Gå till innehåll

valter

Medlem
  • Innehållsantal

    61
  • Gick med

  • Besökte senast

Inlägg postade av valter

  1. Har installerat både 32 och 64 bitars varianten (ej samtidigt) av 7:an, men den vägrar gå igång. Installationen går bra, men sen när själva OS ska dra igång så startar datorn om. Detta på en ny dator. Det jag kan tänka mig är att grafiken inte klarar av 7:an, kör med inbyggd grafikkort. Körde ett kompatibilitetstest för Vista på datorn, som klagade på grafiken. Men kan ett inbyggt grafikkort verkligen suga så mycket? Tycker grafiken är bra, men jag spelar inga spel på datorn, därför har jag inte skaffat annat grafikkort.

    Några tips?

    Mvh/ Valter

  2. Har XP på datorn. Installerade Vista på D, men tog bort den efter två dagar. Problemet är att Vista markeras som första bootalternativ. Har försökt med fixmbr, utan framgång. Har ni nåt bra tips hur man blir av med detta?

    Tacksam för svar...

    Mvh/ Valter

    *********************************************

    2009-01-23:

    Tråden är nu låst eftersom problemet är löst

    Tycker du att den är felaktigt låst, var god kontakta

    Mickilina

    *********************************************

  3. Fick ett nytt nätaggregat i julklapp. Efter installation så började hårddisken bete sig lite märkligt, den varvade upp och ner lite hur som helst, började pipa, och datorn dog. Testade att starta om ett par ggr, med varierande resultat. Nu har jag ominstallerat XP, vilket var lite problematiskt, eftersom jag ofta fick meddelande om att HDD är trasig, inte går att hitta, etc.

    Att disken lägger av efter ett par år är iofs inget märkligt , det jag finner lite anmärkningsvärt är att detta händer just i samband med att jag byter nätagg.

    Tror ni att disken kan ha fått "för mycket" ström? Det är en Cooler Master Silent Pro M 500W.

    Jag köper nog en ny disk imorgon...

    Mvh/ Valter

  4. Hej!

    Alla tidigare varianter av Java har tagits bort manuellt vid installation av den senaste. Kör med SP1 på denna Vista Ultimate dator, och SP3 på min stationära med XP. Problemen började för ett par veckor sedan, när jag försökte låsa upp GPS kartan i datorn. Jag testade säkert två dygn utan framgång, trotts att kartan är en original Garmin DVD, som Garmin skickat till mig. När jag tröttnade så sökte jag efter en "key-generator" på nätet.... resten är historia.

    Men tack vare dina enastående kunskaper och tålamod, så mår min dator (och jag själv för den delen) mycket bättre.

    Tusen tack!

    Mvh/ Valter

  5. Hej igen!

    Här kommer de olika loggarna:

    ---------------------------------------------------------------------------------

    Malwarebytes' Anti-Malware 1.24

    Databasversion: 1015

    Windows 6.0.6001 Service Pack 1

    00:40:02 2008-08-02

    mbam-log-8-2-2008 (00-40-02).txt

    Skanningstyp: Snabb skanning

    Antal skannade objekt: 40533

    Förfluten tid: 4 minute(s), 41 second(s)

    Infekterade minnesprocesser: 0

    Infekterade minnesmoduler: 0

    Infekterade registernycklar: 0

    Infekterade registervärden: 0

    Infekterade registerdataposter: 0

    Infekterade mappar: 0

    Infekterade filer: 0

    Infekterade minnesprocesser:

    (Inga illasinnade poster hittades)

    Infekterade minnesmoduler:

    (Inga illasinnade poster hittades)

    Infekterade registernycklar:

    (Inga illasinnade poster hittades)

    Infekterade registervärden:

    (Inga illasinnade poster hittades)

    Infekterade registerdataposter:

    (Inga illasinnade poster hittades)

    Infekterade mappar:

    (Inga illasinnade poster hittades)

    Infekterade filer:

    (Inga illasinnade poster hittades)

    --------------------------------------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 00:42:57, on 2008-08-02

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Boot mode: Normal

    Running processes:

    C:Windowssystem32Dwm.exe

    C:WindowsExplorer.EXE

    C:Windowssystem32taskeng.exe

    C:Program FilesAlwil SoftwareAvast4ashDisp.exe

    C:Program FilesLaunch ManagerLManager.exe

    C:Program FilesCOMODOFirewallcfp.exe

    C:Program FilesSynapticsSynTPSynTPEnh.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Windowssystem32wbemunsecapp.exe

