Trubbel

3 december, 2006

Hej

Tror jag har ett liknande problem. Kaspersky verkar plockat bort det mesta, var dock en fil som den inte kunde ta bort. (pic2038[1]..pif) allt annat verkar vara borta. När jag ska starat IE eller Msn(efter att installerat om det) så avslutas båda lika fort. Samma sak händer när jag ska händer när jag ska använda datorns sökfunktion. Den bara rebootar ser det utsom och hoppar till skrivbordet. Varken Kaspersky eller AVG hittar någonting. Hoppas att nån här har några tankar om vad det kan vara och hjälpa mig.

//Henke

4 december, 2006

Tror jag har ett liknande problem.

Liknande vad?

Ladda hem och installera gratisversionen av SUPERAntiSpyware Free Edition:

http://www.superantispyware.com/download.html

Starta programmet, klicka på Check for updates.

Avsluta programmet när uppdateringen är klar.

Starta om datorn i felsäkert läge (tryck F8 upprepade gånger under uppstarten och välj felsäkert läge i menyn).

Starta SUPERAntiSpyware och klicka på Scan your Computer.

Bocka för alla hårddiskar (fixed drive/disk).

Välj Perform complete scan

Nästa/Next

När skanningen är klar som kommer det upp en sammanfattning, tryck på OK

Nästa/Next

Utför eller liknande

Ett fönster med Quarantine and removal Complete kommer upp

OK

Utför eller liknande

Avsluta programmet.

Starta om i normalt läge.

Starta programmet, tryck på Preferences, välj filken Statistics/Logs

Dubbelklicka på den nyaste SUPERAntiSpyware Scan Log så att loggen kommer upp i Anteckningar.

Bifoga loggen i ditt svar

Vi kan ju se om HijackThis visar något till att börja med:

http://www.thespykiller.co.uk/files/HJTsetup.exe

Installera, kör, skanna och spara loggen (inget annat).

Bifoga loggen i ditt svar

I ditt svar bifogar du en logg på detta sätt:

Tryck på LOG-knappen i Besvara-fönstret

Klistra in loggen

Tryck igen på LOG-knappen

4 december, 2006

ett problem med det som kom över msn, pic2038.jpg problemet. Det som inte funkar nu är IE och MSN även sökfunktion på datorn verkar vara lite träffad. Ska ladda ner de program du sa och posta logen här på sidan bara som ett vanligt svar gissar jag

/H

4 december, 2006

här kommer logen från HijackThis

[log]Logfile of HijackThis v1.99.1

Scan saved at 11:43:49, on 2006-12-04

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe

C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Acer\eManager\anbmServ.exe

C:\Program\Grisoft\AVGFRE~1\avgamsvr.exe

C:\Program\Grisoft\AVGFRE~1\avgupsvc.exe

C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe

C:\Program\Norton AntiVirus\IWP\NPFMntor.exe

C:\WINDOWS\system32\svchost.exe

C:\Program\Synaptics\SynTP\SynTPLpr.exe

C:\Program\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\keyhook.exe

C:\Program\Arcade\PCMService.exe

C:\Program\Launch Manager\QtZgAcer.EXE

C:\Program\Delade filer\Symantec Shared\ccApp.exe

C:\Program\Grisoft\AVGFRE~1\avgcc.exe

C:\Program\Grisoft\AVGFRE~1\avgemc.exe

C:\Program\CyberLink\PowerDVD\PDVDServ.exe

C:\Program\Delade filer\Real\Update_OB\realsched.exe

C:\Program\Viewpoint\Viewpoint Manager\ViewMgr.exe

C:\Program\PowerISO\PWRISOVM.EXE

C:\Program\Lexmark 2400 Series\lxcrmon.exe

C:\Program\Lexmark 2400 Series\ezprint.exe

C:\Program\Java\jre1.5.0_06\bin\jusched.exe

C:\Program\QuickTime\qttask.exe

C:\Program\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\lxcrcoms.exe

C:\Program\DAEMON Tools\daemon.exe

C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe

C:\Program\Delade filer\{320D180E-05DC-1053-0320-06031505002e}\Update.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\Skype\Phone\Skype.exe

