5 svar i den här tråden

[Cacke]

Jag bifogade 2 logg filer som blev till av ett program som jag körde och skulle posta här.

Ta bort IP och sånt om det finns i dom.

Det jag får i event viewer är DCOM error 10010 och service control manager med 7035

Den låste sig slumpvis och när jag gjorde vissa saker som startade microsoft egna adaware och spyware scanner, när jag uppdatera windows så kan jag inte installera dom och så var det något med services i admin tools som stängdes av hela tiden när jag skulle kolla en sak som han som tipsade mig om att posta mina loggar här.

/Cacke

Bifogade fil(er)

•  Logg 1.txt   3,83K   4 Antal nedladdningar
•  Logg 2.txt   11,02K   3 Antal nedladdningar

[Mats H]

Hej,
postar din logg här, från DDS.txt.
Mvh
Mats H

DDS (Ver_10-12-12.02) - NTFSx86  
Run by XXXXXXXXXXXXXX at 16:38:44,32 on 2011-02-28
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22

============== Running Processes ===============


============== Pseudo HJT Report ===============

uStart Page = hxxp://lifeportalen.se/
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: {5CCD114A-C2EB-4B0A-BE08-FA3237D0FD84} - No File
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Bredbandsbolaget Servicecenter Plugin: {db87cde1-ef9c-44eb-a42f-6d0b3c72c516} - c:\program files\bredbandsbolaget\servicecenter\IEFixItNowPlugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: TBHelper Class: {e46a2169-e328-471a-9788-f2b52bb9c681} - c:\program files\sms och mms i datorn desktop\miebho1.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Sms och mms i datorn: {6b49f76b-190a-4fc6-83ea-baad234baff8} - c:\program files\sms och mms i datorn desktop\mie1.dll
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [ASUS SmartDoctor] c:\program files\asus\smartdoctor\SmartDoctor.exe  /start
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [Bredbandsbolaget Servicecenter] "c:\program files\bredbandsbolaget\servicecenter\Bredbandsbolaget.exe"
mRun: [00PCTFW] "c:\program files\pc tools firewall plus\FirewallGUI.exe" -s
mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
mRun: [PaperPort PTD] "c:\program files\scansoft\paperport\pptd40nt.exe"
mRun: [IndexSearch] "c:\program files\scansoft\paperport\IndexSearch.exe"
mRun: [PPort11reminder] "c:\program files\scansoft\paperport\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\scansoft\paperport\11\config\ereg\Ereg.ini"
mRun: [BrMfcWnd] "c:\program files\brother\brmfcmon\BrMfcWnd.exe" /AUTORUN
mRun: [ControlCenter3] "c:\program files\brother\controlcenter3\brctrcen.exe" /autorun
mRun: [CTHelper] "CTHELPER.EXE"
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [ASUSGamerOSD] c:\program files\asus\gamerosd\GamerOSD.exe
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [IE8] rundll32 advpack.dll,LaunchINFSection IE8.INF,FirstUserStart
dRunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000
IE: E&xportera till Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: Skicka som mms... - file://c:\program files\sms och mms i datorn desktop\sendmms.htm
IE: Skicka som sms... - file://c:\program files\sms och mms i datorn desktop\sendsms.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlcdnet.asus.com/pub/ASUS/misc/dlm-activex-2.2.5.0.cab
DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - hxxp://www.eset.eu/buxus/docs/OnlineScanner.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://www.ma-config.com/plugins/MaConfig_5_1_0_5.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab
DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} - hxxp://ax.emsisoft.com/asquared.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\xxxxxx~1\applic~1\mozilla\firefox\profiles\ccils6g6.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://kolla.tv/Standard.aspx|https://www.comhem.se/appmanager/portal/comhem?_nfpb=true&T2400554551161245451345_actionOverride=%2Forder%2Fmain%2FAddressSearch%2FcheckAddress&_windowLabel=T2400554551161245451345&_pageLabel=tv_analogt_utbud|https://www.comhem.se/portlets/channelPlan/printableChannelPlan/begin.do
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.1&q=
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\xxxxxxxxxxxxxx\application data\mozilla\firefox\profiles\ccils6g6.default\extensions\{00bf7b9c-acd2-4080-bea8-b1c41987070f}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\xxxxxxxxxxxxxx\application data\mozilla\firefox\profiles\ccils6g6.default\extensions\{00bf7b9c-acd2-4080-bea8-b1c41987070f}\components\RadioWMPCore.dll
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\voddler\plugin\npvoddler.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Hide My IP: staff@hide-my-ip.com - c:\program files\mozilla firefox\extensions\staff@hide-my-ip.com
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Torrent Finder Toolbar: TFToolbarX@torrent-finder - %profile%\extensions\TFToolbarX@torrent-finder
FF - Ext: TranslatorBar 1 Toolbar: {00bf7b9c-acd2-4080-bea8-b1c41987070f} - %profile%\extensions\{00bf7b9c-acd2-4080-bea8-b1c41987070f}
FF - Ext: Nero Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg10\Firefox

