Søg
Avatar billede lillekiller Nybegynder
01. maj 2007 - 20:53 Der er 17 kommentarer og
1 løsning

hijack log

har vist spyware på min bærbere pc, har prøvet ad aware og avg
anti spyware og spybot, men der er stadig 2 der ikk kan fjernes!
de hedder troj_agent.oec og troj_dloader.mug. loggen er her...

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:39:37, on 1-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Internet Explorer\IEXPLORE.EXE
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\SPYWAREfighter\spftray.exe
C:\Programmer\SPYWAREfighter\spfprc.exe
C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Documents and Settings\Martin\Skrivebord\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {0C4BDCE9-F70B-4A3F-A3D6-252A6B782088} - C:\WINDOWS\system32\tuvut.dll
O2 - BHO: (no name) - {26FAFD75-1005-41F6-978D-178C00165C0B} - C:\WINDOWS\system32\opnolll.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {D2E45BCF-7107-4449-8970-B4C65CFEA69D} - C:\WINDOWS\system32\tuvut.dll
O2 - BHO: (no name) - {D651AFF4-9590-424d-BD1E-8E33E090DFB3} - C:\WINDOWS\system32\jygderle.dll
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [Recguard] C:\Programmer\HP\recguard.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\ydsxrlab.dll",realset
O4 - HKLM\..\Run: [spywarefighterguard] C:\Programmer\SPYWAREfighter\spftray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O12 - Plugin for .spop: C:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted IP range: 206.161.125.149
O16 - DPF: {1221EA33-878F-4672-B799-05DAAF1298CF} (sysinfo1 Class) - http://resources.tele2.dk/privat/internet/pctest/systeminfo1.dll
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} - http://www.t058.com/b/Click_Yes_to_Continue.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
O20 - Winlogon Notify: opnolll - C:\WINDOWS\SYSTEM32\opnolll.dll
O20 - Winlogon Notify: partnershipreg - C:\Documents and Settings\All Users\Dokumenter\Settings\partnership.dll
O20 - Winlogon Notify: tuvut - C:\WINDOWS\system32\tuvut.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Network Neighborhood - {9F143C3A-1457-6CCA-03A7-7AA23B61E40F} - (no file)
O22 - SharedTaskScheduler: cam - {634be415-da12-496b-b89e-329b73c4807f} - C:\WINDOWS\system32\tvomnc.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Symantec Corporation - C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\SSOGMA~1\LOKALE~1\Temp\hpdj.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: ieupdater (Microsoft IE Updater) - Unknown owner - C:\Documents and Settings\SØS OG MARTIN\~tmp0374.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: SPYWAREfighterRP - SpamFighter APS - C:\Programmer\SPYWAREfighter\spfprc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Martin/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 9155 bytes
Avatar billede tafkab Nybegynder
01. maj 2007 - 21:00 #1
Download dette fix til rodbiblioteket på din computer (som regel c:\):
http://www.atribune.org/ccount/click.php?id=4

Dobbeltklik på VundoFix.exe for at køre det. Klik på "Scan for Vundo"-knappen. Når programmet er færdig med at scanne, skal du klikke på "Remove Vundo"-knappen

Du vil så blive spurgt om du er sikker på, at du vil fjerne filerne. Her skal du klikke på "Yes". Herefter bliver dit skrivebord blankt, og fixet vil forsøge at fjerne Vundo. Når den er færdig, vil værktøjet have lov til at genstarte computeren. Det skal du acceptere.

Genstart herefter computeren, og lav en ny log med HJT, som du lægger herind. Læg også indholdet af denne fil herind: C:\vundofix.txt

Bemærk: Det er muligt at Vundofix ved første scanning finder en fil, som den ikke kan fjerne i første omgang. Så vil Vundofixet genstarte, og fortsætte efter genstarten. Hvis dette sker, skal du bare følge instruktionerne ovenfor efter genstarten (startende med "Klik på Scan for Vundo-knappen")
Avatar billede lillekiller Nybegynder
01. maj 2007 - 21:13 #2
takker jeg har ikk mere tid i aften vender tilbage i morgen :-)
Avatar billede lillekiller Nybegynder
02. maj 2007 - 08:31 #3
Så har kørt den og her den den nye log:


