![]() |
|
#1
|
|||
|
|||
|
nylig min laptop har der kører langsomt, og det tager lang tid at starte op. Ikke kun det, men lyden whne jeg forsøger at afspille musik, der er gået virkelig underligt, al nervøsitet og også når jeg prøver at afspille en dvd-videoen er nervøs.
Jeg har log filer fra Hijack dette, Malwarebytes og SUPERAntiSpyware |
|
#2
|
|||
|
|||
|
Post logfilerne please.
|
|
#3
|
|||
|
|||
|
Her er mine log-filer til SUPERAntiSpyware, Malwarebytes og hijack denne
Malwarebytes' Anti-Malware 1.30 Database version: 1306 Windows 5.1.2600 Service Pack 2 04/11/2008 21:30:01 mbam-log-2008-11-04 (21-30-01). txt Scan type: Quick Scan Objekter skannet: 44.156 Tidsforbrug: 13 minutter (s), 7 sekunder (s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registreringsdatabasenøgler Inficerede: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (Nr. ondsindede elementer opdaget) Memory Modules Infected: (Nr. ondsindede elementer opdaget) Registreringsdatabasenøgler Inficerede: (Nr. ondsindede elementer opdaget) Registry Values Infected: (Nr. ondsindede elementer opdaget) Registry Data Items Infected: (Nr. ondsindede elementer opdaget) Folders Infected: (Nr. ondsindede elementer opdaget) Files Infected: (Nr. ondsindede elementer opdaget) Logfile af Trend Micro HijackThis v2.0.2 Scan gemt kl 22:40:44, den 04/11/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Kørende processer: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ Lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Programmer \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ Programmer \ Intel \ Wireless \ Bin \ EvtEng.exe C: \ Programmer \ Intel \ Wireless \ Bin \ S24EvMon.exe C: \ WINDOWS \ system32 \ LEXBCES.EXE C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ WINDOWS \ system32 \ LEXPPS.EXE C: \ Programmer \ Avira \ AntiVir PersonalEdition Classic \ sched.exe C: \ Programmer \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe C: \ Programmer \ Java \ jre6 \ bin \ jqs.exe C: \ Programmer \ Intel \ Wireless \ Bin \ RegSrvc.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Programmer \ Sony \ VAIO Event Service \ VESMgr.exe C: \ Programmer \ Apoint \ Apoint.exe C: \ WINDOWS \ system32 \ hkcmd.exe C: \ WINDOWS \ system32 \ igfxpers.exe C: \ Programmer \ Sony \ VAIO Power Management \ SPMgr.exe C: \ Programmer \ Sony \ VAIO Update 2 \ VAIOUpdt.exe C: \ Programmer \ Utimaco \ SafeGuard PrivateDisk \ pdservice.exe C: \ WINDOWS \ RTHDCPL.EXE C: \ Programmer \ Apoint \ Apntex.exe C: \ Programmer \ iTunes \ iTunesHelper.exe C: \ Programmer \ Lexmark 1200 Series \ lxczbmgr.exe C: \ Programmer \ Avira \ AntiVir PersonalEdition Classic \ avgnt.exe C: \ Programmer \ Windows Defender \ MSASCui.exe C: \ Programmer \ Java \ jre6 \ bin \ jusched.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Programmer \ Lexmark 1200 Series \ lxczbmon.exe C: \ Programmer \ DNA \ btdna.exe C: \ Programmer \ iPod \ bin \ iPodService.exe C: \ Programmer \ Internet Explorer \ iexplore.exe C: \ Programmer \ Internet Explorer \ iexplore.exe C: \ Programmer \ Trend Micro \ HijackThis \ HijackThis.exe C: \ Programmer \ Malwarebytes' Anti-Malware \ mbam.exe C: \ Programmer \ SUPERAntiSpyware \ SUPERAntiSpyware.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: AcroIEHlprObj Class - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Programmer \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Programmer \ Java \ jre6 \ bin \ ssv.dll O2 - BHO: GoogleAFE - (CA6319C0-31B7-401E-A518-A07C3DB8F777) - C: \ PROGRA ~ 1 \ GOOGLE ~ 1 \ GoogleAFE.dll O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Programmer \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Programmer \ Java \ jre6 \ lib \ indsætte \ jqs \ dvs \ jqs_plugin.dll O4 - HKLM \ .. \ Run: [Apoint] C: \ Programmer \ Apoint \ Apoint.exe O4 - HKLM \ .. \ Run: [igfxtray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [igfxhkcmd] C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [igfxpers] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [SonyPowerCfg] C: \ Programmer \ Sony \ VAIO Power Management \ SPMgr.exe O4 - HKLM \ .. \ Run: [ISBMgr.exe] C: \ Programmer \ Sony \ ISB Utility \ ISBMgr.exe O4 - HKLM \ .. \ Run: [VAIO Update 2] "C: \ Programmer \ Sony \ VAIO Update 2 \ VAIOUpdt.exe" / Stationære O4 - HKLM \ .. \ Run: [PDService.exe] C: \ Programmer \ Utimaco \ SafeGuard PrivateDisk \ pdservice.exe O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [Alcmtr] ALCMTR.EXE O4 - HKLM \ .. \ Run: [AzMixerSel] C: \ Programmer \ Realtek \ InstallShield \ AzMixerSel.exe O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Programmer \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Programmer \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [Lexmark 1200 Series] "C: \ Programmer \ Lexmark 1200 Series \ lxczbmgr.exe" O4 - HKLM \ .. \ Run: [avgnt] "C: \ Programmer \ Avira \ AntiVir PersonalEdition Classic \ avgnt.exe" / min O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Programmer \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Programmer \ Java \ jre6 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent DNA] "C: \ Programmer \ DNA \ btdna.exe" O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe (User 'Default user') O8 - Extra sammenhæng menupunktet: E & ksporter til Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ mikroer ~ 4 \ Office11 \ EXCEL.EXE/3000 O9 - Ekstra knap: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ mikroer ~ 4 \ Office11 \ REFIEBAR.DLL O9 - Ekstra knap: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Programmer \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Programmer \ Messenger \ msmsgs.exe Ø14 - IERESET.INF: START_PAGE_URL = http://www.club-vaio.com/en/ O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1225049667890 O20 - Winlogon Notify:! SASWinLogon - C: \ Programmer \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C: \ Programmer \ Avira \ AntiVir PersonalEdition Classic \ sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C: \ Programmer \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe O23 - Service: EvtEng - Intel Corporation - C: \ Programmer \ Intel \ Wireless \ Bin \ EvtEng.exe O23 - Service: Image Converter videooptagelse overvåge for VAIO Underholdning - Sony Corporation - C: \ Programmer \ Sony \ Image Converter 2 \ IcVzMon.exe O23 - Service: iPod Service - Apple Inc. - C: \ Programmer \ iPod \ bin \ iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Programmer \ Java \ jre6 \ bin \ jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C: \ WINDOWS \ system32 \ LEXBCES.EXE O23 - Service: MSCSPTISRV - Sony Corporation - C: \ Programmer \ Common Files \ Sony Shared \ AVLib \ MSCSPTISRV.exe O23 - Service: PACSPTISVR - Sony Corporation - C: \ Programmer \ Common Files \ Sony Shared \ AVLib \ PACSPTISVR.exe O23 - Service: RegSrvc - Intel Corporation - C: \ Programmer \ Intel \ Wireless \ Bin \ RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C: \ Programmer \ Intel \ Wireless \ Bin \ S24EvMon.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C: \ Programmer \ Common Files \ Sony Shared \ AVLib \ SPTISRV.exe O23 - Service: VAIO Event Service - Sony Corporation - C: \ Programmer \ Sony \ VAIO Event Service \ VESMgr.exe O23 - Service: VAIO Cooporated Initialisering (vci) - Sony Corporation - C: \ Programmer \ Sony \ VAIO samarbejdede Initialisering \ VCI_SVC.exe -- End of file - 7628 bytes SUPERAntiSpyware Scan Log http://www.superantispyware.com Genereret 11/04/2008 kl 06:09 Application Version: 4.21.1004 Core Rules Database Version: 3622 Trace Rules Database Version: 1606 Scan type: Complete Scan Total Scan Time: 06:14:50 Memory poster skannet: 396 Memory trusler opdaget: 0 Elementer i registreringsdatabasen skannet: 4.699 Topdomæneadministratoren trusler opdaget: 0 File poster skannet: 37.598 File trusler opdaget: 0 |
|
#4
|
|||
|
|||
|
Meget usandsynligt, dette er en malware problem. Du kan prøve udstationering i Windows-forum.
Der er et par ting, vi kan gøre her. StartupLite
---------- Downloade Deaktiver / Fjern Windows Messenger til skrivebordet for at fjerne Windows Messenger. Må ikke forveksle Windows Messenger med MSN Messenger fordi de ikke er de samme. Windows Messenger er en hyppig årsag til popups. Unzip filen på skrivebordet. Åbn MessengerDisable.exe og vælg den nederste boks -- Afinstaller Windows Messenger og klik Ansøge. Afslut ud af MessengerDisable derefter slette de to filer, der blev lagt på skrivebordet. Kør CCleaner. Foretag et nyt emne i Windows-forum. |
|
#5
|
||||||||||||
|
||||||||||||
|
Holde sig til en tråd for øjeblikket, udelukker malware derefter gå videre, da det ellers bare forvirrer tingene. Tak.
__________________
Mit system: Hybr! D
|
|
#6
|
|||
|
|||
|
Lyd, var bare gør som anvist.
Gjort malware ting, så tror jeg, så whats min næste rute? |
|
#7
|
|||
|
|||
|
Whoops, my bad, var ikke klar over evilfantasy havde reageret, kan du fortsætte med at skrive i vinduerne forum.
|