Hjälp med seg dator...

24 februari, 2010

[log]

DDS (Ver_09-12-01.01) - NTFSx86

Run by Lotta at 22:25:24,25 on 2010-02-24

Internet Explorer: 8.0.6001.18828

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.46.1053.18.2046.1108 [GMT 1:00]

AV: Norman Security Suite *On-access scanning enabled* (Updated) {EB9EFB40-AE72-4C43-B204-0FCD0E92D5F1}

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE

C:\Program Files\Norman\Ngs\Bin\Nprosec.exe

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\Norman\Npm\Bin\Zanda.exe

C:\Program Files\Norman\npm\bin\nvoy.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\RtHDVCpl.exe

C:\Program Files\Norman\Npm\Bin\Zlh.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\system32\taskeng.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

C:\Program Files\Personal\bin\Personal.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\system32\svchost.exe -k hpdevmgmt

C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\WUDFHost.exe

C:\Program Files\Norman\Npm\Bin\scheduler.exe

C:\Program Files\Norman\Npm\Bin\Njeeves.exe

C:\Windows\System32\mobsync.exe

C:\Program Files\Norman\nse\bin\NSESVC.EXE

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Norman\Nvc\bin\nvcoas.exe

C:\Program Files\Norman\Nvc\Bin\Nip.exe

C:\Program Files\Norman\Nvc\Bin\cclaw.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\SearchProtocolHost.exe

\\?\C:\Windows\system32\wbem\WMIADAP.EXE

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\DllHost.exe

C:\Users\Lotta\Desktop\dds.scr

C:\Windows\system32\conime.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.leta.se/

uSearch Bar = hxxp://safesearch.cyberdefender.com/smallsearch.html

uURLSearchHooks: H - No File

uURLSearchHooks: MyIdentityDefender: {a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} - c:\users\lotta\appdata\locallow\cyberdefender\cdmyidd.dll

BHO: Länkhjälp till Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll

BHO: Windows Live inloggningshjälpen: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: MyIdentityDefender: {a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} - c:\users\lotta\appdata\locallow\cyberdefender\cdmyidd.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

TB: MyIdentityDefender: {a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} - c:\users\lotta\appdata\locallow\cyberdefender\cdmyidd.dll

uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun

uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe

uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background

uRun: [TomTomHOME.exe] "c:\program files\tomtom home 2\TomTomHOMERunner.exe"

uRunOnce: [shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)" -"http://www.coolaspel.se/dcr/2920.dcr"

mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

mRun: [RtHDVCpl] RtHDVCpl.exe

mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe

mRun: [Norman ZANDA] "c:\program files\norman\npm\bin\ZLH.EXE" /LOAD /SPLASH

mRun: [skytel] Skytel.exe

mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"

mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [sunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\bankid~1.lnk - c:\program files\personal\bin\Personal.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE

IE: E&xportera till Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL

============= SERVICES / DRIVERS ===============

R0 midelman;midelman;c:\windows\system32\drivers\midelman.sys [2006-11-2 38528]

R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [2007-9-25 16896]

R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [2007-9-25 52224]

R1 NGS;Norman General Security Driver;c:\program files\norman\ngs\bin\ngs.sys [2009-8-13 25032]

R1 NPROSEC;Norman Security driver;c:\program files\norman\ngs\bin\nprosec.sys [2009-8-13 56136]

R2 Ndiskio;Ndiskio;c:\program files\norman\nse\bin\Ndiskio.sys [2009-10-18 24168]

R2 Norman ZANDA;Norman ZANDA;c:\program files\norman\npm\bin\Zanda.exe [2007-10-14 411016]

R2 NPROSECSVC;Norman Security service;c:\program files\norman\ngs\bin\nprosec.exe [2009-8-13 124232]

R2 NVOY;Norman Resource Provider;c:\program files\norman\npm\bin\nvoy.exe [2009-8-13 128328]

R2 TomTomHOMEService;TomTomHOMEService;c:\program files\tomtom home 2\TomTomHOMEService.exe [2009-6-3 92008]

