Just nu i M3-nätverket
Jump to content

Vet ej vad som är fel, men datorn är seg som bara den.


Gulpa

Recommended Posts

Har Norton som virus och brandvägg. Har kört den några gånger och den hittar inge fel.

Men datorn är jätte seg.

Har kört hijack.

Det här är log [log]jLogfile of Trend Micro HijackThis v2.0.2

Scan saved at 03:33:01, on 2009-01-28

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16764)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\WINDOWS\RtHDVCpl.exe

C:\hp\support\hpsysdrv.exe

C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

C:\WINDOWS\System32\rundll32.exe

C:\WINDOWS\System32\rundll32.exe

c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Windows\system32\schtasks.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe

C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

C:\hp\kbd\kbd.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Internet Explorer\ieuser.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\Windows\system32\SearchFilterHost.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896'>http://go.microsoft.com/fwlink/?LinkId=54896'>http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop'>http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop'>http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Länkhjälp till Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE

O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sunJavaUpdateReg] "C:\Windows\system32\jureg.exe"

O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "K:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJÄNST')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJÄNST')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NÄTVERKSTJÄNST')

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O13 - Gopher Prefix:

O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - K:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Automatisk LiveUpdate-schemaläggare (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

O23 - Service: Bonjour-tjänst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

 

--

End of file - 7888 bytes

[/log]

Har även kört Malware och här är log[log]Malwarebytes' Anti-Malware 1.33

Databasversion: 1701

Windows 6.0.6000

 

2009-01-28 03:37:17

mbam-log-2009-01-28 (03-37-17).txt

 

Skanningstyp: Snabb skanning

Antal skannade objekt: 45709

Förfluten tid: 2 minute(s), 48 second(s)

 

Infekterade minnesprocesser: 0

Infekterade minnesmoduler: 0

Infekterade registernycklar: 0

Infekterade registervärden: 0

Infekterade registerdataposter: 0

Infekterade mappar: 0

Infekterade filer: 0

 

Infekterade minnesprocesser:

(Inga illasinnade poster hittades)

 

Infekterade minnesmoduler:

(Inga illasinnade poster hittades)

 

Infekterade registernycklar:

(Inga illasinnade poster hittades)

 

Infekterade registervärden:

(Inga illasinnade poster hittades)

 

Infekterade registerdataposter:

(Inga illasinnade poster hittades)

 

Infekterade mappar:

(Inga illasinnade poster hittades)

 

Infekterade filer:

(Inga illasinnade poster hittades)

[/log]

Skulle någon som har lite mer kunskap än mig ha lust att titta på de log som jag har lagt in?

Tack i förhand

 

Link to comment
Share on other sites

Jag ser inget skadligt i loggen.

Ladda ner ComboFix till Skrivbordet:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

 

[log]Stäng av alla program du ser inklusive antivirusprogram och antispionprogram men lämna brandväggen på.

Hur? Se http://www.bleepingcomputer.com/forums/topic114351.html

Kör ComboFix och följ anvisningarna som visas.

Om det kommer upp en fråga om du vill installera återställningskonsolen så svara ja.

 

VIKTIGT! Klicka inte på ComboFix-fönstret med musen när den körs annars kan den hänga upp sig.

 

När den är färdig så ska en logg komma upp, bifoga den till ditt svar. Kontrollera att antivirusprogram mm är igång innan du ansluter till internet.

 

Om du får problem med att komma ut på internet:

Kontrollpanelen - Nätverksanslutningar

högerklicka på din internetanslutning och välj Reparera och/eller starta om datorn.[/log]

 

Varning! ComboFix förhindrar automatisk körning av CD, disketter och USB-enheter för att göra det lättare att rensa datorn och skydda datorn mot infektioner i framtiden. Det kan bli problem t ex om datorn har internet via ett USB-modem eller USB-nätverkskort. Säg då till i stället för att köra ComboFix.

 

Link to comment
Share on other sites

Jag ser i Hijack-loggen att du har en gammal java-version med

säkerhetshål i din dator.Jag rekommenderar att du laddar hem och

installerar uppdaterad version http://www.java.com/sv/ Avinstallera

sedan den gamla i Kontrollpanelen Lägg till /ta bort program

 

 

Link to comment
Share on other sites

Pröva om det hjälper att starta genom att högerklicka på ComboFix och välja Kör som administratör.

 

Om inte så pröva med det här:

Ladda ner Avenger på Skrivbordet och packa upp filen där:

http://swandog46.geekstogo.com/avenger2/download.php

 

Starta Avenger.

Bocka i rutan Scan for rootkits om den inte redan är ibockad.

Tryck på Execute för att starta det.

Datorn startar nu om (kanske två gånger).

Efter en liten stund så kommer loggen (C:\avenger.txt) upp, klistra in den här.

 

Link to comment
Share on other sites

loggen från Avenger [log]Logfile of The Avenger Version 2.0, © by Swandog46

http://swandog46.geekstogo.com

 

Platform: Windows Vista

 

*******************

 

Script file opened successfully.

Script file read successfully.

 

Backups directory opened successfully at C:\Avenger

 

*******************

 

Beginning to process script file:

 

Rootkit scan active.

No rootkits found!

 

 

Completed script processing.

 

*******************

 

Finished! Terminate.

[/log]

 

Link to comment
Share on other sites

Ladda ner OTViewIt till Skrivbordet:

http://oldtimer.geekstogo.com/OTViewIt.exe

 

Stäng alla program.

Kör OTViewIt (i Vista högerklicka och Kör som administratör).

Bocka för Scan all Users.

Låt andra bockar vara.

Välj 30 dagar för File Age om det inte redan är valt.

Tryck på Run Scan och låt programmet köra ostört.

 

När det är klart så skapas två loggfiler på Skrivbordet, OTViewIt.txt och Extras.txt, klistra in båda två i ditt svar (kom ihåg LOG-knappen).

 

 

Link to comment
Share on other sites

Extras.txt [log]OTViewIt Extras logfile created on: 2009-01-29 12:40:27 - Run

OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Users\Vivi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ABPOTLAN

Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation

Internet Explorer (Version = 7.0.6000.16764)

Locale: 0000041D | Country: Sverige | Language: SVE | Date Format: yyyy-MM-dd

 

2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free

4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free

Paging file location(s): ?:\pagefile.sys;

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 457,59 Gb Total Space | 380,90 Gb Free Space | 83,24% Space Free | Partition Type: NTFS

Drive D: | 8,17 Gb Total Space | 1,31 Gb Free Space | 16,08% Space Free | Partition Type: NTFS

Drive E: | 465,76 Gb Total Space | 465,63 Gb Free Space | 99,97% Space Free | Partition Type: NTFS

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Drive L: | 465,75 Gb Total Space | 284,52 Gb Free Space | 61,09% Space Free | Partition Type: NTFS

 

Computer Name: VIVI-DATOR

Current User Name: Vivi

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: All users

Whitelist: On

File Age = 30 Days

 

========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

 

========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval"=1

"UacDisableNotify"=1

"InternetSettingsDisableNotify"=1

"AutoUpdateDisableNotify"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

"DisableMonitoring"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride"=0

"AntiSpywareOverride"=0

"FirewallOverride"=0

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

"DisableNotifications"=0

"EnableFirewall"=0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging]

 

========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

 

========== (O10) Winsock2 Catalogs ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\]

NameSpace_Catalog5\Catalog_Entries\000000000001 [@%SystemRoot%\system32\nlasvc.dll,-1000] -- C:\WINDOWS\System32\nlaapi.dll (Microsoft Corporation)

NameSpace_Catalog5\Catalog_Entries\000000000004 [@%SystemRoot%\system32\napinsp.dll,-1000] -- C:\WINDOWS\System32\NapiNSP.dll (Microsoft Corporation)

NameSpace_Catalog5\Catalog_Entries\000000000005 [@%SystemRoot%\system32\pnrpnsp.dll,-1000] -- C:\WINDOWS\System32\pnrpnsp.dll (Microsoft Corporation)

NameSpace_Catalog5\Catalog_Entries\000000000006 [@%SystemRoot%\system32\pnrpnsp.dll,-1001] -- C:\WINDOWS\System32\pnrpnsp.dll (Microsoft Corporation)

NameSpace_Catalog5\Catalog_Entries\000000000007 [mdnsNSP] -- C:\Program\Bonjour\mdnsNSP.dll (Apple Inc.)