---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
FF - user.js: network.proxy.type - 0
FF - user.js: network.proxy.http -
user_pref(network.proxy.http_port,);
FF - user.js: network.proxy.no_proxies_on -

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2011-02-28 07:38:10 -------- d-----w- C:\b4dd4edcdac7ad3127a8a19a34
2011-02-27 22:23:19 -------- d-----w- C:\fa719cd682ed780b71bd80
2011-02-27 21:38:41 -------- d-----w- C:\6f04ac3490f5a2e7c96516a873550197
2011-02-27 21:04:49 -------- d-----w- C:\01b2961290daaecb2d28
2011-02-27 19:21:50 -------- d-----w- C:\404e710acffb9c1067
2011-02-26 17:50:20 153088 ----a-w- c:\windows\Smyrya.exe
2011-02-26 09:58:19 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-02-25 14:28:12 -------- d-----w- c:\program files\Cablenut
2011-02-23 09:02:23 -------- d-----w- c:\docume~1\xxxxxx~1\applic~1\GlarySoft
2011-02-23 09:00:42 -------- d-----w- c:\program files\Glary Utilities
2011-02-19 16:41:45 -------- d-----w- c:\docume~1\alluse~1\applic~1\NVIDIA Corporation
2011-02-19 16:27:31 941160 ----a-w- c:\windows\system32\nvdispco322090.dll
2011-02-19 16:27:31 837736 ----a-w- c:\windows\system32\nvgenco322040.dll
2011-02-19 16:22:10 -------- d-----w- c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP
2011-02-19 12:48:37 -------- d-----w- C:\$WINDOWS.~BT
2011-02-16 10:57:22 -------- d-----w- c:\program files\Sms och mms i datorn Desktop
2011-02-11 08:40:45 -------- d-----w- c:\docume~1\xxxxxx~1\applic~1\SUPERAntiSpyware.com
2011-02-01 22:15:37 -------- d-----w- c:\docume~1\xxxxxx~1\applic~1\Systenance
2011-02-01 20:08:13 -------- d-----w- c:\docume~1\xxxxxx~1\locals~1\applic~1\Innovative Solutions
2011-02-01 20:08:13 -------- d-----w- c:\docume~1\alluse~1\applic~1\Innovative Solutions

==================== Find3M  ====================

2011-01-07 18:58:14 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2010-12-17 06:56:10 545 ----a-w- c:\windows\UC.PIF
2010-12-17 06:56:10 545 ----a-w- c:\windows\RAR.PIF
2010-12-17 06:56:10 545 ----a-w- c:\windows\PKZIP.PIF
2010-12-17 06:56:10 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-12-17 06:56:10 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-12-17 06:56:10 545 ----a-w- c:\windows\LHA.PIF
2010-12-17 06:56:10 545 ----a-w- c:\windows\ARJ.PIF
2010-12-06 17:41:39 87608 ----a-w- c:\docume~1\xxxxxx~1\applic~1\inst.exe
2010-12-06 17:41:39 47360 ----a-w- c:\docume~1\xxxxxx~1\applic~1\pcouffin.sys

============= FINISH: 16:46:40,75 ===============

Det här inlägget har redigerats av Mats H: 28 februari 2011 - 22:17

[Mats H]

Hej,
ladda ned Malwarebytes och kör en snabbskanner av din dator.
Malwarebytes hittas här:
http://www.malwarebytes.org/mbam.php
Följ programmetet instruktioner, även omstart kan krävas.
Posta din logg här i din tråd.
Om det inte skulle fungera av någon anledning, så återkom direkt.
Har ditt eget antivirusprogram hittat något, finns det loggar?
Mvh
Mats H

[Cacke]

Gör detta imorgon för det tar tid.

[Cacke]

( Cecilia Skrev detta idag, 14:51 När det gäller skadliga filer skriver du lämpligen i din tråd som handlar om det och inte här. )

Hur kollar jag de om dom finns kvar efter alla mina skanningar och bort tagningar av skadliga filer?

[Cecilia]

Klistra in nya DDS-loggar så kan Mats titta på hur det ser ut nu.