Cackes 2 logg filer

[Cacke]

Jag bifogade 2 logg filer som blev till av ett program som jag körde och skulle posta här.

Ta bort IP och sånt om det finns i dom.

Det jag får i event viewer är DCOM error 10010 och service control manager med 7035

Den låste sig slumpvis och när jag gjorde vissa saker som startade microsoft egna adaware och spyware scanner, när jag uppdatera windows så kan jag inte installera dom och så var det något med services i admin tools som stängdes av hela tiden när jag skulle kolla en sak som han som tipsade mig om att posta mina loggar här.

/Cacke

Logg 1.txt

Logg 2.txt

[Mats H]

Hej,

postar din logg här, från DDS.txt.

Mvh

Mats H

DDS (Ver_10-12-12.02) - NTFSx86

Run by XXXXXXXXXXXXXX at 16:38:44,32 on 2011-02-28

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22

============== Running Processes ===============

============== Pseudo HJT Report ===============

uStart Page = hxxp://lifeportalen.se/

uURLSearchHooks: H - No File

uURLSearchHooks: H - No File

BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

BHO: {5CCD114A-C2EB-4B0A-BE08-FA3237D0FD84} - No File

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Bredbandsbolaget Servicecenter Plugin: {db87cde1-ef9c-44eb-a42f-6d0b3c72c516} - c:\program files\bredbandsbolaget\servicecenter\IEFixItNowPlugin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: TBHelper Class: {e46a2169-e328-471a-9788-f2b52bb9c681} - c:\program files\sms och mms i datorn desktop\miebho1.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Sms och mms i datorn: {6b49f76b-190a-4fc6-83ea-baad234baff8} - c:\program files\sms och mms i datorn desktop\mie1.dll

TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File

TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe

uRun: [ASUS SmartDoctor] c:\program files\asus\smartdoctor\SmartDoctor.exe /start

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

mRun: [bredbandsbolaget Servicecenter] "c:\program files\bredbandsbolaget\servicecenter\Bredbandsbolaget.exe"

mRun: [00PCTFW] "c:\program files\pc tools firewall plus\FirewallGUI.exe" -s

mRun: [sSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot

mRun: [PaperPort PTD] "c:\program files\scansoft\paperport\pptd40nt.exe"

mRun: [indexSearch] "c:\program files\scansoft\paperport\IndexSearch.exe"

mRun: [PPort11reminder] "c:\program files\scansoft\paperport\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\scansoft\paperport\11\config\ereg\Ereg.ini"

mRun: [brMfcWnd] "c:\program files\brother\brmfcmon\BrMfcWnd.exe" /AUTORUN

mRun: [ControlCenter3] "c:\program files\brother\controlcenter3\brctrcen.exe" /autorun

mRun: [CTHelper] "CTHELPER.EXE"

mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe

mRun: [ASUSGamerOSD] c:\program files\asus\gamerosd\GamerOSD.exe

mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

dRunOnce: [iE8] rundll32 advpack.dll,LaunchINFSection IE8.INF,FirstUserStart

dRunOnce: [showDeskFix] regsvr32 /s /n /i:u shell32

IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000

IE: E&xportera till Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000

IE: Skicka som mms... - file://c:\program files\sms och mms i datorn desktop\sendmms.htm

IE: Skicka som sms... - file://c:\program files\sms och mms i datorn desktop\sendsms.htm

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL

DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab

DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlcdnet.asus.com/pub/ASUS/misc/dlm-activex-2.2.5.0.cab

DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - hxxp://www.eset.eu/buxus/docs/OnlineScanner.cab

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://www.ma-config.com/plugins/MaConfig_5_1_0_5.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab

DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} - hxxp://ax.emsisoft.com/asquared.cab

DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\xxxxxx~1\applic~1\mozilla\firefox\profiles\ccils6g6.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://kolla.tv/Standard.aspx|https://www.comhem.se/appmanager/portal/comhem?_nfpb=true&T2400554551161245451345_actionOverride=%2Forder%2Fmain%2FAddressSearch%2FcheckAddress&_windowLabel=T2400554551161245451345&_pageLabel=tv_analogt_utbud|https://www.comhem.se/portlets/channelPlan/printableChannelPlan/begin.do

FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.1&q=

FF - prefs.js: network.proxy.type - 0

FF - component: c:\documents and settings\xxxxxxxxxxxxxx\application data\mozilla\firefox\profiles\ccils6g6.default\extensions\{00bf7b9c-acd2-4080-bea8-b1c41987070f}\components\FFExternalAlert.dll

FF - component: c:\documents and settings\xxxxxxxxxxxxxx\application data\mozilla\firefox\profiles\ccils6g6.default\extensions\{00bf7b9c-acd2-4080-bea8-b1c41987070f}\components\RadioWMPCore.dll

FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll

FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll

FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program files\microsoft\office live\npOLW.dll

FF - plugin: c:\program files\voddler\plugin\npvoddler.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Hide My IP: staff@hide-my-ip.com - c:\program files\mozilla firefox\extensions\staff@hide-my-ip.com

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

FF - Ext: Torrent Finder Toolbar: TFToolbarX@torrent-finder - %profile%\extensions\TFToolbarX@torrent-finder

FF - Ext: TranslatorBar 1 Toolbar: {00bf7b9c-acd2-4080-bea8-b1c41987070f} - %profile%\extensions\{00bf7b9c-acd2-4080-bea8-b1c41987070f}

FF - Ext: Nero Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff

FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg10\Firefox

---- FIREFOX POLICIES ----

FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

FF - user.js: network.proxy.type - 0

FF - user.js: network.proxy.http -

user_pref(network.proxy.http_port,);

FF - user.js: network.proxy.no_proxies_on -

============= SERVICES / DRIVERS ===============

=============== Created Last 30 ================

2011-02-28 07:38:10 -------- d-----w- C:\b4dd4edcdac7ad3127a8a19a34

2011-02-27 22:23:19 -------- d-----w- C:\fa719cd682ed780b71bd80

2011-02-27 21:38:41 -------- d-----w- C:\6f04ac3490f5a2e7c96516a873550197

2011-02-27 21:04:49 -------- d-----w- C:\01b2961290daaecb2d28

2011-02-27 19:21:50 -------- d-----w- C:\404e710acffb9c1067

2011-02-26 17:50:20 153088 ----a-w- c:\windows\Smyrya.exe

2011-02-26 09:58:19 -------- d-----w- c:\program files\SUPERAntiSpyware

2011-02-25 14:28:12 -------- d-----w- c:\program files\Cablenut

2011-02-23 09:02:23 -------- d-----w- c:\docume~1\xxxxxx~1\applic~1\GlarySoft

2011-02-23 09:00:42 -------- d-----w- c:\program files\Glary Utilities

2011-02-19 16:41:45 -------- d-----w- c:\docume~1\alluse~1\applic~1\NVIDIA Corporation

2011-02-19 16:27:31 941160 ----a-w- c:\windows\system32\nvdispco322090.dll

2011-02-19 16:27:31 837736 ----a-w- c:\windows\system32\nvgenco322040.dll

2011-02-19 16:22:10 -------- d-----w- c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP

2011-02-19 12:48:37 -------- d-----w- C:\$WINDOWS.~BT

2011-02-16 10:57:22 -------- d-----w- c:\program files\Sms och mms i datorn Desktop

2011-02-11 08:40:45 -------- d-----w- c:\docume~1\xxxxxx~1\applic~1\SUPERAntiSpyware.com

2011-02-01 22:15:37 -------- d-----w- c:\docume~1\xxxxxx~1\applic~1\Systenance

2011-02-01 20:08:13 -------- d-----w- c:\docume~1\xxxxxx~1\locals~1\applic~1\Innovative Solutions

2011-02-01 20:08:13 -------- d-----w- c:\docume~1\alluse~1\applic~1\Innovative Solutions

==================== Find3M ====================

2011-01-07 18:58:14 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll

2010-12-17 06:56:10 545 ----a-w- c:\windows\UC.PIF

2010-12-17 06:56:10 545 ----a-w- c:\windows\RAR.PIF

2010-12-17 06:56:10 545 ----a-w- c:\windows\PKZIP.PIF

2010-12-17 06:56:10 545 ----a-w- c:\windows\PKUNZIP.PIF

2010-12-17 06:56:10 545 ----a-w- c:\windows\NOCLOSE.PIF

2010-12-17 06:56:10 545 ----a-w- c:\windows\LHA.PIF

2010-12-17 06:56:10 545 ----a-w- c:\windows\ARJ.PIF

2010-12-06 17:41:39 87608 ----a-w- c:\docume~1\xxxxxx~1\applic~1\inst.exe

2010-12-06 17:41:39 47360 ----a-w- c:\docume~1\xxxxxx~1\applic~1\pcouffin.sys

============= FINISH: 16:46:40,75 ===============

Redigerad Februari 28, 2011 av Mats H

[Mats H]

Hej,

ladda ned Malwarebytes och kör en snabbskanner av din dator.

Malwarebytes hittas här:

http://www.malwarebytes.org/mbam.php

Följ programmetet instruktioner, även omstart kan krävas.

Posta din logg här i din tråd.

Om det inte skulle fungera av någon anledning, så återkom direkt.

Har ditt eget antivirusprogram hittat något, finns det loggar?

Mvh

Mats H

[Cacke]

Gör detta imorgon för det tar tid.

[Cacke]

( Cecilia Skrev detta idag, 14:51 När det gäller skadliga filer skriver du lämpligen i din tråd som handlar om det och inte här. )

Hur kollar jag de om dom finns kvar efter alla mina skanningar och bort tagningar av skadliga filer?

[Cecilia]

Klistra in nya DDS-loggar så kan Mats titta på hur det ser ut nu.