Just nu i M3-nätverket
Gå till innehåll

Mycket seg bärbar dator


discord

Rekommendera Poster

Jag försöker få rätt på den här datorn istället. Den är ruskigt seg men fungerar bättre än den andra(den som attackerades av siszpe32) så jag ser om jag kan få rätsida på denna nu. Jag bifogar en OTL logg. Jag körde OTL i felsäkert läge förövrigt, om det spelar någon roll

 

OTL logfile created on: 2010-07-02 13:15:02 - Run 1

OTL by OldTimer - Version 3.2.7.0 Folder = C:\Documents and Settings\Administratör\Mina dokument\Hämtade filer

Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 0000041D | Country: Sverige | Language: SVE | Date Format: yyyy-MM-dd

 

382,00 Mb Total Physical Memory | 255,00 Mb Available Physical Memory | 67,00% Memory free

922,00 Mb Paging File | 860,00 Mb Available in Paging File | 93,00% Paging File free

Paging file location(s): C:\pagefile.sys 576 1152 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program

Drive C: | 74,53 Gb Total Space | 26,66 Gb Free Space | 35,77% Space Free | Partition Type: NTFS

Unable to calculate disk information.

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

 

Computer Name: BARBROS_BÄRBARA

Current User Name: Administratör

Logged in as Administrator.

 

Current Boot Mode: SafeMode with Networking

Scan Mode: Current user

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Minimal

 

========== Processes (SafeList) ==========

 

PRC - C:\Documents and Settings\Administratör\Mina dokument\Hämtade filer\OTL.exe (OldTimer Tools)

PRC - C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtblfs.exe (Kaspersky Lab)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

 

 

========== Modules (SafeList) ==========

 

MOD - C:\Documents and Settings\Administratör\Mina dokument\Hämtade filer\OTL.exe (OldTimer Tools)

MOD - C:\WINDOWS\system32\mlang.dll (Microsoft Corporation)

MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)

 

 

========== Win32 Services (SafeList) ==========

 

SRV - (AVP) -- C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe (Kaspersky Lab)

SRV - (SeaPort) -- C:\Program\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corp.)

SRV - (CCALib8) -- C:\Program\Canon\CAL\CALMAIN.exe (Canon Inc.)

SRV - (Norman ZANDA) -- C:\Norman\Bin\Zanda.exe ()

SRV - (Norman NJeeves) -- C:\Norman\Bin\Njeeves.exe ()

SRV - (MDM) -- C:\Program\Delade filer\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)

 

 

========== Driver Services (SafeList) ==========

 

DRV - (KLIF) -- C:\WINDOWS\system32\drivers\klif.sys (Kaspersky Lab)

DRV - (klbg) -- C:\WINDOWS\system32\drivers\klbg.sys (Kaspersky Lab)

DRV - (klmouflt) -- C:\WINDOWS\system32\drivers\klmouflt.sys (Kaspersky Lab)

DRV - (klim5) -- C:\WINDOWS\system32\drivers\klim5.sys (Kaspersky Lab)

DRV - (kl1) -- C:\WINDOWS\system32\drivers\kl1.sys (Kaspersky Lab)

DRV - (NGS) -- c:\Program\NVC\Bin\ngs.sys (Norman ASA)

DRV - (BVRPMPR5) -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS (Avanquest Software)

DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)

DRV - (w300obex) -- C:\WINDOWS\system32\drivers\w300obex.sys (MCCI)

DRV - (w300mgmt) Sony Ericsson W300 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\w300mgmt.sys (MCCI)

DRV - (w300mdm) -- C:\WINDOWS\system32\drivers\w300mdm.sys (MCCI)

DRV - (w300mdfl) -- C:\WINDOWS\system32\drivers\w300mdfl.sys (MCCI)

DRV - (w300bus) Sony Ericsson W300 Driver driver (WDM) -- C:\WINDOWS\system32\drivers\w300bus.sys (MCCI)

DRV - (AR5211) -- C:\WINDOWS\system32\drivers\ar5211.sys (Atheros Communications, Inc.)

