sussrufs Posted March 16, 2005 Share Posted March 16, 2005 laddade ner limewire och en massa musik. sen fick jag en varning och avinstallerade programmet. hade såklart fått massor av spyware och annan skit. nu har jag kört program som tz, ad aware och spybot i flera veckor, men ännu hittar jag en massa. kan dessutom inte få bort limewire från datorn, en komponent ligger i programlistan på 490 mb som inte går att ta bort. hur får jag bort detta? körde en hijack this-scan nu, men är osäker på vad som ska väck. här är loggen: (jag fattar inte logfunktionen, förlåt! är evigt tacksam för hjälp. Logfile of HijackThis v1.99.1 Scan saved at 18:54:14, on 2005-03-16 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program\CA\SharedComponents\CA_LIC\LogWatNT.exe C:\Program\Norton AntiVirus\navapsvc.exe C:\Program\Synaptics\SynTP\SynTPLpr.exe C:\Program\Synaptics\SynTP\SynTPEnh.exe C:\Program\QuickTime\qttask.exe C:\Program\Norton AntiVirus\IWP\NPFMntor.exe C:\Program\Delade filer\Real\Update_OB\realsched.exe C:\Program\Norton SystemWorks\Norton Utilities\NPROTECT.EXE D:\iTunesHelper.exe C:\Program\Delade filer\Symantec Shared\ccApp.exe C:\Program\Java\jre1.5.0_01\bin\jusched.exe C:\WINDOWS\system32\sistray.EXE C:\WINDOWS\system32\khooker.exe C:\Program\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program\Hewlett-Packard\Digital Imaging\bin\hposol08.exe C:\Program\Belkin Corporation\Belkin Wireless Network Monitor Utility and Driver\RtlWake.exe C:\Program\NORTON~1\SPEEDD~1\nopdb.exe C:\WINDOWS\System32\svchost.exe C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe D:\bin\iPodService.exe C:\Program\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe C:\Program\Internet Explorer\iexplore.exe C:\Program\Internet Explorer\iexplore.exe C:\Program\Messenger\msmsgs.exe E:\Anti-spyware\Hijack this\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toothpastefordinner.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar2.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar2.dll O4 - HKLM\..\Run: [synTPLpr] C:\Program\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\Program\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [siS Tray] C:\WINDOWS\system32\sistray.EXE O4 - HKLM\..\Run: [siS KHooker] C:\WINDOWS\system32\khooker.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: officejet 6100.lnk = ? O4 - Global Startup: RtlWake.lnk = ? O8 - Extra context menu item: &Google Search - res://c:\program\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\program\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: Expekt.com Poker - {3852AC86-965F-4abe-A75F-3DCB7E81A4B2} - C:\Program\expektMPP\MPPoker.exe O9 - Extra button: Referensinformation - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates - C:\Program\CA\SharedComponents\CA_LIC\lic98rmt.exe O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates - C:\Program\CA\SharedComponents\CA_LIC\lic98rmtd.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program\CA\SharedComponents\CA_LIC\LogWatNT.exe O23 - Service: Norton AntiVirus Auto Protect-tjänst (navapsvc) - Symantec Corporation - C:\Program\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\Program\DELADE~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\Program\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\Security Center\SymWSC.exe Link to comment Share on other sites More sharing options...
Cecilia Posted March 17, 2005 Share Posted March 17, 2005 TZ ska man inte använda, det påstår att man har otrevligheter som man inte har bara för att man ska betala och inte är det mycket den kan ta bort heller, se här: http://www.spywarewarrior.com/rogue_anti-spyware.htm Så avinstallera det. Utav gratis antispionprogram så är det bara Ad-aware och Spybot Search & Destroy som är bra att ha. Faktiskt så kan jag inte se något allvarligt i din logg, utan det är bara lite skönhetsfläckar i den. Förklara lite bättre vad du menar med komponent och programlistan. Har du avinstallerat från Kontrollpanelen - Lägg till och ta bort program? Går det inte att ta bort någon file? I så fall har du försökt i felsäkert läge. Om det inte heller går så vad får du för felmeddelande? Var säker på att du förstår allt nedan innan du fortsätter, fråga annars. För att du inte ska råka återställa datorn till ett läge med de otrevligheter i som du har haft så bör du ta bort alla systemåterställningspunkter genom att avaktivera systemåterställningsfunktionen. Den här datorn - högerklick - Egenskaper - Systemåterställning Funktionen ska sedan sättas på när datorn är ren. Kör HijackThis och skanna. Bocka för dessa rader: R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R3 - Default URLSearchHook is missing Om du inte har valt startsidan själv så bocka även för denna rad: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toothpastefordinner.com/ Avsluta alla program och fönster utom HijackThis. Tryck på Fix checked. Starta om datorn. Ta ut en ny HijackThis-logg. Skriv i ditt svar här svaren på frågorna ovan, vad Ad-aware och Spybot S&D hittar men inte kan få bort samt bifoga den nya HijackThis-loggen på detta sätt: Tryck på LOG-knappen i Besvara-fönstret Klistra in loggen Tryck igen på LOG-knappen Link to comment Share on other sites More sharing options...
