|
|
#1
15 maj 2009, 21:29
| |||
| |||
 Osäker om detta är ett virus eller BOSD Var på nätet skriftligen ett mail en hade detta. Jag har vad som såg ut som små not kortet går från hörn till hörn med en liten blå ruta i övre vänstra hörnet och en blå linje som går igenom dem. Alla ikoner försvann, tangentbord och mus inte skulle fungera. Det enda sättet jag kunde ta bort det var att slå av strömmen. När jag kom hem från jobbet och började datorn tillbaka på allt jag får är en svart skärm. Så jag har försökt med alla de följande. Första bort kabeln till monitorn och få testa ljus på monitorn. kontrolleras det med den gamla datorn och det fungerar bra. Då hade att ta bort CPU fläkten (den som på detta st är som en fläkt mer än en fläkt.) Jag gångbar för att se om jag kunde höra processor fläkten fungerar. Det fungerar bra. Då var jag ska försöka ett memtest men kunde inte få något på moniter så jag vet inte om det var att köra eller inte. Tog bort all ström till datorn och batteriet för detta skulle göra det piper. har ingen ljudsignal när strömmen var fast igen. Och jag också märkt att när alla kablar är anslutna och strömmen slås på tangentbord och mus fungerar inte .. När jag får virus mjukvaran laddas ner i den gamla st Jag kommer att kontrollera om hårddisken fortfarande funkar. Vad kapar filen hade jag körde en precis innan detta hände men det var med WinPatrol och det sparas till en fil. Om jag kan få hårddisken att arbeta i denna gamla datorn kommer jag att skicka det. |
|
#2
16 maj 2009, 14:38
| |||
| |||
| Osäker om detta är ett virus eller BOSD Utan loggarna kan vi inte fatta ett beslut om det är malware eller inte.
__________________  |
|
#3
17 maj 2009, 14:29
| |||
| |||
| Osäker om detta är ett virus eller BOSD Kommer att arbeta på att få loggfilen. Hårddisk dos arbeta i gamla datorn. |
|
#4
17 maj 2009, 15:05
| |||
| |||
| Osäker om detta är ett virus eller BOSD Här är loggen som körde strax före kraschen. Logga skapats av WinPatrol PLUS version 16.0.2009.2:16.0.2009.2 Scan sparades vid 11:57:58 PM om 5/13/2009 Plattform: Windows XP SP3 Service Pack 3 (Build 2600) MSIE: Internet Explorer (8.00.6001.18372) Boot mode: Normal Kör processer: C: \ WINDOWS \ system32 \ Smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ Lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Program Files \ COMODO \ COMODO Internet Security \ cmdagent.exe C: \ WINDOWS \ system32 \ Spoolsv.exe C: \ Program \ Common Files \ AOL \ ACS \ AOLacsd.exe C: \ Program \ Common Files \ AOL \ TopSpeed \ 2.0 \ aoltsmon.exe C: \ WINDOWS \ ARSERVICE.EXE C: \ WINDOWS \ explorer.exe C: \ WINDOWS \ system32 \ bgsvcgen.exe C: \ WINDOWS \ ehome \ ehrecvr.exe C: \ WINDOWS \ ehome \ ehSched.exe C: \ Program Files \ SPOTMAU WINCARES 2007 \ FOLDERPROTECTSERVICE.EXE C: \ Program \ Java \ jre6 \ bin \ jqs.exe C: \ Program Files \ MALWAREBYTES "anti-malware \ MBAMSERVICE.EXE C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ Program \ Common Files \ NEW BOUNDRY \ PrismXL \ PRISMXL.SYS C: \ WINDOWS \ system32 \ atwtusb.exe C: \ WINDOWS \ ehome \ ehtray.exe C: \ Program Files \ DIGITAL MEDIA READER \ READERICON45G.EXE C: \ WINDOWS \ RTHDCPL.exe C: \ WINDOWS \ arpwrmsg.exe C: \ Program Files \ LEXMARK 5200 SERIES \ lxbtbmgr.exe C: \ WINDOWS \ ehome \ ehmsas.