 

========== HKEY_LOCAL_MACHINE Protocol Defaults ==========

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults - Default Protocols

ldap -- 4 = Restricted sites (Not a Default Protocol)

news -- 4 = Restricted sites (Not a Default Protocol)

nntp -- 4 = Restricted sites (Not a Default Protocol)

oecmd -- 4 = Restricted sites (Not a Default Protocol)

snews -- 4 = Restricted sites (Not a Default Protocol)

 

========== HKEY_USERS Protocol Defaults ==========

 

 

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults] - Default Protocols

@ivt -- @ivt protocol not assigned

file -- file protocol not assigned

ftp -- ftp protocol not assigned

http -- http protocol not assigned

https -- https protocol not assigned

shell -- shell protocol not assigned

 

========== HKEY_USERS Protocol Defaults ==========

 

 

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults] - Default Protocols

@ivt -- @ivt protocol not assigned

file -- file protocol not assigned

ftp -- ftp protocol not assigned

http -- http protocol not assigned

https -- https protocol not assigned

shell -- shell protocol not assigned

 

========== (O18) Protocol Handlers ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2007-06-08 01:30:56 | 00,230,760 | ---- | M] (Microsoft Corporation) C:\Program\Common Files\microsoft shared\Information Retrieval\msitss.dll (ms-itss:{0A9007C0-4076-11D3-8789-0000F8105754} (HKLM) [Microsoft Infotech Storage Protocol for IE 4.0])

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0244F7E7-8E4D-4215-8C2A-00FC5E94D84C}"=Symantec Real Time Storage Protection Component

"{0A2C5854-557E-48C8-835A-3B9F074BDCAA}"=Python 2.5

"{0E19A83E-F53B-40CF-8C91-96F32D955E6A}"=LightScribe System Software 1.10.23.1

"{12A76360-388E-4B27-ABEB-D5FC5378DD2A}"=HPPhotoSmartPhotobookWebPack1

"{18D10072035C4515918F7E37EAFAACFC}"=AutoUpdate

"{1BCE2581-B7CA-4BB4-BDFB-D113506AA38B}"=HP Easy Setup - Frontend

"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}"=CyberLink DVD Suite Deluxe

"{254C37AA-6B72-4300-84F6-98A82419187E}"=Hewlett-Packard Active Check

"{25569723-DC5A-4467-A639-79535BF01B71}"=Adobe Help Center 2.1

"{2B8F4D70-F9CA-4E94-B2A5-49AAD4CE1053}"=Nero 8

"{2C1B58D5-6549-472C-86B7-17BE57186628}"=Microsoft Works

"{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}"=Component Framework

"{318AB667-3230-41B5-A617-CB3BF748D371}"=iTunes

"{3248F0A8-6813-11D6-A77B-00B0D0160010}"=Java SE Runtime Environment 6 Update 1

"{34BFB099-07B2-4E95-A673-7362D60866A2}"=PSSWCORE

"{3672B097-EA69-4BFE-B92F-29AE6D9D2B34}"=Norton Internet Security

"{40BF1E83-20EB-11D8-97C5-0009C5020658}"=Power2Go

"{45D707E9-F3C4-11D9-A373-0050BAE317E1}"=DVD Play BD & HD DVD

"{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}"=Cards_Calendar_OrderGift_DoMorePlugout

"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}"=HP Picasso Media Center Add-In

"{55A6283C-638A-4EE0-B491-51118554BDA2}"=Norton Confidential Core

"{62120008-8E1E-4807-860D-A8B48F8552DB}"=Norton Protection Center

"{669D4A35-146B-4314-89F1-1AC3D7B88367}"=Hewlett-Packard Asset Agent for Health Check

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}"=Apple Software Update

"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable

"{77772678-817F-4401-9301-ED1D01A8DA56}"=SPBBC 32bit

"{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}"=Norton AntiVirus

"{7B63B2922B174135AFC0E1377DD81EC2}"=DivX Pro Trial

"{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}"=Bonjour

"{8ADFC4160D694100B5B8A22DE9DCABD9}"=DivX Player

"{90120000-0020-041D-0000-0000000FF1CE}"=Compatibility Pack för Office 2007-systemet

"{95120000-00AF-041D-0000-0000000FF1CE}"=Microsoft Office PowerPoint Viewer 2007 (Swedish)

"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}"=HP Customer Feedback

"{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}"=Adobe Photoshop Elements 5.0

"{AC76BA86-7AD7-1053-7B44-A81000000003}"=Adobe Reader 8.1.0 - Svenska

"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}"=ccCommon

"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}"=HP Photosmart Essential 2.5

"{C1C185CA-C531-49F5-A6FA-B838405A049D}"=Norton Internet Security

"{C59C179C-668D-49A9-B6EA-0121CCFC1243}"=LabelPrint

"{C5E7C173-5DA7-49B6-83E5-1FBCA1421C57}"=SymNet

"{C8D47273-7A1A-4614-A3D8-263632D8A5ED}"=HP Customer Experience Enhancements

"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}"=PowerDirector

"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}"=VideoToolkit01

"{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}"=Norton AntiVirus Help

"{E80F62FF-5D3C-4A19-8409-9721F2928206}"=LiveUpdate (Symantec Corporation)

"{EC4455AB-F155-4CC1-A4C5-88F3777F9886}"=Apple Mobile Device Support

"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}"=AppCore

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}"=Realtek High Definition Audio Driver

"{F958CA02-BB40-4007-894B-258729456EE4}"=QuickTime

"{FB9C5329-F982-435C-AEC5-EE0A75EE6395}"=muvee autoProducer 6.1

"{FE57DE70-95DE-4B64-9266-84DA811053DB}"=HP Update

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}"=Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"Adobe Flash Player ActiveX"=Adobe Flash Player 10 ActiveX

"Adobe Photoshop Elements 5"=Adobe Photoshop Elements 5.0

"Hauppauge MCE2005 Software Encoder"=Hauppauge MCE XP/Vista Software Encoder (2.0.25180)

"HijackThis"=HijackThis 2.0.2

"HP Photosmart Essential"=HP Photosmart Essential 2.5

"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}"=PowerDirector

"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware

"NVIDIA Drivers"=NVIDIA Drivers

"OsdMaestro"=HP On-Screen Cap/Num/Scroll Lock Indicator

"PC-Doctor 5 for Windows"=Verktyg för Hårdvarudiagnostik

"PsuedoLiveUpdate"=LiveUpdate (Symantec Corporation)

"SymSetup.{C1C185CA-C531-49F5-A6FA-B838405A049D}"=Norton Internet Security (Symantec Corporation)

"SystemRequirementsLab"=System Requirements Lab

"Vuze"=Vuze

 

========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 2009-01-25 19:58:02 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-26 07:10:35 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-26 11:46:07 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-27 08:10:49 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-27 11:36:10 | Computer Name = Vivi-dator | Source = Application Hang | ID = 1002

Description = Programmet iexplore.exe, version 7.0.6000.16764, avslutades eftersom

det slutade att samverka med Windows. Ytterligare information kan finnas i problemhistoriken

på kontrollpanelen för Problemrapporter och lösningar. Process-ID: c48 Starttid:

01c9808826d99c90 Avslutningstid: 63

 

Error - 2009-01-28 07:14:31 | Computer Name = Vivi-dator | Source = Application Error | ID = 1000

Description = Felet uppstod i programmet Wow.exe, version 3.0.3.9183, tidsstämpel

0x490ce416, felet uppstod i modulen DivxDecoder.dll, version 6.0.6000.16386, tidsstämpel

0x4549bdc9, undantagskod 0xc0000135, felförskjutning 0x00008fc7, process-ID 0x13c4,

programmets starttid 0x01c9813996aaf445.

 

Error - 2009-01-28 07:16:06 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-28 17:35:49 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-29 06:03:17 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

Error - 2009-01-29 07:11:18 | Computer Name = Vivi-dator | Source = WerSvc | ID = 5007

Description =

 

[ System Events ]

Error - 2009-01-28 07:09:44 | Computer Name = Vivi-dator | Source = Service Control Manager | ID = 7000

Description =

 

Error - 2009-01-28 07:54:20 | Computer Name = Vivi-dator | Source = DCOM | ID = 10016

Description =

 

Error - 2009-01-28 07:54:21 | Computer Name = Vivi-dator | Source = DCOM | ID = 10016

Description =

 

Error - 2009-01-28 07:54:21 | Computer Name = Vivi-dator | Source = DCOM | ID = 10016

Description =

 

Error - 2009-01-28 07:54:21 | Computer Name = Vivi-dator | Source = DCOM | ID = 10016

Description =

 

Error - 2009-01-28 07:54:22 | Computer Name = Vivi-dator | Source = DCOM | ID = 10016

Description =

 

Error - 2009-01-28 17:29:23 | Computer Name = Vivi-dator | Source = Service Control Manager | ID = 7000

Description =

 

Error - 2009-01-28 17:29:23 | Computer Name = Vivi-dator | Source = Service Control Manager | ID = 7000

Description =

 

Error - 2009-01-29 07:04:53 | Computer Name = Vivi-dator | Source = Service Control Manager | ID = 7000

Description =

 

Error - 2009-01-29 07:04:53 | Computer Name = Vivi-dator | Source = Service Control Manager | ID = 7000

Description =

 

 

< End of report >

[/log]

OTViewIt.txt

 

[log]OTViewIt logfile created on: 2009-01-29 12:40:27 - Run

OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Users\Vivi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ABPOTLAN

Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation

Internet Explorer (Version = 7.0.6000.16764)

Locale: 0000041D | Country: Sverige | Language: SVE | Date Format: yyyy-MM-dd

 

2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free

4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free

Paging file location(s): ?:\pagefile.sys;

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 457,59 Gb Total Space | 380,90 Gb Free Space | 83,24% Space Free | Partition Type: NTFS

Drive D: | 8,17 Gb Total Space | 1,31 Gb Free Space | 16,08% Space Free | Partition Type: NTFS

Drive E: | 465,76 Gb Total Space | 465,63 Gb Free Space | 99,97% Space Free | Partition Type: NTFS