sussrufs_ Posted March 17, 2005 Share Posted March 17, 2005 systemåterställningsfunktionen är redan avaktiverad vad jag förstått. den aktiveras när datorn är ren, vad jag förstått? då börjar vi med alla logs. på SPYBOT kom det bara upp DSO exploit, 5 entries. och det har alltid kommit upp när jag scannat. ad aware. [log] Ad-Aware SE Build 1.05 Logfile Created on:den 17 mars 2005 15:01:41 Created with Ad-Aware SE Personal, free for private use. Using definitions file:SE1R32 10.03.2005 »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» References detected during the scan: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» MRU List(TAC index:0):33 total references »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Ad-Aware SE Settings =========================== Set : Search for negligible risk entries Set : Safe mode (always request confirmation) Set : Scan active processes Set : Scan registry Set : Deep-scan registry Set : Scan my IE Favorites for banned URLs Set : Scan my Hosts file Extended Ad-Aware SE Settings =========================== Set : Unload recognized processes & modules during scan Set : Scan registry for all users instead of current user only Set : Always try to unload modules before deletion Set : During removal, unload Explorer and IE if necessary Set : Let Windows remove files in use at next reboot Set : Delete quarantined objects after restoring Set : Include basic Ad-Aware settings in log file Set : Include additional Ad-Aware settings in log file Set : Include reference summary in log file Set : Include alternate data stream details in log file Set : Play sound at scan completion if scan locates critical objects 2005-03-17 15:01:41 - Scan started. (Full System Scan) MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows\currentversion\applets\paint\recent file list Description : list of files recently opened using microsoft paint MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows\currentversion\explorer\runmru Description : mru list for items opened in start | run MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\search assistant\acmru Description : list of recent search terms used with the search assistant MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows\currentversion\explorer\recentdocs Description : list of recent documents opened MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\player\recentfilelist Description : list of recently used files in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\internet explorer\main Description : last save directory used in microsoft internet explorer MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\realnetworks\realplayer\6.0\preferences Description : list of recent skins in realplayer MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\internet explorer Description : last download directory used in microsoft internet explorer MRU List Object Recognized! Location: : software\microsoft\directdraw\mostrecentapplication Description : most recent application to use microsoft directdraw MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\microsoft management console\recent file list Description : list of recent snap-ins used in the microsoft management console MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\player\settings Description : last save as directory used in jasc paint shop pro MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\google\navclient\1.1\history Description : list of recently used search terms in the google toolbar MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\preferences Description : last cd record path used in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\internet explorer\typedurls Description : list of recently entered addresses in microsoft internet explorer MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\adobe\acrobat reader\6.0\avgeneral\crecentfiles Description : list of recently used files in adobe reader MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\player\settings Description : last open directory used in jasc paint shop pro MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct3d MRU List Object Recognized! Location: : software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct3d MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\preferences Description : last playlist index loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\realnetworks\realplayer\6.0\preferences Description : list of recent clips in realplayer MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows\currentversion\applets\regedit Description : last key accessed using the microsoft registry editor MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\realnetworks\realplayer\6.0\preferences Description : last login time in realplayer MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\mediaplayer\medialibraryui Description : last selected node in the microsoft windows media player media library MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct X MRU List Object Recognized! Location: : software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct X MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-21-3995598635-3807011228-2358100727-1006\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : C:\Documents and Settings\Susanne\Application Data\microsoft\office\recent Description : list of recently opened documents using microsoft office MRU List Object Recognized! Location: : C:\Documents and Settings\Susanne\recent Description : list of recently opened documents Listing running processes »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» #:1 [smss.exe] FilePath : \SystemRoot\System32 ProcessID : 532 ThreadCreationTime : 2005-03-17 13:52:07 BasePriority : Normal #:2 [csrss.exe] FilePath : \??\C:\WINDOWS\system32 ProcessID : 596 ThreadCreationTime : 2005-03-17 13:52:09 BasePriority : Normal #:3 [winlogon.exe] FilePath : \??\C:\WINDOWS\system32 ProcessID : 620 ThreadCreationTime : 2005-03-17 13:52:10 BasePriority : High #:4 [services.exe] FilePath : C:\WINDOWS\system32 ProcessID : 668 ThreadCreationTime : 2005-03-17 13:52:11 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Operativsystemet Microsoft® Windows® CompanyName : Microsoft Corporation FileDescription : Tjänst- och styrenhetsprogram InternalName : services.exe LegalCopyright : © Microsoft Corporation. Med ensamrätt. OriginalFilename : services.exe #:5 [lsass.exe] FilePath : C:\WINDOWS\system32 ProcessID : 680 ThreadCreationTime : 2005-03-17 13:52:11 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : lsass.exe #:6 [svchost.exe] FilePath : C:\WINDOWS\system32 ProcessID : 836 ThreadCreationTime : 2005-03-17 13:52:13 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:7 [svchost.exe] FilePath : C:\WINDOWS\system32 ProcessID : 916 ThreadCreationTime : 2005-03-17 13:52:13 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:8 [svchost.exe] FilePath : C:\WINDOWS\System32 ProcessID : 1012 ThreadCreationTime : 2005-03-17 13:52:13 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:9 [svchost.exe] FilePath : C:\WINDOWS\System32 ProcessID : 1104 ThreadCreationTime : 2005-03-17 13:52:13 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:10 [svchost.exe] FilePath : C:\WINDOWS\System32 ProcessID : 1200 ThreadCreationTime : 2005-03-17 13:52:14 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:11 [ccsetmgr.exe] FilePath : C:\Program\Delade filer\Symantec Shared ProcessID : 1428 ThreadCreationTime : 2005-03-17 13:52:16 BasePriority : Normal FileVersion : 103.0.3.8 ProductVersion : 103.0.3.8 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Settings Manager Service InternalName : ccSetMgr LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccSetMgr.exe #:12 [sndsrvc.exe] FilePath : C:\Program\Delade filer\Symantec Shared ProcessID : 1600 ThreadCreationTime : 2005-03-17 13:52:20 BasePriority : Normal FileVersion : 5.4.4.17 ProductVersion : 5.4 ProductName : Symantec Security Drivers CompanyName : Symantec Corporation FileDescription : Network Driver Service InternalName : SndSrvc LegalCopyright : Copyright 2002, 2003, 2004 Symantec Corporation OriginalFilename : SndSrvc.exe #:13 [spbbcsvc.exe] FilePath : C:\Program\Delade filer\Symantec Shared\SPBBC ProcessID : 1636 ThreadCreationTime : 2005-03-17 13:52:21 BasePriority : Normal FileVersion : 1,0,1,47 ProductVersion : 1,0,1,47 ProductName : SPBBC CompanyName : Symantec Corporation FileDescription : SPBBC Service InternalName : SPBBCSvc LegalCopyright : Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : SPBBCSvc.exe #:14 [ccevtmgr.exe] FilePath : C:\Program\Delade filer\Symantec Shared ProcessID : 1648 ThreadCreationTime : 2005-03-17 13:52:21 BasePriority : Normal FileVersion : 103.0.3.8 ProductVersion : 103.0.3.8 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Event Manager Service InternalName : ccEvtMgr LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccEvtMgr.exe #:15 [spoolsv.exe] FilePath : C:\WINDOWS\system32 ProcessID : 1840 ThreadCreationTime : 2005-03-17 13:52:23 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : spoolsv.exe #:16 [explorer.exe] FilePath : C:\WINDOWS ProcessID : 160 ThreadCreationTime : 2005-03-17 13:52:26 BasePriority : Normal FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 6.00.2900.2180 ProductName : Operativsystemet Microsoft® Windows® CompanyName : Microsoft Corporation FileDescription : Utforskaren InternalName : explorer LegalCopyright : © Microsoft Corporation. Med ensamrätt. OriginalFilename : EXPLORER.EXE #:17 [logwatnt.exe] FilePath : C:\Program\CA\SharedComponents\CA_LIC ProcessID : 396 ThreadCreationTime : 2005-03-17 13:52:28 BasePriority : Normal FileVersion : 1.52 ProductVersion : 1, 0, 0, 1 ProductName : Computer Associates LogWatNT CompanyName : Computer Associates FileDescription : LogWatNT InternalName : LogWatNT LegalCopyright : Copyright © 2002 OriginalFilename : LogWatNT.exe #:18 [navapsvc.exe] FilePath : C:\Program\Norton AntiVirus ProcessID : 424 ThreadCreationTime : 2005-03-17 13:52:28 BasePriority : Normal FileVersion : 11.0.1.3 ProductVersion : 11.0.1 ProductName : Norton AntiVirus CompanyName : Symantec Corporation FileDescription : Norton AntiVirus Auto-Protect Service InternalName : NAVAPSVC LegalCopyright : Norton AntiVirus 2005 for Windows 98/ME/2000/XP Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : NAVAPSVC.EXE #:19 [npfmntor.exe] FilePath : C:\Program\Norton AntiVirus\IWP ProcessID : 372 ThreadCreationTime : 2005-03-17 13:52:30 BasePriority : Normal FileVersion : 11.0.1.3 ProductVersion : 11.0.1 ProductName : Norton AntiVirus CompanyName : Symantec Corporation FileDescription : Norton AntiVirus Firewall Install Monitor InternalName : NPFMonitor LegalCopyright : Norton AntiVirus 2005 for Windows 98/ME/2000/XP Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : NPFMonitor.EXE #:20 [nprotect.exe] FilePath : C:\Program\Norton SystemWorks\Norton Utilities ProcessID : 644 ThreadCreationTime : 2005-03-17 13:52:30 BasePriority : Normal FileVersion : 16.00.0.22 ProductVersion : 16.00.0.22 ProductName : Norton Utilities CompanyName : Symantec Corporation FileDescription : Norton Protection Status InternalName : NPROTECT LegalCopyright : Copyright © 2003 Symantec Corporation LegalTrademarks : Norton Utilities OriginalFilename : NPROTECT.EXE #:21 [nopdb.exe] FilePath : C:\Program\NORTON~1\SPEEDD~1 ProcessID : 1172 ThreadCreationTime : 2005-03-17 13:52:37 BasePriority : Normal FileVersion : 7.00.0.24 ProductVersion : 7.00.0.24 ProductName : Norton Speed Disk CompanyName : Symantec Corporation FileDescription : NOPDB InternalName : NOPDB LegalCopyright : Copyright © 2002 OriginalFilename : NOPDB.dll #:22 [syntplpr.exe] FilePath : C:\Program\Synaptics\SynTP ProcessID : 1344 ThreadCreationTime : 2005-03-17 13:52:40 BasePriority : Normal FileVersion : 7.5.12 06Jun03 ProductVersion : 7.5.12 06Jun03 ProductName : Progressive Touch CompanyName : Synaptics, Inc. FileDescription : TouchPad Driver Helper Application InternalName : SynTPLpr LegalCopyright : Copyright © Synaptics, Inc. 1996-2003 OriginalFilename : SynTPLpr.exe #:23 [syntpenh.exe] FilePath : C:\Program\Synaptics\SynTP ProcessID : 1416 ThreadCreationTime : 2005-03-17 13:52:42 BasePriority : Normal FileVersion : 7.5.12 06Jun03 ProductVersion : 7.5.12 06Jun03 ProductName : Progressive Touch CompanyName : Synaptics, Inc. FileDescription : Synaptics TouchPad Enhancements InternalName : Scrolleroo LegalCopyright : Copyright © Synaptics, Inc. 1996-2003 OriginalFilename : SynTPEnh.exe #:24 [qttask.exe] FilePath : C:\Program\QuickTime ProcessID : 1476 ThreadCreationTime : 2005-03-17 13:52:43 BasePriority : Normal FileVersion : 6.5.1 ProductVersion : QuickTime 6.5.1 ProductName : QuickTime CompanyName : Apple Computer, Inc. InternalName : QuickTime Task LegalCopyright : © Apple Computer, Inc. 2001-2004 OriginalFilename : QTTask.exe #:25 [realsched.exe] FilePath : C:\Program\Delade filer\Real\Update_OB ProcessID : 1484 ThreadCreationTime : 2005-03-17 13:52:44 BasePriority : Normal FileVersion : 0.1.0.3208 ProductVersion : 0.1.0.3208 ProductName : RealPlayer (32-bit) CompanyName : RealNetworks, Inc. FileDescription : RealNetworks Scheduler InternalName : schedapp LegalCopyright : Copyright © RealNetworks, Inc. 1995-2004 LegalTrademarks : RealAudio is a trademark of RealNetworks, Inc. OriginalFilename : realsched.exe #:26 [ituneshelper.exe] FilePath : D: ProcessID : 1500 ThreadCreationTime : 2005-03-17 13:52:44 BasePriority : Normal FileVersion : 4.7.1.30 ProductVersion : 4.7.1.30 ProductName : iTunes CompanyName : Apple Computer, Inc. FileDescription : iTunesHelper Module InternalName : iTunesHelper LegalCopyright : © 2003-2004 Apple Computer, Inc. All Rights Reserved. OriginalFilename : iTunesHelper.exe #:27 [ccapp.exe] FilePath : C:\Program\Delade filer\Symantec Shared ProcessID : 1516 ThreadCreationTime : 2005-03-17 13:52:45 BasePriority : Normal FileVersion : 103.0.3.8 ProductVersion : 103.0.3.8 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec User Session InternalName : ccApp LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccApp.exe #:28 [svchost.exe] FilePath : C:\WINDOWS\System32 ProcessID : 1744 ThreadCreationTime : 2005-03-17 13:52:46 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:29 [jusched.exe] FilePath : C:\Program\Java\jre1.5.0_01\bin ProcessID : 1940 ThreadCreationTime : 2005-03-17 13:52:47 BasePriority : Normal #:30 [symlcsvc.exe] FilePath : C:\Program\Delade filer\Symantec Shared\CCPD-LC ProcessID : 1928 ThreadCreationTime : 2005-03-17 13:52:47 BasePriority : Normal FileVersion : 1, 8, 54, 419 ProductVersion : 1, 8, 54, 419 ProductName : Symantec Core Component CompanyName : Symantec Corporation FileDescription : Symantec Core Component InternalName : symlcsvc LegalCopyright : Copyright © 2003 OriginalFilename : symlcsvc.exe #:31 [sistray.exe] FilePath : C:\WINDOWS\system32 ProcessID : 120 ThreadCreationTime : 2005-03-17 13:52:49 BasePriority : Normal FileVersion : 0.0.0.2180 ProductVersion : 0.0.0.2180 ProductName : SiS ® Compatible Super VGA SiSTray application for Windows NT4.0/2000/XP CompanyName : Silicon Integrated Systems Corporation FileDescription : SiS Compatible Super VGA Tray Application InternalName : SISTRAY 2.18.01 LegalCopyright : Copyright © Silicon Integrated Systems Corp. 2003-2006 OriginalFilename : SISTRAY.EXE Comments : SiS Compatible Super VGA Tray Application #:32 [khooker.exe] FilePath : C:\WINDOWS\system32 ProcessID : 1888 ThreadCreationTime : 2005-03-17 13:52:49 BasePriority : Normal FileVersion : 0.0.0.2180 ProductVersion : 0.0.0.2180 ProductName : SIS ® Compatible Super VGA keyboard daemon for Windows 2000/XP CompanyName : Silicon Integrated Systems Corporation FileDescription : SiS Compatible Super VGA Keyboard Daemon InternalName : KHOOKER 2.18.50 LegalCopyright : Copyright © Silicon Integrated Systems Corp. 1998-2002 OriginalFilename : KHOOKER.EXE Comments : SiS Compatible Super VGA Keyboard Daemon #:33 [wdfmgr.exe] FilePath : C:\WINDOWS\system32 ProcessID : 464 ThreadCreationTime : 2005-03-17 13:52:53 BasePriority : Normal FileVersion : 5.2.3790.1230 built by: DNSRV(bld4act) ProductVersion : 5.2.3790.1230 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Windows User Mode Driver Manager InternalName : WdfMgr LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : WdfMgr.exe #:34 [hpotdd01.exe] FilePath : C:\Program\Hewlett-Packard\Digital Imaging\bin ProcessID : 480 ThreadCreationTime : 2005-03-17 13:52:53 BasePriority : Normal FileVersion : 1, 0, 0, 1 ProductVersion : 1, 0, 0, 1 ProductName : Hewlett-Packard hpotdd01 CompanyName : Hewlett-Packard FileDescription : hpotdd01 InternalName : hpotdd01 LegalCopyright : Copyright © 2002 OriginalFilename : hpotdd01.exe #:35 [hposol08.exe] FilePath : C:\Program\Hewlett-Packard\Digital Imaging\bin ProcessID : 600 ThreadCreationTime : 2005-03-17 13:52:53 BasePriority : Normal FileVersion : 4.2.0.020 ProductVersion : 2.4.1.020 ProductName : hp digital imaging - hp all-in-one series CompanyName : Hewlett-Packard