Just nu i M3-nätverket
Jump to content

Hijackthis hjälp


pejo72

Recommended Posts

Misstänker att jag drabbats av ett flertal virus. Bl a ett som ställer om klockan vid varje inloggning. Har kört ett Hijack this log men är osäker på vilka jag kan ta bort.

Någon som kan ta sig en titt ?

[log]Logfile of HijackThis v1.99.1

Scan saved at 10:10:02, on 2010-11-23

Platform: Windows 2000 SP4 (WinNT 5.00.2195)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

 

Running processes:

C:\WINNT\System32\smss.exe

C:\WINNT\system32\winlogon.exe

C:\WINNT\system32\services.exe

C:\WINNT\system32\lsass.exe

C:\WINNT\system32\svchost.exe

C:\WINNT\system32\LEXBCES.EXE

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\LEXPPS.EXE

C:\Program\AVG\AVG8\avgwdsvc.exe

C:\WINNT\system32\bgsvcgen.exe

C:\WINNT\System32\svchost.exe

C:\Program\Java\jre6\bin\jqs.exe

C:\WINNT\System32\nvsvc32.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\system32\stisvc.exe

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\Program\AVG\AVG8\avgrsx.exe

C:\WINNT\system32\mspmspsv.exe

C:\WINNT\system32\svchost.exe

C:\WINNT\Explorer.exe

C:\Program\AVG\AVG8\avgtray.exe

C:\Program\Delade filer\Java\Java Update\jusched.exe

C:\WINNT\system32\internat.exe

C:\Program\Skype\Phone\Skype.exe

C:\Program\DAEMON Tools Lite\daemon.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Program\Personal\bin\Personal.exe

C:\Program\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe

C:\Program\Packard Bell Diamond 1200Plus\Driver\WATCH.exe

C:\Program\Microsoft Office\Office\OSA.EXE

C:\Program\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe

C:\WINNT\System32\SCardSvr.exe

C:\Program\Mozilla Firefox\firefox.exe

C:\Program\Delade filer\Java\Java Update\jucheck.exe

C:\Program\Outlook Express\msimn.exe

C:\Program\AVG\AVG8\avgnsx.exe

C:\Program\Microsoft Office\Office\Winword.exe

C:\Program\Hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.blt.se/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896'>http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

F2 - REG:system.ini: Shell=Explorer.exe %windir%\system32\drivers\Scqs.exe

O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program\AskBarDis\bar\bin\askBar.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program\AVG\AVG8\avgssie.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program\AskBarDis\bar\bin\askBar.dll

O3 - Toolbar: FreeRIP.com Toolbar - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program\FreeRIP3\toolband.dll

O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [AVG8_TRAY] C:\Program\AVG\AVG8\avgtray.exe

O4 - HKLM\..\Run: [Microsoft Driver Setup] C:\WINNT\system32\drivers\Cafgm.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program\Delade filer\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [sta] rundll32 "stcup.dll",,Run

O4 - HKLM\..\Run: [MChk] C:\WINNT\system32\ftcup.exe

O4 - HKLM\..\Run: [szetyj67v] C:\WINNT\system32\szetyj67v.exe

O4 - HKLM\..\Run: [szetyj67vx] C:\WINNT\system32\szetyj67vx.exe

O4 - HKCU\..\Run: [internat.exe] internat.exe

O4 - HKCU\..\Run: [skype] "C:\Program\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKCU\..\Run: [COM+ Manager] "C:\Documents and Settings\Per Johansson\.COMMgr\complmgr.exe"

O4 - HKCU\..\Run: [XBV6RD5SZF] C:\DOCUME~1\PERJOH~1\LOKALA~1\Temp\Yzk.exe

O4 - Startup: Microsoft Office Snabbsökning.lnk = C:\Program\Microsoft Office\Office\FINDFAST.EXE

O4 - Startup: Office-autostart.lnk = C:\Program\Microsoft Office\Office\OSA.EXE

O4 - Startup: Picture Motion Browser verktyg för mediekontroll.lnk = C:\Program\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program\Delade filer\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Exif Launcher 2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe

O4 - Global Startup: Personal.lnk = C:\Program\Personal\bin\Personal.exe

O4 - Global Startup: Ulead Photo Express 3.0 SE Calendar Checker.lnk = C:\Program\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe

O4 - Global Startup: Watch.lnk = C:\Program\Packard Bell Diamond 1200Plus\Driver\WATCH.exe

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &FreeRIP Search - res://C:\Program\FreeRIP3\toolband.dll/MENUSEARCH.HTM

O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - https://asp.photoprintit.de/microsite/5025/defaults/activex/ips/IPSUploader4.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program\AVG\AVG8\avgpp.dll

O20 - Winlogon Notify: avgrsstarter - C:\WINNT\SYSTEM32\avgrsstx.dll

O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll

O23 - Service: ASKUpgrade - Unknown owner - C:\Program\AskBarDis\bar\bin\ASKUpgrade.exe

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program\AVG\AVG8\avgwdsvc.exe

O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINNT\system32\bgsvcgen.exe

O23 - Service: DegCs Controler - Unknown owner - C:\WINNT\system32\drivers\DegCs.exe (file missing)

O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program\Java\jre6\bin\jqs.exe" -service -config "C:\Program\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe[/log]

Link to comment
Share on other sites

Hej,

kör en DDS, den visar mera än en Hijack This!