DRV - (SynTP) -- C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)

DRV - (tifm21) -- C:\WINDOWS\system32\drivers\tifm21.sys (Texas Instruments)

DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation )

DRV - (SiSRaid2) -- C:\WINDOWS\system32\drivers\SiSRaid2.sys (Silicon Integrated Systems Corp)

DRV - (rtl8139) Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)

DRV - (iaStor) -- C:\WINDOWS\system32\drivers\iaStor.sys (Intel Corporation)

DRV - (Hotkey) -- C:\WINDOWS\system32\drivers\HOTKEY.sys ()

DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)

DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)

DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)

DRV - (Amfilter) Trust Mouse Filter Driver (11) -- C:\WINDOWS\system32\drivers\Amfilter.sys ((Standard Mouse Types))

DRV - (Amusbprt) Trust HID-compliant Mouse Driver (11) -- C:\WINDOWS\system32\drivers\Amusbprt.sys ((Standard Mouse Types))

DRV - (Arfumftr) -- C:\WINDOWS\system32\drivers\Arfumftr.sys (A4Tech Co.,Ltd.)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program\Winamp Toolbar\winamptb.dll (AOL LLC.)

 

 

========== FireFox ==========

 

FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

 

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program\Mozilla Firefox\components [2010-07-01 16:48:24 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program\Mozilla Firefox\plugins [2010-07-02 12:24:50 | 000,000,000 | ---D | M]

 

[2010-07-02 13:05:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Extensions

[2010-07-02 13:05:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Firefox\Profiles\uo7gs2a9.default\extensions

[2010-07-02 13:05:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Firefox\Profiles\uo7gs2a9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010-07-02 13:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administratör\Application Data\Mozilla\Firefox\Profiles\uo7gs2a9.default\extensions\staged-xpis

[2010-07-02 12:29:40 | 000,000,000 | ---D | M] -- C:\Program\Mozilla Firefox\extensions

[2010-07-02 12:20:25 | 000,000,000 | ---D | M] -- C:\Program\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

[2010-07-02 12:24:48 | 000,233,472 | ---- | M] (Technology Nexus AB) -- C:\Program\Mozilla Firefox\plugins\np_prsnl.dll

[2010-06-26 10:01:28 | 000,001,470 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\allaannonser-sv-SE.xml

[2010-06-26 10:01:28 | 000,002,670 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\prisjakt-sv-SE.xml

[2010-06-26 10:01:28 | 000,000,948 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\tyda-sv-SE.xml

[2010-06-26 10:01:28 | 000,001,174 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\wikipedia-sv-SE.xml

[2010-06-26 10:01:28 | 000,000,951 | ---- | M] () -- C:\Program\Mozilla Firefox\searchplugins\yahoo-sv-SE.xml

 

O1 HOSTS File: ([2005-10-12 12:54:17 | 000,000,710 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program\Winamp Toolbar\winamptb.dll (AOL LLC.)

O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll (Kaspersky Lab)

O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)

O2 - BHO: (Windows Live inloggningshjälpen) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)

O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program\Winamp Toolbar\winamptb.dll (AOL LLC.)

O4 - HKLM..\Run: [AVP] C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe (Kaspersky Lab)

O4 - HKLM..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe (Wistron)

O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation)

O4 - Startup: C:\Documents and Settings\All Users\Start-meny\Program\Autostart\Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

O4 - Startup: C:\Documents and Settings\All Users\Start-meny\Program\Autostart\Personal.lnk = C:\Program\Personal\bin\Personal.exe (Technology Nexus AB)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O9 - Extra Button: Blogga detta - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Blogga detta i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)

O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1153878840328 (MUWebControl Class)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://javadl.sun.com/webapps/download/AutoDL?BundleId=29223 (Java Plug-in 1.6.0_13)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} http://support.fujitsu-siemens.de/DeskUpdate/isapi/activex.cab (DeskUpdate - Activex Control)

O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab'>http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program\Delade filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program\Delade filer\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program\Delade filer\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - AppInit_DLLs: (C:\Program\KASPER~1\KASPER~2\mzvkbd3.dll) - C:\Program\Kaspersky Lab\Kaspersky Anti-Virus 2010\mzvkbd3.dll (Kaspersky Lab)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)

O24 - Desktop Components:0 (Min aktuella startsida) - About:Home

O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Sommar.bmp

O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Sommar.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2005-10-12 10:47:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

========== Files/Folders - Created Within 30 Days ==========

 