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Drive L: | 465,75 Gb Total Space | 284,52 Gb Free Space | 61,09% Space Free | Partition Type: NTFS

 

Computer Name: VIVI-DATOR

Current User Name: Vivi

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: All users

Whitelist: On

File Age = 30 Days

 

========== Processes ==========

 

[2006-11-02 10:45:57 | 00,095,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wininit.exe

[2006-11-02 10:45:21 | 00,210,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\lsm.exe

[2008-03-12 05:58:11 | 02,605,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\SLsvc.exe

[2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\CCSVCHST.EXE

[2006-11-02 10:45:48 | 00,166,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\taskeng.exe

[2006-11-02 10:45:04 | 00,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dwm.exe

[2008-11-07 14:28:16 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

[2008-08-29 10:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program\Bonjour\mDNSResponder.exe

[2007-05-29 14:19:06 | 00,198,240 | ---- | M] () -- c:\hp\HPEZBTN\HPBtnSrv.exe

[2007-11-19 14:54:04 | 00,079,136 | ---- | M] (Hewlett-Packard Company) -- c:\Program\Common Files\LightScribe\LSSrvc.exe

[2007-08-08 09:25:08 | 00,836,904 | ---- | M] (Nero AG) -- C:\Program\Nero\Nero8\Nero BackItUp\NBService.exe

[2006-11-02 13:34:46 | 00,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\SearchIndexer.exe

[2006-11-02 10:46:02 | 00,143,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFHost.exe

[2006-11-02 10:44:59 | 00,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\conime.exe

[2006-11-02 10:45:48 | 00,166,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\taskeng.exe

[2008-03-12 05:48:53 | 01,006,264 | ---- | M] (Microsoft Corporation) -- C:\Program\Windows Defender\MSASCui.exe

[2008-01-15 12:26:18 | 04,874,240 | ---- | M] (Realtek Semiconductor) -- C:\WINDOWS\RtHDVCpl.exe

[2007-04-18 16:01:34 | 00,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe

[2007-02-15 12:59:00 | 00,118,784 | ---- | M] (OsdMaestro) -- C:\Program\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

[2006-11-02 10:45:37 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rundll32.exe

[2006-11-02 10:45:39 | 00,150,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\schtasks.exe

[2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\CCSVCHST.EXE

[2006-11-02 10:45:37 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rundll32.exe

[2007-05-08 16:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard) -- C:\Program\HP\HP Software Update\hpwuSchd2.exe

[2008-11-20 13:20:54 | 00,290,088 | ---- | M] (Apple Inc.) -- C:\Program\iTunes\iTunesHelper.exe

[2008-03-12 06:23:02 | 01,232,896 | ---- | M] (Microsoft Corporation) -- C:\Program\Windows Sidebar\sidebar.exe

[2007-08-21 14:52:36 | 00,202,024 | ---- | M] (Nero AG) -- C:\Program\Common Files\Nero\Lib\NMBgMonitor.exe

[2007-08-21 14:52:54 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program\Common Files\Nero\Lib\NMIndexingService.exe

[2007-08-21 14:52:54 | 01,422,632 | ---- | M] (Nero AG) -- C:\Program\Common Files\Nero\Lib\NMIndexStoreSvr.exe

[2008-11-20 13:20:44 | 00,536,872 | ---- | M] (Apple Inc.) -- C:\Program\iPod\bin\iPodService.exe

[2008-10-16 05:40:06 | 00,301,568 | ---- | M] (Microsoft Corporation) -- C:\Program\Internet Explorer\ieuser.exe

[2007-08-31 11:49:50 | 00,243,064 | ---- | M] (Symantec Corporation) -- c:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe

[2007-09-19 17:30:52 | 00,065,536 | ---- | M] (Hewlett-Packard) -- c:\Program\Hewlett-Packard\HP Health Check\HPHC_Service.exe

[2007-05-16 16:56:44 | 00,067,128 | ---- | M] (Hewlett-Packard Company) -- C:\hp\KBD\kbd.exe

[2008-12-02 22:28:40 | 00,051,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe

[2009-01-29 12:40:17 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Users\Vivi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ABPOTLAN\OTViewIt[1].exe

 

========== (O23) Win32 Services ==========

 

File not found -- -- (AdobeActiveFileMonitor5.0 [Auto | Stopped])

[2008-11-07 14:28:16 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running])

[2007-08-31 11:49:50 | 00,243,064 | ---- | M] (Symantec Corporation) -- c:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler [Auto | Running])

[2008-08-29 10:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running])

[2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\CCSVCHST.EXE -- (ccEvtMgr [Auto | Running])

[2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\CCSVCHST.EXE -- (ccSetMgr [Auto | Running])

File not found -- -- (CertPropSvc [unknown | Stopped])

[2006-11-02 07:34:11 | 00,059,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])

[2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\CCSVCHST.EXE -- (CLTNetCnService [Auto | Running])

[2007-08-21 18:21:00 | 00,055,640 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost [On_Demand | Stopped])

File not found -- -- (DcomLaunch [unknown | Running])

[2006-11-02 13:36:25 | 02,089,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dfsr.exe -- (DFSR [On_Demand | Stopped])

[2008-03-12 06:05:06 | 00,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dps.dll -- (DPS [unknown | Running])

[2006-11-02 13:35:28 | 00,291,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\ehrecvr.exe -- (ehRecvr [On_Demand | Stopped])

[2006-11-02 13:35:29 | 00,131,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\ehsched.exe -- (ehSched [On_Demand | Stopped])

[2006-11-02 13:36:00 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])

[2006-11-02 10:46:05 | 00,569,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpsvc.dll -- (gpsvc [unknown | Running])

[2007-09-19 17:30:52 | 00,065,536 | ---- | M] (Hewlett-Packard) -- c:\Program\Hewlett-Packard\HP Health Check\HPHC_Service.exe -- (HP Health Check Service [Auto | Running])

[2007-05-29 14:19:06 | 00,198,240 | ---- | M] () -- c:\hp\HPEZBTN\HPBtnSrv.exe -- (HPBtnSrv [Auto | Running])

[2008-11-20 13:20:44 | 00,536,872 | ---- | M] (Apple Inc.) -- C:\Program\iPod\bin\iPodService.exe -- (iPod Service [On_Demand | Running])

[2007-11-19 14:54:04 | 00,079,136 | ---- | M] (Hewlett-Packard Company) -- c:\Program\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService [Auto | Running])

[2007-08-23 07:35:00 | 03,192,184 | ---- | M] (Symantec Corporation) -- c:\Program\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate [On_Demand | Stopped])

[2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- c:\Program\Common Files\Symantec Shared\CCSVCHST.EXE -- (LiveUpdate Notice [Auto | Running])

[2006-11-02 14:04:14 | 00,000,000 | ---D | M] -- C:\Windows\System32\Msdtc -- (MSDTC [unknown | Stopped])

[2007-08-08 09:25:08 | 00,836,904 | ---- | M] (Nero AG) -- C:\Program\Nero\Nero8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3 [Auto | Running])

[2006-11-02 13:36:02 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])

[2007-08-21 14:52:54 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Running])

[2006-11-02 10:46:12 | 00,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll -- (SCardSvr [unknown | Stopped])

File not found -- -- (Schedule [unknown | Running])

File not found -- -- (SCPolicySvc [unknown | Stopped])

[2008-03-12 05:58:11 | 02,605,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\SLsvc.exe -- (slsvc [Auto | Running])

[2006-11-02 10:45:46 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\snmptrap.exe -- (SNMPTRAP [On_Demand | Stopped])

[2008-12-03 07:49:24 | 01,251,720 | ---- | M] () -- C:\Program\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC [On_Demand | Stopped])

[2006-11-02 10:45:50 | 00,035,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\UI0Detect.exe -- (UI0Detect [On_Demand | Stopped])

[2006-11-02 10:45:50 | 00,392,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\vds.exe -- (vds [On_Demand | Stopped])

File not found -- -- (WdiServiceHost [unknown | Stopped])

File not found -- -- (WdiSystemHost [unknown | Running])

[2006-11-02 13:36:04 | 00,895,488 | ---- | M] (Microsoft Corporation) -- C:\Program\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

[2006-11-02 13:34:46 | 00,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\SearchIndexer.exe -- (WSearch [Auto | Running])

 

========== Driver Services ==========

 

[2006-11-02 10:51:38 | 00,420,968 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\adp94xx.sys -- (adp94xx [Disabled | Stopped])

[2006-11-02 10:51:32 | 00,297,576 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\adpahci.sys -- (adpahci [Disabled | Stopped])

[2006-11-02 10:50:35 | 00,098,408 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\adpu160m.sys -- (adpu160m [Disabled | Stopped])

[2006-11-02 10:51:00 | 00,147,048 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\adpu320.sys -- (adpu320 [Disabled | Stopped])

[2006-11-02 10:50:11 | 00,071,272 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\djsvs.sys -- (aic78xx [Disabled | Stopped])

[2008-03-12 06:20:49 | 00,017,464 | ---- | M] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\drivers\aliide.sys -- (aliide [Disabled | Stopped])

[2006-11-02 10:49:59 | 00,054,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\AMDAGP.SYS -- (amdagp [On_Demand | Stopped])

