    E:\WINDOWS\system32\appmy32.exe -> Trojan.Agent.bi : Renset med backup


::Rapport slut
Avatar billede botha Nybegynder
15. december 2005 - 16:48 #3
HJ rapport:
Logfile of HijackThis v1.99.1
Scan saved at 16:48:27, on 15-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Programmer\ewido\security suite\ewidoctrl.exe
E:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
E:\Programmer\Norton AntiVirus\navapsvc.exe
E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
E:\WINDOWS\Explorer.EXE
E:\PROGRA~1\QUANTA~1\QtEwLMng.EXE
E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
E:\WINDOWS\system32\igfxtray.exe
E:\WINDOWS\system32\hkcmd.exe
E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\5.tmp.exe
E:\WINDOWS\system32\winur32.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Programmer\MSN Messenger\MsnMsgr.Exe
E:\WINDOWS\netum.exe
E:\WINDOWS\system32\svchost.exe
E:\Programmer\Internet Explorer\iexplore.exe
E:\Programmer\Messenger\msmsgs.exe
E:\Documents and Settings\Win XP\Skrivebord\hjt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O2 - BHO: Class - {DD4B3DBF-0AB8-5093-B13E-7DBD61D00778} - E:\WINDOWS\system32\ieyh.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [QtEwLMng] E:\PROGRA~1\QUANTA~1\QtEwLMng.EXE
O4 - HKLM\..\Run: [SynTPLpr] E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [sdkrq32.exe] E:\WINDOWS\sdkrq32.exe
O4 - HKLM\..\Run: [4.tmp] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
O4 - HKLM\..\Run: [ntif.exe] E:\WINDOWS\ntif.exe
O4 - HKLM\..\Run: [4.tmp.exe] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
O4 - HKLM\..\Run: [atlhd32.exe] E:\WINDOWS\system32\atlhd32.exe
O4 - HKLM\..\Run: [winur32.exe] E:\WINDOWS\system32\winur32.exe
O4 - HKLM\..\RunOnce: [netum.exe] E:\WINDOWS\netum.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9DA59483-5A67-4400-8D21-62C09455B737}: NameServer = 194.239.134.83
O20 - Winlogon Notify: igfxcui - E:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - E:\WINDOWS\javadj.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - E:\Programmer\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Programmer\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FLLESF~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
Avatar billede botha Nybegynder
15. december 2005 - 16:51 #4
det mest mærkelige er en rulle fætter der kommer foroven på min skærm som "tikker" med dene tekst " Warning! your computer is infected! press here for help!
Den kommer frem når jeg fører musen op i toppen af skærmen.
Avatar billede Computer Hjælp (Gratis) Mester
15. december 2005 - 17:25 #5
<botha>: ... der er meget mere endnu... <halvamatoer> ska' nok vende tilbage med den videre procedure... der er >10 'snavs' elementer i din log...
Avatar billede halvamatoer Nybegynder
15. december 2005 - 18:15 #6
Yep vi kører videre: (du har samlet godt sammen må man sige)

start med:

Download cleanup http://www.stevengould.org/downloads/cleanup/CleanUp40.exe.
Du skal ikke bruge den endnu.

Derefter smitrem

Den tager normalt spyaxe (den har du ikke, men den kan også andre triks)

1. Hent og dobbeltklik på smitRem.exe

http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

Programmet pakker sig ud til mappen smitRem.

2. Genstart i fejlsikret, hvis du ikke ved hvordan så kig her:

http://fromsej.dk/html/xpfejl.html


3. Åbn mappen smitRem, og dobbeltklik på RunThis.bat (Følg vejledningen i vinduet.)
kom med loggen fra smitrem

Når det er overstået skal du fixe følgende i Hijackthis:

Den *** markerede er jeg lidt i tvivl om tror det er en virus, men er ikke sikker, har du et program der hedder et-eller-andet med quanta - hvis nej - check først i tilføj/fjern programmer om du kan afinstallere der - derefter fix den

Det kan være at enkelte ikke kan fixes i alm måde, så prøver du bare i fejlsikker

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://E:\WINDOWS\system32\gvxot.dll/sp.html#83556
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing

O2 - BHO: Class - {DD4B3DBF-0AB8-5093-B13E-7DBD61D00778} - E:\WINDOWS\system32\ieyh.dll

*** O4 - HKLM\..\Run: [QtEwLMng] E:\PROGRA~1\QUANTA~1\QtEwLMng.EXE

O4 - HKLM\..\Run: [sdkrq32.exe] E:\WINDOWS\sdkrq32.exe
O4 - HKLM\..\Run: [4.tmp] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
O4 - HKLM\..\Run: [ntif.exe] E:\WINDOWS\ntif.exe
O4 - HKLM\..\Run: [4.tmp.exe] E:\DOCUME~1\WINXP~1\LOKALE~1\Temp\4.tmp.exe
O4 - HKLM\..\Run: [atlhd32.exe] E:\WINDOWS\system32\atlhd32.exe
O4 - HKLM\..\Run: [winur32.exe] E:\WINDOWS\system32\winur32.exe
O4 - HKLM\..\RunOnce: [netum.exe] E:\WINDOWS\netum.exe
O4 - HKCU\..\Run: [Windows installer] -C:\winstall.exe

O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - E:\WINDOWS\javadj.exe (file missing)

genstart i fejlsikker find og slet:
(Sørg for at vis skjulte filer er aktiveret)

C:\winstall.exe
E:\WINDOWS\netum.exe
E:\WINDOWS\system32\winur32.exe
E:\WINDOWS\system32\atlhd32.exe
E:\WINDOWS\ntif.exe
E:\WINDOWS\sdkrq32.exe
E:\PROGRA~1\QUANTA~1\QtEwLMng.EXE
E:\WINDOWS\system32\ieyh.dll
E:\WINDOWS\system32\gvxot.dll

Dem du ikke finder har hjt måske slette

Derefter kører du cleanup.

Hver opmærksom på at cleanup sletter ALT i alle midlertidige mapper (TEMP) for alle brugere.

Genstart maskinen og kom med en ny log fra HTJ
Avatar billede botha Nybegynder
18. december 2005 - 16:37 #7
pyyyh

så ser den sådan ud:

Logfile of HijackThis v1.99.1
Scan saved at 16:34:54, on 18-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Programmer\ewido\security suite\ewidoctrl.exe
E:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
E:\Programmer\Norton AntiVirus\navapsvc.exe
E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
E:\WINDOWS\Explorer.EXE
E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
E:\WINDOWS\system32\igfxtray.exe
E:\WINDOWS\system32\hkcmd.exe
E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Programmer\MSN Messenger\MsnMsgr.Exe
E:\Programmer\Messenger\msmsgs.exe
E:\Documents and Settings\Win XP\Skrivebord\hjt.exe
E:\WINDOWS\system32\wuauclt.exe

O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SynTPLpr] E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Microsoft Office.lnk = E:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9DA59483-5A67-4400-8D21-62C09455B737}: NameServer = 194.239.134.83
O20 - Winlogon Notify: igfxcui - E:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - E:\WINDOWS\javadj.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - E:\Programmer\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Programmer\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FLLESF~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
Avatar billede halvamatoer Nybegynder
19. december 2005 - 20:08 #8
Vi er desværre ikke i land endnu:

Citat: "Team Spywarefri"

Hent Aboutbuster:
http://www.malwarebytes.biz/AboutBuster.zip
(pak Aboutbuster ud til sin egen mappe på Skrivebordet).

Hent cwsserviceremove.reg her:
http://www.fbeej.dk/Programmer/cwsserviceremove.zip
(pak cwsserviceremove.zip ud til Skrivebordet)

Under dette fix, må du ikke have Internet Explorer åben, så det bedste er at printe instruktionen ud - næstbedst at kopiere den over i Notepad, så du kan læse den derfra.

For at kunne se alle filer:
Åbn en mappe, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".

Genstart i Fejlsikret tilstand, ved at taste F8 under opstart og vælge Fejlsikret tilstand.