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program \ QuickTime \ qttask.exe C: \ Program Files \ LEXMARK 5200 SERIES \ lxbtbmon.exe C: \ Program \ Common Files \ AOL \ 1229613011 \ EE \ AOLSOFTWARE.EXE C: \ Program Files \ COMODO \ SafeSurf \ cssurf.exe C: \ Program Files \ COMODO \ COMODO Internet Security \ cfp.exe C: \ Program \ Java \ jre6 \ bin \ jusched.exe C: \ WINDOWS \ system32 \ WTMKM.exe C: \ Program \ Common Files \ Ulead SYSTEM \ AUTODETECTOR \ Monitor.exe C: \ Program Files \ BILLP STUDIOS \ WINPATROL \ WINPATROL.EXE C: \ Program Files \ KURIR \ msmsgs.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ WINDOWS \ system32 \ SEARCHINDEXER.EXE C: \ Program Files \ FILEHIPPO.COM \ UPDATECHECKER.EXE C: \ Program Files \ FINEPIXVIEWER \ QUICKDCF2.EXE C: \ Program Files \ Windows Desktop Search \ WINDOWSSEARCH.EXE C: \ WINDOWS \ system32 \ dllhost.exe C: \ Program Files \ America Online 9.0 \ waol.exe C: \ Program Files \ America Online 9.0 \ shellmon.exe C: \ Program Files \ BILLP STUDIOS \ WINPATROL \ WINPATROLEX.EXE R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comodo.com/search/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Link Helper - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll O2 - BHO: VIPTToolbarManager Class - (1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D) - C: \ Program Files \ Visual IP Trace 2008 \ VisualIPTraceIE.dll O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - C: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O2 - BHO: EntDownloadHelper Class - (2956DD50-4F3E-4C20-81D1-FF36435FF288) - C: \ Program Files \ Enterra \ Download Manager \ edm.dll O2 - BHO: AOL Toolbar Loader - (7C554162-8CB7-45A4-B8F4-8EA1C75885F9) - C: \ Program Files \ AOL Toolbar \ aoltb.dll O2 - BHO: URLHooker2 Class - (93935F7F-9C88-42F8-8445-95251D27FABC) - C: \ Program Files \ Flash Video Downloader \ URLHooker.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - C: \ Program Files \ Google \ googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program \ Google \ GoogleToolbarNotifier \ 2.1.1119.1736 \ s wg.dll O2 - BHO: CBrowserHelperObject Object - (CA6319C0-31B7-401E-a518-A07C3DB8F777) - c: \ windows \ system32 \ BAE.dll O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl Class - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program \ Java \ jre6 \ lib \ distribuera \ jqs \ dvs \ jqs_plugin.dll O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - C: \ Program Files \ Google \ googletoolbar2.dll O3 - Toolbar: Enterra Download Manager - (B5147546-9359-4D9B-8B36-F54C54555799) - C: \ Program Files \ Enterra \ Download Manager \ edm.dll O3 - Toolbar: Visual IP Trace - (E70C26AE-DFF1-40A8-8D37-19180F56F0AA) - C: \ Program Files \ Visual IP Trace 2008 \ VisualIPTraceIE.dll O3 - Toolbar: AOL Toolbar - (DE9C389F-3316-41A7-809B-AA305ED9D922) - C: \ Program Files \ AOL Toolbar \ aoltb.dll O3 - Toolbar: Ask Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - C: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ ehome \ ehtray.exe O4 - HKLM \ .. \ Run: [readericon] C: \ Program Files \ Digital Media Reader \ readericon45G.exe O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE O4 - HKLM \ .. \ Run: [Lexmark 5200 Series] C: \ Program Files \ Lexmark 5200 Series \ lxbtbmgr.exe O4 - HKLM \ .. \ Run: [LXBTCATS] rundll32 C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ LXBTtim e.dll, _RunDLLEntry @ 16 O4 - HKLM \ .. \ Run: [QuickTime Task] C: \ Program \ QuickTime \ qttask.exe-atboottime O4 - HKLM \ .. \ Run: [NvMediaCenter] C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [HostManager] C: \ Program Files \ Common Files \ AOL \ 1229613011 \ EE \ AOLSoftware.exe O4 - HKLM \ .. \ Run: [AOLDialer] C: \ Program Files \ Common Files \ AOL \ ACS \ AOLDial.exe O4 - HKLM \ .. \ Run: [Pure Networks Port Magic] C: \ progra ~ 1 \ PURENE ~ 1 \ PORTMA ~ 1 \ PortAOL.exe-Run O4 - HKLM \ .. \ Run: [REGSHAVE] C: \ Program Files \ REGSHAVE \ REGSHAVE.EXE / AutoRun O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k O4 - HKLM \ .. \ Run: [Windows Defender] C: \ Program Files \ Windows Defender \ MSASCui.exe-hide O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe O4 - HKLM \ .. \ Run: [Malwarebytes' Anti-Malware] C: \ Program Files \ Malwarebytes' Anti-Malware \ mbamgui.exe / starttray O4 - HKLM \ .. \ Run: [COMODO SafeSurf] C: \ Program Files \ COMODO \ SafeSurf \ cssurf.exe-s O4 - HKLM \ .. \ Run: [COMODO Internet Security] C: \ Program Files \ COMODO \ COMODO Internet Security \ cfp.exe-h O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] C: \ Program \ Java \ jre6 \ bin \ jusched.exe O4 - HKLM \ .. \ Run: [MacrokeyManager] WTMKM.exe O4 - HKLM \ .. \ Run: [Ulead AutoDetector v2] C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ Monitor.exe O4 - HKLM \ .. \ Run: [WinPatrol PLUS] C: \ Program Files \ BillP Studios \ WinPatrol \ winpatrol.exe-expressboot O4 - HKLM \ .. \ RunOnce: [NSSInstallation] C: \ WINDOWS \ system32 \ Adobe \ Shockwave 11 \ nssstub.exe / RunOnce O4 - HKCU \ .. \ Run: [MSMSGS] C: \ Program Files \ Messenger \ msmsgs.exe / bakgrund O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [filehippo.com] C: \ Program Files \ filehippo.com \ UpdateChecker.exe / bakgrund O4 - Global Startup: ExifLauncher2.lnk = C: \ Program Files \ FinePixViewer \ QuickDCF2.exe O4 - Global Startup: Windows Search.lnk = C: \ Program Files \ Windows Desktop Search \ WindowsSearch.exe O8 - Extra sammanhang menyobjektet: & AOL Toolbar Search - C: \ Documents and Settings \ All Users \ Application Data \ AOL \ ieToolbar \ resurser \ sv-se \ Local \ search.html O8 - Extra sammanhang menyobjektet: & Ladda ner med Enterra Download Manager - res: / / C: \ Program Files \ Enterra \ Download Manager \ edm.dll/3000 Ø9 - Extra button: Enterra Download Manager - (1AB6CC97-17C1-4207-BC51-5C9D435A338E) - res: / / C: \ Program Files \ Enterra \ Download Manager \ edm.dll/3002 Ø9 - Extra button: (inget namn) - (85d1f590-48f4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe Ø9 - Extra 'Tools' MENUITEM: Uninstall BitDefender Online Scanner v8 - (85d1f590-48f4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe Ø9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø9 - Extra button: FWI bedrägeribekämpning Shield - (44E50755-EAC0-49ea-B52D-37372157D100) - C: \ Program Files \ FWI \ FraudShield \ FWIFraudShield.exe (HKCU) Ø9 - Extra button: Flash Video Downloader - (df7831dd-a048-4336-8cc8-266a03f00d63) - C: \ Program Files \ Flash Video Downloader \ FlashRunner.exe (HKCU) O11 - Options group: [Java (söndag)] Java (Sun) - C: \ Program \ Java \ jre6 \ bin O11 - Options group: [] -- O14 - IERESET.INF: START_PAGE_URL = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome O14 - IERESET.INF: SEARCH_PAGE_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch O14 - IERESET.INF: HKCU, Start Page =% START_PAGE_URL% O14 - IERESET.INF: HKLM, Default_Page_URL =% START_PAGE_URL% O14 - IERESET.INF: HKLM, Default_Search_URL =% SEARCH_PAGE_URL% O14 - IERESET.INF: HKLM, Search Page =% SEARCH_PAGE_URL% O14 - IERESET.INF: HKCU, Search Page =% SEARCH_PAGE_URL% O15 - Trusted Zone: aol.com O16 - DPF: (5ED80217-570B-4DA9-BF44-BE107C0EC166) (Windows Live Safety Center Base Module) -- http://cdn.scan.onecare.live.com/res...scbase5036.cab O16 - DPF: (8AD9C840-044E-11D1-B3E9-00805F499D93) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (A90A5822-F108-45AD-8482-9BC8B12DD539) (Avgörande cpcScan) -- http://www.crucial.com/controls/cpcScanner.cab O16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses Class) -- http://www.superadblocker.com/activex/sabspx.cab O16 - DPF: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) (a-kvadrat Scanner) -- http://ax.emsisoft.com/asquared.cab O16 - DPF: (CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA) (Java Plug-in 1.5.0_02) -- http://java.sun.com/update/1.5.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA) (Java Plug-in 1.6.0_05) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA) (Java Plug-in 1.6.0_07) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA) (Java Plug-in 1.6.0_13) -- http://java.sun.com/update/1.6.0/jin...ndows-i586.cab O16 - DPF: (E8F628B5-259A-4734-97EE-BA914D7BE941) (Driver Agent ActiveX Control) -- http://plugin.driveragent.com/files/driveragent.cab O21 - WPDShServiceObj - WPDShServiceObj Class - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll O23 - Service: AOL Anslutbarhet Service - AOL LLC - C: \ Program Files \ Common Files \ AOL \ ACS \ AOLacsd.exe O23 - Service: AOL TopSpeed Monitor - America Online, Inc. - C: \ Program Files \ Common Files \ AOL \ TopSpeed \ 2.0 \ aoltsmon.exe O23 - Service: B's Recorder GOLD Library General Service - BHA Corporation - C: \ WINDOWS \ system32 \ bgsvcgen.exe O23 - Service: COMODO Internet Security Helper Service - - C: \ Program Files \ COMODO \ COMODO Internet Security \ cmdagent.exe O23 - Service: FolderProtectService - - C: \ Program Files \ Spotmau WinCares 2007 \ FolderProtectService.exe O23 - Service: Google Updater Service - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: Java Quick Starter - - C: \ Program \ Java \ jre6 \ bin \ jqs.exe-service-config C: \ Program \ Java \ jre6 \ lib \ distribuera \ jqs \ jqs.conf O23 - Service: lxbt_device - - C: \ WINDOWS \ system32 \ lxbtcoms.exe-tjänst O23 - Service: MBAMService - Malwarebytes Corporation - C: \ Program Files \ Malwarebytes' Anti-Malware \ mbamservice.exe O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: WTService - - C: \ WINDOWS \ system32 \ atwtusb.exe-s --- Ytterligare WinPatrol Info --- Default Browser: Windows ® Internet Explorer - Internet Explorer version 8.00.6001.18372 MSIE: Internet Explorer (8.00.6001.18372) 25 IE Cookies i mapp: C: \ Documents and Settings \ Owner.YOUR-DC0C6E8137 \ Cookies \ WP00 - HKLM \ CS1: BootExecute = AutoCheck Autochk * WP00 - HKLM \ CCS: BootExecute = AutoCheck Autochk * WP00 - HKLM \ CS2: BootExecute = AutoCheck Autochk * WP00 - HKLM \ CS3: BootExecute = AutoCheck Autochk * WP02 - HKLM \ CCS: Command = C: \ WINDOWS \ system32 \ cmd.exe WP03 - Windows automatiska uppdateringar = 4: Hämta automatiskt rekommenderade uppdateringar till min dator och installera dem. WP08 - HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ URL \ DefaultPrefix: Default = http:// WP08 - HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ URL \ prefix: www = http:// WP31 - Schemalagda aktiviteter: [Uniblue SpeedUpMyPC.job] C: \ Program Files \ Uniblue \ SpeedUpMyPC 3 \ SpeedUpMyPC.exe Aldrig WP31 - Schemalagda aktiviteter: [Uniblue SpeedUpMyPC Nag.job] C: \ Program Files \ Uniblue \ SpeedUpMyPC 3 \ SpeedUpMyPC.exe Aldrig WP31 - Schemalagda aktiviteter: [NSSstub.job] C: \ WINDOWS \ system32 \ Adobe \ Shockwave 11 \ nssstub.exe 05/13/2009 11:30 PM WP31 - Schemalagda aktiviteter: [Driver Robot.job] C: \ Program Files \ Driver Robot \ DriverRobot.exe Aldrig WP31 - Schemalagda aktiviteter: [Basic Städoptionen up.job] C: \ Program Files \ Panda Security \ Panda Global Protection 2009 \ PlaTasks.exe Aldrig WP31 - Schemalagda aktiviteter: [User_Feed_Synchronization-(FD03A801-5427-4516-93CD-BC74874B5889). Jobb] C: \ WINDOWS \ system32 \ msfeedssync.exe 05/13/2009 11:42 PM WP16 - ActiveX: (00EF2092-6AC5-47C0-BD25-CF2D5D657FEB) [Google Script Object] C: \ Program \ Google \ GOOGLETOOLBAR2.DLL 4, 0, 1601, 4978 WP16 - ActiveX: (17492023-C23A-453E-A040-C7C580BBF700) [Windows Genuine Advantage Validation Tool] C: \ WINDOWS \ system32 \ LegitCheckControl.dll 1.7.0069.2 WP16 - ActiveX: (19916E01-B44E-4E31-94A4-4696DF46157B) [InformationCardSigninHelper tCLASS] C: \ WINDOWS \ system32 \ icardie.dll 8.00.6001.18372 WP16 - ActiveX: (25336920-03F9-11CF-8FD0-00AA00686F13) [HTML-dokument] C: \ WINDOWS \ system32 \ mshtml.dll 8.00.6001.18372 WP16 - ActiveX: (2933BF90-7B36-11D2-B20E-00C04F983E60) [XML DOM Dokument] C: \ WINDOWS \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (2D360201-FFF5-11D1-8D03-00A0C959BC0A) [DHTML Edit Control Lämplig för Scripting för IE5] C: \ Program \ Common Files \ Microsoft Shared \ Triedit \ dhtmled.ocx 6.01.9234 WP16 - ActiveX: (48123BC4-99D9-11D1-A6B3-00C04FD91555) [XML-dokument] C: \ WINDOWS \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (4E430174-1673-4FF3-BF28-A3B37F6573E7) [Windows Desktop Search Combo Control] C: \ Program Files \ Windows Desktop Search \ wdsShell.dll 7.0.6001.16503 WP16 - ActiveX: (4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (4EDCB26C-D24C-4e72-AF07-B576699AC0DE) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (63610B21-6B0D-46C5-909D-3BD000B9A5A9) [ToolbarParams tCLASS] C: \ Program Files \ AOL TOOLBAR \ aoltb.dll 5.13.4.1 WP16 - ActiveX: (6414512B-B978-451D-A0D8-FCFDF33E833C) [WUWebControl Class] C: \ WINDOWS \ system32 \ wuweb.dll 7.2.6001.788 WP16 - ActiveX: (6BF52A52-394A-11D3-B153-00C04F79FAA6) [Windows Media Player] C: \ WINDOWS \ system32 \ wmp.dll 11.0.5721.5260 WP16 - ActiveX: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) [MUWebControl Class] C: \ WINDOWS \ system32 \ muweb.dll 7.2.6001.788 WP16 - ActiveX: (72267F6A-A6F9-11D0-BC94-00C04FB67863) [Active Desktop Mover] C: \ WINDOWS \ system32 \ shell32.dll 6.00.2900.5622 WP16 - ActiveX: (7390f3d8-0439-4c05-91e3-cf5cb290c3d0) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (75565ED2-1560-4F15-B841-20358DE6A0D1) [ImageControl tCLASS] C: \ WINDOWS \ system32 \ mfimgvwr.ocx 2.0.0.1 WP16 - ActiveX: (7584c670-2274-4efb-b00b-d6aaba6d3850) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (8856F961-340A-11D0-A96B-00C04FD705A2) [Microsoft Webbläsare] C: \ WINDOWS \ system32 \ Ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (88D969C0-F192-11D4-A65F-0040963251E5) [XML DOM Document 4.0] C: \ WINDOWS \ system32 \ Msxml4.dll 4.20.9870.0 WP16 - ActiveX: (88D969C5-F192-11D4-A65F-0040963251E5) [XML HTTP 4.0] C: \ WINDOWS \ system32 \ Msxml4.dll 4.20.9870.0 WP16 - ActiveX: (88D969EA-F192-11D4-A65F-0040963251E5) [XML HTTP 5.0] C: \ Program \ Common Files \ Microsoft Shared \ Office11 \ msxml5.dll 5.20.1087.0 WP16 - ActiveX: (8AD9C840-044E-11D1-B3E9-00805F499D93) [Java Plug-in 1.6.0_13] C: \ Program \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (9059f30f-4eb1-4bd2-9fdc-36f43a218f4a) [Microsoft Terminal Services Client Control (Redist)] C: \ WINDOWS \ system32 \ mstscax.dll 6.0.6001.18000 WP16 - ActiveX: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) [SABScanProcesses tCLASS] C: \ WINDOWS \ Downloaded Program Files \ sabspx.dll 1.0.0.1 WP16 - ActiveX: (BB21F850-63F4-4EC9-BF9D-565BD30C9AE9) [en-kvadrat Scanner] C: \ WINDOWS \ Downloaded Program Files \ asquared.ocx 4.0.0.0 WP16 - ActiveX: (CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA) [Java Plug-in 1.6.0_05] C: \ Program \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA) [Java Plug-in 1.6.0_07] C: \ Program \ Java \ jre6 \ bin \ jp2iexp.dll WP16 - ActiveX: (CFBFAE00-17A6-11D0-99CB-00C04FD64497) [Microsoft Url Search Hook] C: \ WINDOWS \ system32 \ Ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (D27CDB6E-AE6D-11CF-96B8-444553540000) [Shockwave Flash Object] C: \ WINDOWS \ system32 \ Macromed \ Flash \ Flash10b.ocx 10,0,22,87 WP16 - ActiveX: (DFEAF541-F3E1-4C24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Program \ Microsoft Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (E8F628B5-259A-4734-97EE-BA914D7BE941) [Driver Agent ActiveX Control] C: \ WINDOWS \ Downloaded Program Files \ DRIVERAGENT.OCX 1.0.0.0 WP16 - ActiveX: (EA756889-2338-43DB-8F07-D1CA6FB9C90D) [IAOLTBSearch tCLASS] C: \ Program Files \ AOL TOOLBAR \ aoltb.dll 5.13.4.1 WP16 - ActiveX: (ED8C108E-4349-11D2-91A4-00C04F7969E8) [XML HTTP Request] C: \ WINDOWS \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F5078F32-c551-11d3-89b9-0000f81fe221) [XML DOM Document 3.0] C: \ WINDOWS \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F6D90F11-9C73-11D3-B32E-00C04F990BB4) [XML DOM Dokument] C: \ WINDOWS \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (F6D90F16-9C73-11D3-B32E-00C04F990BB4) [XML HTTP] C: \ WINDOWS \ system32 \ Msxml3.dll 8.100.1048.0 WP16 - ActiveX: (DFEAF541-F3E1-4c24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Program \ Microsoft Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: DFEAF541-F3E1-4c24-ACAC-99C30715084A [Microsoft Silverlight] C: \ Program \ Microsoft Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (05589fa1-c356-11ce-bf01-00aa0055595a) [ActiveMovieControl Object] C: \ WINDOWS \ system32 \ wmpdxm.dll 11.0.5721.5145 WP16 - ActiveX: (0713E8A2-850A-101B-AFC0-4210102A8DA7) [Microsoft TreeView Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (0713E8D2-850A-101B-AFC0-4210102A8DA7) [Microsoft ProgressBar Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (233C1507-6A77-46A4-9443-F871F945D258) [Shockwave ActiveX Control] C: \ WINDOWS \ system32 \ Adobe \ Director \ SwDir.dll 11.5 WP16 - ActiveX: (17492023-C23A-453E-A040-C7C580BBF700) [Windows Genuine Advantage Validation Tool] C: \ WINDOWS \ system32 \ LegitCheckControl.dll 1.7.0069.2 WP16 - ActiveX: (1D2B4F40-1F10-11D1-9E88-00C04FDCAB92) [ThumbCtl tCLASS] C: \ WINDOWS \ system32 \ webvw.dll 6.00.2900.5512 WP16 - ActiveX: (DFEAF541-F3E1-4c24-ACAC-99C30715084A) [Microsoft Silverlight] C: \ Program \ Microsoft Silverlight \ 2.0.40115.0 \ npctrl.dll 2.0.40115.0 WP16 - ActiveX: (52A2AAAE-085D-4187-97EA-8C30DB990436) [HHCTRL Object] C: \ WINDOWS \ system32 \ Hhctrl.ocx 5.2.3790.4110 WP16 - ActiveX: (58DA8D8A-9D6A-101B-AFC0-4210102A8DA7) [Microsoft ListView Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (58DA8D8F-9D6A-101B-AFC0-4210102A8DA7) [Microsoft Imagelist Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (6B7E638F-850A-101B-AFC0-4210102A8DA7) [Microsoft StatusBar Control, version 5.0 (SP2)] C: \ WINDOWS \ system32 \ ComCtl32.OCX 5.01.4319 WP16 - ActiveX: (8856F961-340A-11D0-A96B-00C04FD705A2) [Microsoft Webbläsare] C: \ WINDOWS \ system32 \ Ieframe.dll 8.00.6001.18372 WP16 - ActiveX: (8BD21D50-EC42-11CE-9E0D-00AA006002F3) [Microsoft