[2008-03-12 06:20:49 | 00,017,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdide.sys -- (amdide [Disabled | Stopped])

[2006-11-02 09:30:18 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdk7.sys -- (AmdK7 [Disabled | Stopped])

[2006-11-02 09:30:18 | 00,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdk8.sys -- (AmdK8 [Disabled | Stopped])

[2006-11-02 10:50:09 | 00,067,688 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\arc.sys -- (arc [Disabled | Stopped])

[2006-11-02 10:50:10 | 00,067,688 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\System32\drivers\arcsas.sys -- (arcsas [Disabled | Stopped])

[2006-11-02 09:31:12 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bowser.sys -- (bowser [On_Demand | Running])

[2006-11-02 09:24:45 | 00,013,568 | ---- | M] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\drivers\BrFiltLo.sys -- (BrFiltLo [On_Demand | Stopped])

[2006-11-02 09:24:46 | 00,005,248 | ---- | M] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\drivers\BrFiltUp.sys -- (BrFiltUp [On_Demand | Stopped])

[2006-11-02 09:25:24 | 00,071,808 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\drivers\BrSerId.sys -- (Brserid [Disabled | Stopped])

[2006-11-02 09:24:44 | 00,062,336 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\drivers\BrSerWdm.sys -- (BrSerWdm [Disabled | Stopped])

[2006-11-02 09:24:44 | 00,012,160 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\drivers\BrUsbMdm.sys -- (BrUsbMdm [Disabled | Stopped])

[2006-11-02 09:24:47 | 00,011,904 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\drivers\BrUsbSer.sys -- (BrUsbSer [On_Demand | Stopped])

[2006-11-02 09:55:23 | 00,039,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthmodem.sys -- (BTHMODEM [Disabled | Stopped])

[2006-11-02 09:55:08 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\circlass.sys -- (circlass [On_Demand | Running])

[2008-12-03 08:09:55 | 00,224,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\clfs.sys -- (CLFS [unknown | Running])

[2008-03-12 06:20:49 | 00,019,000 | ---- | M] (CMD Technology, Inc.) -- C:\WINDOWS\System32\drivers\cmdide.sys -- (cmdide [Disabled | Stopped])

[2008-07-30 17:42:12 | 00,023,888 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\COH_Mon.sys -- (COH_Mon [On_Demand | Stopped])

[2007-08-08 10:39:00 | 00,036,056 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\CO_Mon.sys -- (CO_Mon [Auto | Running])

[2006-11-02 10:49:43 | 00,022,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\crcdisk.sys -- (crcdisk [boot | Running])

[2006-11-02 09:30:18 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\crusoe.sys -- (Crusoe [Disabled | Stopped])

[2006-11-02 09:31:04 | 00,074,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dfsc.sys -- (DfsC [system | Running])

[2008-03-12 06:05:06 | 00,619,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys -- (DXGKrnl [On_Demand | Running])

[2006-11-02 08:30:54 | 00,117,760 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\drivers\E1G60I32.sys -- (E1G60 [On_Demand | Stopped])

[2006-11-02 13:34:35 | 00,132,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ecache.sys -- (Ecache [boot | Running])

[2325-09-24 07:14:51 | 00,371,248 | ---- | M] (Symantec Corporation) -- C:\Program\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl [system | Running])

[2006-11-02 10:51:34 | 00,316,520 | ---- | M] (Emulex) -- C:\WINDOWS\System32\drivers\elxstor.sys -- (elxstor [Disabled | Stopped])

[2325-09-24 07:14:51 | 00,099,376 | ---- | M] (Symantec Corporation) -- C:\Program\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv [On_Demand | Running])

[2006-11-02 10:49:58 | 00,056,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fileinfo.sys -- (FileInfo [boot | Running])

[2006-11-02 09:32:55 | 00,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\filetrace.sys -- (Filetrace [On_Demand | Stopped])

[2006-11-02 10:50:04 | 00,058,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\GAGP30KX.SYS -- (gagp30kx [On_Demand | Stopped])

[2008-04-17 13:12:54 | 00,015,464 | ---- | M] (GEAR Software Inc.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])

[2007-10-01 09:21:08 | 01,129,344 | ---- | M] (Hauppauge Computer Works) -- C:\WINDOWS\System32\drivers\HCW85BDA.sys -- (HCW85BDA [On_Demand | Running])

[2008-03-12 05:57:11 | 00,053,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hdaudbus.sys -- (HDAudBus [On_Demand | Running])

[2006-11-02 09:55:22 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidbth.sys -- (HidBth [Disabled | Stopped])

[2006-11-02 09:55:01 | 00,021,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidir.sys -- (HidIr [On_Demand | Running])

[2006-11-02 10:50:10 | 00,037,480 | ---- | M] (Hewlett-Packard Company) -- C:\WINDOWS\System32\drivers\HpCISSs.sys -- (HpCISSs [Disabled | Stopped])

[2006-11-02 10:51:25 | 00,232,040 | ---- | M] (Intel Corporation) -- C:\WINDOWS\System32\drivers\iaStorV.sys -- (iaStorV [Disabled | Stopped])

[2008-11-21 01:26:20 | 00,270,384 | ---- | M] (Symantec Corporation) -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20090120.002\IDSvix86.sys -- (IDSvix86 [system | Running])

[2006-11-02 10:50:17 | 00,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) -- C:\WINDOWS\System32\drivers\iirsp.sys -- (iirsp [Disabled | Stopped])

[2008-01-15 20:19:04 | 02,047,576 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService [On_Demand | Running])

[2006-11-02 09:42:03 | 00,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys -- (IPMIDRV [Disabled | Stopped])

[2006-11-02 10:51:12 | 00,168,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msiscsi.sys -- (iScsiPrt [On_Demand | Running])

[2006-11-02 10:50:07 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) -- C:\WINDOWS\System32\drivers\iteatapi.sys -- (iteatapi [Disabled | Stopped])

[2006-11-02 10:50:09 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) -- C:\WINDOWS\System32\drivers\iteraid.sys -- (iteraid [Disabled | Stopped])

[2008-12-03 08:09:52 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\kbdhid.sys -- (kbdhid [system | Running])

[2006-11-02 09:56:49 | 00,047,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\lltdio.sys -- (lltdio [Auto | Running])

[2006-11-02 10:50:04 | 00,065,640 | ---- | M] (LSI Logic) -- C:\WINDOWS\System32\drivers\lsi_fc.sys -- (LSI_FC [Disabled | Stopped])

[2006-11-02 10:50:05 | 00,065,640 | ---- | M] (LSI Logic) -- C:\WINDOWS\System32\drivers\lsi_sas.sys -- (LSI_SAS [Disabled | Stopped])

[2006-11-02 10:50:10 | 00,065,640 | ---- | M] (LSI Logic) -- C:\WINDOWS\System32\drivers\lsi_scsi.sys -- (LSI_SCSI [Disabled | Stopped])

[2006-11-02 09:33:07 | 00,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\luafv.sys -- (luafv [Auto | Running])

[2006-11-02 10:49:53 | 00,028,776 | ---- | M] (LSI Logic Corporation) -- C:\WINDOWS\System32\drivers\megasas.sys -- (megasas [Disabled | Stopped])

[2008-12-03 08:17:27 | 00,041,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\monitor.sys -- (monitor [On_Demand | Running])

[2006-11-02 10:50:16 | 00,078,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpio.sys -- (mpio [Disabled | Stopped])

[2008-03-12 05:59:36 | 00,063,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpsdrv.sys -- (mpsdrv [On_Demand | Running])

[2006-11-02 10:49:59 | 00,033,384 | ---- | M] (LSI Logic Corporation) -- C:\WINDOWS\System32\drivers\Mraid35x.sys -- (Mraid35x [Disabled | Stopped])

[2008-12-03 08:17:07 | 00,211,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mrxsmb10.sys -- (mrxsmb10 [On_Demand | Running])

[2008-03-12 06:16:45 | 00,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys -- (mrxsmb20 [On_Demand | Running])

[2008-03-12 06:20:49 | 00,028,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msahci.sys -- (msahci [Disabled | Stopped])

[2006-11-02 10:50:17 | 00,080,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdsm.sys -- (msdsm [Disabled | Stopped])

[2006-11-02 10:49:20 | 00,013,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msisadrv.sys -- (msisadrv [boot | Running])

[2006-11-02 10:51:09 | 00,160,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msrpc.sys -- (MsRPC [On_Demand | Stopped])

[2008-12-03 08:13:41 | 00,154,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwifi.sys -- (NativeWifiP [On_Demand | Running])

[2325-09-24 07:14:51 | 00,089,104 | ---- | M] (Symantec Corporation) -- C:\ProgramData\Symantec\Definitions\VirusDefs\20090128.041\NAVENG.SYS -- (NAVENG [On_Demand | Running])

[2325-09-24 07:14:51 | 00,876,112 | ---- | M] (Symantec Corporation) -- C:\ProgramData\Symantec\Definitions\VirusDefs\20090128.041\NAVEX15.SYS -- (NAVEX15 [On_Demand | Running])

[2008-02-26 09:17:30 | 00,493,568 | ---- | M] (Ralink Technology, Corp.) -- C:\WINDOWS\System32\drivers\netr73.sys -- (netr73 [On_Demand | Running])