C:\Program\iPod\bin\iPodService.exe

C:\Program\Compete Toolbar\Compete.exe

C:\Program\Compete Toolbar\CompeteUa.exe

C:\WINDOWS\system32\sistray.exe

C:\Program\acer\eRecovery\Monitor.exe

C:\Program\SpywareGuard\sgmain.exe

C:\Program\SpywareGuard\sgbhp.exe

C:\Program\Mozilla Firefox\firefox.exe

C:\Program\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gmail.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157'>http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896'>http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: Lexmark Verktygsfält - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program\Lexmark Toolbar\toolband.dll

O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program\SpywareGuard\dlprotect.dll

O2 - BHO: Compete ToolHelper - {55825511-174A-4b4e-84B7-69AAC4E294B6} - C:\Program\Compete Toolbar\CompeteToolbar.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar1.dll (file missing)

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program\Norton AntiVirus\NavShExt.dll

O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program\DELADE~1\{320D1~1\888Bar.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: Lexmark Verktygsfält - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program\Lexmark Toolbar\toolband.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar1.dll (file missing)

O3 - Toolbar: Compete Toolbar - {9B393B85-708D-4e61-9529-2FA61D4A4904} - C:\Program\Compete Toolbar\CompeteToolbar.dll

O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program\DELADE~1\{320D1~1\888Bar.dll

O4 - HKLM\..\Run: [LaunchApp] Alaunch

O4 - HKLM\..\Run: [synTPLpr] C:\Program\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program\Arcade\PCMService.exe"

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [LManager] C:\Program\Launch Manager\QtZgAcer.EXE

O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe

O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [AVG7_CC] C:\Program\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [AVG7_EMC] C:\Program\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [RemoteControl] C:\Program\CyberLink\PowerDVD\PDVDServ.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\Program\SYMNET~1\SNDMon.exe /Consumer

O4 - HKLM\..\Run: [ViewMgr] C:\Program\Viewpoint\Viewpoint Manager\ViewMgr.exe

O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program\PowerISO\PWRISOVM.EXE

O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program\Lexmark 2400 Series\lxcrmon.exe"

O4 - HKLM\..\Run: [EzPrint] "C:\Program\Lexmark 2400 Series\ezprint.exe"

O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program\Lexmark Fax Solutions\fm3032.exe" /s

O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [kis] "C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [skype] "C:\Program\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [RealPlayer] "C:\Program\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot

O4 - HKCU\..\Run: [Compete Toolbar] C:\Program\Compete Toolbar\Compete.exe

O4 - HKCU\..\Run: [Compete Toolbar Update] C:\Program\Compete Toolbar\CompeteUa.exe

O4 - Startup: SpywareGuard.lnk = C:\Program\SpywareGuard\sgmain.exe

O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe

O8 - Extra context menu item: Add to Kaspersky Anti-Banner - C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll

O20 - AppInit_DLLs: C:\Program\KASPER~1\KASPER~1.0\adialhk.dll

O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Program\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Program\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program\iPod\bin\iPodService.exe

O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe

O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program\Norton AntiVirus\IWP\NPFMntor.exe

O23 - Service: SAVScan - Symantec Corporation - C:\Program\Norton AntiVirus\SAVScan.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\Program\DELADE~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe[/log]

4 december, 2006

Hur har det gått med SUPERAntiSpyware?

4 december, 2006

Hej

körde precis den, var tvungen att fara på jobbet, men här kommer logen.

[log]SUPERAntiSpyware Scan Log

Generated 12/04/2006 at 09:14 PM

Application Version : 3.3.1020

Core Rules Database Version : 3141

Trace Rules Database Version: 1157

Scan type : Complete Scan

Total Scan Time : 00:13:39

Memory items scanned : 165

Memory threats detected : 0

Registry items scanned : 5268

Registry threats detected : 30

File items scanned : 12510

File threats detected : 54

Trojan.Update-Mcboo

[{320D180E-05DC-1053-0320-06031505002e}] C:\PROGRAM\DELADE FILER\{320D180E-05DC-1053-0320-06031505002E}\UPDATE.EXE

C:\PROGRAM\DELADE FILER\{320D180E-05DC-1053-0320-06031505002E}\UPDATE.EXE

C:\WINDOWS\Prefetch\UPDATE.EXE-2D032E28.pf

Adware.ToolBar888

HKLM\Software\Classes\CLSID\{C004DEC2-2623-438e-9CA2-C9043AB28508}

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}\InprocServer32

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}\InprocServer32#ThreadingModel