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 08:30:48, on 2-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Internet Explorer\IEXPLORE.EXE
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmer\SPYWAREfighter\spftray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\Programmer\SPYWAREfighter\spfprc.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\Martin\Skrivebord\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {0C4BDCE9-F70B-4A3F-A3D6-252A6B782088} - C:\WINDOWS\system32\tuvut.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {D2E45BCF-7107-4449-8970-B4C65CFEA69D} - C:\WINDOWS\system32\tuvut.dll (file missing)
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [Recguard] C:\Programmer\HP\recguard.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\ydsxrlab.dll",realset
O4 - HKLM\..\Run: [spywarefighterguard] C:\Programmer\SPYWAREfighter\spftray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O12 - Plugin for .spop: C:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted IP range: 206.161.125.149
O16 - DPF: {1221EA33-878F-4672-B799-05DAAF1298CF} (sysinfo1 Class) - http://resources.tele2.dk/privat/internet/pctest/systeminfo1.dll
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} - http://www.t058.com/b/Click_Yes_to_Continue.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
O20 - Winlogon Notify: partnershipreg - C:\Documents and Settings\All Users\Dokumenter\Settings\partnership.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Network Neighborhood - {9F143C3A-1457-6CCA-03A7-7AA23B61E40F} - (no file)
O22 - SharedTaskScheduler: cam - {634be415-da12-496b-b89e-329b73c4807f} - C:\WINDOWS\system32\tvomnc.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Symantec Corporation - C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\SSOGMA~1\LOKALE~1\Temp\hpdj.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: ieupdater (Microsoft IE Updater) - Unknown owner - C:\Documents and Settings\SØS OG MARTIN\~tmp0374.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: SPYWAREfighterRP - SpamFighter APS - C:\Programmer\SPYWAREfighter\spfprc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Martin/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 8856 bytes
Avatar billede lillekiller Nybegynder
02. maj 2007 - 11:13 #4
Hov glemte teksten fra vundofix :o)


VundoFix V6.3.21

Checking Java version...

Sun Java not detected
Scan started at 21:05:09 1-05-2007

Listing files found while scanning....

C:\WINDOWS\system32\balrxsdy.ini
C:\WINDOWS\system32\jygderle.dll
C:\WINDOWS\system32\opnolll.dll
C:\WINDOWS\system32\tuvut.bak1
C:\WINDOWS\system32\tuvut.bak2
C:\WINDOWS\system32\tuvut.dll
C:\WINDOWS\system32\tuvut.ini
C:\WINDOWS\system32\ydsxrlab.dll

Beginning removal...

Attempting to delete C:\WINDOWS\system32\balrxsdy.ini
C:\WINDOWS\system32\balrxsdy.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\jygderle.dll
C:\WINDOWS\system32\jygderle.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\opnolll.dll
C:\WINDOWS\system32\opnolll.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\tuvut.bak1
C:\WINDOWS\system32\tuvut.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\tuvut.bak2
C:\WINDOWS\system32\tuvut.bak2 Has been deleted!

Attempting to delete C:\WINDOWS\system32\tuvut.dll
C:\WINDOWS\system32\tuvut.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\tuvut.ini
C:\WINDOWS\system32\tuvut.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\ydsxrlab.dll
C:\WINDOWS\system32\ydsxrlab.dll Has been deleted!

Performing Repairs to the registry.
Done!
Avatar billede tafkab Nybegynder
02. maj 2007 - 18:12 #5
Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
O2 - BHO: (no name) - {0C4BDCE9-F70B-4A3F-A3D6-252A6B782088} - C:\WINDOWS\system32\tuvut.dll (file missing)
O2 - BHO: (no name) - {D2E45BCF-7107-4449-8970-B4C65CFEA69D} - C:\WINDOWS\system32\tuvut.dll (file missing)
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\ydsxrlab.dll",realset
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Network Neighborhood - {9F143C3A-1457-6CCA-03A7-7AA23B61E40F} - (no file)
O22 - SharedTaskScheduler: cam - {634be415-da12-496b-b89e-329b73c4807f} - C:\WINDOWS\system32\tvomnc.dll (file missing)
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\SSOGMA~1\LOKALE~1\Temp\hpdj.exe (file missing)
O23 - Service: ieupdater (Microsoft IE Updater) - Unknown owner - C:\Documents and Settings\SØS OG MARTIN\~tmp0374.exe (file missing)


Download free Trial af SuperAntiSpyware Proff til Skrivebordet, nederst på siden www.spywarefri.dk/downloads1.htm

Installer den, og lad den opdatere med nyeste opdateringer.