[2006-11-02 10:50:19 | 00,045,160 | ---- | M] (IBM Corporation) -- C:\WINDOWS\System32\drivers\nfrd960.sys -- (nfrd960 [Disabled | Stopped])

[2006-11-02 09:57:30 | 00,016,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nsiproxy.sys -- (nsiproxy [system | Running])

[2006-11-02 08:36:50 | 00,020,608 | ---- | M] (N-trig Innovative Technologies) -- C:\WINDOWS\System32\drivers\ntrigdigi.sys -- (ntrigdigi [Disabled | Stopped])

[2007-11-17 20:39:50 | 01,040,544 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvmfdx32.sys -- (NVENETFD [On_Demand | Running])

[2008-01-13 06:37:00 | 08,244,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys -- (nvlddmkm [On_Demand | Running])

[2006-11-02 10:50:24 | 00,088,680 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvraid.sys -- (nvraid [boot | Running])

[2007-12-07 16:28:10 | 00,131,616 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvrd32.sys -- (nvrd32 [Disabled | Stopped])

[2007-10-12 16:53:10 | 00,013,312 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvsmu.sys -- (nvsmu [Disabled | Stopped])

[2006-11-02 10:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvstor.sys -- (nvstor [Disabled | Stopped])

[2007-12-07 16:28:08 | 00,140,320 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvstor32.sys -- (nvstor32 [boot | Running])

[2006-11-02 10:50:40 | 00,106,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\NV_AGP.SYS -- (nv_agp [On_Demand | Stopped])

[2006-11-02 10:04:35 | 00,878,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\PEAuth.sys -- (PEAUTH [Auto | Running])

[2005-12-12 17:27:00 | 00,019,072 | ---- | M] (Hewlett-Packard Company) -- C:\WINDOWS\System32\drivers\PS2.sys -- (Ps2 [On_Demand | Running])

[2008-03-12 06:05:07 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pacer.sys -- (PSched [system | Running])

[2008-12-03 11:46:38 | 00,020,640 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\PxHelp20.sys -- (PxHelp20 [boot | Running])

[2006-11-02 10:51:45 | 00,900,712 | ---- | M] (QLogic Corporation) -- C:\WINDOWS\System32\drivers\ql2300.sys -- (ql2300 [Disabled | Stopped])

[2006-11-02 10:50:35 | 00,106,088 | ---- | M] (QLogic Corporation) -- C:\WINDOWS\System32\drivers\ql40xx.sys -- (ql40xx [Disabled | Stopped])

[2006-11-02 13:34:31 | 00,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\qwavedrv.sys -- (QWAVEdrv [On_Demand | Stopped])

[2006-11-02 10:02:01 | 00,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\RDPENCDD.sys -- (RDPENCDD [system | Running])

[2006-11-02 09:56:49 | 00,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rspndr.sys -- (rspndr [Auto | Running])

[2006-11-02 10:50:16 | 00,076,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sbp2port.sys -- (sbp2port [Disabled | Stopped])

[2006-11-02 07:37:21 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv [Auto | Running])

[2008-12-03 08:09:52 | 00,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sermouse.sys -- (sermouse [Disabled | Stopped])

[2008-03-12 05:56:14 | 00,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sffdisk.sys -- (sffdisk [Disabled | Stopped])

[2008-03-12 05:56:14 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sffp_mmc.sys -- (sffp_mmc [On_Demand | Stopped])

[2008-03-12 05:56:14 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sffp_sd.sys -- (sffp_sd [On_Demand | Stopped])

[2006-11-02 10:49:51 | 00,053,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\SISAGP.SYS -- (sisagp [On_Demand | Stopped])

[2006-11-02 10:50:10 | 00,038,504 | ---- | M] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\System32\drivers\sisraid2.sys -- (SiSRaid2 [Disabled | Stopped])

[2006-11-02 10:50:16 | 00,071,784 | ---- | M] (Silicon Integrated Systems) -- C:\WINDOWS\System32\drivers\sisraid4.sys -- (SiSRaid4 [Disabled | Stopped])

[2006-11-02 09:57:10 | 00,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smb.sys -- (Smb [system | Running])

[2008-09-05 14:31:42 | 00,447,024 | ---- | M] (Symantec Corporation) -- C:\Program\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv [system | Running])

[2006-11-02 10:49:35 | 00,018,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\spldr.sys -- (spldr [boot | Running])

[2007-11-30 23:57:12 | 00,279,088 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\srtsp.sys -- (SRTSP [On_Demand | Running])

[2007-11-30 23:57:12 | 00,317,616 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\srtspl.sys -- (SRTSPL [On_Demand | Stopped])

[2007-11-30 23:57:12 | 00,043,696 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\srtspx.sys -- (SRTSPX [system | Running])

[2008-03-12 06:16:45 | 00,130,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\srv2.sys -- (srv2 [On_Demand | Running])

[2008-03-12 06:16:45 | 00,084,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\srvnet.sys -- (srvnet [On_Demand | Running])

[2006-11-02 10:50:05 | 00,035,944 | ---- | M] (LSI Logic) -- C:\WINDOWS\System32\drivers\symc8xx.sys -- (Symc8xx [Disabled | Stopped])

[2008-06-13 14:13:38 | 00,013,616 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\symdns.sys -- (SYMDNS [On_Demand | Running])

[2009-01-23 19:34:21 | 00,124,464 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS -- (SymEvent [On_Demand | Running])

[2008-06-13 14:13:38 | 00,096,432 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\symfw.sys -- (SYMFW [On_Demand | Running])

[2008-06-13 14:14:02 | 00,024,112 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SymIMV.sys -- (SymIM [system | Running])

[2008-06-13 14:13:40 | 00,041,008 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\symndisv.sys -- (SYMNDISV [On_Demand | Running])

[2008-06-13 14:13:38 | 00,022,320 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\symredrv.sys -- (SYMREDRV [On_Demand | Running])

[2008-06-13 14:13:40 | 00,184,240 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\symtdi.sys -- (SYMTDI [system | Running])

[2006-11-02 10:49:56 | 00,031,848 | ---- | M] (LSI Logic) -- C:\WINDOWS\System32\drivers\sym_hi.sys -- (Sym_hi [Disabled | Stopped])

[2006-11-02 10:50:03 | 00,034,920 | ---- | M] (LSI Logic) -- C:\WINDOWS\System32\drivers\sym_u3.sys -- (Sym_u3 [Disabled | Stopped])

[2006-11-02 09:57:47 | 00,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpipreg.sys -- (tcpipreg [Auto | Running])

[2006-11-02 09:57:35 | 00,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdx.sys -- (tdx [system | Running])

[2006-11-02 10:02:07 | 00,023,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tssecsrv.sys -- (tssecsrv [On_Demand | Stopped])

[2008-03-12 05:59:36 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\TUNMP.SYS -- (tunmp [On_Demand | Running])

[2008-03-12 05:59:36 | 00,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tunnel.sys -- (tunnel [On_Demand | Running])

[2006-11-02 10:49:59 | 00,056,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UAGP35.SYS -- (uagp35 [On_Demand | Stopped])

[2006-11-02 10:50:04 | 00,058,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ULIAGPKX.SYS -- (uliagpkx [On_Demand | Stopped])

[2006-11-02 10:51:25 | 00,235,112 | ---- | M] (ULi Electronics Inc.) -- C:\WINDOWS\System32\drivers\uliahci.sys -- (uliahci [Disabled | Stopped])

[2006-11-02 10:50:35 | 00,098,408 | ---- | M] (Promise Technology, Inc.) -- C:\WINDOWS\System32\drivers\ulsata.sys -- (UlSata [Disabled | Stopped])

[2006-11-02 10:50:45 | 00,115,816 | ---- | M] (Promise Technology, Inc.) -- C:\WINDOWS\System32\drivers\ulsata2.sys -- (ulsata2 [Disabled | Stopped])

[2006-11-02 09:55:24 | 00,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\umbus.sys -- (umbus [On_Demand | Running])

[2006-11-02 09:55:09 | 00,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcir.sys -- (usbcir [On_Demand | Running])

[2006-11-02 09:53:56 | 00,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vgapnp.sys -- (vga [On_Demand | Stopped])

[2006-11-02 09:30:19 | 00,039,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\viac7.sys -- (ViaC7 [Disabled | Stopped])

[2008-03-12 06:20:49 | 00,020,024 | ---- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\drivers\viaide.sys -- (viaide [Disabled | Stopped])

[2006-11-02 10:50:24 | 00,050,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\volmgr.sys -- (volmgr [boot | Running])

[2006-11-02 10:51:30 | 00,290,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\volmgrx.sys -- (volmgrx [boot | Running])

[2006-11-02 10:50:41 | 00,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) -- C:\WINDOWS\System32\drivers\vsmraid.sys -- (vsmraid [Disabled | Stopped])

[2006-11-02 09:52:52 | 00,020,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wacompen.sys -- (WacomPen [Disabled | Stopped])

[2006-11-02 10:49:38 | 00,019,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wd.sys -- (Wd [Disabled | Stopped])

[2008-12-03 08:09:53 | 00,495,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Wdf01000.sys -- (Wdf01000 [boot | Running])