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}\ProgID

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}\Programmable

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}\TypeLib

HKCR\CLSID\{C004DEC2-2623-438E-9CA2-C9043AB28508}\VersionIndependentProgID

C:\PROGRAM\DELADE~1\{320D1~1\888BAR.DLL

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C004DEC2-2623-438e-9CA2-C9043AB28508}

HKLM\Software\Microsoft\Internet Explorer\Toolbar#{C004DEC2-2623-438e-9CA2-C9043AB28508}

HKCR\LuckyToolBar.LuckyToolBarObj.1

HKCR\LuckyToolBar.LuckyToolBarObj.1\CLSID

HKCR\LuckyToolBar.LuckyToolBarObj

HKCR\LuckyToolBar.LuckyToolBarObj\CLSID

HKCR\LuckyToolBar.LuckyToolBarObj\CurVer

HKCR\TypeLib\{ED0FB633-C311-4bcd-824A-4D345386BE64}

HKU\S-1-5-21-2947204558-916316955-1639597764-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{C004DEC2-2623-438E-9CA2-C9043AB28508}

HKCR\TypeLib\{569304BA-83ED-4CFF-AC26-BE3E482F7208}

HKCR\TypeLib\{569304BA-83ED-4CFF-AC26-BE3E482F7208}\1.0

HKCR\TypeLib\{569304BA-83ED-4CFF-AC26-BE3E482F7208}\1.0\0

HKCR\TypeLib\{569304BA-83ED-4CFF-AC26-BE3E482F7208}\1.0\0\win32

HKCR\TypeLib\{569304BA-83ED-4CFF-AC26-BE3E482F7208}\1.0\FLAGS

HKCR\TypeLib\{569304BA-83ED-4CFF-AC26-BE3E482F7208}\1.0\HELPDIR

HKCR\Interface\{C6F2214E-0B54-45A9-B90D-7DD4BA45ED0B}

HKCR\Interface\{C6F2214E-0B54-45A9-B90D-7DD4BA45ED0B}\ProxyStubClsid

HKCR\Interface\{C6F2214E-0B54-45A9-B90D-7DD4BA45ED0B}\ProxyStubClsid32

HKCR\Interface\{C6F2214E-0B54-45A9-B90D-7DD4BA45ED0B}\TypeLib

HKCR\Interface\{C6F2214E-0B54-45A9-B90D-7DD4BA45ED0B}\TypeLib#Version

Adware.Tracking Cookie

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@realmedia[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@888[3].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@tacoda[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@ads.mininova[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@adrevolver[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@adbrite[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@adtech[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@stats1.reliablestats[3].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@revsci[4].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@mediaplex[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@adserver.easyad[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@xtendmedia[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@cgi-bin[3].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@statse.webtrendslive[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@indextools[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@tradedoubler[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@2o7[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@cassava[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@partygaming.122.2o7[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@ad1.emediate[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@edge.ru4[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@ads.adbrite[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@stats.drivecleaner[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@advertising[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@statcounter[3].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@rotator.adjuggler[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@stat.swedbank[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@atwola[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@3.adbrite[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@hitbox[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@sales.liveperson[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@questionmarket[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@bluestreak[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@casalemedia[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@1072556060[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@ad.yieldmanager[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@www.888[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@overture[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@bizrate[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@drivecleaner[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@sales.liveperson[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@doubleclick[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@tribalfusion[3].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@fastclick[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@clicktorrent[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@media.adrevolver[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise & henka@atdmt[2].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@zedo[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@ehg-skistar.hitbox[1].txt

C:\Documents and Settings\Marie-Louise & Henka\Cookies\marie-louise_&_henka@ad1.emediate[3].txt[/log]

5 december, 2006

Det är en gammal Java-version med säkerhetshål i datorn. Avinstallera alla Java i Kontrollpanelen - Lägg till eller ta bort program och installera därefter en ny: http://www.java.com/sv/

Har du haft Compete Toolbar länge eller är det något som har installerats i samband med att problemen började?