Så vil den spørge om din mail adresse, det er op til dig selv om du vil udfylde det.Tryk så på Næste og Næste igen -Udfør.

Dansk vejledning http://www.spywarefri.dk/manualer/superantispyware-manual.htm


Genstart i fejlsikret tilstand

Start superantispyware ved at højreklikke på den gule og sorte bille ved uret

Tryk på - Scan for, Adware,Malware - linjen
Tryk på - Preference - Knappen.
Fjern flueben ved -Start SuperAntiSpyware when Windows starts.

Tryk på Fanebladet -Scanning control.

Ved scanning options, skal der kun være flueben i de to nederste

Fanebladet- Real Time Protections. Fjerner du fluben ved - Enable Real Time Protection

Tryk så på Close

Tryk på - Scan Your computer - Knappen. sæt flueben ved de drev der skal scannes. Det er vigtigt at drev hvor Windows (systemdrevet) ligger, har et flueben.

Flyt så prikken ved- Perform quick Scan, ned til - Perform complete Scan.

Tryk på Næste, så går den i gang med at scanne.

Det kan godt tage lang tid hvis du har meget på computeren

Når scanninngen er færdig popper der en boks op, tryk OK.

Sæt flueben ved alt den har fundet- næste. Så vil den fixe/slette infektionerne.

Lad den genstarte.


Efter genstart -

Åben SuperAntiSpyware igen
Tryk på Preferences, vælg Statistics/Logs
Marker loggen i det lille vindue og tryk på View Log.
Kopier teksten herind

Sammen med en ny log fra hijackthis.


Fortæl også hvordan den kører nu?
Avatar billede lillekiller Nybegynder
03. maj 2007 - 16:36 #6
nu har jeg kørt super antispy og fjernet en del, og fjernet de ting med hijack, pcen kører vist ok, men er der mere i loggen der skal fjernes ? hvad  med de :O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll ?
fik ikk helt glort som du skrev hentede program og opdaterede og kørte fuld scanLogfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 16:29:54, on 3-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Internet Explorer\IEXPLORE.EXE
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmer\SPYWAREfighter\spftray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
C:\Programmer\SPYWAREfighter\spfprc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Documents and Settings\Martin\Skrivebord\HiJackThis_v2.exe
C:\WINDOWS\system32\netsh.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [Recguard] C:\Programmer\HP\recguard.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [spywarefighterguard] C:\Programmer\SPYWAREfighter\spftray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\dzzfzdldslmbh.dll
O12 - Plugin for .spop: C:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted IP range: 206.161.125.149
O16 - DPF: {1221EA33-878F-4672-B799-05DAAF1298CF} (sysinfo1 Class) - http://resources.tele2.dk/privat/internet/pctest/systeminfo1.dll
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} - http://www.t058.com/b/Click_Yes_to_Continue.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: partnershipreg - C:\Documents and Settings\All Users\Dokumenter\Settings\partnership.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Symantec Corporation - C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: SPYWAREfighterRP - SpamFighter APS - C:\Programmer\SPYWAREfighter\spfprc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Martin/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 7718 bytes

----------------------------------------------------------------------------------
Avatar billede tafkab Nybegynder
03. maj 2007 - 17:36 #7
Hvis ikke du har problemer så lad O10 være, men jeg ville gerne have set loggen fra Superantispyware.