[2006-11-02 09:35:03 | 00,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmiacpi.sys -- (WmiAcpi [Disabled | Stopped])

[2006-11-02 09:58:26 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys -- (ws2ifsl [Disabled | Stopped])

[2008-01-15 00:58:02 | 00,039,408 | ---- | M] (Cyberlink Corp.) -- C:\Program\HP\DVDPlay\000.fcl -- ({22D78859-9CE9-4B77-BF18-AC83E81A9263} [Auto | Running])

 

========== (R ) Internet Explorer ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]

"Default_Page_URL"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

"Default_Search_URL"=http://go.microsoft.com/fwlink/?LinkId=54896

"Default_Secondary_Page_URL"=

"Extensions Off Page"=about:NoAdd-ons

"Local Page"=%SystemRoot%\system32\blank.htm

"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896

"Security Risk Page"=about:SecurityRisk

"Start Page"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]

"Local Page"=C:\Windows\system32\blank.htm

"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896

"Start Page"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

"StartPageCache"=

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\System32\ieframe.dll (Microsoft Corporation)

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

"ProxyOverride" = *.local

 

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

 

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main]

 

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

 

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main]

 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\System32\ieframe.dll (Microsoft Corporation)

 

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main]

 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\System32\ieframe.dll (Microsoft Corporation)

 

[HKEY_USERS\S-1-5-21-2400359063-2917280598-3099481207-1000\SOFTWARE\Microsoft\Internet Explorer\Main]

"Local Page"=C:\Windows\system32\blank.htm

"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896

"Start Page"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

"StartPageCache"=

 

[HKEY_USERS\S-1-5-21-2400359063-2917280598-3099481207-1000\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\System32\ieframe.dll (Microsoft Corporation)

 

[HKEY_USERS\S-1-5-21-2400359063-2917280598-3099481207-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

"ProxyOverride" = *.local

 

========== (O1) Hosts File ==========

 

HOSTS File = (761 bytes) - C:\Windows\System32\drivers\etc\Hosts

First 25 entries...

127.0.0.1 localhost

::1 localhost

 

========== (O2) BHO's ==========

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (HKLM) -- C:\Program\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} (HKLM) -- c:\Program\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)

{6D53EC84-6AAE-4787-AEEE-F4628F01010C} (HKLM) -- C:\Program\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (HKLM) -- C:\Program\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.)

 

========== (O3) Toolbars ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]

"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" (HKLM) -- c:\Program\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)

 

========== (O4) Run Keys ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

""= File not found

"Adobe Photo Downloader"="K:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe" File not found

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)

"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" (Symantec Corporation)

"HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe File not found

"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)

"hpsysdrv"=c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)

"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)

"KBD"=C:\HP\KBD\KbdStub.EXE ()

"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" (Nero AG)

"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)

"NvCplDaemon"=RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)

"NvMediaCenter"=RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)

"NvSvc"=RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart (NVIDIA Corporation)

"OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" (OsdMaestro)

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)

"RtHDVCpl"=RtHDVCpl.exe (Realtek Semiconductor)

"SunJavaUpdateReg"="C:\Windows\system32\jureg.exe" (Sun Microsystems, Inc.)

"Windows Defender"=%ProgramFiles%\Windows Defender\MSASCui.exe -hide (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" (Nero AG)

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (Microsoft Corporation)

 

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Microsoft Corporation)

"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation)

 

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Microsoft Corporation)

"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation)

 

[HKEY_USERS\S-1-5-21-2400359063-2917280598-3099481207-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" (Nero AG)

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (Microsoft Corporation)

 

========== (O4) RunOnce Keys ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"=%WINDIR%\SMINST\launcher.exe (soft thinks)

 

========== (O6 & O7) Current Version Policies ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]

"ConsentPromptBehaviorAdmin"=2

"ConsentPromptBehaviorUser"=1

"EnableInstallerDetection"=1

"EnableLUA"=1

"EnableSecureUIAPaths"=1

"EnableVirtualization"=1

"PromptOnSecureDesktop"=1

"ValidateAdminCodeSignatures"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"scforceoption"=0

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"FilterAdministratorToken"=0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats]

"CF_TEXT"=1

"CF_BITMAP"=2

"CF_OEMTEXT"=7

"CF_DIB"=8

"CF_PALETTE"=9

"CF_UNICODETEXT"=13

"CF_DIBV5"=17

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]

"disableregistrytools"=0

 

[HKEY_USERS\S-1-5-21-2400359063-2917280598-3099481207-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]

"disableregistrytools"=0

 

========== (O9) IE Extensions ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\]

{08B0E5C0-4FCB-11CF-AAA5-00401C608501}: Menu: Sun Java-konsol -- %SystemDrive%\Program\Java\jre1.6.0_01\bin\ssv.dll [2007-04-07 02:56:44 | 00,501,400 | ---- | M] (Sun Microsystems, Inc.)

 

========== (O12) Internet Explorer Plugins ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\]

PluginsPage: "" = http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s

PluginsPageFriendlyName: "" = Microsoft ActiveX Gallery

 

========== (O13) Default Prefixes ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]

""=http://

 

========== (O16) DPF ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]

{1E54D648-B804-468d-BC78-4AFFED8E262E}: http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab -- System Requirements Lab Class

{8AD9C840-044E-11D1-B3E9-00805F499D93}: http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab'>http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab'>http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab -- Java Plug-in 1.6.0_01

{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab -- Java Plug-in 1.6.0_01

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab -- Java Plug-in 1.6.0_01

 

========== (O17) DNS Name Servers ==========

 

{9880BCC1-6A1D-4073-9A60-4E741D175A48} (Servers: | Description: USB Wireless 802.11 b/g Adaptor)

{BEE63D73-6E36-4EB9-8461-5CC1AFBC3234} (Servers: | Description: NVIDIA nForce Networking Controller)

 

========== HKLM *SecurityProviders* ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders]

"SecurityProviders"=credssp.dll

>[2006-11-02 10:46:03 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\credssp.dll

 

========== LSA *Security Packages* ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"Security Packages"=kerberos,msv1_0,schannel,wdigest,tspkg,

>[2006-11-02 10:46:13 | 00,061,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\TSpkg.dll

 

========== Safeboot Options ==========

 

"AlternateShell"=cmd.exe

 

========== CDRom AutoRun Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]

"AutoRun" = 1

 

========== Autorun Files on Drives ==========

 

autoexec.bat [REM Dummy file for NTVDMPATH=%PATH%;C:\PROGRA~1\COMMON~1\MUVEET~1\030625 | ]

[2008-03-11 22:17:04 | 00,000,074 | ---- | M] () -- C:\autoexec.bat -- [ NTFS ]

 

========== Files/Folders - Created Within 30 Days ==========

 

[2009-01-29 12:04:00 | 00,000,000 | ---D | C] -- C:\Avenger

[2009-01-29 12:01:52 | 00,000,000 | ---D | C] -- C:\Users\Vivi\Documents\avenger[1]

[2009-01-29 11:42:08 | 00,320,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CF9114.exe

[2009-01-29 11:42:00 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\swsc.exe

[2009-01-29 11:42:00 | 00,006,736 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Windows\System32\drivers\PROCEXP90.SYS

[2009-01-28 12:54:20 | 00,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab

[2009-01-28 03:32:48 | 00,001,876 | ---- | C] () -- C:\Users\Vivi\Desktop\HijackThis.lnk

[2009-01-28 03:32:47 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro

[2009-01-28 03:29:46 | 00,000,000 | ---D | C] -- C:\Users\Vivi\AppData\Roaming\Malwarebytes

[2009-01-28 03:29:44 | 00,015,504 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2009-01-28 03:29:44 | 00,000,820 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk

[2009-01-28 03:29:42 | 00,038,496 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys

[2009-01-28 03:29:40 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2009-01-28 03:29:40 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2009-01-27 23:13:01 | 00,000,000 | ---D | C] -- C:\Users\Vivi\AppData\Roaming\dvdcss

[2009-01-25 03:02:30 | 03,593,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll

[2009-01-25 03:02:29 | 01,383,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb

[2009-01-24 11:58:39 | 00,290,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys

[2009-01-23 19:45:15 | 00,000,000 | ---D | C] -- C:\ProgramData\Blizzard

[2009-01-23 19:39:44 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment

 

========== Files - Modified Within 30 Days ==========

 

[2009-01-29 12:11:19 | 01,258,162 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI

[2009-01-29 12:11:19 | 00,609,944 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2009-01-29 12:11:19 | 00,472,176 | ---- | M] () -- C:\Windows\System32\perfh01D.dat

[2009-01-29 12:11:19 | 00,103,726 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2009-01-29 12:11:19 | 00,081,308 | ---- | M] () -- C:\Windows\System32\perfc01D.dat

[2009-01-29 12:04:41 | 00,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2009-01-29 12:04:41 | 00,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2009-01-29 12:04:38 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT

[2009-01-29 12:04:36 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2009-01-29 12:04:32 | 32,196,44416 | -HS- | M] () -- C:\hiberfil.sys

[2009-01-29 12:03:02 | 02,547,716 | -H-- | M] () -- C:\Users\Vivi\AppData\Local\IconCache.db

[2009-01-29 11:42:00 | 00,006,736 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\Windows\System32\drivers\PROCEXP90.SYS

[2009-01-29 11:41:54 | 00,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CF9114.exe

[2009-01-28 03:32:48 | 00,001,876 | ---- | M] () -- C:\Users\Vivi\Desktop\HijackThis.lnk

[2009-01-28 03:29:44 | 00,000,820 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk

[2009-01-28 01:35:14 | 00,017,408 | ---- | M] () -- C:\Users\Vivi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009-01-26 20:58:18 | 00,000,556 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Kör fullständig systemsökning - Vivi.job

[2009-01-23 19:34:21 | 00,124,464 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS

[2009-01-23 19:34:21 | 00,010,635 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT

[2009-01-23 19:34:21 | 00,000,806 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF

[2009-01-14 16:11:32 | 00,038,496 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys

[2009-01-14 16:11:28 | 00,015,504 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2009-01-10 02:35:28 | 20,853,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mrt.exe

< End of report >

[/log]

 

Link to comment
Share on other sites

C:\Users\Vivi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ABPOTLAN

Du ska inte köra OTViewIt från internet utan du ska spara OTViewIt på Skrivbordet först.