Forms 2.0 OptionButton] C: \ WINDOWS \ system32 \ FM20.DLL 11.0.6550 WP16 - ActiveX: (AE24FDAE-03C6-11D1-8B76-0080C744F389) [Microsoft Scriptlet Component] C: \ WINDOWS \ system32 \ mshtml.dll 8.00.6001.18372 WP16 - ActiveX: (CA8A9780-280D-11CF-A24D-444553540000) [Adobe PDF Reader] C: \ Program \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroPDF.dll WP16 - ActiveX: (CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA) [RealPlayer G2 Control] C: \ WINDOWS \ system32 \ rmoc3260.dll 6.0.8.1266 WP16 - ActiveX: (D27CDB6E-AE6D-11CF-96B8-444553540000) [Shockwave Flash Object] C: \ WINDOWS \ system32 \ Macromed \ Flash \ Flash10b.ocx 10,0,22,87 WP16 - ActiveX: (E5DF9D10-3B52-11D1-83E8-00A0C90DC849) [WebViewFolderIcon tCLASS] C: \ WINDOWS \ system32 \ webvw.dll 6.00.2900.5512 WP32 - Dolda Fil: C: \ boot.ini WP32 - Dolda Fil: C: \ IO.SYS WP32 - Dolda Fil: C: \ Msdos.sys WP32 - Dolda Fil: C: \ NTDETECT.COM WP32 - Dolda Fil: C: \ ntldr WP32 - Dolda Fil: C: \ pagefile.sys WP32 - Dolda Fil: C: \ USER WP32 - Dolda Fil: C: \ WINDOWS \ WindowsShell.Manifest WP32 - Dolda Fil: C: \ WINDOWS \ winnt.bmp WP32 - Dolda Fil: C: \ WINDOWS \ winnt256.bmp WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ cdplayer.exe.manifest WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ default.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ default.tmp.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ SAM.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ SAM.tmp.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ SECURITY.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ SECURITY.tmp.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ software.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ software.tmp.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ system.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ system.tmp.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ TempKey.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ config \ userdiff.LOG WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ drivers \ hosts WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ logonui.exe.manifest WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ ncpa.cpl.manifest WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ nwc.cpl.manifest WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ Restore \ filelist.xml WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ sapi.cpl.manifest WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ WindowsLogon.manifest WP32 - Dolda Fil: C: \ WINDOWS \ system32 \ wuaucpl.cpl.manifest WP32 - Dolda Fil: C: \ Program Files \ Common Files \ Services \ Thumbs.db WP32 - Dolda Fil: C: \ boot.ini WP32 - Dolda Fil: C: \ IO.SYS WP32 - Dolda Fil: C: \ Msdos.sys WP32 - Dolda Fil: C: \ NTDETECT.COM WP32 - Dolda Fil: C: \ ntldr WP32 - Dolda Fil: C: \ pagefile.sys WP32 - Dolda Fil: C: \ USER WP33 - Filtyp. CAT: [Säkerhet Catalog] rundll32.exe cryptext.dll, CryptExtOpenCAT% 1 WP33 - Filtyp. CHM: [kompilerade HTML-hjälpfiler fil] C: \ WINDOWS \ Hh.exe% 1 WP33 - Filtyp. COM: [MS-DOS ansökan]% 1% * WP33 - Filtyp. CMD: [Windows NT Command Script]% 1% * WP33 - Filtyp. EML: [Internet-e-postmeddelande] C: \ Program \ Outlook Express \ msimn.exe / eml:% 1 WP33 - Filtyp. EXE: [Application]% 1% * WP33 - Filtyp. INF: [Setup Information] C: \ WINDOWS \ System32 \ Notepad.exe% 1 WP33 - Filtyp. JS: [JScript skriptfil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtyp. LOGG: [Textdokument] C: \ WINDOWS \ system32 \ Notepad.exe% 