Kender du denne IP: O15 - Trusted IP range: 206.161.125.149 hvis ikke så fix lige den med Hijackthis.
Avatar billede tafkab Nybegynder
06. maj 2007 - 20:19 #8
Er du her stadig?
Avatar billede lillekiller Nybegynder
07. maj 2007 - 15:56 #9
ja jeg er her, pcen står bare ikke hjemme hos mig selv :-) har kommer loggen fra anti spyware... der er stadig ting der skal fjernes ..
SUPERAntiSpyware Scan Log
Generated 05/03/2007 at 04:24 PM

Application Version : 3.5.1016

Core Rules Database Version : 3230
Trace Rules Database Version: 1241

Scan type      : Complete Scan
Total Scan Time : 00:28:01

Memory items scanned      : 210
Memory threats detected  : 2
Registry items scanned    : 5247
Registry threats detected : 57
File items scanned        : 28068
File threats detected    : 98

Trojan.Net-Partnership/WL-Resident
    C:\DOCUMENTS AND SETTINGS\ALL USERS\DOKUMENTER\SETTINGS\PARTNERSHIP.DLL
    C:\DOCUMENTS AND SETTINGS\ALL USERS\DOKUMENTER\SETTINGS\PARTNERSHIP.DLL

Trojan.Downloader-MSNETAX
    C:\WINDOWS\SYSTEM32\DZZFZDLDSLMBH.DLL
    C:\WINDOWS\SYSTEM32\DZZFZDLDSLMBH.DLL

Adware.Tracking Cookie
    C:\Documents and Settings\Martin\Cookies\martin@cpvfeed[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@tripod.lycos[1].txt
    C:\Documents and Settings\Martin\Cookies\martin@track.adform[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@adtech[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@mb[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@sex-blust[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@doubleclick[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@adserver.adtech[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@bs.serving-sys[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@imrworldwide[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@www.sestat[1].txt
    C:\Documents and Settings\Martin\Cookies\martin@www.sex-xvideo[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@msnportal.112.2o7[1].txt
    C:\Documents and Settings\Martin\Cookies\martin@newmediadriver[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@st[3].txt
    C:\Documents and Settings\Martin\Cookies\martin@overture[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@mediaplex[1].txt
    C:\Documents and Settings\Martin\Cookies\martin@statse.webtrendslive[2].txt
    C:\Documents and Settings\Martin\Cookies\martin@adbrite[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@statse.webtrendslive[2].txt
    C:\Documents and Settings\SØS OG MARTIN\Cookies\søs_og_martin@stats.drivecleaner[2].txt
    C:\Documents and Settings\SØS OG MARTIN\Cookies\søs_og_martin@track.adform[1].txt
    C:\WINDOWS\Temp\Cookies\søs og martin@adopt.hbmediapro[1].txt
    C:\WINDOWS\Temp\Cookies\søs og martin@adopt.hotbar[1].txt
    C:\WINDOWS\Temp\Cookies\søs og martin@azjmp[2].txt
    C:\WINDOWS\Temp\Cookies\søs og martin@dist.belnk[2].txt
    C:\WINDOWS\Temp\Cookies\søs og martin@optimost[2].txt
    C:\WINDOWS\Temp\Cookies\søs og martin@xiti[1].txt

Adware.Vundo Variant
    HKCR\CLSID\{1557B435-8242-4686-9AA3-9265BF7525A4}
    HKCR\CLSID\{1557B435-8242-4686-9AA3-9265BF7525A4}\InprocServer32
    HKCR\CLSID\{1557B435-8242-4686-9AA3-9265BF7525A4}\InprocServer32#ThreadingModel

Trojan.Downloader-IEDrives
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}\InprocServer32
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}\InprocServer32#ThreadingModel
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}\ProgID
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}\Programmable
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}\TypeLib
    HKCR\CLSID\{366B2151-E1C7-44A3-86A3-E5686C2A3D2F}\VersionIndependentProgID

Trojan.BraveSentry
    HKU\.DEFAULT\Software\Brave-Sentry
    HKU\S-1-5-18\Software\Brave-Sentry
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Brave-Sentry
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Brave-Sentry#DisplayIcon
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Brave-Sentry#DisplayName
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Brave-Sentry#URLInfoAbout
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Brave-Sentry#HelpLink
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Brave-Sentry#UninstallString

Trojan.Media-Codec
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Alert Popup
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Alert Popup#DisplayName
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Alert Popup#UninstallString

