![]() |
| |||||||
|
![]() |
| | Thread Tools |
|
#1
| |||
| |||
| Var på linje skriftligt en e-mail en havde dette ske. Jeg fik, hvad der lignede lille note kortet går fra hjørne til hjørne med en lille blå firkant i øverste venstre hjørne og en blå linje, der løber gennem dem. Alle ikoner forsvundet, tastatur og mus ikke ville arbejde. Den eneste måde jeg kunne fjerne det var at slukke for strømmen. Da jeg kom hjem fra arbejde og vendte computeren tilbage på alt, hvad jeg får, er en sort skærm. Så jeg har prøvet alle de følgende. Første fjernet kablet til at overvåge og få testen lys på skærmen. indskrev den med den gamle pc, og det fungerer fint. Så måtte fjerne CPU fan (den ene på denne pc er som en blæser mere end en fan.) Jeg vanlig at se, om jeg kunne høre processor ventilator arbejder. Det er i orden nobel. Så jeg ville prøve en memtest men kunne ikke få noget på moniter så jeg ved ikke, om det var at køre eller ej. Fjernet al magt til pc'en og batteriet for dette ville gøre det bip. fik ingen beep, når spændingen blev hooked op igen. Og jeg har også bemærket, at når alle kabler er tilsluttet og der er tændt på tastaturet og musen virker ikke .. Når jeg får virus software downloades i den gamle pc jeg vil kontrollere, om harddisken stadig virker. Som for hijacks fil jeg havde kørt en lige inden dette skete, men det var med WinPatrol, og det blev gemt til fil. Hvis jeg kan få harddisken til at arbejde i den gamle computer, jeg vil sende den. |
|
#2
| |||
| |||
| Med logfiler kan vi ikke træffe en afgørelse, hvis det er malware eller ej. |
|
#3
| |||
| |||
| Vil arbejde på at få logfil. Harddisk dosis arbejde i gamle computer. |
|
#4
| |||
| |||
| Her er den log, der blev kørt lige før styrtet. Log oprettet af WinPatrol PLUS version 16.0.2009.2:16.0.2009.2 Scan gemt kl 11:57:58 PM, den 5/13/2009 Platform: Windows XP SP3 Service Pack 3 (Build 2600) MSIE: Internet Explorer (8.00.6001.18372) Boot mode: Normal Kørende processer: C: \ WINDOWS \ system32 \ smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ Lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Programmer \ Comodo \ Comodo Internet Security \ cmdagent.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ Programmer \ Fælles filer \ AOL \ ACS \ AOLacsd.exe C: \ Programmer \ Fælles filer \ AOL \ TopSpeed \ 2.0 \ aoltsmon.exe C: \ WINDOWS \ ARSERVICE.EXE C: \ WINDOWS \ explorer.exe C: \ WINDOWS \ system32 \ bgsvcgen.exe C: \ WINDOWS \ ehome \ ehrecvr.exe C: \ WINDOWS \ ehome \ ehSched.exe C: \ Programmer \ SPOTMAU WINCARES 2007 \ FOLDERPROTECTSERVICE.EXE C: \ Programmer \ Java \ jre6 \ bin \ jqs.exe C: \ Programmer \ MALWAREBYTES "anti-malware \ MBAMSERVICE.EXE C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ Programmer \ Fælles filer \ NYE BOUNDRY \ PrismXL \ PRISMXL.SYS C: \ WINDOWS \ system32 \ atwtusb.exe C: \ WINDOWS \ ehome \ ehtray.exe C: \ Programmer \ DIGITAL MEDIA READER \ READERICON45G.EXE C: \ WINDOWS \ RTHDCPL.exe C: \ WINDOWS \ arpwrmsg.exe C: \ Programmer \ LEXMARK 5200 SERIES \ lxbtbmgr.exe C: \ WINDOWS \ ehome \ ehmsas.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Programmer \ QuickTime \ qttask.exe C: \ Programmer \ LEXMARK 5200 SERIES \ lxbtbmon.exe C: \ Programmer \ Fælles filer \ AOL \ 1229613011 \ EE \ AOLSOFTWARE.EXE C: \ Programmer \ Comodo \ SafeSurf \ cssurf.exe C: \ Programmer \ Comodo \ Comodo Internet Security \ cfp.exe C: \ Programmer \ Java \ jre6 \ bin \ jusched.exe C: \ WINDOWS \ system32 \ WTMKM.exe C: \ Programmer \ Fælles filer \ Ulead SYSTEMER \ AUTODETECTOR \ Monitor.exe C: \ Programmer \ BILLP STUDIOS \ WINPATROL \ WINPATROL.EXE C: \ Programmer \ Messenger \ msmsgs.