Avatar billede echelon2001 Juniormester
07. april 2006 - 16:37 Der er 17 kommentarer og
1 løsning

svhost.exe kunne ikke read

Hejsa

har et problem med svhost.exe som hopper op med en besked hvor der står at den ikke read, hvad kan der være galt ?
Avatar billede boxer Praktikant
07. april 2006 - 21:14 #1
Kan du skirve nøjagtigt hvad fejlmeddelsen siger?
Så bliver det nemmere at fejlsøge.
Avatar billede boxer Praktikant
07. april 2006 - 21:17 #2
Skriv også i hvilke situationer beskeden kommer.
Avatar billede echelon2001 Juniormester
08. april 2006 - 09:53 #3
Den skriver : instruktion ved "0x00ae96bc" refererede hukommelse ved "0x00000000" . hukommelse kunne ikke "written"    og som overskrift står der svhost.exe - programfejl  den her fejl kommer når jeg starter explorer op og skal ind på en anden side end min startside som er google, den er enorm lang tid om at skifte side uanset hvilken side jeg vælger og inden at jeg kan komme ind på en anden side skal jeg trykke på ok på fejl meddelsen eller loader den ikke den hjemmeside jeg vil ind på ...  kan i hjælpe ?
Avatar billede boxer Praktikant
08. april 2006 - 10:05 #4
Jeg har et par forslag som jeg er usikker på virker:

Få tjekket din PC for virus.

Kør denne lille bat: http://www.fbeej.dk/Programmer/iereg.zip

Gå i enhedshåndtering, højreklik på dit netkort og vælg fjern. Genstart og windows installerer kortet påny. Du skal have en driver klar inden du gør dette. Opdater driveren.

Kør dette fix:
http://www.softpedia.com/get/System/OS-Enhancements/WinSock-XP-Fix.shtml

Du skal ikke gøre det hele på en gang. 1 punkt ad gangen og selvfølgelig ikke de sidste hvis du støder på et der virker :o)
Avatar billede johnstigers Seniormester
08. april 2006 - 20:47 #5
http://www.eksperten.dk/artikler/755

Følg fremgangsmåden i denne artikel og kopier loggen herindm så tjekker jeg.

Til info, så har du virus/trojaner!
Avatar billede echelon2001 Juniormester
09. april 2006 - 09:20 #6
øhh damn .. ok prøver lige at lave en log
Avatar billede echelon2001 Juniormester
09. april 2006 - 13:56 #7
her er data fra dr web, jeg hopper i fejlsikret tilstand igen og fortsætter med at skanne med ewido, og smider daten fra det prg. herind,

DATA FRA DRWEB SKAN. :
-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 551413
Infected objects found: 5
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 1
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 5
Hacktool programs found: 6
Objects cured: 0
Objects deleted: 5
Objects renamed: 12
Objects moved: 0
Objects ignored: 0
Scan speed: 76 Kb/s
Scan time: 04:07:47
Avatar billede johnstigers Seniormester
09. april 2006 - 14:09 #8
ok - huskede du at fjerne det drweb fandt?
Avatar billede echelon2001 Juniormester
09. april 2006 - 18:01 #9
ja det mener jeg.. man vælger hvad man skal gøre nårt den kommer frem med en promt, jeg har ikke slettet dem den har renamet
Avatar billede echelon2001 Juniormester
09. april 2006 - 18:03 #10
så har jeg en logfil klar fra hijackthis :

hvordan ser den ud ?
Logfile of HijackThis v1.99.1
Scan saved at 17:57:16, on 09-04-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Michael\Desktop\rep\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.zitech.dk
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Opret Foretrukken på den mobile enhed... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.zitech.dk
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {55F2FE00-C6E1-11D4-84BC-009027889212} (Seagate DiscWizard English) - http://www.seagate.com/support/disc/asp/dw/English/bin/npdscwiz.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1135314721406
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmer\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Avatar billede johnstigers Seniormester
09. april 2006 - 18:04 #11
Har du glemt loggen fra Ewido?
Avatar billede echelon2001 Juniormester
09. april 2006 - 18:04 #12
nå h ja 2 sek
Avatar billede johnstigers Seniormester
09. april 2006 - 18:04 #13
Loggen fra Hijackthis skal være fra normal tilstand.
Avatar billede echelon2001 Juniormester
09. april 2006 - 18:07 #14
---------------------------------------------------------
ewido anti-malware - Scanningsrapport
---------------------------------------------------------

+ Oprettet den:            17:56:41, 09-04-2006
+ Rapport-Checksum:        3A7969AF