1 WP33 - Filtyp. MSI: [Windows Installer Package] C: \ WINDOWS \ System32 \ msiexec.exe / i% 1% * WP33 - Filtyp. MID: [MIDI Sequence] C: \ Program Files \ Windows Media Player \ wmplayer.exe / Öppna% L WP33 - Filtyp. MP3: [MP3 Format Sound] C: \ Program Files \ Windows Media Player \ wmplayer.exe / prefekten: 6 / Öppna% L WP33 - Filtyp. Pif: [Genväg till MS-DOS-program]% 1% * WP33 - Filtyp. RAM: [RealPlayer Arkiv] C: \ Program Files \ Real \ RealPlayer \ RealPlay.exe / m audio / x-pn-RealAudio% 1 WP33 - Filtyp. REG: [Registration Entries] regedit.exe% 1 WP33 - Filtyp. RTF: [RTF-dokument] C: \ Program Files \ Windows NT \ Tillbehör \ WORDPAD.EXE% 1 WP33 - Filtyp. SCR: [Skärmsläckare]% 1 / S WP33 - Filtyp. TXT: [Textdokument] C: \ WINDOWS \ system32 \ Notepad.exe% 1 WP33 - Filtyp. URL: [Internet Genväg] rundll32.exe Ieframe.dll, OpenURL% l WP33 - Filtyp. VBS: [VBScript skriptfil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtyp. Vbe: [VBScript Encoded skriptfil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtyp. WSF: [Windows skriptfil] C: \ WINDOWS \ System32 \ WScript.exe% 1% * WP33 - Filtyp. WSH: [Windows Script Host Inställningar Arkiv] C: \ WINDOWS \ System32 \ WScript.exe% 1% * Minne som används i dag: 18% Fysisk Memory Free: 2097151 KB Växlingsfilen Fri: 4194303 KB Virtual Memory Free: 2048264 KB -- Slut på filen |
|
#5
17 maj 2009, 15:21
| |||
| |||
| Osäker om detta är ett virus eller BOSD Jag kan inte se något som skulle kunna orsaka de problem du har. Är du säker på att enheten inte kommer dåligt?
__________________ |
|
#6
17 maj 2009, 16:26
| |||
| |||
| Osäker om detta är ett virus eller BOSD I detta läge något som är möjligt. När du säger köra menar du HD för det är att köra bra på den gamla datorn? |
|
#7
17 maj 2009, 16:39
| |||
| |||
| Osäker om detta är ett virus eller BOSD Yea HD. Kan du göra en fullständig virussökning på den? Det skulle vara mer tillförlitliga då en HJT scan.
__________________ |
|
#8
27 maj 2009, 08:53
| |||
| |||
| Osäker om detta är ett virus eller BOSD Ledsen att det tog så lång tid att komma tillbaka EF. Hade problem med den gamla datorn. Vad vill du att jag ska köra på denna punkt kommer jag att prova något annat än comboFix. |
|
#9
27 maj 2009, 09:18
| |||
| |||
| Osäker om detta är ett virus eller BOSD Hämta DrWeb CureIt Och spara den till skrivbordet. Skanna med DrWeb-CureIt enligt följande:
* Efter omstart Högerklicka den Dr.Web log på skrivbordet och välj Öppna med> Notepad * Kopiera och klistra att logga in nästa svar
__________________ |
|
#10
27 maj 2009, 20:00
| |||
| |||
| Osäker om detta är ett virus eller BOSD Kommer att göra. inte säker på hur lång tid det tar för mig att få återkomma med rapport. Gammal dator inte tillåter mig att se froum. något fel med IE7 men kommer att komma runt det för närvarande. |
 |
 |
| Komihåglista |
Liknande Trådar | ||||
| Tråd | Thread Starter | Forum | Svar | Senaste Inlägg |
| Virus Fråga - Kan någon berätta för mig om jag kan ha ett virus | billozz | Virus, spionprogram och säkerhet | 1 | 2 april 2009 13:58 |
| Mina vänner MAC har ett virus ... Umm ... ja ... ett virus ... | cheesepuff | Virus, spionprogram och säkerhet | 3 | 29 oktober 2008 12:58 |
| Virus hjälp | jam90 | Virus, spionprogram och säkerhet | 1 | 28 juli 2008 07:26 |
| Virus | lolli_pop | Virus, spionprogram och säkerhet | 13 | 17 november 2007 09:42 |
| Virus? | carpious | Virus, spionprogram och säkerhet | 12 | 6 maj 2007 09:49 |
| Thread Tools | |
| |
Start Scanning knappen till höger och genomsökningen börjar.