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ WINDOWS \ system32 \ SEARCHINDEXER.EXE C: \ Programmer \ FILEHIPPO.COM \ UPDATECHECKER.EXE C: \ Programmer \ FINEPIXVIEWER \ QUICKDCF2.EXE C: \ Programmer \ Windows Desktop Search \ WINDOWSSEARCH.EXE C: \ WINDOWS \ system32 \ dllhost.exe C: \ Programmer \ America Online 9.0 \ waol.exe C: \ Programmer \ America Online 9.0 \ shellmon.exe C: \ Programmer \ BILLP STUDIOS \ WINPATROL \ WINPATROLEX.EXE R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comodo.com/search/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Link Helper - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Programmer \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll O2 - BHO: VIPTToolbarManager Class - (1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D) - C: \ Programmer \ Visual IP Trace 2008 \ VisualIPTraceIE.dll O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - C: \ Programmer \ AskBarDis \ bar \ bin \ askBar.dll O2 - BHO: EntDownloadHelper Class - (2956DD50-4F3E-4C20-81D1-FF36435FF288) - C: \ Programmer \ Enterra \ Download Manager \ edm.dll O2 - BHO: AOL Toolbar Loader - (7C554162-8CB7-45A4-B8F4-8EA1C75885F9) - C: \ Programmer \ AOL Toolbar \ aoltb.dll O2 - BHO: URLHooker2 Class - (93935F7F-9C88-42F8-8445-95251D27FABC) - C: \ Programmer \ Flash Video Downloader \ URLHooker.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ Programmer \ Google \ googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Programmer \ Google \ GoogleToolbarNotifier \ 2.1.1119.1736 \ s wg.dll O2 - BHO: CBrowserHelperObject Object - (CA6319C0-31B7-401E-A518-A07C3DB8F777) - C: \ Windows \ system32 \ BAE.dll O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Programmer \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl Class - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Programmer \ Java \ jre6 \ lib \ indsætte \ jqs \ dvs \ jqs_plugin.dll O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ Programmer \ Google \ googletoolbar2.dll O3 - Toolbar: Enterra Download Manager - (B5147546-9359-4D9B-8B36-F54C54555799) - C: \ Programmer \ Enterra \ Download Manager \ edm.dll O3 - Toolbar: Visual IP Trace - (E70C26AE-DFF1-40A8-8D37-19180F56F0AA) - C: \ Programmer \ Visual IP Trace 2008 \ VisualIPTraceIE.dll O3 - Toolbar: AOL Toolbar - (DE9C389F-3316-41A7-809B-AA305ED9D922) - C: \ Programmer \ AOL Toolbar \ aoltb.dll O3 - Toolbar: Ask Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - C: \ Programmer \ AskBarDis \ bar \ bin \ askBar.dll O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ ehome \ ehtray.exe O4 - HKLM \ .. \ Run: [readericon] C: \ Programmer \ Digital Media Reader \ readericon45G.exe O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE O4 - HKLM \ .. \ Run: [Lexmark 5200 serien] C: \ Programmer \ Lexmark 5200 serien \ lxbtbmgr.exe O4 - HKLM \ .. \ Run: [LXBTCATS] rundll32 C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ LXBTtim e.dll, _RunDLLEntry @ 16 O4 - HKLM \ .. \ Run: [QuickTime Task] C: \ Programmer \ QuickTime \ qttask.exe-atboottime O4 - HKLM \ .. \ Run: [NvMediaCenter] C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [HostManager] C: \ Programmer \ Fælles filer \ AOL \ 1229613011 \ EE \ AOLSoftware.exe O4 - HKLM \ .. \ Run: [AOLDialer] C: \ Programmer \ Fælles