Co. FileDescription : HP OfficeJet COM Device Objects InternalName : HPOSOL08 LegalCopyright : Copyright © Hewlett-Packard Co. 1995-2001 OriginalFilename : HPOSOL08.EXE Comments : HP OfficeJet <Solar> Series COM Device Objects #:36 [rtlwake.exe] FilePath : C:\Program\Belkin Corporation\Belkin Wireless Network Monitor Utility and Driver ProcessID : 344 ThreadCreationTime : 2005-03-17 13:52:54 BasePriority : Normal FileVersion : 1, 0, 0, 1 ProductVersion : 1, 0, 0, 1 ProductName : RtlWake Application FileDescription : RtlWake MFC Application InternalName : RtlWake LegalCopyright : Copyright © 2003 OriginalFilename : RtlWake.EXE #:37 [hpoevm08.exe] FilePath : C:\Program\Hewlett-Packard\Digital Imaging\bin ProcessID : 2044 ThreadCreationTime : 2005-03-17 13:53:10 BasePriority : Normal FileVersion : 4.2.0.020 ProductVersion : 2.4.1.020 ProductName : hp digital imaging - hp all-in-one series CompanyName : Hewlett-Packard Co. FileDescription : HP OfficeJet COM Event Manager InternalName : HPOEVM08 LegalCopyright : Copyright © Hewlett-Packard Co. 1995-2001 OriginalFilename : HPOEVM08.EXE Comments : HP OfficeJet COM Event Manager #:38 [ipodservice.exe] FilePath : D:\bin ProcessID : 2868 ThreadCreationTime : 2005-03-17 13:53:49 BasePriority : Normal FileVersion : 4.7.1.30 ProductVersion : 4.7.1.30 ProductName : iTunes CompanyName : Apple Computer, Inc. FileDescription : iPodService Module InternalName : iPodService LegalCopyright : © 2003-2004 Apple Computer, Inc. All Rights Reserved. OriginalFilename : iPodService.exe #:39 [hposts08.exe] FilePath : C:\Program\Hewlett-Packard\Digital Imaging\Bin ProcessID : 3136 ThreadCreationTime : 2005-03-17 13:53:56 BasePriority : Normal FileVersion : 4.2.0.020 ProductVersion : 2.4.1.020 ProductName : hp digital imaging - hp all-in-one series CompanyName : Hewlett-Packard Co. FileDescription : HP OfficeJet Status InternalName : HPOSTS08 LegalCopyright : Copyright © Hewlett-Packard Co. 1995-2001 OriginalFilename : HPOSTS08.EXE Comments : HP OfficeJet Status #:40 [alg.exe] FilePath : C:\WINDOWS\System32 ProcessID : 2268 ThreadCreationTime : 2005-03-17 13:54:51 BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Application Layer Gateway Service InternalName : ALG.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : ALG.exe #:41 [spybotsd.exe] FilePath : C:\Program\Spybot - Search & Destroy ProcessID : 3656 ThreadCreationTime : 2005-03-17 13:58:53 BasePriority : Normal FileVersion : 1, 3, 0, 12 ProductVersion : 1, 3, 0, 12 ProductName : SpyBot-S&D CompanyName : Safer Networking Limited FileDescription : Spybot - Search & Destroy InternalName : SpybotSD LegalCopyright : © 2000-2004 Patrick M. Kolla / Safer Networking Limited. Alle Rechte vorbehalten. LegalTrademarks : "Spybot" und "Spybot - Search & Destroy" sind registrierte Warenzeichen. OriginalFilename : SpyBotSD.exe Comments : Software zum Entfernen von Spyware und ähnlichen Bedrohungen. #:42 [ad-aware.exe] FilePath : C:\Program\Lavasoft\Ad-Aware SE Personal ProcessID : 2884 ThreadCreationTime : 2005-03-17 14:01:18 BasePriority : Normal FileVersion : 6.2.0.206 ProductVersion : VI.Second Edition ProductName : Lavasoft Ad-Aware SE CompanyName : Lavasoft Sweden FileDescription : Ad-Aware SE Core application InternalName : Ad-Aware.exe LegalCopyright : Copyright © Lavasoft Sweden OriginalFilename : Ad-Aware.exe Comments : All Rights Reserved Memory scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Started registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Registry Scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Started deep registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Deep registry scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Started Tracking Cookie scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Tracking cookie scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Deep scanning and examining files (C:) »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Disk Scan Result for C:»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Deep scanning and examining files (D:) »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Disk Scan Result for D:»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Deep scanning and examining files (E:) »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Disk Scan Result for E:»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 Scanning Hosts file...... Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts". »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Hosts file scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» 1 entries scanned. New critical objects:0 Objects found so far: 33 Performing conditional scans... »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Conditional scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 33 15:21:13 Scan Complete Summary Of This Scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Total scanning time:00:19:32.55 Objects scanned:154885 Objects identified:0 Objects ignored:0 New critical objects:0 [/log] hijackthis. [log]Logfile of HijackThis v1.99.1 Scan saved at 15:24:11, on 2005-03-17 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program\CA\SharedComponents\CA_LIC\LogWatNT.exe C:\Program\Norton AntiVirus\navapsvc.exe C:\Program\Norton AntiVirus\IWP\NPFMntor.exe C:\Program\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\Program\NORTON~1\SPEEDD~1\nopdb.exe C:\Program\Synaptics\SynTP\SynTPLpr.exe C:\Program\Synaptics\SynTP\SynTPEnh.exe C:\Program\QuickTime\qttask.exe C:\Program\Delade filer\Real\Update_OB\realsched.exe D:\iTunesHelper.exe C:\Program\Delade filer\Symantec Shared\ccApp.exe C:\WINDOWS\System32\svchost.exe C:\Program\Java\jre1.5.0_01\bin\jusched.exe C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\sistray.EXE C:\WINDOWS\system32\khooker.exe C:\Program\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program\Hewlett-Packard\Digital Imaging\bin\hposol08.exe C:\Program\Belkin Corporation\Belkin Wireless Network Monitor Utility and Driver\RtlWake.exe C:\Program\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe D:\bin\iPodService.exe C:\Program\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe C:\Program\Spybot - Search & Destroy\SpybotSD.exe C:\Program\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe C:\Program\Internet Explorer\iexplore.exe E:\Anti-spyware\Hijack this\HijackThis.exe C:\Program\Messenger\msmsgs.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.se R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toothpastefordinner.com/'>http://www.toothpastefordinner.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.se R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toothpastefordinner.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar2.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar2.dll O4 - HKLM\..\Run: [synTPLpr] C:\Program\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\Program\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [siS Tray] C:\WINDOWS\system32\sistray.EXE O4 - HKLM\..\Run: [siS KHooker] C:\WINDOWS\system32\khooker.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: officejet 6100.lnk = ? O4 - Global Startup: RtlWake.lnk = ? O8 - Extra context menu item: &Google Search - res://c:\program\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\program\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: Expekt.com Poker - {3852AC86-965F-4abe-A75F-3DCB7E81A4B2} - C:\Program\expektMPP\MPPoker.exe O9 - Extra button: Referensinformation - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates - C:\Program\CA\SharedComponents\CA_LIC\lic98rmt.exe O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates - C:\Program\CA\SharedComponents\CA_LIC\lic98rmtd.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program\CA\SharedComponents\CA_LIC\LogWatNT.exe O23 - Service: Norton AntiVirus Auto Protect-tjänst (navapsvc) - Symantec Corporation - C:\Program\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\Program\DELADE~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\Program\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\Security Center\SymWSC.exe [/log] över till limewire 4.4.1 -det ligger i kontrollpanelen, i listan lägg till/ta bort program. när man klickar på "ta bort", säger den att det är ett avinstallationsfel som inträffat och så frågar den om man vill ta bort programmet från listan bara. men det hjälper ju inte att man tar bort det från listan..? tack för att du tar dig tid! Link to comment Share on other sites More sharing options...