Gjorde du samma fel med ComboFix?

 

Link to comment
Share on other sites

Körde combofix. Efter det att jag laddat ner den till datorn.

fick den här log[log]ComboFix 09-01-21.04 - Vivi 2009-01-29 12:58:39.1 - NTFSx86

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1053.18.3070.1998 [GMT 1:00]

Körs från: c:\users\Vivi\Documents\ComboFix.exe

AV: Norton Internet Security *On-access scanning disabled* (Updated)

FW: Norton Internet Security *disabled*

* Skapade en ny återställningspunkt

.

 

(((((((((((((((((((((((( Filer Skapade från 2008-12-28 till 2009-01-29 ))))))))))))))))))))))))))))))

.

 

2009-01-28 12:54 . 2009-01-28 12:54 <KAT> d-------- c:\program files\SystemRequirementsLab

2009-01-28 03:32 . 2009-01-28 03:32 <KAT> d-------- c:\program files\Trend Micro

2009-01-28 03:29 . 2009-01-28 03:29 <KAT> d-------- c:\users\Vivi\AppData\Roaming\Malwarebytes

2009-01-28 03:29 . 2009-01-28 03:29 <KAT> d-------- c:\users\All Users\Malwarebytes

2009-01-28 03:29 . 2009-01-28 03:29 <KAT> d-------- c:\programdata\Malwarebytes

2009-01-28 03:29 . 2009-01-28 03:29 <KAT> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-01-28 03:29 . 2009-01-14 16:11 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys

2009-01-28 03:29 . 2009-01-14 16:11 15,504 --a------ c:\windows\System32\drivers\mbam.sys

2009-01-27 23:13 . 2009-01-28 01:36 <KAT> d-------- c:\users\Vivi\AppData\Roaming\dvdcss

2009-01-25 03:02 . 2008-12-12 02:53 1,383,424 --a------ c:\windows\System32\mshtml.tlb

2009-01-24 11:58 . 2008-12-16 04:14 290,304 --a------ c:\windows\System32\drivers\srv.sys

2009-01-23 19:45 . 2009-01-23 19:45 <KAT> d-------- c:\users\All Users\Blizzard

2009-01-23 19:45 . 2009-01-23 19:45 <KAT> d-------- c:\programdata\Blizzard

2009-01-23 19:39 . 2009-01-23 19:39 <KAT> d-------- c:\program files\Common Files\Blizzard Entertainment

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-01-29 10:14 --------- d-----w c:\programdata\Symantec

2009-01-28 21:23 --------- d-----w c:\users\Vivi\AppData\Roaming\Azureus

2009-01-27 22:56 --------- d-----w c:\program files\Vuze

2009-01-25 02:07 --------- d-----w c:\program files\Windows Mail

2009-01-23 18:34 806 ----a-w c:\windows\system32\drivers\SYMEVENT.INF

2009-01-23 18:34 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS

2009-01-23 18:34 10,635 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT

2009-01-23 18:34 --------- d-----w c:\program files\Symantec

2008-12-12 19:51 --------- d-----w c:\users\Vivi\AppData\Roaming\Apple Computer

2008-12-12 19:51 --------- d-----w c:\programdata\Apple Computer

2008-12-12 19:51 --------- d-----w c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

2008-12-12 19:51 --------- d-----w c:\program files\iTunes

2008-12-12 19:51 --------- d-----w c:\program files\iPod

2008-12-12 19:51 --------- d-----w c:\program files\Common Files\Apple

2008-12-12 18:53 --------- d-----w c:\users\Vivi\AppData\Roaming\Nero8

2008-12-12 18:01 174 --sha-w c:\program files\desktop.ini

2008-12-11 21:39 --------- d-----w c:\program files\QuickTime

2008-12-11 21:39 --------- d-----w c:\program files\Bonjour

2008-12-11 21:38 --------- d-----w c:\program files\Apple Software Update

2008-12-11 21:37 --------- d-----w c:\programdata\Apple

2008-12-11 21:28 --------- d-----w c:\program files\HP

2008-12-10 16:02 --------- d-----w c:\programdata\Azureus

2008-12-10 15:13 --------- d-----w c:\users\Vivi\AppData\Roaming\Sony

2008-12-10 15:13 --------- d-----w c:\programdata\Sony

2008-12-10 14:11 2,098 --sha-w c:\windows\System32\KGyGaAvL.sys

2008-12-05 12:36 268,800 ----a-w c:\windows\System32\es.dll

2008-12-04 13:05 --------- d-----w c:\users\Vivi\AppData\Roaming\vlc

2008-12-04 12:43 --------- d-----w c:\programdata\LightScribe

2008-12-03 10:50 --------- d-----w c:\program files\Common Files\Adobe

2008-12-03 10:46 20,640 ------w c:\windows\system32\drivers\PxHelp20.sys

2008-12-03 10:46 109,568 ------w c:\windows\System32\pxinsi64.exe

2008-12-03 10:46 108,544 ------w c:\windows\System32\pxcpyi64.exe

2008-12-03 10:36 --------- d-----w c:\users\Vivi\AppData\Roaming\Nero

2008-12-03 10:34 --------- d-----w c:\program files\Common Files\Nero

2008-12-03 10:31 --------- d-----w c:\programdata\Nero

2008-12-03 10:31 --------- d-----w c:\program files\Nero

2008-12-03 10:19 --------- d-----w c:\program files\Common Files\Symantec Shared

2008-12-03 09:53 --------- d-----w c:\users\Vivi\AppData\Roaming\CyberLink

2008-12-03 09:53 --------- d-----w c:\programdata\CyberLink

2008-12-03 07:24 --------- d-----w c:\program files\Norton Internet Security

2008-12-03 07:22 61,440 ----a-w c:\windows\System32\winipsec.dll

2008-12-03 07:22 28,672 ----a-w c:\windows\System32\FwRemoteSvr.dll

2008-12-03 07:21 95,232 ----a-w c:\windows\System32\PortableDeviceClassExtension.dll