    C:Program FilesWindows Media Playerwmpnscfg.exe

    C:Program FilesMalwarebytes' Anti-Malwarembam.exe

    C:Windowssystem32NOTEPAD.EXE

    C:Program FilesMozilla Firefoxfirefox.exe

    C:Program FilesTrend MicroHijackThisHijackThis.exe

    R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://sv.intl.acer.yahoo.com

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://sv.intl.acer.yahoo.com

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

    R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local

    R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

    O1 - Hosts: ::1 localhost

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll

    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:Program FilesWinamp Toolbarwinamptb.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07binssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll

    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:Windowssystem32eDStoolbar.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:Program FilesWinamp Toolbarwinamptb.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe

    O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide

    O4 - HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe

    O4 - HKLM..Run: [COMODO Firewall Pro] "C:Program FilesCOMODOFirewallcfp.exe" -h

    O4 - HKLM..Run: [synTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe

    O4 - HKCU..Run: [sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun

    O4 - HKUSS-1-5-19..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-20..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'NÄTVERKSTJÄNST')

    O4 - HKUSS-1-5-18..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')

    O4 - HKUS.DEFAULT..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')

    O8 - Extra context menu item: &Winamp Toolbar Search - C:ProgramDataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html

    O8 - Extra context menu item: Append to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000

    O8 - Extra context menu item: Skicka bild till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm

    O8 - Extra context menu item: Skicka sida till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~1.0_0binssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~1.0_0binssv.dll

    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O13 - Gopher Prefix:

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

    O20 - AppInit_DLLs:  C:Windowssystem32guard32.dll

    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:Program FilesLavasoftAd-Awareaawservice.exe

    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:Program FilesCommon FilesAdobeAdobe Version Cue CS3ServerbinVersionCueCS3.exe

    O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe

    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:Program FilesBonjourmDNSResponder.exe

    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:Program FilesCOMODOFirewallcmdagent.exe

    O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:AcerEmpowering TechnologyeDataSecurityeDSService.exe

    O23 - Service: eLock Service (eLockService) - Acer Inc. - C:AcerEmpowering TechnologyeLockServiceeLockServ.exe

    O23 - Service: eNet Service - Acer Inc. - C:AcerEmpowering TechnologyeNeteNet Service.exe

    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:AcerEmpowering TechnologyeRecoveryeRecoveryService.exe

    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:AcerEmpowering TechnologyeSettingsServicecapuserv.exe

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe

    O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

    O23 - Service: MobilityService - Unknown owner - C:AcerMobility CenterMobilityService.exe

    O23 - Service: NMSAccessU - Unknown owner - C:Program FilesCDBurnerXPNMSAccessU.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe

    O23 - Service: ePower Service (WMIService) - acer - C:AcerEmpowering TechnologyePowerePowerSvc.exe

    O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

    --

    End of file - 10435 bytes

    ---------------------------------------------------------------------------

    Filen gick ej att hitta i felsäkert läge under Windowsmappen. Och datorn tycks må alldeles prima för tillfället! Tusen tack igen!

    Mvh/ Valter

  6. OK. Här kommer nya loggen.

    ----------------------------------------------------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 18:37:07, on 2008-08-01

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Boot mode: Normal

    Running processes:

    C:Windowssystem32Dwm.exe

    C:WindowsExplorer.EXE

    C:Program FilesAlwil SoftwareAvast4ashDisp.exe

    C:Program FilesLaunch ManagerLManager.exe

    C:Program FilesCOMODOFirewallcfp.exe

    C:Program FilesSynapticsSynTPSynTPEnh.exe

    C:Program FilesJavajre1.6.0_07binjusched.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Program FilesWindows Media Playerwmpnscfg.exe

    C:Windowssystem32taskeng.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:WindowsSystem32mobsync.exe

    C:Windowssystem32wbemunsecapp.exe

    C:Program FilesWindows MailWinMail.exe

    C:Program FilesTrend MicroHijackThisHijackThis.exe

    R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://sv.intl.acer.yahoo.com

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://sv.intl.acer.yahoo.com

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

    R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local

    R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

    O1 - Hosts: ::1 localhost

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll

    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:Program FilesWinamp Toolbarwinamptb.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07binssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:Windowssystem32ActiveToolBand.dll

    O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll

    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:Windowssystem32eDStoolbar.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:Program FilesWinamp Toolbarwinamptb.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe

    O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide

    O4 - HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe

    O4 - HKLM..Run: [COMODO Firewall Pro] "C:Program FilesCOMODOFirewallcfp.exe" -h

    O4 - HKLM..Run: [synTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe

    O4 - HKCU..Run: [sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun

    O4 - HKUSS-1-5-19..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-20..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'NÄTVERKSTJÄNST')

    O4 - HKUSS-1-5-18..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')

    O4 - HKUS.DEFAULT..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')

    O8 - Extra context menu item: &Winamp Toolbar Search - C:ProgramDataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html

    O8 - Extra context menu item: Append to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000

    O8 - Extra context menu item: Skicka bild till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm

    O8 - Extra context menu item: Skicka sida till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~1.0_0binssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~1.0_0binssv.dll

    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O13 - Gopher Prefix:

    O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://plugin.driveragent.com/files/driveragent.cab

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

    O20 - AppInit_DLLs:  C:Windowssystem32guard32.dll

    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:Program FilesLavasoftAd-Awareaawservice.exe

    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:Program FilesCommon FilesAdobeAdobe Version Cue CS3ServerbinVersionCueCS3.exe

    O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe

    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:Program FilesBonjourmDNSResponder.exe

    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:Program FilesCOMODOFirewallcmdagent.exe

    O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:AcerEmpowering TechnologyeDataSecurityeDSService.exe

    O23 - Service: eLock Service (eLockService) - Acer Inc. - C:AcerEmpowering TechnologyeLockServiceeLockServ.exe

    O23 - Service: eNet Service - Acer Inc. - C:AcerEmpowering TechnologyeNeteNet Service.exe

    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:AcerEmpowering TechnologyeRecoveryeRecoveryService.exe

    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:AcerEmpowering TechnologyeSettingsServicecapuserv.exe

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe

    O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

    O23 - Service: MobilityService - Unknown owner - C:AcerMobility CenterMobilityService.exe

    O23 - Service: NMSAccessU - Unknown owner - C:Program FilesCDBurnerXPNMSAccessU.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe

    O23 - Service: ePower Service (WMIService) - acer - C:AcerEmpowering TechnologyePowerePowerSvc.exe

    O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

    --

    End of file - 10764 bytes

    Kan ej hitta filen genom att gå in i Windows/System32 mappen

    Mvh/ Valter

  7. Ny sökning efter omstart:

    Malwarebytes' Anti-Malware 1.23

    Databasversion: 1010

    Windows 6.0.6001 Service Pack 1

    00:58:45 2008-07-31

    mbam-log-7-31-2008 (00-58-45).txt

    Skanningstyp: Snabb skanning

    Antal skannade objekt: 40388

    Förfluten tid: 4 minute(s), 47 second(s)

    Infekterade minnesprocesser: 0

    Infekterade minnesmoduler: 0

    Infekterade registernycklar: 0

    Infekterade registervärden: 0

    Infekterade registerdataposter: 0

    Infekterade mappar: 0

    Infekterade filer: 0

    Infekterade minnesprocesser:

    (Inga illasinnade poster hittades)

    Infekterade minnesmoduler:

    (Inga illasinnade poster hittades)

    Infekterade registernycklar:

    (Inga illasinnade poster hittades)

    Infekterade registervärden:

    (Inga illasinnade poster hittades)

    Infekterade registerdataposter:

    (Inga illasinnade poster hittades)

    Infekterade mappar:

    (Inga illasinnade poster hittades)

    Infekterade filer:

    (Inga illasinnade poster hittades)

    -----------------------------------------------------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 01:00:12, on 2008-07-31

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Boot mode: Normal

    Running processes:

    C:WindowsExplorer.EXE

    C:Windowssystem32Dwm.exe

    C:Windowssystem32taskeng.exe

    C:Program FilesAlwil SoftwareAvast4ashDisp.exe

    C:Program FilesLaunch ManagerLManager.exe

    C:Program FilesCOMODOFirewallcfp.exe

    C:Program FilesSynapticsSynTPSynTPEnh.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Program FilesWindows Media Playerwmpnscfg.exe

    C:Windowssystem32wbemunsecapp.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Program FilesMozilla Firefoxfirefox.exe

    C:Program FilesTrend MicroHijackThisHijackThis.exe

    R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://sv.intl.acer.yahoo.com

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://sv.intl.acer.yahoo.com

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

    R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local

    R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

    O1 - Hosts: ::1 localhost

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll

    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:Program FilesWinamp Toolbarwinamptb.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_05binssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:Windowssystem32ActiveToolBand.dll