filer \ AOL \ ACS \ AOLDial.exe O4 - HKLM \ .. \ Run: [Pure Networks Port Magic] C: \ PROGRA ~ 1 \ PURENE ~ 1 \ PORTMA ~ 1 \ PortAOL.exe-Run O4 - HKLM \ .. \ Run: [REGSHAVE] C: \ Programmer \ REGSHAVE \ REGSHAVE.EXE / AutoRun O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [Windows Defender] C: \ Programmer \ Windows Defender \ MSASCui.exe-hide O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] C: \ Programmer \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe O4 - HKLM \ .. \ Run: [Malwarebytes' Anti-Malware] C: \ Programmer \ Malwarebytes' Anti-Malware \ mbamgui.exe / starttray O4 - HKLM \ .. \ Run: [Comodo SafeSurf] C: \ Programmer \ Comodo \ SafeSurf \ cssurf.exe-s O4 - HKLM \ .. \ Run: [Comodo Internet Security] C: \ Programmer \ Comodo \ Comodo Internet Security \ cfp.exe-h O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] C: \ Programmer \ Java \ jre6 \ bin \ jusched.exe O4 - HKLM \ .. \ Run: [MacrokeyManager] WTMKM.exe O4 - HKLM \ .. \ Run: [Ulead AutoDetector v2] C: \ Programmer \ Common Files \ Ulead Systems \ AutoDetector \ Monitor.exe O4 - HKLM \ .. \ Run: [WinPatrol PLUS] C: \ Programmer \ BillP Studios \ WinPatrol \ winpatrol.exe-expressboot O4 - HKLM \ .. \ RunOnce: [NSSInstallation] C: \ WINDOWS \ system32 \ Adobe \ Shockwave 11 \ nssstub.exe / RunOnce O4 - HKCU \ .. \ Run: [MSMSGS] C: \ Programmer \ Messenger \ msmsgs.exe / baggrund O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [filehippo.com] C: \ Programmer \ filehippo.com \ UpdateChecker.exe / baggrund O4 - Global Startup: ExifLauncher2.lnk = C: \ Programmer \ FinePixViewer \ QuickDCF2.exe O4 - Global Startup: Windows Search.lnk = C: \ Programmer \ Windows Desktop Search \ WindowsSearch.exe O8 - Extra sammenhæng menupunktet: & AOL Toolbar Search - C: \ Documents and Settings \ All Users \ Application Data \ AOL \ ieToolbar \ ressourcer \ da-DK \ lokale \ search.html O8 - Extra sammenhæng menupunktet: & Download af Enterra Download Manager - res: / / C: \ Programmer \ Enterra \ Download Manager \ edm.dll/3000 O9 - Ekstra knap: Enterra Download Manager - (1AB6CC97-17C1-4207-BC51-5C9D435A338E) - res: / / C: \ Programmer \ Enterra \ Download Manager \ edm.dll/3002 O9 - Extra knappen: (no name) - (85d1f590-48F4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe O9 - Extra 'Tools' MENUITEM: Uninstall BitDefender Online Scanner V8 - (85d1f590-48F4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe O9 - Ekstra knap: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Programmer \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Programmer \ Messenger \ msmsgs.exe O9 - Ekstra knap: FWI Svig Shield - (44E50755-EAC0-49ea-B52D-37372157D100) - C: \ Programmer \ FWI \ FraudShield \ FWIFraudShield.exe (HKCU) O9 - Ekstra knap: Flash Video Downloader - (df7831dd-a048-4336-8cc8-266a03f00d63) - C: \ Programmer \ Flash Video Downloader \ FlashRunner.exe (HKCU) O11 - Valg gruppe: [Java (søndag)] Java (søndag) - C: \ Programmer \ Java \ jre6 \ bin O11 - Valg gruppe: [] -- O14 - IERESET.INF: START_PAGE_URL = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome O14 - IERESET.INF: SEARCH_PAGE_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch O14 - IERESET.INF: HKCU, Start Page =% START_PAGE_URL% O14 - IERESET.INF: HKLM, Default_Page_URL =% START_PAGE_URL% O14 - IERESET.INF: HKLM, Default_Search_URL =% SEARCH_PAGE_URL% O14 - IERESET.INF: HKLM, Search Page =% SEARCH_PAGE_URL% O14 - IERESET.INF: HKCU, Search Page =% SEARCH_PAGE_URL% O15 - Trusted Zone: aol.com O16 - DPF: (5ED80217-570B-4DA9-BF44-BE107C0EC166) (Windows Live Safety Center Base Module) -- http://cdn.scan.onecare.live.com/res...scbase5036.cab O16 - DPF: (8AD9C840-044E-11D1-B3E9-00805F499D93) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (A90A5822-F108-45AD-8482-9BC8B12DD539) (Crucial cpcScan) -- http://www.crucial.com/controls/cpcScanner.cab O16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses klasse) -- http://www.superadblocker.com/activex/sabspx.cab O16 - DPF: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) (a-squared Scanner) -- http://ax.emsisoft.com/asquared.cab O16 - DPF: (CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA) (Java Plug-in 1.5.0_02) -- http://java.sun.com/update/1.5.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA) (Java Plug-in 1.6.0_05) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA) (Java Plug-in 1.6.0_07) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (E8F628B5-259A-4734-97EE-BA914D7BE941) (Driver Agent ActiveX Control) -- http://plugin.driveragent.com/files/driveragent.cab O21 - WPDShServiceObj - WPDShServiceObj Class - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll O23 - Service: AOL Tilslutningsmuligheder Service - AOL LLC - C: \ Programmer \ Fælles filer \ AOL \ ACS \ AOLacsd.exe O23 - Service: AOL TopSpeed Monitor - America Online, Inc - C: \ Programmer \ Fælles filer \ AOL \ TopSpeed \ 2.0 \ aoltsmon.exe O23 - Service: B's Recorder GOLD Library General Service - BHA Corporation - C: \ WINDOWS \ system32 \ bgsvcgen.exe O23 - Service: Comodo Internet Security Helper Service - - C: \ Programmer \ Comodo \ Comodo Internet Security \ cmdagent.exe O23 - Service: FolderProtectService - - C: \ Programmer \ Spotmau WinCares 2007 \ FolderProtectService.exe O23 - Service: Google Updater Service - Google - C: \ Programmer \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: Java Quick Starter - - C: \ Programmer \ Java \ jre6 \ bin \ jqs.exe-service-config C: \ Programmer \ Java \ jre6 \ lib \ indsætte \ jqs \ jqs.conf O23 - Service: lxbt_device - - C: \ WINDOWS \ system32 \ lxbtcoms.exe-service O23 - Service: MBAMService - Malwarebytes Corporation - C: \ Programmer \ Malwarebytes' Anti-Malware \ mbamservice.exe O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: WTService - - C: \ WINDOWS \ system32 \ atwtusb.exe-s --- Yderligere WinPatrol Info --- Default Browser: Windows ® Internet Explorer - Internet Explorer version 8.00.6001.18372 MSIE: Internet Explorer (8.00.6001.18372) 25 IE cookies i mappe: C: \ Documents and Settings \ Owner.YOUR-DC0C6E8137 \ Cookies \ WP00 - HKLM \ CS1: BootExecute = AutoCheck autochk * WP00 - HKLM \ CCS: BootExecute = AutoCheck autochk * WP00 - HKLM \ CS2: BootExecute = AutoCheck autochk * WP00 - HKLM \ CS3: BootExecute = AutoCheck autochk * WP02 - HKLM \ CCS: Command = C: \ WINDOWS \ system32 \ cmd.exe WP03 - Windows Automatic Update = 4: Automatisk hente anbefalede opdateringer til min computer og installere dem. WP08 - HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ URL \ DefaultPrefix: Standard = http:// WP08 - HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ URL \ præfikser: www = http:// WP31 - Planlagte opgaver: [Uniblue SpeedUpMyPC.job] C: \ Programmer \ Uniblue \ SpeedUpMyPC 3 \ SpeedUpMyPC.exe Aldrig WP31 - Planlagte opgaver: [Uniblue SpeedUpMyPC Nag.job] C: \ Programmer \ Uniblue \ SpeedUpMyPC 3 \ SpeedUpMyPC.exe Aldrig WP31 - Planlagte opgaver: [NSSstub.job] C: \ WINDOWS \ system32 \ Adobe \ Shockwave 11 \ nssstub.exe 05/13/2009 11:30 PM WP31 - Planlagte opgaver: [Driver Robot.job] C: \ Programmer \ Driver Robot \ DriverRobot.exe Aldrig WP31 - Planlagte opgaver: [Basic clean-up.job] C: \ Programmer \ Panda Security \ Panda Global Protection 2009 \ PlaTasks.exe Aldrig WP31 - Planlagte opgaver: [User_Feed_Synchronization-(FD03A801-5427-4516-93CD-BC74874B5889). Job] C: \ WINDOWS \ system32 \ msfeedssync.exe 05/13/2009 11:42 PM WP16 - ActiveX: (00EF2092-6AC5-47C0-BD25-CF2D5D657FEB) [Google Script Object] C: \ Programmer \ Google \ GOOGLETOOLBAR2.DLL 4, 0, 1601, 4978 WP16 - ActiveX: (17492023-C23A-453E-A040-C7C580BBF700) [Windows Genuine Advantage Validation Tool] C: \ WINDOWS \ system32 \ LegitCheckControl.dll 1.7.0069.2 WP16 - ActiveX: (19916E01-B44E-4E31-94A4-4696DF46157B) [InformationCardSigninHelper klasse] C: \ WINDOWS \ system32 \ icardie.dll 8.00.6001.18372 WP16 - ActiveX: (25336920-03F9-11CF-8FD0-00AA00686F13) [HTML Document] C: \ WINDOWS \ system32 \ mshtml.dll 8.00.6001.18372 WP16 - ActiveX: (2933BF90-7B36-11D2-B20E-00C04F983E60) [XML DOM Document] C: \ WINDOWS \ system32 \ msxml3.dll 8.100.1048.0 WP16 - ActiveX: (2D360201-FFF5-11D1-8D03-00A0C959BC0A) [DHTML Edit Control Safe for Scripting for IE5] C: \ Programmer \ Fælles filer \ Microsoft Shared \ Triedit \ dhtmled.ocx 6.01.9234 WP16 - ActiveX: (48123BC4-99D9-11D1-A6B3-00C04FD91555) [XML-dokument] C: \ WINDOWS \ system32 \ msxml3.dll 8.100.1048.0 WP16 - ActiveX: (4E430174-1673-4FF3-BF28-A3B37F6573E7) [Windows Desktop Search Combo Control] C: \ Programmer \ Windows Desktop Search \ wdsShell.dll 7.0.6001.16503 WP16 - ActiveX: (4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (4EDCB26C-D24C-4e72-AF07-B576699AC0DE) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (63610B21-6B0D-46C5-909D-3BD000B9A5A9) [ToolbarParams klasse] C: \ Programmer \ AOL TOOLBAR \ aoltb.dll 5.13.4.1 WP16 - ActiveX: (6414512B-B978-451D-A0D8-FCFDF33E833C) [WUWebControl Class] C: \ WINDOWS \ system32 \ wuweb.dll 7.2.6001.788 WP16 - ActiveX: (6BF52A52-394A-11D3-B153-00C04F79FAA6) [Windows Media Player] C: \ WINDOWS \ system32 \ Wmp.dll 11.0.5721.5260 WP16 - ActiveX: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) [MUWebControl Class] C: \ WINDOWS \ system32 \ muweb.dll 7.2.6001.788 WP16 - ActiveX: (72267F6A-A6F9-11D0-BC94-00C04FB67863) [Active Desktop Mover] C: \ WINDOWS \ system32 \ shell32.dll 6.00.2900.5622 WP16 - ActiveX: (7390f3d8-0439-4c05-91e3-cf5cb290c3d0) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (75565ED2-1560-4F15-B841-20358DE6A0D1) [ImageControl klasse] C: \ WINDOWS \ system32 \ mfimgvwr.ocx 2.0.0.1 WP16 - ActiveX: (7584c670-2274-4efb-b00b-d6aaba6d3850) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (8856F961-340a-11D0-A96B-00C04FD705A2) [Microsoft Web Browser] C: \ WINDOWS \ system32 \ ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (88D969C0-F192-11D4-A65F-0040963251E5) [XML DOM Document 4,0] C: \ WINDOWS \ system32 \ Msxml4.dll 4.20.9870.0 WP16 - ActiveX: (88D969C5-F192-11D4-A65F-0040963251E5) [XML HTTP 4.0] C: \ WINDOWS \ system32 \ Msxml4.dll 4.20.9870.0 WP16 - ActiveX: (88D969EA-F192-11D4-A65F-0040963251E5) [XML HTTP 5.0] C: \ Programmer \ Fælles filer \ Microsoft Shared \ Office11 \ msxml5.dll 5.20.1087.0 WP16 - ActiveX: (8AD9C840-044E-11D1-B3E9-00805F499D93) [Java Plug-in 1.6.0_13] C: \ Programmer \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (9059f30f-4eb1-4bd2-9fdc-36f43a218f4a) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) [SABScanProcesses klasse] C: \ WINDOWS \ Downloaded Program Files \ sabspx.dll 1.0.0.1 WP16 - ActiveX: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) [a-squared Scanner] C: \ WINDOWS \ Downloaded Program Files \ asquared.ocx 4.0.0.0 WP16 - ActiveX: (CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA) [Java Plug-in 1.6.0_05] C: \ Programmer \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA) [Java Plug-in 1.6.0_07] C: \ Programmer \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (CFBFAE00-17A6-11D0-99CB-00C04FD64497) [Microsoft Webadressesøgning Hook] C: \ WINDOWS \ system32 \ ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (D27CDB6E-AE6D-11CF-96B8-444553540000) [Shockwave Flash Object] C: \ WINDOWS \ system32 \ Macromed \ Flash \ Flash10b.ocx 10,0,22,87 WP16 - ActiveX: (DFEAF541-F3E1-4C24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Programmer \ Microsoft SILVERLIGHT \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (E8F628B5-259A-4734-97EE-BA914D7BE941) [Driver Agent ActiveX Control] C: \ WINDOWS \ Downloaded Program Files \ DRIVERAGENT.OCX 1.0.0.0 WP16 - ActiveX: (EA756889-2338-43DB-8F07-D1CA6FB9C90D) [IAOLTBSearch klasse] C: \ Programmer \ AOL TOOLBAR \ aoltb.dll 5.13.4.1 WP16 - ActiveX: (ED8C108E-4349-11D2-91A4-00C04F7969E8) [XML HTTP Request] C: \ WINDOWS \ system32 \ msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F5078F32-c551-11d3-89b9-0000f81fe221) [XML DOM Document 3,0] C: \ WINDOWS \ system32 \ msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F6D90F11-9C73-11D3-B32E-00C04F990BB4) [XML DOM Document] C: \ WINDOWS \ system32 \ msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F6D90F16-9C73-11D3-B32E-00C04F990BB4) [XML HTTP] C: \ WINDOWS \ system32 \ msxml3.dll 8.100.1048.0 WP16 - ActiveX: (DFEAF541-F3E1-4c24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Programmer \ Microsoft SILVERLIGHT \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: DFEAF541-F3E1-4c24-ACAC-99C30715084A [Microsoft Silverlight] C: \ Programmer \ Microsoft SILVERLIGHT \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (05589fa1-c356-11ce-bf01-00aa0055595a) [ActiveMovieControl Object] C: \ WINDOWS \ system32 \ wmpdxm.dll 11.0.5721.5145 WP16 - ActiveX: (0713E8A2-850A-101B-AFC0-4210102A8DA7) [Microsoft TreeView Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (0713E8D2-850A-101B-AFC0-4210102A8DA7) [Microsoft ProgressBar Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (233C1507-6A77-46A4-9443-F871F945D258) [Shockwave ActiveX Control] C: \ WINDOWS \ system32 \ Adobe \ Director \ SwDir.dll 11.5 WP16 - ActiveX: (17492023-C23A-453E-A040-C7C580BBF700) [Windows Genuine Advantage Validation Tool] C: \ WINDOWS \ system32 \ LegitCheckControl.dll 1.7.0069.2 WP16 - ActiveX: (1D2B4F40-1F10-11D1-9E88-00C04FDCAB92) [ThumbCtl klasse] C: \ WINDOWS \ system32 \ webvw.dll 6.00.2900.5512 WP16 - ActiveX: (DFEAF541-F3E1-4c24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Programmer \ Microsoft SILVERLIGHT \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (52A2AAAE-085D-4187-97EA-8C30DB990436) [HHCtrl Object] C: \ WINDOWS \ system32 \ Hhctrl.ocx 5.2.3790.4110 WP16 - ActiveX: (58DA8D8A-9D6A-101B-AFC0-4210102A8DA7) [Microsoft listevisning Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (58DA8D8F-9D6A-101B-AFC0-4210102A8DA7) [Microsoft Imagelist Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (6B7E638F-850A-101B-AFC0-4210102A8DA7) [Microsoft