[2010-07-02 13:13:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Mina dokument\Hämtade filer

[2010-07-02 13:05:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Application Data\Macromedia

[2010-07-02 13:05:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Application Data\Adobe

[2010-07-02 13:05:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\Mozilla

[2010-07-02 13:05:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Application Data\Mozilla

[2010-07-02 13:04:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Application Data\Identities

[2010-07-02 13:04:31 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administratör\Application Data\Microsoft

[2010-07-02 13:04:31 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administratör\Cookies

[2010-07-02 13:04:31 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administratör\SendTo

[2010-07-02 13:04:31 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administratör\Recent

[2010-07-02 13:04:31 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administratör\Application Data

[2010-07-02 13:04:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administratör\Start-meny

[2010-07-02 13:04:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administratör\Mina dokument

[2010-07-02 13:04:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administratör\Mina dokument\Mina bilder

[2010-07-02 13:04:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administratör\Mina dokument\Min musik

[2010-07-02 13:04:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administratör\Favoriter

[2010-07-02 13:04:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administratör\Skrivare

[2010-07-02 13:04:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administratör\Nätverket

[2010-07-02 13:04:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administratör\Mallar

[2010-07-02 13:04:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administratör\Lokala inställningar

[2010-07-02 13:04:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Skrivbord

[2010-07-02 13:04:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\Microsoft

[2010-07-02 13:04:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\ApplicationHistory

[2010-07-02 12:34:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood

[2010-07-01 17:15:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Last.fm

[2010-07-01 17:12:33 | 000,000,000 | ---D | C] -- C:\Program\Last.fm

[2010-07-01 16:47:28 | 000,000,000 | ---D | C] -- C:\Program\Mozilla Firefox

[2010-07-01 16:17:54 | 000,000,000 | ---D | C] -- C:\Program\Winamp Toolbar

[2010-07-01 16:17:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Winamp Toolbar

[2010-07-01 16:16:47 | 000,000,000 | ---D | C] -- C:\Program\Winamp

[2010-07-01 15:55:13 | 000,000,000 | ---D | C] -- C:\Program\WinRAR

[2010-07-01 15:37:16 | 000,000,000 | ---D | C] -- C:\Program\Opera

[2010-07-01 15:08:39 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll

[2010-07-01 15:02:12 | 000,000,000 | ---D | C] -- C:\Program\Microsoft Silverlight

[2010-07-01 14:51:22 | 000,000,000 | ---D | C] -- C:\Program\Microsoft Sync Framework

[2010-07-01 14:42:37 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll

[2010-07-01 14:41:47 | 000,000,000 | ---D | C] -- C:\Program\Microsoft SQL Server Compact Edition

[2010-07-01 14:39:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF

[2010-07-01 14:39:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles

[2010-07-01 14:35:55 | 000,000,000 | ---D | C] -- C:\Program\Microsoft

[2010-07-01 13:03:29 | 000,049,904 | R--- | C] (Avanquest Software) -- C:\WINDOWS\System32\drivers\BVRPMPR5.SYS

[2010-07-01 13:00:02 | 000,000,000 | ---D | C] -- C:\Netgear

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2010-07-02 13:05:41 | 000,786,432 | -H-- | M] () -- C:\Documents and Settings\Administratör\NTUSER.DAT

[2010-07-02 13:04:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010-07-02 13:01:00 | 000,000,846 | ---- | M] () -- C:\WINDOWS\win.ini

[2010-07-02 13:01:00 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini

[2010-07-02 13:01:00 | 000,000,211 | RHS- | M] () -- C:\boot.ini

[2010-07-02 12:19:59 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2010-07-01 16:48:31 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat

[2010-07-01 16:47:37 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivbord\Mozilla Firefox.lnk

[2010-07-01 15:26:10 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010-07-01 15:06:55 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2010-07-01 15:05:45 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb

[2010-07-01 15:05:45 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb

[2010-07-01 14:49:02 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx

[2010-07-01 14:39:43 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf

[2010-07-01 12:57:46 | 000,113,933 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat

[2010-07-01 12:57:46 | 000,097,549 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat

[2010-06-23 13:58:07 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2010-07-02 13:04:33 | 000,000,754 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\Microsoft\Internet Explorer\Quick Launch\Starta webbläsaren Internet Explorer.lnk