    O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll

    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:Windowssystem32eDStoolbar.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:Program FilesWinamp Toolbarwinamptb.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe

    O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide

    O4 - HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe

    O4 - HKLM..Run: [COMODO Firewall Pro] "C:Program FilesCOMODOFirewallcfp.exe" -h

    O4 - HKLM..Run: [synTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe

    O4 - HKCU..Run: [sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun

    O4 - HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe

    O4 - HKUSS-1-5-19..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-20..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'NÄTVERKSTJÄNST')

    O4 - HKUSS-1-5-18..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')

    O4 - HKUS.DEFAULT..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')

    O8 - Extra context menu item: &Winamp Toolbar Search - C:ProgramDataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html

    O8 - Extra context menu item: Append to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000

    O8 - Extra context menu item: Skicka bild till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm

    O8 - Extra context menu item: Skicka sida till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05binssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05binssv.dll

    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O13 - Gopher Prefix:

    O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://plugin.driveragent.com/files/driveragent.cab

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

    O20 - AppInit_DLLs:  C:Windowssystem32guard32.dll

    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:Program FilesLavasoftAd-Awareaawservice.exe

    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:Program FilesCommon FilesAdobeAdobe Version Cue CS3ServerbinVersionCueCS3.exe

    O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe

    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:Program FilesBonjourmDNSResponder.exe

    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:Program FilesCOMODOFirewallcmdagent.exe

    O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:AcerEmpowering TechnologyeDataSecurityeDSService.exe

    O23 - Service: eLock Service (eLockService) - Acer Inc. - C:AcerEmpowering TechnologyeLockServiceeLockServ.exe

    O23 - Service: eNet Service - Acer Inc. - C:AcerEmpowering TechnologyeNeteNet Service.exe

    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:AcerEmpowering TechnologyeRecoveryeRecoveryService.exe

    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:AcerEmpowering TechnologyeSettingsServicecapuserv.exe

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe

    O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

    O23 - Service: MobilityService - Unknown owner - C:AcerMobility CenterMobilityService.exe

    O23 - Service: NMSAccessU - Unknown owner - C:Program FilesCDBurnerXPNMSAccessU.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe

    O23 - Service: ePower Service (WMIService) - acer - C:AcerEmpowering TechnologyePowerePowerSvc.exe

    O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

    --

    End of file - 10774 bytes

  8. För ett par dagar sen började min Vista maskin bete sig lite konstigt. Det funkar bra att surfa på nätet och sånt, men så fort jag försöker öppna upp en fil eller en mapp på datorn, så försvinner aktivitetsfältet, och kommer allt som oftast inte tillbaka. Då får man logga ut, för att sen logga in igen. Vid nästa försök att kolla i mappar så upprepas proceduren.

    Har nu kört virusrensning med Avast, avinstallerat en massa onödigt trams, och tömt papperskorgen. Kört med CCleaner och Ad-Aware, men ingen skillnad i datorns sätt att bete sig.

    Har nu kollat maskinen med HijackThis, här är resultatet:

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 00:19:43, on 2008-07-31

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Boot mode: Normal

    Running processes:

    C:Windowssystem32taskeng.exe

    C:Windowssystem32Dwm.exe

    C:WindowsExplorer.EXE

    C:Program FilesAlwil SoftwareAvast4ashDisp.exe

    C:Program FilesLaunch ManagerLManager.exe

    C:Program FilesCOMODOFirewallcfp.exe

    C:Program FilesSynapticsSynTPSynTPEnh.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Program FilesWindows Media Playerwmpnscfg.exe

    C:Windowssystem32wbemunsecapp.exe

    C:Program FilesWindows Sidebarsidebar.exe

    C:Program FilesMozilla Firefoxfirefox.exe

    C:Windowssystem32conime.exe

    C:Program FilesTrend MicroHijackThisHijackThis.exe

    R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://sv.intl.acer.yahoo.com

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://sv.intl.acer.yahoo.com

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

    R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

    R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/def...://uk.yahoo.com

    R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local

    R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

    O1 - Hosts: ::1 localhost

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll

    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:Program FilesWinamp Toolbarwinamptb.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_05binssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:Windowssystem32ActiveToolBand.dll

    O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll

    O2 - BHO: (no name) - {9613A000-C0CF-4CEF-B5F7-B5190A939DA1} - C:Windowssystem32opnMebAR.dll

    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:Windowssystem32eDStoolbar.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:Program FilesWinamp Toolbarwinamptb.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll

    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:Program FilesAdobe/Adobe Contribute CS3/contributeieplugin.dll

    O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe

    O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide

    O4 - HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe

    O4 - HKLM..Run: [COMODO Firewall Pro] "C:Program FilesCOMODOFirewallcfp.exe" -h

    O4 - HKLM..Run: [synTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe

    O4 - HKCU..Run: [sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun

    O4 - HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe

    O4 - HKUSS-1-5-19..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJÄNST')

    O4 - HKUSS-1-5-20..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'NÄTVERKSTJÄNST')

    O4 - HKUSS-1-5-18..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')

    O4 - HKUS.DEFAULT..RunOnce: [iETI] C:Program FilesSkypePhoneIEPluginunins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')

    O8 - Extra context menu item: &Winamp Toolbar Search - C:ProgramDataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html

    O8 - Extra context menu item: Append to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000

    O8 - Extra context menu item: Skicka bild till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm

    O8 - Extra context menu item: Skicka sida till &Bluetooth-enhet... - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05binssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05binssv.dll

    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm

    O13 - Gopher Prefix:

    O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://plugin.driveragent.com/files/driveragent.cab

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

    O20 - AppInit_DLLs:  C:Windowssystem32guard32.dll

    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:Program FilesLavasoftAd-Awareaawservice.exe

    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:Program FilesCommon FilesAdobeAdobe Version Cue CS3ServerbinVersionCueCS3.exe

    O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe

    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:Program FilesBonjourmDNSResponder.exe

    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:Program FilesCOMODOFirewallcmdagent.exe

    O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:AcerEmpowering TechnologyeDataSecurityeDSService.exe

    O23 - Service: eLock Service (eLockService) - Acer Inc. - C:AcerEmpowering TechnologyeLockServiceeLockServ.exe

    O23 - Service: eNet Service - Acer Inc. - C:AcerEmpowering TechnologyeNeteNet Service.exe

    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:AcerEmpowering TechnologyeRecoveryeRecoveryService.exe

    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:AcerEmpowering TechnologyeSettingsServicecapuserv.exe

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe

    O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

    O23 - Service: MobilityService - Unknown owner - C:AcerMobility CenterMobilityService.exe

    O23 - Service: NMSAccessU - Unknown owner - C:Program FilesCDBurnerXPNMSAccessU.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe

    O23 - Service: ePower Service (WMIService) - acer - C:AcerEmpowering TechnologyePowerePowerSvc.exe

    O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

    --

    End of file - 10903 bytes

    Är mycket tacksam för hjälp, vill om möjligt undvika en ominstallation.

    Mvh/ Valter

    .....

    Fortsättning:

    Här är loggen efter en sökning med Malwarebytes:

    Malwarebytes' Anti-Malware 1.23

    Databasversion: 1010

    Windows 6.0.6001 Service Pack 1

    00:42:53 2008-07-31

    mbam-log-7-31-2008 (00-42-53).txt

    Skanningstyp: Snabb skanning

    Antal skannade objekt: 40448

    Förfluten tid: 4 minute(s), 58 second(s)

    Infekterade minnesprocesser: 0

    Infekterade minnesmoduler: 1

    Infekterade registernycklar: 6

    Infekterade registervärden: 0

    Infekterade registerdataposter: 2

    Infekterade mappar: 7

    Infekterade filer: 11

    Infekterade minnesprocesser:

    (Inga illasinnade poster hittades)

    Infekterade minnesmoduler:

    C:WindowsSystem32opnMebAR.dll (Trojan.Vundo) -> Delete on reboot.

    Infekterade registernycklar:

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9613a000-c0cf-4cef-b5f7-b5190a939da1} (Trojan.Vundo) -> Delete on reboot.

    HKEY_CLASSES_ROOTCLSID{9613a000-c0cf-4cef-b5f7-b5190a939da1} (Trojan.Vundo) -> Delete on reboot.

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftFCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftRemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftMSSMGR (Trojan.Downloader) -> Quarantined and deleted successfully.

    HKEY_LOCAL_MACHINESOFTWAREScreensavers.com (Adware.Comet) -> Quarantined and deleted successfully.

    Infekterade registervärden:

    (Inga illasinnade poster hittades)

    Infekterade registerdataposter:

    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSANotification Packages (Trojan.Vundo) -> Data: c:windowssystem32opnmebar -> Quarantined and deleted successfully.

    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSAAuthentication Packages (Trojan.Vundo) -> Data: c:windowssystem32opnmebar  -> Delete on reboot.

    Infekterade mappar:

    C:Program FilesScreensavers.com (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comSSSInst (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comSSSInstbin (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comSSSInstReady (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comSSSInsttemp (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comSSSInstUpload (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comWallpaper (Adware.Comet) -> Quarantined and deleted successfully.

    Infekterade filer:

    C:WindowsSystem32opnMebAR.dll (Trojan.Vundo) -> Delete on reboot.

    C:WindowsSystem32RAbeMnpo.ini (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32RAbeMnpo.ini2 (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32efcBrQHy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32yHQrBcfe.ini (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32yHQrBcfe.ini2 (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32pmnnOEWP.dll (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32PWEOnnmp.ini (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:WindowsSystem32PWEOnnmp.ini2 (Trojan.Vundo) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comSSSInstbinSSSUninst.exe (Adware.Comet) -> Quarantined and deleted successfully.

    C:Program FilesScreensavers.comWallpaperswpstart.exe (Adware.Comet) -> Quarantined and deleted successfully.

  9. Se till att ha mer än ca 6GB ledigt på hårddisken.

    1. Klicka på start knappen.

    2. Klicka på Påbörja sökning, skriv msconfig och klicka på enter.

    3. Välj "Fortsätt" på  kontroll av användarkonto.

    4. Klicka på fliken "Tjänster" på det nya fönstret.

    5. Sätt en bock I rutan "Dölj alla Microsoft tjänster", sen klickar du på "Inaktivera alla".

    6. Klicka nu på fliken "Autostart", sen klickar du på "Inaktivera alla".

    7. Klicka nu på "Verkställ" och "ok" och starta om datorn när du blir tillfrågad.

    8. Efter omstart så kan du bli tillfrågad klicka bara på krysset (X) för att stänga ner dessa.

    Efter detta kunde jag avinstallera RC, och installationen av SP1 gick smätfritt.

    Lycka till/ Valter

  10. Ursäkta om jag är lite otydlig.... så här är det:

    Jag har 2 st stationära datorer hemma + en bärbar. Den bärbara tar jag med mig hemifrån ibland, och då kan det hända att jag vill in på mina stationära i hemmet. VNC är installerat på alla tre. Kör jag VNC hemma, i hemnätverket så kommer jag åt alla datorerna från alla. Inget problem där alltså.

    Problemet uppstår när jag ska komma åt mer än en dator utifrån, dvs när jag loggar in på VNC på min bärbara utanför hemmet. Då matar jag ju in min IP-adress, som routern har från internet, ej routerns interna nummer inom hemnätverket. Då kommer det upp en ruta där jag ska mata in ett lösenord, vilket jag gör, och då kommer jag in på den ena datorn hemma, och alltid på samma. Har konfiguerat routern enligt guiden.

    Under "Virtual Servers" ser det ut så här:

    192.168.1.60  VNC  5500,5800,5900

    192.168.1.134  VNC  5510,5810,5910

    Under "Special Apps" ser det ut så här

              Trigger      Incoming ports      Enable

    VNC          5900      5510,5810,5910      Yes

    Och jag fattar alltså inte hur jag ska bete mig för att komma åt dator nr 2 i hemmet.

    Tack för ditt tålamod!

    Mvh/ Valter

  11. Nej, nej, inte samma på båda. IP adressen jag menade var routerns adress ut mot nätet. Men menar du att jag måste köra/starta VNC 2ggr för att kunna komma in på de respektive maskinerna? Men hur kan man välja vilken dator jag ska in på? Man anger ju inte nåt internt IP nummer inom nätverket vid inloggning. Eller är det bara för att jag inte lyckats konfiguera det hela på rätt sätt?

    Den datorn som funkar att  komma in på är inställd på port 5500,5800,5900.

    Den andra inställd på 5510,5810,5910, och är kopplad till port 5900 (Trigger 5900).

    Får se om det hela funkar i kväll när jag kommer hem.

    Återkommer annars med flera dumma frågor  ;)

    Mvh/ Valter 

  12. Jag har inte heller denna router, men menyn ser liknande ut, jag har också 3Com. Men, nu har jag laborerat hit och dit med alla möjliga portinställningar, får det inte att funka. Jag fattar alltså inte hur jag får routern att skillja på datorerna. När jag loggar in på IP-adressen, så kommer jag bara till ena datorn, aldrig till båda, eller till att kunna välja vilken jag vill logga in på.

    Följde guiden steg för steg, händer inget.

    Tacksam för mer hjälp.

    Mvh/ Valter

×
×
  • Skapa nytt...