R3 nsesvc;Norman Scanner Engine Service;c:\program files\norman\nse\bin\Nsesvc.exe [2009-12-11 283976]

R3 NvcMFlt;NvcMFlt;c:\windows\system32\drivers\nvcv32mf.sys [2009-3-21 23392]

R3 nvcoas;Norman Virus Control on-access component;c:\program files\norman\nvc\bin\Nvcoas.exe [2009-7-28 197960]

R3 Scheduler;Norman Scheduler Service;c:\program files\norman\npm\bin\scheduler.exe [2009-8-13 132424]

S3 nvcfsr;nvcfsr;c:\program files\norman\nvc\bin\Nvcfsr.sys [2007-10-14 9032]

S3 NVCScheduler;Norman Virus Control Scheduler;c:\program files\norman\nvc\bin\nvcsched.exe --> c:\program files\norman\nvc\bin\NVCSCHED.EXE [?]

S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [2007-9-25 218624]

=============== Created Last 30 ================

2010-02-11 16:11:48 282112 ----a-w- c:\windows\system32\cncs232.dll

2010-02-11 16:11:48 172032 ----a-w- c:\windows\system32\cncs32.dll

2010-02-11 16:11:47 0 d-----w- c:\program files\Vitalize

==================== Find3M ====================

2010-02-24 08:02:44 81308 ----a-w- c:\windows\system32\perfc01D.dat

2010-02-24 08:02:44 472176 ----a-w- c:\windows\system32\perfh01D.dat

2010-01-30 08:49:30 157483 ----a-w- c:\windows\hpoins19.dat

2010-01-14 10:12:06 181120 ------w- c:\windows\system32\MpSigStub.exe

2009-12-15 19:06:35 86016 ----a-w- c:\windows\inf\infstor.dat

2009-12-15 19:06:35 51200 ----a-w- c:\windows\inf\infpub.dat

2009-12-15 19:06:34 86016 ----a-w- c:\windows\inf\infstrng.dat

2008-12-12 02:14:06 174 --sha-w- c:\program files\desktop.ini

2008-06-12 01:08:08 665600 ----a-w- c:\windows\inf\drvindex.dat

2007-10-17 01:03:02 290490 ----a-w- c:\windows\inf\perflib\041d\perfi.dat

2007-10-17 01:03:02 290490 ----a-w- c:\windows\inf\perflib\041d\perfh.dat

2007-09-24 15:38:21 35978 ----a-w- c:\windows\inf\perflib\041d\perfd.dat

2007-09-24 15:38:21 35978 ----a-w- c:\windows\inf\perflib\041d\perfc.dat

2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat

2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat

2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat

2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 22:26:52,40 ===============

[/log]

Hej,

Vår hemdator har blivit hemskt seg och låser sig hela tiden. Hoppas att jag har gjort rätt med DDS som jag antog att jag skulle börja med.

Attach.txt

24 februari, 2010

En DDS-logg är i och för sig bra, men den blev ganska oläslig tyvärr. Använde du någon knapp eller skrev in någon kod för att få den i komprimerat format? Klistra in loggen utan att göra det i så fall.

Vad är Vitalize för program? Varifrån kommer det?

Avinstallera:

Java 6 Update 2

Java 6 Update 3

Java 6 Update 5

Java 6 Update 7

För det är gamla versioner med säkerhetshål.

Hur länge sedan är det som datorn blev seg? Blev den plötsligt seg eller har det kommit undan för undan?

Har du kört något annat än Norman för att kolla om datorn är drabbad av skadliga program?

Hur gammal är datorn?

24 februari, 2010

Hej,

Jag klickade på log-knappen i "formateringsfältet" och sen klistrade in. Är inte så haj på det här och jag tyckte precis att jag hade fått lite koll på det gamla forumet

Här kommer loggen i sin helhet då. Dator blev nog seg snabbt idag och den är väl ett drygt år gammal (tror jag). Jag vet inte vad Vitalize är för nåt och jag har tagit bort Java-grejerna. Det är nog bara Norman som körts men det har inte gått att starta det programmet idag. Nyss gjorde jag en omstart och efter det verkar Norman funka som det ska och datorn känns betydligt bättre.