Trojan.Downloader-MS IE Updater
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER#NextInstance
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000#Service
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000#Legacy
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000#ConfigFlags
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000#Class
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000#ClassGUID
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER\0000#DeviceDesc
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater#Type
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater#Start
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater#ErrorControl
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater#ImagePath
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater#DisplayName
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater#ObjectName
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater\Security
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater\Security#Security
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater\Enum
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater\Enum#0
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater\Enum#Count
    HKLM\SYSTEM\CurrentControlSet\Services\Microsoft IE Updater\Enum#NextInstance

Trojan.Net-Partnership/WL
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\partnershipreg
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\partnershipreg#Startup
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\partnershipreg#Impersonate
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\partnershipreg#Asynchronous
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\partnershipreg#DllName

Trojan.Net-UpdateN
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2#NextInstance
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000#Service
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000#Legacy
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000#ConfigFlags
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000#Class
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000#ClassGUID
    HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICROSOFT_IE_UPDATER2\0000#DeviceDesc

Trojan.Downloader-Gen/Jump
    C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOKALE INDSTILLINGER\TEMP\XA5.TMP
    C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOKALE INDSTILLINGER\TEMP\XA9.TMP
    C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOKALE INDSTILLINGER\TEMP\XAE.TMP
    C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOKALE INDSTILLINGER\TEMP\XB2.TMP
    C:\WINDOWS\TEMP\X9C.TMP
    C:\WINDOWS\TEMP\XA2.TMP
    C:\WINDOWS\TEMP\XAB.TMP

Browser Hijacker.Favorites
    C:\DOCUMENTS AND SETTINGS\SØS OG MARTIN\FORETRUKNE\ONLINE SECURITY TEST.URL

Trojan.Unknown Origin
    C:\DOCUMENTS AND SETTINGS\SØS OG MARTIN\LOKALE INDSTILLINGER\TEMP\INSTALL.BAT
    C:\DOCUMENTS AND SETTINGS\SØS OG MARTIN\LOKALE INDSTILLINGER\TEMP\INSTALL2.BAT
    C:\DOCUMENTS AND SETTINGS\SØS OG MARTIN\LOKALE INDSTILLINGER\TEMP\START-SOFT.BAT
    C:\WINDOWS\TEMP\INSTALL2.BAT

Unclassified.Unknown Origin
    C:\DOCUMENTS AND SETTINGS\SØS OG MARTIN\LOKALE INDSTILLINGER\TEMP\LAF42.TMP
    C:\DOCUMENTS AND SETTINGS\SØS OG MARTIN\LOKALE INDSTILLINGER\TEMP\LAF45.TMP

Trojan.Downloader-Gen/LIB
    C:\VUNDOFIX BACKUPS\JYGDERLE.DLL.BAD

Trojan.Downloader-Gen/HardFall
    C:\VUNDOFIX BACKUPS\TUVUT.DLL.BAD

Trojan.VideoCach/Gen
    C:\WINDOWS\TEMP\4586\ACEXE.EXE

Trojan.Spam-RUCrzy
    C:\WINDOWS\TEMP\M1-008-ANG.EXE

Trojan.Downloader-WinSock64/Fake
    C:\WINDOWS\WINSOCK64.DLL

Trojan.Downloader-System/S
    C:\WMPLAYER.DLL

Trace.Known Threat Sources
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\1303[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\crldr[7]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\tpktskend[7].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\install_cong1[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\33[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\33[5]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\1303[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\33[3]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\33[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\crldr[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\1303[3]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\br1_v117_241[2]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\loader[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\install_conga1[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\tpktskend[2].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\spam[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\33[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\install_cong1[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\karapuz[2]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\33[2]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\spam[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\tpktskend[2].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\crldr[7]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\br1_v117_241[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\tpktskend[1].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\tpktskend[4].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\33[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\install_cong1[6]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\video123[1].exe
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\tpktskend[2].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\1303[4]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\33[7]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\tpktsk2[3].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\br1_v117_241[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\karapuz[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\33[12]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\video123[1].exe
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\crldr[5]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\1303[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\1303[13]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\33[2]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\1303[20]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\file[1]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\1303[2]
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\WV4HAP4T\tpktskend[5].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\YJY1U3WD\tpktskend[8].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\KXABO1E3\tpktskend[6].htm
    C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\M3GBO9OX\tpktskend[7].htm
Avatar billede lillekiller Nybegynder
07. maj 2007 - 15:58 #10
kender ikk den ip adresse, måske er det noget med det modem der sidder i maskinen..
Avatar billede tafkab Nybegynder
07. maj 2007 - 19:51 #11
Så fix lige den her