Cecilia Posted March 17, 2005 Share Posted March 17, 2005 Spybot: DSO Exploits inget att bry sig om. Det finns en programfix att ladda ner om du vill slippa rapporteringen. Ad-aware: Har bara hittat att du har program som håller reda på vilka filer du har använt i programmen förut (så kallad MRU lista), t ex vilka filer du har jobbat med i Paint. Är inget att bry sig om på en dator man har hemma. HijackThis: Ser inget konstigt i den längre. Limewire: Ta bort den från listan i Kontrollpanelen-Lägg till/ta bort och sedan letar du upp mappen där filerna ligger och tar bort den, det är nog så mycket som går när inte avinstallationsprogrammet fungerar. Mappen borde ligga under C:\Program eller C:\Program Files och heta limewire och/eller limeshop. Titta också i C:\Common Files och C:\Delade Filer. Det kan finnas kvar någon mindre enstaka fil under C:\Windows efter det men det gör nog inte så mycket. Dessutom några registernycklar, om du tycker det är viktigt så finns det registerstädningsprogram som man kan använda. Man ska nog ta Microsoft angivelse av storlek med en nypa salt också. Link to comment Share on other sites More sharing options...
znej Posted March 17, 2005 Share Posted March 17, 2005 Att det står 490 mb utrymme i lägg till ta bort program, kan det betyda att du har hämtat hem så mycket med Limewire? Har för mig att även andra fildelningsprogram har den utformningen men jag kommer inte ihåg något exempel just nu. Jag har i alla fall stött på det med ett fildelningsprogram. Om det är 490 mb som du har laddat ner så bör det finnas i någon mapp där Limewire är installerad (i program-mappen). Mapp med nerladdade filer brukar kallas för Downloaded files eller liknande. Det ska försvinna om du bestämmer dig för att radera manuellt som Cecilia tipsat om. Du kan också prova att installera om Limewire över den gamla installationen och sedan prova lägg till ta bort program. Men gör bara det om du har den gamla installationsfilen 4.41 kvar. Nya versionen heter 4.8 och det är nog inte så bra att försöka installera över gammal installation med den. Link to comment Share on other sites More sharing options...
sussrufs_ Posted March 17, 2005 Share Posted March 17, 2005 okej, då verkar läget vara under kontroll. tack! men min dator är fortfarande slö.. kan det bero på för lite utrymme? lediga utrymmen i % följer här. C: 14 % D: 63% E: 74% eller har du andra förslag på vad det kan bero på? Link to comment Share on other sites More sharing options...
sussrufs_ Posted March 17, 2005 Share Posted March 17, 2005 ja, det kan nog stämma med siffrorna där. trodde inte att det klassades som limewire-grejer längre bara. jag slängde över låtarna på min ipod, för att sedan lägga in dom på nytt på datorn igen. är inte så pepp på att installera ett nytt limewire, det ska till mkt för att jag gör det.. Link to comment Share on other sites More sharing options...
znej Posted March 17, 2005 Share Posted March 17, 2005 Menar du att det var spyware i själva programmet Limewire? Det ska ju vara fritt från sådant enligt deras sajt. Jag har testat Limewire men det var säkert två år sen. Gör då så att du tar bort mappen med Limewire och eventuellt gör en sökning efter filer och mappar med ordet Limewire. Skulle tro att det är installerat endast i program-mappen (+ en del skit i registret förstås). Sedan kan du ju köra ett program för att rensa registret som Cecilia tipsade om. Du kan hämta testversion av Registry Mechanic som är bra. Det tar i alla fall inte bort för mycket. Jag har kört senaste versionen och tagit bort allt som rekommenderats under minst 10 sökningar/körningar, inga problem. Kör full scan. Jag tror att det är 30 dagars testversion. http://www.pctools.com/registry-mechanic/download/ eller hämta filen direkt här http://dw.com.com/redir?pid=10309788&merid=6257086&mfgid=6257086&lop=link&edId=3&siteId=4&oId=3002-2094_4-10309788&ontId=2094&destUrl=http%3A%2F%2Fwww.pctools.com%2Fdownloads%2Fdownload.com%2Frminstall.exe [inlägget ändrat 2005-03-17 20:22:47 av znej] Link to comment Share on other sites More sharing options...
Cecilia Posted March 18, 2005 Share Posted March 18, 2005 men min dator är fortfarande slö Man brukar säga att 10% ledigt ska räcka. Du kanske behöver defragmentera disken/diskarna. C: - Egenskaper - Verktyg - Defragmentering Du har rätt mycket program/processer igång. I Aktivitetshanteraren fliken Prestanda så kan du se om hur mycket Tillgängligt Fysiskt minne du har, om det är nära 0 så kan det förbättra prestandan om du köper mer minne. Link to comment Share on other sites More sharing options...
.thumb.JPG.a7f98fcf4231ab407810fba3dc9b4085.JPG)
.thumb.png.71a73be41d8bf63826729db87e16f1ce.png)
Recommended Posts
Archived
This topic is now archived and is closed to further replies.