Gå i Start -> Kør og skriv Services.msc

Se om du kan finde én af disse services:

Workstation NetLogon Service
Network Security Service
Remote Procedure Call (RPC) Helper
Remote Access Service

...på listen. Hvis du finder én af dem - Højreklik på den og vælg Egenskaber - klik på "Stop" og vælg Starttype "Deaktiveret" - klik Anvend og OK. Luk service vinduet.

Kør HijackThis, scan og sæt et flueben ud for følgende linier - luk øvrige programvinduer - klik "Fix checked":

O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - E:\WINDOWS\javadj.exe (file missing)

Find og slet

Filerne:
E:\WINDOWS\javadj.exe
Dobbeltklik på cwsserviceremove.reg, som du hentede i begyndelsen.

Kør AboutBuster - to gange.
- klik OK
- klik Start og OK for at scanne for Alternate Data Streams
- klik Yes for at tillade nedlukning af Explorer.exe
- klik Yes for at tillade nr. 2 scanning.


Gå herefter i Start -> Programmer -> Tilbehør -> Systemværktøjer -> Diskoprydning og slet temp-filer, temporary internet files og papirkurv.

Genstart i Normal tilstand. Kør en Antivirus scanning her:

http://housecall.trendmicro.com/housecall/start_corp.asp

Så burde vi komme den rigtige vej. (O kom med en ny HJT-log)
Avatar billede botha Nybegynder
20. december 2005 - 10:10 #9
hejsa

den øverste link virker ikke ?
Avatar billede botha Nybegynder
20. december 2005 - 10:30 #10
ok - jeg fandt den på .org istedet.

Hvordan ser det nu ud?

Logfile of HijackThis v1.99.1
Scan saved at 10:29:33, on 20-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Programmer\ewido\security suite\ewidoctrl.exe
E:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
E:\Programmer\Norton AntiVirus\navapsvc.exe
E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
E:\WINDOWS\Explorer.EXE
E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
E:\WINDOWS\system32\igfxtray.exe
E:\WINDOWS\system32\hkcmd.exe
E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Programmer\MSN Messenger\MsnMsgr.Exe
E:\Programmer\Messenger\msmsgs.exe
E:\Documents and Settings\Win XP\Skrivebord\hjt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Programmer\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SynTPLpr] E:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] E:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "E:\Programmer\Fælles filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Microsoft Office.lnk = E:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmer\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9DA59483-5A67-4400-8D21-62C09455B737}: NameServer = 194.239.134.83
O20 - Winlogon Notify: igfxcui - E:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto-Protect-tjeneste (navapsvc) - Symantec Corporation - E:\Programmer\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Programmer\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FLLESF~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - E:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
Avatar billede halvamatoer Nybegynder
20. december 2005 - 17:42 #11
perfekt!
Avatar billede botha Nybegynder
21. december 2005 - 09:31 #12
takker - det var rart at få lidt styr på det.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
Se alle it-kurser fra Computerworld Kurser
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.
Se alle it-kurser

Flere spørgsmål fra Virus kategorien

Titel Indlæg Oprettet Seneste aktivitet
Vil skrifte antivirusprogram. Af ErikHg i Virus 22 26/11/202510:42 23/12/202514:29
Er gratis Bitdefender værd at installere ? Af Ikke-ekspert i Virus 8 31/08/202519:08 01/09/202514:18
Ukendte filer på min Pc Af jonpet i Virus 10 03/02/202514:20 04/02/202511:05
mulig ukendt virus Af jackie18 i Virus 3 18/01/202514:07 18/01/202516:39
virus popper op med jævne mellemrum Af Malm i Virus 13 18/01/202511:40 20/01/202517:53
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester

Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
24/0417:35 Kan ikke resette PC med Windows 8.1 Af TTA i Office & Kontorpakker
24/0413:33 Lukning af Microsoftkonto Af ErikHg i Windows
23/0416:10 Bat file. Af johnnylassen i Andet programmering
23/0410:28 “Signe” Svindel omtalt i medier Af nu_igen i Mobiltelefoner
22/0420:59 RAID controller virker ikke ved tilslutning af alle 4 harddiske Af Strawberry i Andet hardware
White papers
Flere white papers »