+ Scanningsresultat:
    C:\Documents and Settings\Michael\Cookies\michael@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@adbrite[1].txt -> TrackingCookie.Adbrite : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@adtech[2].txt -> TrackingCookie.Adtech : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@advertising[2].txt -> TrackingCookie.Advertising : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@adviva[2].txt -> TrackingCookie.Adviva : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@as-us.falkag[2].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@as1.falkag[2].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@bfast[1].txt -> TrackingCookie.Bfast : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@bilbo.counted[2].txt -> TrackingCookie.Counted : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@burstnet[2].txt -> TrackingCookie.Burstnet : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@clickbank[1].txt -> TrackingCookie.Clickbank : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@doubleclick[1].txt -> TrackingCookie.Doubleclick : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ehg-autodesk.hitbox[1].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ehg-esa.hitbox[1].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ehg-learningco.hitbox[2].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ehg-nvidia.hitbox[2].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ehg-sonycomputer.hitbox[2].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@goldenpalace[1].txt -> TrackingCookie.Goldenpalace : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@hotlog[2].txt -> TrackingCookie.Hotlog : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ilead.itrack[2].txt -> TrackingCookie.Itrack : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@image.masterstats[1].txt -> TrackingCookie.Masterstats : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@ivwbox[1].txt -> TrackingCookie.Ivwbox : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@media.fastclick[2].txt -> TrackingCookie.Fastclick : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@mediaplex[2].txt -> TrackingCookie.Mediaplex : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@perf.overture[1].txt -> TrackingCookie.Overture : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@sales.liveperson[2].txt -> TrackingCookie.Liveperson : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@sel.as-eu.falkag[2].txt -> TrackingCookie.Falkag : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@servedby.advertising[2].txt -> TrackingCookie.Advertising : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@spylog[2].txt -> TrackingCookie.Spylog : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@stat.onestat[2].txt -> TrackingCookie.Onestat : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@tacoda[2].txt -> TrackingCookie.Tacoda : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@trafic[1].txt -> TrackingCookie.Trafic : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@valueclick[1].txt -> TrackingCookie.Valueclick : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@web-stat[2].txt -> TrackingCookie.Web-stat : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@weborama[1].txt -> TrackingCookie.Weborama : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@webstat[1].txt -> TrackingCookie.Web-stat : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@yadro[2].txt -> TrackingCookie.Yadro : Renset med backup
    C:\Documents and Settings\Michael\Cookies\michael@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@adtech[2].txt -> TrackingCookie.Adtech : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@advertising[1].txt -> TrackingCookie.Advertising : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@doubleclick[2].txt -> TrackingCookie.Doubleclick : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@mediaplex[1].txt -> TrackingCookie.Mediaplex : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temp\Cookies\michael@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temporary Internet Files\Content.IE5\Q6K5QG1T\drsmartload_js[1].htm -> Downloader.IstBar.j : Renset med backup
    C:\Documents and Settings\Michael\Local Settings\Temporary Internet Files\Content.IE5\WYLJKNGT\drsmartload_js[1].htm -> Downloader.IstBar.j : Renset med backup
    D:\(1).zip/1.wma -> Downloader.Wimad.d : Renset med backup
    D:\eatbfs23.rar/G6FTPSrv.exe -> Trojan.LdPinch.ach : Renset med backup
    D:\G6FTPSrv.exe -> Trojan.LdPinch.ach : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@ads03.bpath[1].txt -> TrackingCookie.Bpath : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@burstnet[1].txt -> TrackingCookie.Burstnet : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@com[2].txt -> TrackingCookie.Com : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@paypopup[1].txt -> TrackingCookie.Paypopup : Renset med backup
    E:\Documents and Settings\Michael\Cookies\michael@yadro[2].txt -> TrackingCookie.Yadro : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@bluemountain[2].txt -> TrackingCookie.Bluemountain : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@cz7.clickzs[2].txt -> TrackingCookie.Clickzs : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@ilead.itrack[1].txt -> TrackingCookie.Itrack : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@ivwbox[2].txt -> TrackingCookie.Ivwbox : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@mediaplex[2].txt -> TrackingCookie.Mediaplex : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@paypopup[1].txt -> TrackingCookie.Paypopup : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@servedby.advertising[2].txt -> TrackingCookie.Advertising : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@yadro[1].txt -> TrackingCookie.Yadro : Renset med backup
    E:\Documents and Settings\Michael ny\Cookies\michael ny@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Renset med backup
    E:\gammel pc 2\Microsoft E-mail for Pocket PC\msnsspc.PPC_MIPS.CAB/0msnsspc.001 -> Trojan.Delf.or : Renset med backup
    E:\louise\Messenger Plus! - Setup.exe/sponsor.exe -> Downloader.Swizzor.ag : Renset med backup


::Rapport slut
Avatar billede echelon2001 Juniormester
09. april 2006 - 18:09 #15
den kommer her fra normal tilstand :

Logfile of HijackThis v1.99.1
Scan saved at 18:07:56, on 09-04-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Programmer\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~2\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Michael\Desktop\rep\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.zitech.dk
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Opret Foretrukken på den mobile enhed... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.zitech.dk
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {55F2FE00-C6E1-11D4-84BC-009027889212} (Seagate DiscWizard English) - http://www.seagate.com/support/disc/asp/dw/English/bin/npdscwiz.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1135314721406
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmer\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Avatar billede johnstigers Seniormester
09. april 2006 - 18:14 #16
Den log er ren - har du stadig problemer?
Avatar billede echelon2001 Juniormester
09. april 2006 - 18:16 #17
nej det ser ikke sådan ud den kommer heller ikke mere og pcen har været i normal stand i ca 15 minutter nu uden problemer... sååådan  takker for hjælpen, smider du et svar afsted så du kan få point :-)

Er det også grunden til at min pc er rigtig meget langsom efter at den har stået nogle timer, uden at lave noget kan det også skyldes den virus ?
Avatar billede johnstigers Seniormester
09. april 2006 - 18:20 #18
Muligvis ja.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester