bearshare hur tar jag bort bearshare

kristall · Februari 21, 2013

Jag har probem med ett program BearShare jag försöker avinstallera. Men det går inte.
Den har gjort att datorn bara visar svart skärm.

Det kommer också upp en skylt som sätter igång och vill göra en systemåterställning. efter en timma händer fortfarande inget.

Kan någon hjälpa mig. :wub:

Tack

Cecilia · Februari 21, 2013

Fungerar datorn i felsäkert läge med nätverk så att du kan ladda ner och köra särskilda avinstallationsprogram?

kristall · Februari 21, 2013

Hej Cecilia.

Jag testade med nätvärk i felsäkert läge men uppkopplingen gick inte igång.
Vilket avinstallationprogram ska man ha? kankse kan jag ladda ner på en annan dator och flytta över.

Cecilia · Februari 21, 2013

Hej!

Ladda ner Farbar Recovery Scan Tool (FRST) och spara på ett USB-minne på den fungerande datorn.

För 64-bitars Windows (i den infekterade datorn): http://download.bleepingcomputer.com/farbar/FRST64.exe

För 32-bitars Windows: http://download.bleepingcomputer.com/farbar/FRST.exe

Sedan ska du starta den infekterade datorn och utan att starta hela Windows få igång en Kommandotolk. Det finns två alternativ att göra detta. Vilket du ska använda beror på om du har en installationsskiva för Windows 7.

Alternativ 1 utan Windows-skiva

När datorn startar börjar du trycka på F8-tangenten upprepade gånger till sidan "Advanced Boot Options" visas (kan även vara något på svenska) med en meny.

I menyn använder du piltangenterna för att välja "Repair your computer" (Reparera datorn på svenska kanske).

Välj rätt tangentbord och klicka på "Next"/"Nästa".

Välj vilket operativsystem du vill reparera. Om där finns flera så ska du välja det som är det infekterade Windows. Klicka på "Next"/"Nästa".

Välj ditt användarkonto och klicka på "Next"/"Nästa".

Alternativ 2 med Windows-skiva

Stoppa i installationsskivan.

Starta datorn.

När det kommer upp en fråga om du vill starta datorn från installationsskivan så tryck på någon tangent.

Om frågan inte kommer upp utan datorn startas från hårddisken som vanligt, behöver du ändra en BIOS-inställning för att starta från skivan.

När menyn på installationsskivan kommer upp klicka på "Repair your computer" (Reparera datorn på svenska kanske).

Välj rätt tangentbord och klicka på "Next"/"Nästa".

Välj vilket operativsystem du vill reparera. Om där finns flera så ska du välja det som är det infekterade Windows. Klicka på "Next"/"Nästa".

Välj ditt användarkonto och klicka på "Next"/"Nästa".

För båda alternativen

Nu visas menyn "System Recovery Options" (kanske Systemåterställningsalternativ på svenska).

Den börjar med "Startup Repair" och avslutas med "Command Prompt" (Kommandotolken).

Välj Kommandotolken.

Skriv in:

notepad

Tryck på Enter-tangenten.

Programmet Anteckningar startas.

Välj: Arkiv - Öppna

Välj: Dator

Leta upp ditt USB-minne och skriv upp vilken enhetsbokstav det har, t ex g:.

Stäng Anteckningar.

I Kommandotolken skriver du in:

32-bitars Windows: g:\frst.exe

64-bitars Windows: g:\frst64.exe

men ersätt g med enhetsbokstaven USB-minnet har.

Programmet FRST börjar köra.

Läs villkoren för programmet.

Klicka på Yes för att acceptera.

Klicka på Scan-knappen.

När det är klart kommer det att ha skapats en log FRST.txt på USB-minnet.

Kopiera innehållet i loggen och klistra in i ditt svar.

kristall · Februari 21, 2013

Kanske en dum fråga. Men min fungerade dator är 32 bitars medan vännens (som jag hjälper är 64 bitars)

Går att ladda ner 64 bitars då på 32

Och ska jag packa upp programmet eller bara lägga in i minnet och packa upp på hennes dator?

Cecilia · Februari 21, 2013

Då laddar du ner 64-bitars FRST och den ska inte packas upp alls utan bara kopieras till USB-minnet. Det är ett program (exe-fil) som bara ska köras från Kommandotolken i den infekterade datorn.

kristall · Februari 22, 2013

Hej

Nu har jag gjort en scaning, här kommer loggen.

FRST.txt

Cecilia · Februari 22, 2013

Starta Anteckningar.

Kopiera alla rader i rutan:

HKLM-x32\...\Run: [DATAMNGR] C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\DATAMN~1.EXE [1684544 2013-01-22] (MusicLab, LLC) 
HKU\NN\...\Run: [SmileboxTray] "C:\Users\NN\AppData\Roaming\Smilebox\SmileboxTray.exe" [305448 2013-01-22] (Smilebox, Inc.) 
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\x64\datamngr.dll C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\x64\IEBHO.dll 
3 tmlwf; [x] 
3 tmwfp; [x]

och klistra in i Anteckningar.

Kontrollera att det är 5 rader.

Spara filen på USB-minnet med namnet fixlist.txt.

På den infekterade datorn från Kommandotolken på samma sätt som sist.

Starta:

f:\FRST64

Klicka på knappen Fix.

Vänta tills programmet är klart.

Programmet skapar en logg Fixlog.txt på USB-minnet. Klistra in innehållet i den i ditt svar.

Kolla om den infekterade datorn startar eller om det är mer som måste bort först.

Edit: Tagit bort namn

Redigerad Februari 22, 2013 av Cecilia

kristall · Februari 22, 2013

Jag startade datorn och det kom igång. Dock bearshare är kvar. Fast kanske det blir nästa steg

Loggen

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-02-2013 01
Ran by SYSTEM at 22-02-2013 11:28:14
Running from F:\
Windows 7 Home Premium   (X64) OS Language: English(US)
The current controlset is ControlSet001

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [EeeStorageBackup] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe MySyncFolder [1732608 2009-11-26] ()
HKLM\...\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2726728 2010-03-24] (CANON INC.)
HKLM-x32\...\Run: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-07-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2244608 2009-09-11] (VIA)
HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [6859392 2009-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [170624 2009-08-19] (ASUS)
HKLM-x32\...\Run: [setwallpaper] c:\programdata\SetWallpaper.cmd [x]
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-24] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [DATAMNGR] C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\DATAMN~1.EXE [1684544 2013-01-22] (MusicLab, LLC)
HKU\Katalin Loka\...\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [3882312 2008-12-02] (Microsoft Corporation)
HKU\Katalin Loka\...\Run: [GameXN GO] "C:\ProgramData\GameXN\GameXNGO.exe" /startup [x]
HKU\Katalin Loka\...\Run: [smileboxTray] "C:\Users\Katalin Loka\AppData\Roaming\Smilebox\SmileboxTray.exe" [305448 2013-01-22] (Smilebox, Inc.)
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\x64\datamngr.dll C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\x64\IEBHO.dll
Tcpip\..\Interfaces\{68771E6C-E1B6-4C18-A713-4E9CE14E944C}: [NameServer]80.251.201.177 80.251.201.178
Startup: C:\ProgramData\Start Menu\Programs\Startup\BankID säkerhetsprogram.lnk
ShortcutTarget: BankID säkerhetsprogram.lnk -> C:\Program Files (x86)\Personal\bin\Personal.exe (Technology Nexus AB)
Startup: C:\ProgramData\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe ()
Startup: C:\Users\Katalin Loka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Skärmurklipp och start för OneNote 2007.lnk
ShortcutTarget: Skärmurklipp och start för OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Services (Whitelisted) ===================

2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
2 HWDeviceService64.exe; "C:\ProgramData\DatacardService\HWDeviceService64.exe" -/service [346976 2011-03-14] ()
2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [246112 2012-03-23] ()
2 N360; "C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\ccSvcHst.exe" /s "N360" /m "C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\diMaster.dll" /prefetch:1 [309688 2012-04-12] (Symantec Corporation)
2 OberonGameConsoleService; "C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe" [44312 2009-09-14] ()

==================== Drivers (Whitelisted) =====================

2 ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
1 BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\Definitions\BASHDefs\20130208.001\BHDrvx64.sys [1388120 2013-01-15] (Symantec Corporation)
1 ccSet_N360; C:\Windows\system32\drivers\N360x64\0604010.00E\ccSetx64.sys [167072 2012-06-06] (Symantec Corporation)
1 eeCtrl; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-23] (Symantec Corporation)
3 EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-23] (Symantec Corporation)
1 IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\Definitions\IPSDefs\20130215.002\IDSvia64.sys [513184 2012-08-31] (Symantec Corporation)
3 kbfiltr; C:\Windows\System32\Drivers\kbfiltr.sys [15416 2009-07-20] ( )
3 NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\Definitions\VirusDefs\20130216.009\ENG64.SYS [126192 2013-01-21] (Symantec Corporation)
3 NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\Definitions\VirusDefs\20130216.009\EX64.SYS [2087664 2013-01-21] (Symantec Corporation)
3 SNP2UVC; C:\Windows\System32\Drivers\SNP2UVC.sys [1799680 2009-05-20] ()
3 SRTSP; C:\Windows\System32\Drivers\N360x64\0604010.00E\SRTSP64.SYS [737952 2012-07-05] (Symantec Corporation)
1 SRTSPX; C:\Windows\system32\drivers\N360x64\0604010.00E\SRTSPX64.SYS [37536 2012-07-05] (Symantec Corporation)
0 SymDS; C:\Windows\System32\drivers\N360x64\0604010.00E\SYMDS64.SYS [451192 2012-03-28] (Symantec Corporation)
0 SymEFA; C:\Windows\System32\drivers\N360x64\0604010.00E\SYMEFA64.SYS [1129120 2012-05-21] (Symantec Corporation)
3 SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [175736 2012-05-09] (Symantec Corporation)
1 SymIRON; C:\Windows\system32\drivers\N360x64\0604010.00E\Ironx64.SYS [190072 2012-03-28] (Symantec Corporation)
1 SymNetS; C:\Windows\System32\Drivers\N360x64\0604010.00E\SYMNETS.SYS [405624 2012-03-28] (Symantec Corporation)
3 zte_mf651_cdc_acm; C:\Windows\System32\Drivers\zte_mf651_cdc_acm.sys [97792 2009-11-06] (ZTE)
3 zte_mf651_cdc_ecm; C:\Windows\System32\Drivers\zte_mf651_cdc_ecm.sys [52736 2009-11-06] (ZTE)
3 zte_mf651_cpo; C:\Windows\System32\Drivers\zte_mf651_cpo.sys [13824 2009-11-06] (ZTE)
3 zte_mf651_dc_enum; C:\Windows\System32\Drivers\zte_mf651_dc_enum.sys [95744 2009-11-06] (ZTE)
3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [x]
3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [x]
3 tmlwf; [x]
3 tmwfp; [x]

==================== NetSvcs (Whitelisted) ====================

==================== One Month Created Files and Folders ========

2013-02-22 11:28 - 2013-02-22 11:28 - 00000000 ____D C:\FRST
2013-02-21 04:39 - 2013-02-21 04:39 - 00000000 ____D C:\ProgramData\Birdstep Technology
2013-02-09 07:03 - 2013-02-09 07:03 - 00835904 ____A (Smilebox, Inc.) C:\Users\Katalin Loka\Downloads\SmileboxInstaller(1).exe
2013-02-09 06:03 - 2013-02-09 06:03 - 00000000 ____D C:\ProgramData\Browser Manager
2013-02-09 04:12 - 2013-02-09 04:21 - 00000000 ____D C:\Users\NN\AppData\Local\Smilebox
2013-02-09 04:11 - 2013-02-09 06:57 - 00000000 ____D C:\Users\NN\Documents\My Smilebox Creations
2013-02-09 04:11 - 2013-02-09 04:11 - 00000000 ____D C:\Users\NN\AppData\Local\Google
2013-02-09 04:09 - 2013-02-09 07:05 - 00000000 ____D C:\Users\NN\AppData\Roaming\Smilebox
2013-02-09 04:09 - 2013-02-09 07:03 - 00001865 ____A C:\Users\NN\Desktop\Smilebox.lnk
2013-02-09 04:09 - 2013-02-09 04:09 - 00835904 ____A (Smilebox, Inc.) C:\Users\NN\Downloads\SmileboxInstaller.exe
2013-02-09 03:56 - 2013-02-09 03:56 - 00003584 ____A C:\Users\NN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-02-09 03:53 - 2013-02-09 03:53 - 00000138 ____A C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.url
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\Users\NN\Documents\My Received Files
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\Users\NN\AppData\Roaming\MusicNet
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\ProgramData\Wincert
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\ProgramData\A19B
2013-02-09 03:52 - 2013-02-21 12:40 - 00000000 ____D C:\Program Files (x86)\BearShare Applications
2013-02-09 03:52 - 2013-02-09 03:52 - 00001202 ____A C:\Users\NN\Desktop\BearShare.lnk
2013-02-09 03:51 - 2013-02-21 12:40 - 00000000 ___HD C:\ProgramData\{8B9D577D-9B51-4CE5-BF2F-2DB28E8A7F89}
2013-02-09 03:51 - 2013-02-09 03:51 - 02488232 ____A (Musiclab, LLC                                                                                                                                                                                                                                                                                               ) C:\Users\Katalin Loka\Downloads\BearShareV10-r693-w(2).exe
2013-02-09 03:51 - 2013-02-09 03:51 - 00000000 ____D C:\Users\NN\AppData\Local\PackageAware
2013-02-09 03:50 - 2013-02-09 03:50 - 02488232 ____A (Musiclab, LLC                                                                                                                                                                                                                                                                                               ) C:\Users\Katalin Loka\Downloads\BearShareV10-r693-w(1).exe
2013-02-09 03:49 - 2013-02-09 03:49 - 02488232 ____A (Musiclab, LLC                                                                                                                                                                                                                                                                                               ) C:\Users\Katalin Loka\Downloads\BearShareV10-r693-w.exe
2013-02-09 03:43 - 2013-02-09 03:43 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_21_35.bmp
2013-02-09 03:43 - 2013-02-09 03:43 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_19_48_33.bmp
2013-02-09 03:42 - 2013-02-09 03:42 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_39_3.bmp
2013-02-09 03:42 - 2013-02-09 03:42 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_38_47.bmp
2013-02-09 03:42 - 2013-02-09 03:42 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_21_42.bmp
2013-02-09 03:41 - 2013-02-09 03:41 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_39_21.bmp
2013-02-09 00:46 - 2013-02-09 00:46 - 00000000 ____D C:\Users\NN\AppData\Local\Macromedia
2013-02-09 00:45 - 2013-02-09 00:45 - 00000040 ____A C:\Users\Public\Documents\_rgpl
2013-02-09 00:44 - 2013-02-19 09:44 - 00000868 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-02-09 00:44 - 2013-02-09 04:34 - 00697712 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-02-05 22:09 - 2013-02-05 22:10 - 00000000 ____D C:\Users\NN\Documents\Följesedlar
2013-01-23 10:00 - 2013-01-23 10:00 - 02072576 ____A C:\Users\NN\Downloads\BankID_installation_4_19_3(1).msi
2013-01-23 09:51 - 2013-01-23 09:51 - 00000000 ____D C:\Users\NN\Documents\ASUS WebStorage

==================== One Month Modified Files and Folders =======

2013-02-21 12:40 - 2013-02-09 03:52 - 00000000 ____D C:\Program Files (x86)\BearShare Applications
2013-02-21 12:40 - 2013-02-09 03:51 - 00000000 ___HD C:\ProgramData\{8B9D577D-9B51-4CE5-BF2F-2DB28E8A7F89}
2013-02-21 12:40 - 2011-10-04 09:12 - 00000000 ____D C:\users\Lokuci
2013-02-21 12:40 - 2010-05-05 11:10 - 00000000 ____D C:\ProgramData\Norton
2013-02-21 12:39 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2013-02-21 07:15 - 2009-08-04 02:58 - 00625756 ____A C:\Windows\System32\perfh01D.dat
2013-02-21 07:15 - 2009-08-04 02:58 - 00123910 ____A C:\Windows\System32\perfc01D.dat
2013-02-21 07:15 - 2009-07-13 21:13 - 01466674 ____A C:\Windows\System32\PerfStringBackup.INI
2013-02-21 05:19 - 2010-05-02 08:31 - 00794510 ____A C:\Windows\PFRO.log
2013-02-21 04:39 - 2013-02-21 04:39 - 00000000 ____D C:\ProgramData\Birdstep Technology
2013-02-21 04:28 - 2010-05-01 00:27 - 00000000 ____D C:\users\NN
2013-02-21 02:42 - 2010-01-27 21:25 - 01824248 ____A C:\Windows\WindowsUpdate.log
2013-02-21 02:40 - 2010-05-02 01:49 - 00000000 ____D C:\Users\NN\Tracing
2013-02-21 02:38 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-02-21 02:38 - 2009-07-13 20:51 - 00133231 ____A C:\Windows\setupact.log
2013-02-20 06:41 - 2010-09-06 03:38 - 00000000 ____D C:\Users\NN\AppData\Roaming\Personal
2013-02-20 06:41 - 2010-01-27 22:13 - 00000000 ____D C:\ProgramData\P4G
2013-02-20 06:41 - 2009-07-13 19:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-02-19 10:52 - 2010-05-08 08:37 - 00000000 ____D C:\Users\KNN\AppData\Local\CrashDumps
2013-02-19 09:44 - 2013-02-09 00:44 - 00000868 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-02-17 10:14 - 2009-07-13 21:32 - 00000000 ____D C:\Windows\System32\FxsTmp
2013-02-17 09:48 - 2009-07-13 20:45 - 00010240 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-02-17 09:48 - 2009-07-13 20:45 - 00010240 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-02-16 11:24 - 2011-10-05 15:28 - 00000000 ____D C:\Users\NN\AppData\Local\Canon Easy-PhotoPrint EX
2013-02-11 22:58 - 2013-01-22 00:07 - 00000000 ____D C:\Users\NN\Documents\Kaszas Elisabet, 2013
2013-02-11 22:51 - 2010-01-27 21:46 - 00002174 ____A C:\Windows\System32\AutoRunFilter.ini
2013-02-11 22:51 - 2010-01-27 21:46 - 00001557 ____A C:\Windows\System32\ServiceFilter.ini
2013-02-09 07:05 - 2013-02-09 04:09 - 00000000 ____D C:\Users\NN\AppData\Roaming\Smilebox
2013-02-09 07:03 - 2013-02-09 07:03 - 00835904 ____A (Smilebox, Inc.) C:\Users\NN\Downloads\SmileboxInstaller(1).exe
2013-02-09 07:03 - 2013-02-09 04:09 - 00001865 ____A C:\Users\NN\Desktop\Smilebox.lnk
2013-02-09 06:57 - 2013-02-09 04:11 - 00000000 ____D C:\Users\NN\Documents\My Smilebox Creations
2013-02-09 06:03 - 2013-02-09 06:03 - 00000000 ____D C:\ProgramData\Browser Manager
2013-02-09 04:34 - 2013-02-09 00:44 - 00697712 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-02-09 04:34 - 2012-03-08 11:42 - 00074096 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-02-09 04:21 - 2013-02-09 04:12 - 00000000 ____D C:\Users\NN\AppData\Local\Smilebox
2013-02-09 04:11 - 2013-02-09 04:11 - 00000000 ____D C:\Users\NNAppData\Local\Google
2013-02-09 04:09 - 2013-02-09 04:09 - 00835904 ____A (Smilebox, Inc.) C:\Users\NN\Downloads\SmileboxInstaller.exe
2013-02-09 03:56 - 2013-02-09 03:56 - 00003584 ____A C:\Users\Katalin Loka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-02-09 03:53 - 2013-02-09 03:53 - 00000138 ____A C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.url
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\Users\NN\Documents\My Received Files
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\Users\NN\AppData\Roaming\MusicNet
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\ProgramData\Wincert
2013-02-09 03:53 - 2013-02-09 03:53 - 00000000 ____D C:\ProgramData\A19B
2013-02-09 03:52 - 2013-02-09 03:52 - 00001202 ____A C:\Users\NN\Desktop\BearShare.lnk
2013-02-09 03:51 - 2013-02-09 03:51 - 02488232 ____A (Musiclab, LLC                                                                                                                                                                                                                                                                                               ) C:\Users\Katalin Loka\Downloads\BearShareV10-r693-w(2).exe
2013-02-09 03:51 - 2013-02-09 03:51 - 00000000 ____D C:\Users\NN\AppData\Local\PackageAware
2013-02-09 03:50 - 2013-02-09 03:50 - 02488232 ____A (Musiclab, LLC                                                                                                                                                                                                                                                                                               ) C:\Users\Katalin Loka\Downloads\BearShareV10-r693-w(1).exe
2013-02-09 03:49 - 2013-02-09 03:49 - 02488232 ____A (Musiclab, LLC                                                                                                                                                                                                                                                                                               ) C:\Users\Katalin Loka\Downloads\BearShareV10-r693-w.exe
2013-02-09 03:43 - 2013-02-09 03:43 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_21_35.bmp
2013-02-09 03:43 - 2013-02-09 03:43 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_19_48_33.bmp
2013-02-09 03:42 - 2013-02-09 03:42 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_39_3.bmp
2013-02-09 03:42 - 2013-02-09 03:42 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_38_47.bmp
2013-02-09 03:42 - 2013-02-09 03:42 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_21_42.bmp
2013-02-09 03:41 - 2013-02-09 03:41 - 01327158 ____A C:\Users\NN\Downloads\2011_6_2_23_39_21.bmp
2013-02-09 01:22 - 2012-11-04 08:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-02-09 00:53 - 2010-11-24 03:51 - 00002016 ____A C:\Users\Public\Desktop\Adobe Reader 9.lnk
2013-02-09 00:46 - 2013-02-09 00:46 - 00000000 ____D C:\Users\NN\AppData\Local\Macromedia
2013-02-09 00:45 - 2013-02-09 00:45 - 00000040 ____A C:\Users\Public\Documents\_rgpl
2013-02-09 00:39 - 2011-05-08 07:49 - 00002312 ____A C:\Users\Public\Desktop\Norton 360.lnk
2013-02-09 00:39 - 2011-05-08 07:48 - 00000000 ____D C:\Windows\System32\Drivers\N360x64
2013-02-06 13:29 - 2009-07-13 21:08 - 00032514 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-02-05 22:10 - 2013-02-05 22:09 - 00000000 ____D C:\Users\NN\Documents\Följesedlar
2013-02-05 21:45 - 2011-05-16 21:50 - 00000000 ____D C:\Users\NN\Documents\Mallar
2013-01-28 14:28 - 2011-10-05 08:45 - 00000000 ____D C:\Windows\rescache
2013-01-23 10:04 - 2010-09-06 03:38 - 00000000 ____D C:\Program Files (x86)\Personal
2013-01-23 10:00 - 2013-01-23 10:00 - 02072576 ____A C:\Users\NN\Downloads\BankID_installation_4_19_3(1).msi
2013-01-23 09:51 - 2013-01-23 09:51 - 00000000 ____D C:\Users\NN\Documents\ASUS WebStorage

==================== Known DLLs (Whitelisted) =================

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

Restore point made on: 2013-02-21 02:44:10

==================== Memory info ===========================

Percentage of memory in use: 13%
Total physical RAM: 4095.21 MB
Available physical RAM: 3532.39 MB
Total Pagefile: 4093.36 MB
Available Pagefile: 3522.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Partitions =============================

1 Drive c: (OS) (Fixed) (Total:74.52 GB) (Free:11.44 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
2 Drive d: (DATA) (Fixed) (Total:208.92 GB) (Free:208.84 GB) NTFS
4 Drive f: () (Removable) (Total:14.92 GB) (Free:12.76 GB) FAT32
5 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status         Size     Free     Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0    Online          298 GB 1024 KB
Disk 1    Online           14 GB      0 B

Partitions of Disk 0:
===============

Disk ID: 76692CA8

Partition ### Type              Size     Offset
------------- ---------------- ------- -------
Partition 1    Primary             14 GB 1024 KB
Partition 2    Primary             74 GB    14 GB
Partition 0    Extended           208 GB    89 GB
Partition 3    Logical            208 GB    89 GB

==================================================================================

Disk: 0
Partition 1
Type : 1C
Hidden: Yes
Active: No

There is no volume associated with this partition.

=========================================================

Disk: 0
Partition 2
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label        Fs     Type        Size     Status     Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1     C   OS           NTFS   Partition     74 GB Healthy

=========================================================

Disk: 0
Partition 3
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label        Fs     Type        Size     Status     Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2     D   DATA         NTFS   Partition    208 GB Healthy

=========================================================

Partitions of Disk 1:
===============

Disk ID: 00000000

Partition ### Type              Size     Offset
------------- ---------------- ------- -------
Partition 1    Primary             14 GB    26 KB

==================================================================================

Disk: 1
Partition 1
Type : 0C
Hidden: No
Active: No

Volume ### Ltr Label        Fs     Type        Size     Status     Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3     F                FAT32 Removable     14 GB Healthy

=========================================================

Last Boot: 2013-01-28 14:20

==================== End Of Log =============================

Redigerad Februari 22, 2013 av kristall

Cecilia · Februari 22, 2013

Du har klistrat in FRST.txt och inte Fixlog.txt. Gör det, tack

Bra att datorn är igång och då övergår vi till rensning direkt där.

Vi kan se vad DDS visar till att börja med. Spara DDS på Skrivbordet.

http://download.bleepingcomputer.com/sUBs/dds.scr

Starta programmet genom att dubbelklicka på det.

Tryck Yes/Ja om frågan om Optional Scan dyker upp.

I ditt svar klistrar du in loggen DSS.txt. Medan du bifogar Attach.txt som en fil. (Om du inte hittar hur du bifogar filer så kan du klistra in Attach.txt också.)

kristall · Februari 22, 2013

Här kommer den rätta loggen. Förlåt.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-02-2013 01
Ran by SYSTEM at 2013-02-22 13:22:41 Run:1
Running from F:\

==============================================

HKEY_LOCAL_MACHINE\software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DATAMNGR Value deleted successfully.
HKEY_USERS\NN\Software\Microsoft\Windows\CurrentVersion\Run\\SmileboxTray Value deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs Value was restored successfully .
tmlwf service deleted successfully.
tmwfp service deleted successfully.

==== End of Fixlog ====

Redigerad Februari 22, 2013 av kristall

kristall · Februari 22, 2013

Jag fick igång DDS på hennes dator men skickar svaret från min.

Loggarna. Hoppas att kan lägga in som fil, för det fungerade inte i tidigare svar.

Gick inte som fil så jag klistrar in dem här.

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 2010-05-01 10:27:35
System Uptime: 2013-02-22 14:01:37 (0 hours ago)
.
Motherboard: ASUSTeK Computer Inc. | | K70AD
Processor: AMD Athlon II Dual-Core M320 | CPU 1 | 798/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 75 GiB total, 10,576 GiB free.
D: is FIXED (NTFS) - 209 GiB total, 208,844 GiB free.
E: is CDROM ()
F: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP211: 2013-02-21 11:43:06 - Windows Update
RP212: 2013-02-22 13:29:13 - Windows Update
RP213: 2013-02-22 13:44:04 - Windows Update
.
==== Installed Programs ======================
.
.
Update for Microsoft Office 2007 (KB2508958)
2007 Microsoft Office system
64 Bit HP CIO Components Installer
Acrobat.com
Activation Assistant for the 2007 Microsoft Office suites
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader 9.5.3 MUI
Alcor Micro USB Card Reader
AMD USB Filter Driver
Apple-programstöd
Apple Mobile Device Support
Apple Software Update
ASUS AI Recovery
ASUS AP Bank
ASUS FancyStart
ASUS LifeFrame3
ASUS Live Update
ASUS MultiFrame
ASUS Power4Gear Hybrid
ASUS SmartLogon
ASUS Splendid Video Enhancement Technology
ASUS WebStorage
ASUS Virtual Camera
ASUS_Screensaver
Atheros Communications Inc.® AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
ATI Catalyst Install Manager
ATK Generic Function Service
ATK Hotkey
ATK Media
ATKOSD2
BankID säkerhetsprogram
BearShare
Bonjour
BufferChm
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon MP Navigator EX 4.0
Canon MP280 series användarregistrering
Canon MP280 series MP Drivers
Canon My Printer
Canon Solution Menu EX
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Chicken Invaders 2
Choice Guard
ControlDeck
CyberLink LabelPrint
CyberLink Power2Go
DJ_AIO_06_F2400_SW_Min
ETDWare PS/2-x64 7.0.5.7_WHQL
F2400
Fast Boot
Game Park Console
HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6
Inloggningsassistent för Windows Live ID
iTunes
Junk Mail filter update
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile Language Pack - SVE
Microsoft .NET Framework 4 Client Profile SVE Language Pack
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (Danish) 2007
Microsoft Office Access MUI (English) 2007
Microsoft Office Access MUI (Finnish) 2007
Microsoft Office Access MUI (Norwegian (Bokmål)) 2007
Microsoft Office Access MUI (Swedish) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel 2007 Help Oppdatering (KB963678)
Microsoft Office Excel 2007 Help Uppdatering (KB963678)
Microsoft Office Excel MUI (Danish) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Excel MUI (Finnish) 2007
Microsoft Office Excel MUI (Norwegian (Bokmål)) 2007
Microsoft Office Excel MUI (Swedish) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office Live Add-in 1.5
Microsoft Office Office 64-bit Components 2007
Microsoft Office OneNote MUI (Swedish) 2007
Microsoft Office Outlook MUI (Danish) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office Outlook MUI (Finnish) 2007
Microsoft Office Outlook MUI (Norwegian (Bokmål)) 2007
Microsoft Office Outlook MUI (Swedish) 2007
Microsoft Office Powerpoint 2007 Help Oppdatering (KB963669)
Microsoft Office Powerpoint 2007 Help Uppdatering (KB963669)
Microsoft Office PowerPoint MUI (Danish) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint MUI (Finnish) 2007
Microsoft Office PowerPoint MUI (Norwegian (Bokmål)) 2007
Microsoft Office PowerPoint MUI (Swedish) 2007
Microsoft Office Professional Hybrid 2007
Microsoft Office Proof (Danish) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (Finnish) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Norwegian (Bokmål)) 2007
Microsoft Office Proof (Norwegian (Nynorsk)) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proof (Swedish) 2007
Microsoft Office Proofing (Danish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (Finnish) 2007
Microsoft Office Proofing (Norwegian (Bokmål)) 2007
Microsoft Office Proofing (Swedish) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (Danish) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Publisher MUI (Finnish) 2007
Microsoft Office Publisher MUI (Norwegian (Bokmål)) 2007
Microsoft Office Publisher MUI (Swedish) 2007
Microsoft Office Shared 64-bit MUI (Danish) 2007
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit MUI (Finnish) 2007
Microsoft Office Shared 64-bit MUI (Norwegian (Bokmål)) 2007
Microsoft Office Shared 64-bit MUI (Swedish) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared MUI (Danish) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (Finnish) 2007
Microsoft Office Shared MUI (Norwegian (Bokmål)) 2007
Microsoft Office Shared MUI (Swedish) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word 2007 Help Oppdatering (KB963665)
Microsoft Office Word 2007 Help Uppdatering (KB963665)
Microsoft Office Word MUI (Danish) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office Word MUI (Finnish) 2007
Microsoft Office Word MUI (Norwegian (Bokmål)) 2007
Microsoft Office Word MUI (Swedish) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
Mobile Partner
Mozilla Firefox 15.0.1 (x86 sv-SE)
Mozilla Firefox 16.0.1 (x86 sv-SE)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2721691)
MSXML 4.0 SP3 Parser (KB2758694)
MSXML 4.0 SP3 Parser (KB973685)
Norton 360
Ohjelman Microsoft Office Excel 2007 Help päivitys (KB963678)
Ohjelman Microsoft Office Powerpoint 2007 Help päivitys (KB963669)
Ohjelman Microsoft Office Word 2007 Help päivitys (KB963665)
Opdatering til Microsoft Office Excel 2007 Help (KB963678)
Opdatering til Microsoft Office Powerpoint 2007 Help (KB963669)
Opdatering til Microsoft Office Word 2007 Help (KB963665)
Piggly
Pinnacle Hollywood FX
Platform
QuickTime
Search-Results Toolbar
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile Language Pack - SVE (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile Language Pack - SVE (KB2518870)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
Skype Toolbars
Skype™ 6.0
Smilebox
Smileyville
Toolbox
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2767848) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
WebReg
VIA Platform Device Manager
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
WinFlash
Wireless Console 3
Zero Assumption Digital Image Recovery 1.2
ZTE Mobile Connect 4.3.28.4451
ZTEIcera_4.3.28.4451
.
==== End Of File ===========================

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16464
Run by NN at 14:15:05 on 2013-02-22
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.46.1053.18.4095.2277 [GMT 1:00]
.
AV: Norton 360 *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\FBAgent.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\ProgramData\DatacardService\HWDeviceService64.exe
C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\ccSvcHst.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Personal\bin\Personal.exe
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Windows\splwow64.exe
C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\symerr.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\symerr.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\AUDIODG.EXE
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.bearshare.net
uDefault_Page_URL = hxxp://asus.msn.com
mWinlogon: Userinit = userinit.exe
BHO: Search-Results Toolbar: {15a0413e-9f45-4d45-9a75-2c20b15b5b51} - C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\coieplg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\ips\ipsbho.dll
BHO: Inloggningshjälp för Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: DataMngr: {B939CF93-F2CB-443d-956C-DC523D85C9DB} - C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\BrowserConnection.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\coieplg.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
TB: Search-Results Toolbar: {15a0413e-9f45-4d45-9a75-2c20b15b5b51} - C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll
EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [GameXN GO] "C:\ProgramData\GameXN\GameXNGO.exe" /startup
mRun: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
mRun: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
mRun: [setwallpaper] c:\programdata\SetWallpaper.cmd
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
StartupFolder: C:\Users\KATALI~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\SKRMUR~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BANKID~1.LNK - C:\Program Files (x86)\Personal\bin\Personal.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\FANCYS~1.LNK - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
uPolicies-Explorer: NoDriveAutoRun = dword:0
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportera till Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
TCP: Interfaces\{68771E6C-E1B6-4C18-A713-4E9CE14E944C} : NameServer = 80.251.201.177 80.251.201.178
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
AppInit_DLLs= C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\datamngr.dll C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\IEBHO.dll
SSODL: WebCheck - <orphaned>
x64-BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
x64-BHO: Inloggningshjälp för Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: DataMngr: {B939CF93-F2CB-443d-956C-DC523D85C9DB} - C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\x64\BrowserConnection.dll
x64-Run: [EeeStorageBackup] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe MySyncFolder
x64-Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
x64-Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\NN\AppData\Roaming\Mozilla\Firefox\Profiles\5b71gdhe.default\
FF - prefs.js: browser.startup.homepage - hxxp://search.bearshare.net
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&gct=ds&appid=693&systemid=2&apn_dtid=IME002&apn_ptnrs=AG2&apn_uid=0230449448504143&o=APN10641&q=
FF - component: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\components\coFFPlgn.dll
FF - component: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\components\IPSFFPl.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
FF - plugin: C:\Program Files (x86)\Personal\bin\np_prsnl.dll
FF - plugin: C:\Program Files (x86)\Personal\bin\np_prsnl64.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll
FF - ExtSQL: 2013-02-09 12:53; {15a0413e-9f45-4d45-9a75-2c20b15b5b51}; C:\Users\Katalin Loka\AppData\Roaming\Mozilla\Firefox\Profiles\5b71gdhe.default\extensions\{15a0413e-9f45-4d45-9a75-2c20b15b5b51}
FF - ExtSQL: !HIDDEN! 2013-02-09 12:53; {1FD91A9C-410C-4090-BBCC-55D3450EF433}; C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\FirefoxExtension
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\N360x64\0604010.00E\symds64.sys [2013-2-9 451192]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\N360x64\0604010.00E\symefa64.sys [2013-2-9 1129120]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\Definitions\BASHDefs\20130208.001\BHDrvx64.sys [2013-2-16 1388120]
R1 ccSet_N360;Norton 360 Settings Manager;C:\Windows\System32\drivers\N360x64\0604010.00E\ccsetx64.sys [2013-2-9 167072]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\Definitions\IPSDefs\20130215.002\IDSviA64.sys [2013-2-16 513184]
R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\N360x64\0604010.00E\ironx64.sys [2013-2-9 190072]
R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\N360x64\0604010.00E\symnets.sys [2013-2-9 405624]
R2 AFBAgent;AFBAgent;C:\Windows\System32\FBAgent.exe [2010-1-28 359552]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-7-29 203264]
R2 ASMMAP64;ASMMAP64;C:\Program Files\ATKGFNEX\ASMMAP64.sys [2010-1-28 14904]
R2 HWDeviceService64.exe;HWDeviceService64.exe;C:\ProgramData\DatacardService\HWDeviceService64.exe [2011-3-14 346976]
R2 N360;Norton 360;C:\Program Files (x86)\Norton 360\Engine\6.4.1.14\ccsvchst.exe [2013-2-9 138272]
R2 OberonGameConsoleService;Oberon Media Game Console service;C:\Program Files (x86)\ASUS\Game Park\GameConsole\OberonGameConsoleService.exe [2010-1-28 44312]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2009-7-9 140800]
R3 huawei_enumerator;huawei_enumerator;C:\Windows\System32\drivers\ew_jubusenum.sys [2012-3-23 86016]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2010-1-28 34872]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\System32\drivers\viahduaa.sys [2009-7-9 1222144]
R3 zte_mf651_dc_enum;ZTE Mobile Connect DC Enumerator;C:\Windows\System32\drivers\zte_mf651_dc_enum.sys [2009-11-6 95744]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 Mobile Partner. RunOuc;Mobile Partner. OUC;C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [2012-3-23 246112]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-9 160944]
S3 AmUStor;AM USB Stroage Driver;C:\Windows\System32\drivers\AmUStor.sys [2009-5-26 40448]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-8-24 138912]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;C:\Windows\System32\drivers\ew_hwusbdev.sys [2012-3-23 117248]
S3 ew_usbenumfilter;huawei_CompositeFilter;C:\Windows\System32\drivers\ew_usbenumfilter.sys [2012-3-23 13952]
S3 ewusbmbb;HUAWEI USB-WWAN miniport;C:\Windows\System32\drivers\ewusbwwan.sys [2012-3-23 415744]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-5-1 61792]
S3 fsssvc;Windows Live Family Safety;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-8 533344]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial;C:\Windows\System32\drivers\ewusbmdm.sys [2012-3-23 222464]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\System32\drivers\SiSG664.sys [2009-6-10 56832]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-24 59392]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-9-28 53760]
S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-26 1255736]
S3 zte_mf651_cdc_acm;ZTE Mobile Connect CDC-ACM driver;C:\Windows\System32\drivers\zte_mf651_cdc_acm.sys [2009-11-6 97792]
S3 zte_mf651_cdc_ecm;zte_mf651_cdc_ecm;C:\Windows\System32\drivers\zte_mf651_cdc_ecm.sys [2009-11-6 52736]
S3 zte_mf651_cpo;ZTE Mobile Connect Mass Storage Device;C:\Windows\System32\drivers\zte_mf651_cpo.sys [2009-11-6 13824]
.
=============== Created Last 30 ================
.
2013-02-22 19:28:07   --------   d-----w-   C:\FRST
2013-02-22 12:30:25   996352   ----a-w-   C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-22 12:30:25   768000   ----a-w-   C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-21 12:39:50   --------   d-----w-   C:\ProgramData\Birdstep Technology
2013-02-09 14:03:45   --------   d-----w-   C:\ProgramData\Browser Manager
2013-02-09 12:12:01   --------   d-----w-   C:\Users\Katalin Loka\AppData\Local\Smilebox
2013-02-09 12:11:48   --------   d-----w-   C:\Users\Katalin Loka\AppData\Local\Google
2013-02-09 12:09:48   --------   d-----w-   C:\Users\Katalin Loka\AppData\Roaming\Smilebox
2013-02-09 11:53:53   --------   d-----w-   C:\ProgramData\Wincert
2013-02-09 11:53:10   --------   d-----w-   C:\Users\Katalin Loka\AppData\Roaming\MusicNet
2013-02-09 11:53:10   --------   d-----w-   C:\ProgramData\A19B
2013-02-09 11:52:32   --------   d-----w-   C:\Program Files (x86)\BearShare Applications
2013-02-09 11:51:32   --------   d--h--w-   C:\ProgramData\{8B9D577D-9B51-4CE5-BF2F-2DB28E8A7F89}
2013-02-09 11:51:16   --------   d-----w-   C:\Users\Katalin Loka\AppData\Local\PackageAware
2013-02-09 08:46:13   --------   d-----w-   C:\Users\Katalin Loka\AppData\Local\Macromedia
2013-02-09 08:44:24   697712   ----a-w-   C:\Windows\SysWow64\FlashPlayerApp.exe
2013-02-09 08:10:05   737952   ----a-w-   C:\Windows\System32\drivers\N360x64\0604010.00E\srtsp64.sys
2013-02-09 08:10:05   451192   ----a-r-   C:\Windows\System32\drivers\N360x64\0604010.00E\symds64.sys
2013-02-09 08:10:05   405624   ----a-r-   C:\Windows\System32\drivers\N360x64\0604010.00E\symnets.sys
2013-02-09 08:10:05   37536   ----a-w-   C:\Windows\System32\drivers\N360x64\0604010.00E\srtspx64.sys
2013-02-09 08:10:05   190072   ----a-r-   C:\Windows\System32\drivers\N360x64\0604010.00E\ironx64.sys
2013-02-09 08:10:05   1129120   ----a-w-   C:\Windows\System32\drivers\N360x64\0604010.00E\symefa64.sys
2013-02-09 08:10:04   167072   ----a-w-   C:\Windows\System32\drivers\N360x64\0604010.00E\ccsetx64.sys
2013-02-09 08:09:47   --------   d-----w-   C:\Windows\System32\drivers\N360x64\0604010.00E
.
==================== Find3M ====================
.
2013-02-09 12:34:44   74096   ----a-w-   C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-09 01:19:09   2312704   ----a-w-   C:\Windows\System32\jscript9.dll
2013-01-09 01:12:03   1392128   ----a-w-   C:\Windows\System32\wininet.dll
2013-01-09 01:11:06   1494528   ----a-w-   C:\Windows\System32\inetcpl.cpl
2013-01-09 01:07:51   173056   ----a-w-   C:\Windows\System32\ieUnatt.exe
2013-01-09 01:07:47   599040   ----a-w-   C:\Windows\System32\vbscript.dll
2013-01-09 01:04:42   2382848   ----a-w-   C:\Windows\System32\mshtml.tlb
2013-01-08 22:11:21   1800704   ----a-w-   C:\Windows\SysWow64\jscript9.dll
2013-01-08 22:03:20   1129472   ----a-w-   C:\Windows\SysWow64\wininet.dll
2013-01-08 22:03:12   1427968   ----a-w-   C:\Windows\SysWow64\inetcpl.cpl
2013-01-08 21:59:02   142848   ----a-w-   C:\Windows\SysWow64\ieUnatt.exe
2013-01-08 21:58:29   420864   ----a-w-   C:\Windows\SysWow64\vbscript.dll
2013-01-08 21:56:23   2382848   ----a-w-   C:\Windows\SysWow64\mshtml.tlb
2012-12-16 17:11:22   46080   ----a-w-   C:\Windows\System32\atmlib.dll
2012-12-16 14:45:03   367616   ----a-w-   C:\Windows\System32\atmfd.dll
2012-12-16 14:13:28   295424   ----a-w-   C:\Windows\SysWow64\atmfd.dll
2012-12-16 14:13:20   34304   ----a-w-   C:\Windows\SysWow64\atmlib.dll
2012-12-07 13:20:16   441856   ----a-w-   C:\Windows\System32\Wpc.dll
2012-12-07 13:15:31   2746368   ----a-w-   C:\Windows\System32\gameux.dll
2012-12-07 12:26:17   308736   ----a-w-   C:\Windows\SysWow64\Wpc.dll
2012-12-07 12:20:43   2576384   ----a-w-   C:\Windows\SysWow64\gameux.dll
2012-12-07 11:20:04   30720   ----a-w-   C:\Windows\System32\usk.rs
2012-12-07 11:20:03   43520   ----a-w-   C:\Windows\System32\csrr.rs
2012-12-07 11:20:03   23552   ----a-w-   C:\Windows\System32\oflc.rs
2012-12-07 11:20:01   45568   ----a-w-   C:\Windows\System32\oflc-nz.rs
2012-12-07 11:20:01   44544   ----a-w-   C:\Windows\System32\pegibbfc.rs
2012-12-07 11:20:01   20480   ----a-w-   C:\Windows\System32\pegi-fi.rs
2012-12-07 11:20:00   20480   ----a-w-   C:\Windows\System32\pegi-pt.rs
2012-12-07 11:19:59   20480   ----a-w-   C:\Windows\System32\pegi.rs
2012-12-07 11:19:58   46592   ----a-w-   C:\Windows\System32\fpb.rs
2012-12-07 11:19:57   40960   ----a-w-   C:\Windows\System32\cob-au.rs
2012-12-07 11:19:57   21504   ----a-w-   C:\Windows\System32\grb.rs
2012-12-07 11:19:57   15360   ----a-w-   C:\Windows\System32\djctq.rs
2012-12-07 11:19:56   55296   ----a-w-   C:\Windows\System32\cero.rs
2012-12-07 11:19:55   51712   ----a-w-   C:\Windows\System32\esrb.rs
2012-12-01 14:50:47   175616   ----a-w-   C:\Windows\System32\msclmd.dll
2012-12-01 14:50:47   152576   ----a-w-   C:\Windows\SysWow64\msclmd.dll
2012-11-30 05:45:35   362496   ----a-w-   C:\Windows\System32\wow64win.dll
2012-11-30 05:45:35   243200   ----a-w-   C:\Windows\System32\wow64.dll
2012-11-30 05:45:35   13312   ----a-w-   C:\Windows\System32\wow64cpu.dll
2012-11-30 05:45:14   215040   ----a-w-   C:\Windows\System32\winsrv.dll
2012-11-30 05:43:12   16384   ----a-w-   C:\Windows\System32\ntvdm64.dll
2012-11-30 05:41:07   424448   ----a-w-   C:\Windows\System32\KernelBase.dll
2012-11-30 04:54:00   5120   ----a-w-   C:\Windows\SysWow64\wow32.dll
2012-11-30 04:53:59   274944   ----a-w-   C:\Windows\SysWow64\KernelBase.dll
2012-11-30 03:23:48   338432   ----a-w-   C:\Windows\System32\conhost.exe
2012-11-30 02:44:06   25600   ----a-w-   C:\Windows\SysWow64\setup16.exe
2012-11-30 02:44:04   7680   ----a-w-   C:\Windows\SysWow64\instnm.exe
2012-11-30 02:44:04   14336   ----a-w-   C:\Windows\SysWow64\ntvdm64.dll
2012-11-30 02:44:03   2048   ----a-w-   C:\Windows\SysWow64\user.exe
2012-11-30 02:44:03   2048   ----a-w-   C:\Windows\SysWow64\user(17).exe
2012-11-30 02:38:59   6144   ---ha-w-   C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-11-30 02:38:59   4608   ---ha-w-   C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-11-30 02:38:59   3584   ---ha-w-   C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-11-30 02:38:59   3072   ---ha-w-   C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
.
============= FINISH: 14:15:57,70 ===============

Redigerad Februari 22, 2013 av kristall

Cecilia · Februari 22, 2013

Avinstallera:

BearShare

Search-Results Toolbar

Om du/din vän inte vet vad Smilebox är och att det är ett säkert program så avinstallera det också för det har kommit in i datorn ungefär samtidigt som Bearshare.

Starta om datorn.

Spara AdwCleaner av Xplode på Skrivbordet: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Search-knappen.

Vänta tills sökningen är klar.

En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.

Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[R1].txt

kristall · Februari 22, 2013

Smilebox är en okej program. Använder den själv.

Jag föröskte avinstallera bearshare. Men det går inte. Den sitter där den sitter som berg. Fastgjuten.

johnh3 · Februari 22, 2013

Det låter som en form av Trojan:

http://sv.wikipedia.org/wiki/Trojansk_h%C3%A4st

http://www.mjukvara.se/Trojan

Kanske nåt av dessa funkar:

http://www.wgate.nu/virus/trojan.htm

Redigerad Februari 22, 2013 av johnh3

kristall · Februari 22, 2013

Avinstallera:

BearShare

Search-Results Toolbar

Om du/din vän inte vet vad Smilebox är och att det är ett säkert program så avinstallera det också för det har kommit in i datorn ungefär samtidigt som Bearshare.

Starta om datorn.

Spara AdwCleaner av Xplode på Skrivbordet: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Search-knappen.

Vänta tills sökningen är klar.

En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.

Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[R1].txt

Jag körde en sökning dock öven om bearen var kvar.

här är det resultatet.

# AdwCleaner v2.112 - Logfile created 02/22/2013 at 15:33:31

# Updated 10/02/2013 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)

# User :NN - HEMMA

# Boot Mode : Normal

# Running from : C:\Users\NN\Desktop\adwcleaner0.exe

# Option [search]

***** [services] *****

***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml

File Found : C:\Users\NN\AppData\Roaming\Mozilla\Firefox\Profiles\5b71gdhe.default\searchplugins\Search_Results.xml

Folder Found : C:\Program Files (x86)\Conduit

Folder Found : C:\ProgramData\Browser Manager

Folder Found : C:\Users\NN\AppData\LocalLow\Conduit

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software\Conduit

Key Found : HKCU\Software\DataMngr

Key Found : HKCU\Software\DataMngr_Toolbar

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B939CF93-F2CB-443D-956C-DC523D85C9DB}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}

Key Found : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}

Key Found : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}

Key Found : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}

Key Found : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}

Key Found : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}

Key Found : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL

Key Found : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery

Key Found : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1

Key Found : HKLM\SOFTWARE\Classes\imweb.imwebcontrol

Key Found : HKLM\SOFTWARE\Classes\Prod.cap

Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT1460988

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}

Key Found : HKLM\Software\Conduit

Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32

Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2656B92B-0207-4AFB-BEBF-F5FD231ECD39}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{59570C1F-B692-48C9-91B4-7809E6945287}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63A0F7FA-2C95-4D7E-AF25-EFCC303D20A1}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6559E502-6EE1-46B8-A83C-F3A45BDA23EE}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C63CA8A4-AB4E-49E5-A6C0-33FC86D80205}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C6A7847E-8931-4A9A-B4EF-72A91E3CCF4D}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD0F1D24-E250-4E93-966C-65615720AEFB}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EC1277BB-1C71-4C0D-BA6D-BFEA16E773A6}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}

Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}

Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}

Key Found : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}

Key Found : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}

Key Found : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}

Key Found : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}

Key Found : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}

Key Found : HKLM\SOFTWARE\DataMngr

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}

Key Found : HKU\S-1-5-21-3550066231-2165636278-725768300-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Found : HKU\S-1-5-21-3550066231-2165636278-725768300-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}

Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0.1 (sv-SE)

File : C:\Users\NN\AppData\Roaming\Mozilla\Firefox\Profiles\5b71gdhe.default\prefs.js

Found : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&gct=ds&appid=693&systemid=2&apn_d[...]

*************************

AdwCleaner[R1].txt - [6397 octets] - [22/02/2013 15:33:31]

########## EOF - C:\AdwCleaner[R1].txt - [6457 octets] ##########

Redigerad Februari 22, 2013 av kristall

johnh3 · Februari 22, 2013

Fler har råkat ut för det:

http://forum.bullguard.com/forum/5/BearShare-installed-Trojan---h_34737.html

kristall · Februari 22, 2013

Fler har råkat ut för det:

http://forum.bullguard.com/forum/5/BearShare-installed-Trojan---h_34737.html

Ju jag har läst om det.

Och det eländet verkar ju inte vara något nytt om jag förstod det rätt. Så varför gör virusskyddet sitt jobb.

Min vän är inte så duktig på datorer och många är ju inte det. De litar på virusskydd.

Nu vet jag inte ens vad detta Bearshare är nåt jag är inte intresserad av musik.

Men om den har ställt till så mycket hos så många varför finns det inte nån bra lösning på det?

johnh3 · Februari 22, 2013

Tekniskt sett är en Trojan inte ett virus utan ett installerat program kan man säga.

Därför stoppar inte antivirusprogrammet det.

Senast jag råkade ut för en trojan gjorde jag en ominstallation av operativsystemet.

Bilder och dokument hade jag på SkyDrive så inget viktigt gick förlorat.

Cecilia · Februari 22, 2013

Bearshare är ett fildelningsprogram, ungefär som uTorrent fast med andra protokoll. Det mer populärt för 5-10 år sedan än vad det är idag. Problemet är väl att det följer med diverse annonsprogram för att finansiera det hela. Norton bryr sig nog inte om dessa annonsprogram så mycket eftersom de normalt inte är skadliga för datorn och för att man faktiskt frivilligt installerar dem på datorn även om man kanske inte är medveten om det eftersom man inte läser licensvillkoren.

Allt som AdwCleaner hittade hör inte ihop med Bearshare och dess annonsprogram utan är rester efter annat, t ex Babylon toolbar.

Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Delete-knappen.

Tryck på OK.

Datorn kommer att startas om.

En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.

Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[s1].txt

Cecilia · Februari 22, 2013

Tekniskt sett är en Trojan inte ett virus utan ett installerat program kan man säga.

Därför stoppar inte antivirusprogrammet det.

Senast jag råkade ut för en trojan gjorde jag en ominstallation av operativsystemet.

Bilder och dokument hade jag på SkyDrive så inget viktigt gick förlorat.

De flesta trojaner stoppas av antivirusprogram, däremot är det inte alla som bryr sig om undertypen annonsprogram.

kristall · Februari 22, 2013

Tekniskt sett är en Trojan inte ett virus utan ett installerat program kan man säga.

Därför stoppar inte antivirusprogrammet det.

Senast jag råkade ut för en trojan gjorde jag en ominstallation av operativsystemet.

Bilder och dokument hade jag på SkyDrive så inget viktigt gick förlorat.

Hon som jag hjälper till eller försöker hjälpa har ingen återställningsskiva.

SkyDrive känner jag inte, men ska undersöka. Även om jag tycker att det är lika jobbigt att ha foton och dokument ute i någonstans.

johnh3 · Februari 22, 2013

Generellt sett är det bra att ha ett administratörskonto och bara använda ett användarkonto. Då blir det svårare för trojaner och liknande att installeras:

http://windows.microsoft.com/sv-se/windows-vista/what-is-user-account-control

kristall · Februari 22, 2013

här är rapporten:

# AdwCleaner v2.112 - Logfile created 02/22/2013 at 15:47:16
# Updated 10/02/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : NN - HEMMA
# Boot Mode : Normal
# Running from : C:\Users\NN\Desktop\adwcleaner0.exe
# Option [Delete]

***** [services] *****

***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Deleted : C:\Users\NN\AppData\Roaming\Mozilla\Firefox\Profiles\5b71gdhe.default\searchplugins\Search_Results.xml
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\ProgramData\Browser Manager
Folder Deleted : C:\Users\NN\AppData\LocalLow\Conduit

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Key Deleted : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1460988
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2656B92B-0207-4AFB-BEBF-F5FD231ECD39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{59570C1F-B692-48C9-91B4-7809E6945287}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63A0F7FA-2C95-4D7E-AF25-EFCC303D20A1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6559E502-6EE1-46B8-A83C-F3A45BDA23EE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C63CA8A4-AB4E-49E5-A6C0-33FC86D80205}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C6A7847E-8931-4A9A-B4EF-72A91E3CCF4D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD0F1D24-E250-4E93-966C-65615720AEFB}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EC1277BB-1C71-4C0D-BA6D-BFEA16E773A6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Key Deleted : HKLM\SOFTWARE\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0.1 (sv-SE)

File : C:\Users\NN\AppData\Roaming\Mozilla\Firefox\Profiles\5b71gdhe.default\prefs.js

Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&gct=ds&appid=693&systemid=2&apn_d[...]

*************************

AdwCleaner[R1].txt - [6506 octets] - [22/02/2013 15:33:31]
AdwCleaner[R2].txt - [6566 octets] - [22/02/2013 15:46:55]
AdwCleaner[s1].txt - [6349 octets] - [22/02/2013 15:47:16]

########## EOF - C:\AdwCleaner[s1].txt - [6409 octets] ##########

Redigerad Februari 22, 2013 av kristall

johnh3 · Februari 22, 2013

De flesta trojaner stoppas av antivirusprogram, däremot är det inte alla som bryr sig om undertypen annonsprogram.

Under förutsättning att det är uppdaterat. Själva operativsystemet ska också vara uppdaterat till senaste versionen.

Många slarvar med det.

bearshare hur tar jag bort bearshare

Recommended Posts

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Länk till kommentar

Dela på andra webbplatser

Delta i dialogen