Skanna med HijackThis och bocka för:

O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll

Avsluta alla andra program.

Tryck Fix checked.

Starta om datorn.

Ta bort mapparna (om de finns kvar):

C:\PROGRAM\DELADE FILER\{320D180E-05DC-1053-0320-06031505002E}

Och så en ny HijackThis-logg.

Hur uppför sig datorn nu?

5 december, 2006

hej

håller på plocka bort Java, tar typ 30 minuter. tycker det verkar länge men men. Tror jag fick compete toolbar efter att jag uppdaterat IE. Gjorde det då inte gmail.com fungerade i IE pga av nåt problem med activeX, använde mozarilla istället då ett tag, tills detta dök upp via msn. Mozarilla fungerar fortfarande bra. Hämtar ny Java nu.

Logen måste jag nog posta när jag kommer tillbaka från jobbet runt 20:00. En kompis till mig som fått samma virus via msn, sa till mig att det enda du behövde göra var att gå till AVG:s hemsida och ladda ner en cleaning fil? funkar det lika bra som detta?

//H

5 december, 2006

Det var lång tid för att avinstallera Java, låter inte riktigt normalt.

Jag hittar i alla fall inget på AVGs webbplats, men det beror kanske på att jag är dålig på att hitta där. Det finns i alla fall olika varianter av det här som sprids via MSN, t ex så finns det många som har en PurityScan-otrevlighet i datorn efteråt men det har jag inte kunnat se att din dator har blivit infekterad av.

5 december, 2006

Hej

Nu är Java borta ialla fall och har hämtat ner ett nytt. Körde Hijackthis och körde fixchecked på den filen. Tog sedan bort mappen efter omstart.

IE stänger fortfarande ner sig och likaså sökfunktionen. Har inte prvat att installera msn igen. Provar windows messenger nu, alltså utan bilder och allt.

Så kanske ska prova att installera MSN igen då. Här har du logen från HijackThis ialla fall. Hon som sa åt mig att ladda hem cleaning filen från avg:s hemsida fick skiten vi min Msn, men det kanske kan bli olika virus för det.

tror filen hette VCclean eller nåt sånt.

[log]Logfile of HijackThis v1.99.1

Scan saved at 21:56:45, on 2006-12-05

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe

C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\WINDOWS\Explorer.EXE

C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Acer\eManager\anbmServ.exe

C:\Program\Grisoft\AVGFRE~1\avgamsvr.exe

C:\Program\Grisoft\AVGFRE~1\avgupsvc.exe

C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRserv.exe

C:\Program\Norton AntiVirus\IWP\NPFMntor.exe

C:\WINDOWS\system32\svchost.exe

C:\Program\Synaptics\SynTP\SynTPLpr.exe

C:\Program\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\keyhook.exe

C:\Program\Arcade\PCMService.exe

C:\Program\Launch Manager\QtZgAcer.EXE

C:\Program\Delade filer\Symantec Shared\ccApp.exe

C:\Program\Grisoft\AVGFRE~1\avgcc.exe

C:\Program\Grisoft\AVGFRE~1\avgemc.exe

C:\Program\CyberLink\PowerDVD\PDVDServ.exe

C:\Program\Delade filer\Real\Update_OB\realsched.exe

C:\Program\Viewpoint\Viewpoint Manager\ViewMgr.exe

C:\Program\PowerISO\PWRISOVM.EXE

C:\Program\Lexmark 2400 Series\lxcrmon.exe

C:\Program\Lexmark 2400 Series\ezprint.exe

C:\Program\QuickTime\qttask.exe

C:\Program\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\lxcrcoms.exe

C:\Program\DAEMON Tools\daemon.exe

C:\Program\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe

C:\Program\Java\jre1.5.0_09\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\Messenger\msmsgs.exe

C:\Program\Skype\Phone\Skype.exe

C:\Program\Compete Toolbar\Compete.exe

C:\Program\iPod\bin\iPodService.exe

C:\Program\Compete Toolbar\CompeteUa.exe

C:\Program\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\WINDOWS\system32\sistray.exe

C:\WINDOWS\system32\wuauclt.exe