[2010-07-02 13:04:33 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Administratör\Lokala inställningar\Application Data\fusioncache.dat

[2010-07-02 13:04:33 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Administratör\Application Data\Microsoft\Internet Explorer\Quick Launch\Visa skrivbordet.scf

[2010-07-02 13:04:31 | 000,376,832 | -H-- | C] () -- C:\Documents and Settings\Administratör\ntuser.dat.LOG

[2010-07-02 13:04:31 | 000,000,192 | -HS- | C] () -- C:\Documents and Settings\Administratör\ntuser.ini

[2010-07-02 13:04:30 | 000,786,432 | -H-- | C] () -- C:\Documents and Settings\Administratör\NTUSER.DAT

[2010-07-01 16:48:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2010-07-01 16:47:37 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivbord\Mozilla Firefox.lnk

[2010-07-01 14:39:43 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf

[2010-06-23 13:58:07 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2010-05-16 15:25:03 | 000,000,063 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2006-07-25 18:55:10 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll

[2006-07-25 18:55:10 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll

[2006-07-25 18:55:10 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll

[2006-07-25 18:55:10 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll

[2006-07-25 18:55:10 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll

[2006-07-25 18:55:10 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll

[2006-07-25 18:50:27 | 000,000,020 | ---- | C] () -- C:\WINDOWS\Hposcv07.INI

[2006-07-25 18:25:33 | 000,000,383 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2005-09-06 19:31:44 | 000,009,867 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys

[2005-09-06 19:27:00 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2005-09-06 19:26:54 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\property.dll

[2005-09-06 19:26:49 | 000,000,828 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2005-09-06 19:25:50 | 000,003,529 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini

[2005-09-06 19:12:32 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2005-09-06 19:12:31 | 000,000,788 | ---- | C] () -- C:\WINDOWS\orun32.ini

[1999-02-02 15:59:10 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\Cpuinf32.dll

[1997-11-21 17:01:12 | 000,315,904 | ---- | C] () -- C:\WINDOWS\System32\Glu.dll

 

========== LOP Check ==========

 

[2010-05-10 12:04:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Firefly Studios

[2010-06-25 23:13:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Garden Composer 2003 (Swedish)

[2010-07-01 17:15:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Last.fm

[2009-10-26 14:51:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters

[2007-05-30 11:08:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Teleca

[2009-10-26 14:51:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UAB

 

========== Purity Check ==========

 

 

< End of report >

Länk till kommentar
Dela på andra webbplatser

382,00 Mb Total Physical Memory

Om det stämmer att du bara har 382 MB RAM-minne som Windows kan använda så är det nog huvudorsaken till att datorn är seg. Sedan har du två antivirusprogram installerade vilket också bidrar till segheten.

Länk till kommentar
Dela på andra webbplatser

Det har dock fungerat tidigare och det är nu på slutet den har börjat bli väldigt seg. Enligt information från nätet skall det vara 512Mb minne. Kan fysiskt minne "försvinna"?

Datorn är en siemens amilo 1650G.

 

Vilket är det andarvirusprogrammet? Jag har fått bort norman virus control och jag hittar ingen möjlighet att ta bort det nu om det finns några rester kvar.

 

Det fanns inget i OTL-loggen som såg konstigt ut eller?

Länk till kommentar
Dela på andra webbplatser

Du kan ha avsatt en del av RAM-minnet till grafikkortet. Du kan se om där finns någon sådan inställning i BIOS där du kan minska ner den del som grafikkortet får använda.

 

Det finns flera rader där det står Norman i loggen. Har du kört deras städprogram DelNVC5?

http://www.norman.com/support/support_issue_archive/67798/en

 

XP med Service Pack 2 fungerade hyfsat med 512 MB RAM-minne om man inte hade ett stort antivirusprogram, men med Service Pack 3 rekommenderas 1024 MB. Kaspersky Internet Security är väl dessutom ganska tungt för datorn.

 

Jag såg inget skadligt i loggen, men du har en gammal version av Java som innehåller säkerhetshål så den behöver uppdateras.

Länk till kommentar
Dela på andra webbplatser

Arkiverat

Det här ämnet är nu arkiverat och är stängt för ytterligare svar.

×
×
  • Skapa nytt...