2008-12-03 07:21 361,984 ----a-w c:\windows\System32\IPSECSVC.DLL

2008-12-03 07:21 272,896 ----a-w c:\windows\System32\polstore.dll

2008-12-03 07:21 241,152 ----a-w c:\windows\System32\PortableDeviceApi.dll

2008-12-03 07:21 160,768 ----a-w c:\windows\System32\PortableDeviceTypes.dll

2008-12-03 07:20 194,560 ----a-w c:\windows\System32\WebClnt.dll

2008-12-03 07:20 110,080 ----a-w c:\windows\system32\drivers\mrxdav.sys

2008-12-03 07:19 428,032 ----a-w c:\windows\System32\EncDec.dll

2008-12-03 07:19 292,352 ----a-w c:\windows\System32\psisdecd.dll

2008-12-03 07:19 1,244,672 ----a-w c:\windows\System32\mcmde.dll

2008-12-03 07:17 41,984 ----a-w c:\windows\system32\drivers\monitor.sys

2008-12-03 07:17 211,456 ----a-w c:\windows\system32\drivers\mrxsmb10.sys

2008-12-03 07:17 1,060,920 ----a-w c:\windows\system32\drivers\ntfs.sys

2008-12-03 07:15 303,616 ----a-w c:\windows\System32\wmpeffects.dll

2008-12-03 07:15 2,027,520 ----a-w c:\windows\System32\win32k.sys

2008-12-03 07:14 2,048 ----a-w c:\windows\System32\msxml3r.dll

2008-12-03 07:14 1,194,496 ----a-w c:\windows\System32\msxml3.dll

2008-12-03 07:13 45,112 ----a-w c:\windows\system32\drivers\pciidex.sys

2008-12-03 07:13 21,560 ----a-w c:\windows\system32\drivers\atapi.sys

2008-12-03 07:13 154,624 ----a-w c:\windows\system32\drivers\nwifi.sys

2008-12-03 07:13 15,928 ----a-w c:\windows\system32\drivers\pciide.sys

2008-12-03 07:13 110,136 ----a-w c:\windows\system32\drivers\ataport.sys

2008-12-03 07:10 1,585,664 ----a-w c:\windows\System32\setupapi.dll

2008-12-03 07:08 712,192 ----a-w c:\windows\System32\WindowsCodecs.dll

2008-12-03 07:08 441,856 ----a-w c:\windows\System32\win32spl.dll

2008-12-03 07:08 425,472 ----a-w c:\windows\System32\PhotoMetadataHandler.dll

2008-12-03 07:08 37,376 ----a-w c:\windows\System32\printcom.dll

2008-12-03 07:08 347,136 ----a-w c:\windows\System32\WindowsCodecsExt.dll

2008-12-03 07:07 84,480 ----a-w c:\windows\System32\dnsrslvr.dll

2008-12-03 07:07 24,576 ----a-w c:\windows\System32\dnscacheugc.exe

2008-12-03 07:07 14,848 ----a-w c:\windows\System32\wshrm.dll

2008-12-03 07:07 113,664 ----a-w c:\windows\system32\drivers\rmcast.sys

2008-12-03 07:06 84,480 ----a-w c:\windows\System32\INETRES.dll

2008-12-03 07:06 737,792 ----a-w c:\windows\System32\inetcomm.dll

2008-12-03 07:06 1,645,568 ----a-w c:\windows\System32\connect.dll

2008-12-03 07:06 1,327,104 ----a-w c:\windows\System32\quartz.dll

2008-12-03 07:05 --------- d-----w c:\program files\MSXML 4.0

2008-12-03 07:04 3,506,744 ----a-w c:\windows\System32\ntkrnlpa.exe

2008-12-03 07:04 3,472,952 ----a-w c:\windows\System32\ntoskrnl.exe

2008-12-03 07:04 2,048 ----a-w c:\windows\System32\msxml6r.dll

2008-12-03 07:04 1,341,440 ----a-w c:\windows\System32\msxml6.dll

2008-12-03 06:41 --------- d-----w c:\users\Vivi\AppData\Roaming\Symantec

2008-12-03 06:41 --------- d-----w c:\programdata\NVIDIA

2008-12-02 21:33 --------- d-----w c:\users\Vivi\AppData\Roaming\Hewlett-Packard

2008-12-02 21:32 1,905 --sha-r c:\windows\system32\drivers\103C_HP_CPC_KP338AA-UUW m9280.sc-a_YC_0Pavi_QCZH814_E82SVv3PrA2_49_INARRA3_SASUSTek Computer INC._V3.02_B5.10_T080221_WUH0_L41D_M3070_J500_7AMD_8Phenom 9500 Quad-Core_92.2_#081102_N10DE03EF_Z_G10DE0611.MRK

2008-12-02 21:31 --------- d-----w c:\programdata\Hewlett-Packard

2008-12-02 21:28 83,456 ----a-w c:\windows\System32\wudriver.dll

2008-12-02 21:28 561,688 ----a-w c:\windows\System32\wuapi.dll

2008-12-02 21:28 51,224 ----a-w c:\windows\System32\wuauclt.exe

2008-12-02 21:28 43,544 ----a-w c:\windows\System32\wups2.dll

2008-12-02 21:28 34,328 ----a-w c:\windows\System32\wups.dll

2008-12-02 21:28 31,232 ----a-w c:\windows\System32\wuapp.exe

2008-12-02 21:28 162,064 ----a-w c:\windows\System32\wuwebv.dll

2008-12-02 21:28 1,809,944 ----a-w c:\windows\System32\wuaueng.dll

2008-12-02 21:28 1,524,736 ----a-w c:\windows\System32\wucltux.dll

2008-12-02 21:27 --------- d-sh--w c:\programdata\Start-meny

2008-12-02 21:27 --------- d-sh--w c:\programdata\Skrivbord

2008-12-02 21:27 --------- d-sh--w c:\programdata\Mallar

.

 

(((((((((((((((((((((((((((((((((( Startpunkter i registret )))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Not* Tomma poster & legitima standardposter visas inte.

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-03-12 1232896]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-08-21 202024]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]

"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]

"OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]

"NvSvc"="c:\windows\system32\nvsvc.dll" [2008-01-13 92704]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-01-13 8530464]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-01-13 88608]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]

"SunJavaUpdateReg"="c:\windows\system32\jureg.exe" [2007-04-07 54936]

"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]

"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]

"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-08-08 1828136]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]

"RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 c:\windows\RtHDVCpl.exe]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"="c:\windows\SMINST\launcher.exe" [2007-11-15 44168]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"msacm.l3codecp"= l3codecp.acm

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"UacDisableNotify"=dword:00000001

"InternetSettingsDisableNotify"=dword:00000001

"AutoUpdateDisableNotify"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{A1DC213B-A590-4E57-8509-0887F7CAB0F1}"= c:\program files\HP\DVDPlay\DVDPlay.exe:DVD Play

"{BBEF2F0B-8239-4C8B-A090-96ADB8DDCC67}"= c:\program files\HP\DVDPlay\DPService.exe:DVD Play Resident Program

"{B0C9A351-12E8-450A-AB0B-88DF4D8B6721}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector

"{64610128-E548-4034-8285-E429B15CD0B1}"= Disabled:UDP:k:\program files\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server

"{1FAEAF3F-5ADE-4603-A11E-A8269510FA8E}"= Disabled:TCP:k:\program files\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server

"{64F1F49E-2D45-4EA1-BB75-EB9D3E391F88}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{C73901AA-C9C3-4F31-AEE4-8996894D3038}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{5D822551-A630-4778-845B-97E717B77377}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes

"{2AFEBA50-11AD-481F-B830-36EEABC206B5}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]

"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]

"EnableFirewall"= 0 (0x0)

 

R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20090120.002\IDSvix86.sys [2009-01-23 270384]

R3 COH_Mon;COH_Mon;c:\windows\System32\drivers\COH_Mon.sys [2007-05-29 23888]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2008-12-03 99376]

R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\System32\drivers\HCW85BDA.sys [2008-03-12 1129344]

R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;c:\windows\System32\drivers\netr73.sys [2008-02-26 493568]

R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [2008-06-13 41008]

R4 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263};c:\program files\HP\DVDPlay\000.fcl [2008-03-11 22:08:47 39408]

R4 HPBtnSrv;HP Chasis Button Service;c:\hp\HPEZBTN\HPBtnSrv.exe [2008-03-11 198240]

R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [2008-12-03 149352]

 

--- Övriga tjänster/drivrutiner i minnet ---

 

*NewlyCreated* - COMHOST

.

Innehållet i mappen 'Schemalagda aktiviteter':

 

2009-01-26 c:\windows\Tasks\Norton Internet Security - Kör fullständig systemsökning - Vivi.job

- c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2007-08-26 12:19]

.

- - - - FÖRÄLDRALÖSA POSTER SOM TAGITS BORT - - - -

 

HKLM-Run-HP Health Check Scheduler - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

HKLM-Run-Adobe Photo Downloader - k:\program files\Adobe\Photoshop Elements 5.0\apdproxy.exe

 

 

.

------- Extra genomsökning -------

.

uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sv_se&c=81&bd=Pavilion&pf=desktop

uInternet Settings,ProxyOverride = *.local

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-01-29 13:00:47

Windows 6.0.6000 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Sluttid: 2009-01-29 13:02:29

ComboFix-quarantined-files.txt 2009-01-29 12:02:26

 

Före genomsökningen: 408 062 992 384 byte ledigt

Efter genomsökningen: 408,174,878,720 byte ledigt

 

224 --- E O F --- 2009-01-25 02:02:55

[/log]

 

Link to comment
Share on other sites

Surfa till http://www.virustotal.com (fungerar bäst med Internet Explorer) klistra in ett av följande filnamn i rutan, tryck på Skicka Fil och vänta tills resultatet är klart (Närvarande status blir genomförd). Klistra in resultatet från de olika antivirusprogrammen (inte Övrig information) här. Upprepa med nästa filnamn.

c:\windows\System32\mshtml.tlb

c:\windows\System32\drivers\srv.sys

 

Är Bonjour från Apple något du använder eller har det bara kommit med när du har installerat QuickTime och/eller iTunes? I det senare fallet så avinstallera det.

 

Link to comment
Share on other sites

det jag fick i svar

[log]Filen har redan blivid analyserad:

MD5: 713c22f8292e51623e67c743f6989d4d

First received: -

Datum 2009.01.15 17:12:42 (CET) [>14D]

Resultat 0/39

Permalink: analisis/8d0e79f06acf08bfe3037cb1ebe5b008

[/log]

andra

[log]Filen har redan blivid analyserad:

MD5: c962e98179e54b769028c025c7e470a5

First received: -

Datum 2009.01.15 21:21:40 (CET) [>13D]

Resultat 0/39

Permalink: analisis/c57639aa11913e7a6303040f58b44ab5

[/log]

 

[inlägget ändrat 2009-01-29 18:17:52 av Gulpa]

Link to comment
Share on other sites

Något har ni gjort. För datorn går mycket bättre nu.

Vill bara Tacka för hjälpen. Nu har jag med eran hjälp fixat 3 av mina syskons datoren, och sparat lite pengar.

Tack än en gång för eran tid och hjälp...

'

 

Många kramar

Gulpa

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...