O20 - Winlogon Notify: partnershipreg - C:\Documents and Settings\All Users\Dokumenter\Settings\partnership.dll

med hijackthis og kom med en ny log derfra, men indtil videre ser det fornuftigt ud.
Avatar billede lillekiller Nybegynder
08. maj 2007 - 21:48 #12
hej igen, jeg kan ikk finde den linie 020 du nævner. har kørt super antispyware i fejl sikret tilstand, og den finder stadig en trojansk hest ! osse trend online scanning finder en trojaner ! Her er loggen for i dag..
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 21:02:28, on 8-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmer\Fælles filer\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmer\SPYWAREfighter\spftray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmer\SPYWAREfighter\spfprc.exe
C:\Documents and Settings\Martin\Skrivebord\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [Recguard] C:\Programmer\HP\recguard.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [spywarefighterguard] C:\Programmer\SPYWAREfighter\spftray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programmer\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\zpn.dll' missing
O12 - Plugin for .spop: C:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted IP range: 206.161.125.149
O16 - DPF: {1221EA33-878F-4672-B799-05DAAF1298CF} (sysinfo1 Class) - http://resources.tele2.dk/privat/internet/pctest/systeminfo1.dll
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} - http://www.t058.com/b/Click_Yes_to_Continue.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Symantec Corporation - C:\Programmer\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmer\Fælles filer\Symantec Shared\SNDSrvc.exe
O23 - Service: SPYWAREfighterRP - SpamFighter APS - C:\Programmer\SPYWAREfighter\spfprc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Martin/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 6252 bytes
Avatar billede lillekiller Nybegynder
09. maj 2007 - 15:05 #13
Er der ingen der har tid til at kigge på loggen ? På forhånd tak :-)
Avatar billede tafkab Nybegynder
09. maj 2007 - 19:36 #14
Hvor finder SAS noget henne nu? Gerne en sti og et filnavn.
Avatar billede lillekiller Nybegynder
14. maj 2007 - 22:17 #15
Hej undskyld det sene svar. Jeg fik renset maskinen, og slap for ny windows, mange tak for hjælpen. Gider du smide et svar så får du dine velfortjente points :-)
Avatar billede tafkab Nybegynder
15. maj 2007 - 17:33 #16
Det gør jeg da lige :-)
Avatar billede lillekiller Nybegynder
18. maj 2007 - 14:52 #17
takker for hjælpen .. god week
Avatar billede tafkab Nybegynder
18. maj 2007 - 19:30 #18
Tak for point og god weekend til dig også
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
Se alle it-kurser fra Computerworld Kurser
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.
Se alle it-kurser

Flere spørgsmål fra Windows kategorien

Titel Indlæg Oprettet Seneste aktivitet
Windows 10 Home 22H2 produktnøgle Af Uvanga i Windows 10 06/08/202617:10 10/08/202613:14
Windows 10 Home 22H2 produktnøgle Af Uvanga i Windows 1 06/08/202617:10 06/08/202618:35
Microsoft har igen ødelagt mit højreklik Af valby i Windows 4 01/08/202609:38 01/08/202611:59
Mapperne Dokumenter og Overførsler er forsvundet efter geninstallation af Win11 Af bragger i Windows 8 27/07/202613:58 28/07/202619:34
WINDOWS KOMPABILITET Af snestrup2000 i Windows 21 23/07/202615:10 31/07/202610:53
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester

Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
I går 10:21 Ny printer, men hvilken Af mort1 i Printere
13/0819:41 USB på Linux Af Uvanga i Linux
12/0818:26 Hvilken type mus Af mort1 i PC
11/0813:21 ms Forms Af leahcim i Andet software
10/0821:30 Blokeret på Snapchat? Af LineP i Chat & Messaging
White papers
Flere white papers »