StatusBar Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (8856F961-340a-11D0-A96B-00C04FD705A2) [Microsoft Web Browser] C: \ WINDOWS \ system32 \ ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (8BD21D50-EC42-11CE-9E0D-00AA006002F3) [Microsoft Forms 2.0 OptionButton] C: \ WINDOWS \ system32 \ FM20.DLL 11.0.6550 WP16 - ActiveX: (AE24FDAE-03C6-11D1-8B76-0080C744F389) [Microsoft Scriptlet Component] C: \ WINDOWS \ system32 \ mshtml.dll 8.00.6001.18372 WP16 - ActiveX: (CA8A9780-280D-11CF-A24D-444553540000) [Adobe PDF Reader] C: \ Programmer \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroPDF.dll WP16 - ActiveX: (CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA) [RealPlayer G2 Control] C: \ WINDOWS \ system32 \ rmoc3260.dll 6.0.8.1266 WP16 - ActiveX: (D27CDB6E-AE6D-11CF-96B8-444553540000) [Shockwave Flash Object] C: \ WINDOWS \ system32 \ Macromed \ Flash \ Flash10b.ocx 10,0,22,87 WP16 - ActiveX: (E5DF9D10-3B52-11D1-83E8-00A0C90DC849) [WebViewFolderIcon klasse] C: \ WINDOWS \ system32 \ webvw.dll 6.00.2900.5512 WP32 - Skjulte Filer: C: \ boot.ini WP32 - Skjulte Filer: C: \ Io.sys WP32 - Skjulte Filer: C: \ Msdos.sys WP32 - Skjulte Filer: C: \ NTDETECT.COM WP32 - Skjulte Filer: C: \ ntldr WP32 - Skjulte Filer: C: \ pagefile.sys WP32 - Skjulte Filer: C: \ USER WP32 - Skjulte Filer: C: \ WINDOWS \ WindowsShell.Manifest WP32 - Skjulte Filer: C: \ WINDOWS \ winnt.bmp WP32 - Skjulte Filer: C: \ WINDOWS \ winnt256.bmp WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ cdplayer.exe.manifest WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ default.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ default.tmp.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ SAM.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ SAM.tmp.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ SECURITY.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ SECURITY.tmp.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ software.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ software.tmp.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ System.log WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ system.tmp.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ TempKey.LOG WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ config \ userdiff.LOG WP32 - Skjulte Filer: C: \ Windows \ System32 \ Drivers \ hosts WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ logonui.exe.manifest WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ ncpa.cpl.manifest WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ nwc.cpl.manifest WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ Restore \ filelist.xml WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ sapi.cpl.manifest WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ WindowsLogon.manifest WP32 - Skjulte Filer: C: \ WINDOWS \ system32 \ wuaucpl.cpl.manifest WP32 - Skjulte Filer: C: \ Programmer \ Common Files \ Services \ Thumbs.db WP32 - Skjulte Filer: C: \ boot.ini WP32 - Skjulte Filer: C: \ Io.sys WP32 - Skjulte Filer: C: \ Msdos.sys WP32 - Skjulte Filer: C: \ NTDETECT.COM WP32 - Skjulte Filer: C: \ ntldr WP32 - Skjulte Filer: C: \ pagefile.sys WP32 - Skjulte Filer: C: \ USER WP33 - Filtype. CAT: [Sikkerhed Catalog] rundll32.exe cryptext.dll, CryptExtOpenCAT% 1 WP33 - Filtype. Chm: [kompilerede HTML Hjælp-fil] C: \ WINDOWS \ hh.exe% 1 WP33 - Filtype. Com: [MS-DOS Application]% 1% * WP33 - Filtype. CMD: [Windows NT Kommando Script]% 1% * WP33 - Filtype. Eml: [Internet e-mail] C: \ Programmer \ Outlook Express \ msimn.exe / eml:% 1 WP33 - Filtype. EXE: [Ansøgning]% 1% * WP33 - Filtype. INF: [Setup Information] C: \ WINDOWS \ System32 \ Notepad.exe% 1 WP33 - Filtype. JS: [JScript scriptfil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtype. LOG: [Tekstdokument] C: \ WINDOWS \ system32 \ Notepad.exe% 1 WP33 - Filtype. MSI: [Windows Installer-pakke] C: \ WINDOWS \ System32 \ msiexec.exe / i% 1% * WP33 - Filtype. MID: [MIDI Sequence] C: \ Programmer \ Windows Media Player \ Wmplayer.exe / Open% L WP33 - Filtype. MP3: [MP3 format Sound] C: \ Programmer \ Windows Media Player \ Wmplayer.exe / prefetch: 6 / Open% L WP33 - Filtype. BFI: [Genvej til MS-DOS-program]% 1% * WP33 - Filtype. RAM: [RealPlayer File] C: \ Programmer \ Real \ RealPlayer \ RealPlay.exe / m audio / x-pn-RealAudio% 1 WP33 - Filtype. REG: [registreringsfil] regedit.exe% 1 WP33 - Filtype. RTF: [Rich Text Document] C: \ Programmer \ Windows NT \ Tilbehør \ WORDPAD.EXE% 1 WP33 - Filtype. SCR: [Screen Saver]% 1 / S WP33 - Filtype. TXT: [Tekstdokument] C: \ WINDOWS \ system32 \ Notepad.exe% 1 WP33 - Filtype. URL: [Internet Genvej] rundll32.exe ieframe.dll, OpenURL% l WP33 - Filtype. VBS: [VBScript scriptfil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtype. Vbe: [VBScript Encoded Script-fil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtype. Wsf: [Windows Script File] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtype. WSH: [Windows Script Host Indstillinger File] C: \ WINDOWS \ System32 \ WScript.exe% 1% * Hukommelse i brug i dag: 18% Fysisk hukommelse Gratis: 2097151 KB Sidefilen Gratis: 4194303 KB Virtual Memory Gratis: 2048264 KB -- Slutningen af filen |
|
#5
| |||
| |||
| Jeg kan ikke se noget, der vil være årsag til problemer, du har. Er du sikker på, at drevet ikke går dårligt? |
|
#6
| |||
| |||
| På dette tidspunkt alt muligt. Når du siger drev mener du HD for, der kører fint på den gamle computer? |
|
#7
| |||
| |||
| Yea HD. Kan du gøre en fuld virusscanning på det? Det ville være mere pålidelige derefter en HJT scanning. |
|
#8
| |||
| |||
| Sorry det tog så lang tid at komme tilbage EF. Havde problemer med den gamle computer. Hvad vil du have mig til at køre på dette tidspunkt vil jeg forsøge noget, men comboFix. |
|
#9
| |||
| |||
| Downloade DrWeb CureIt & Gemme den på dit skrivebord. Scan med DrWeb-CureIt som følger:
* Efter genstart, Højreklik på Det Dr.Web log på skrivebordet og vælge Åbn med> Notesblok * Kopier og indsæt at logge på det næste svar |
|
#10
| |||
| |||
| Vil gøre. ikke sikker på hvor lang tid det vil tage for mig at komme tilbage til Dem med betænkningen. Gamle computer ikke giver mig mulighed for at se froum. noget galt med IE7 men vil arbejde omkring at for tiden. |
![]() |
|
| Bogmærker |
Lignende Tråde | ||||
| Tråd | Thread Starter | Forum | Svar | Last Post |
| Virus Spørgsmål - Kan nogen fortælle mig, hvis jeg må have en virus | billozz | Virus, Spyware & Sikkerhed | 1 | 2 april 2009 13:58 |
| Mine venner MAC er en virus ... Umm ... yeah ... en virus ... | cheesepuff | Virus, Spyware & Sikkerhed | 3 | 29 oktober 2008 12:58 |
| Virus hjælp | jam90 | Virus, Spyware & Sikkerhed | 1 | 28 juli 2008 07:26 |
| Virus | lolli_pop | Virus, Spyware & Sikkerhed | 13 | 17 november 2007 09:42 |
| Virus? | carpious | Virus, Spyware & Sikkerhed | 12 | 6. maj 2007 09:49 |
| Thread Tools | |
| |