Klistra in loggen/resultatet från programmet DDS. Spara DDS på Skrivbordet.

http://download.blee...om/sUBs/dds.scr

Starta programmet genom att dubbelklicka på det.

Tryck Yes/Ja om frågan om Optional Scan dyker upp.

I ditt svar klistrar du in loggen DSS.txt. Medan du bifogar Attach.txt som en fil.

 

DDS är ett program som listar processer som kör, program och tjänster som startas automatiskt samt filer i sådana mappar som är vanliga att skadliga program och som är nya eller ändrade under senaste 1-3 månader. DDS är ett mycket vanligt program bland oss som hjälper till att rensa datorer. Resultatet ger oss en grundläggande kunskap om vad som händer och har hänt nyligen i datorn, och från det kan vi dra slutsatser om vad som är nästa lämpliga steg i rensningen av datorn.

 

Obs! När du klistrar in en logg eller ett resultat i ditt inlägg använd inga knappar eller taggar utan kopiera det i programmet (oftast Anteckningar) och klistra in det direkt i rutan du skriver i.

Mvh

Mats H

Link to comment
Share on other sites

Såhär blev DDS.txt:

DDS (Ver_10-12-12.02) - NTFSx86

Run by Per Johansson at 14:05:39,77 on ti 2010-11-23

Internet Explorer: 6.0.2800.1106 BrowserJavaVersion: 1.6.0_18

Microsoft Windows 2000 Professional 5.0.2195.4.1252.46.1053.18.639.265 [GMT 1:00]

 

 

============== Running Processes ===============

 

C:\WINNT\system32\LEXBCES.EXE

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\LEXPPS.EXE

C:\Program\AVG\AVG8\avgwdsvc.exe

C:\WINNT\system32\bgsvcgen.exe

C:\Program\Java\jre6\bin\jqs.exe

C:\WINNT\System32\nvsvc32.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\system32\stisvc.exe

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\Program\AVG\AVG8\avgrsx.exe

C:\WINNT\system32\mspmspsv.exe

C:\WINNT\Explorer.exe

C:\Program\AVG\AVG8\avgtray.exe

C:\Program\Delade filer\Java\Java Update\jusched.exe

C:\WINNT\system32\internat.exe

C:\Program\Skype\Phone\Skype.exe

C:\Program\DAEMON Tools Lite\daemon.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Program\Personal\bin\Personal.exe

C:\Program\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe

C:\Program\Packard Bell Diamond 1200Plus\Driver\WATCH.exe

C:\Program\Microsoft Office\Office\OSA.EXE

C:\Program\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe

C:\WINNT\System32\SCardSvr.exe

C:\Program\Delade filer\Java\Java Update\jucheck.exe

C:\Program\AVG\AVG8\avgnsx.exe

C:\Program\Outlook Express\msimn.exe

C:\Program\uTorrent\uTorrent.exe

C:\Program\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Per Johansson\Mina dokument\Hämtade filer\dds.scr

 

============== Pseudo HJT Report ===============

 

uStart Page = hxxp://www.blt.se/

mStart Page = about:blank

mWinlogon: Shell=Explorer.exe %windir%\system32\drivers\Scqs.exe

mWinlogon: SFCDisable=-99 (0xffffff9d)

BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program\askbardis\bar\bin\askBar.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program\avg\avg8\avgssie.dll

BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program\askbardis\bar\bin\askBar.dll

TB: FreeRIP.com Toolbar: {081230f8-ea50-42a9-983c-d22abc2eed3b} - c:\program\freerip3\toolband.dll

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

EB: Media Band: {32683183-48a0-441b-a342-7c2a440a9478} - %SystemRoot%\System32\browseui.dll

uRun: [internat.exe] internat.exe

uRun: [skype] "c:\program\skype\phone\Skype.exe" /nosplash /minimized

uRun: [DAEMON Tools Lite] "c:\program\daemon tools lite\daemon.exe" -autorun

uRun: [COM+ Manager] "c:\documents and settings\per johansson\.commgr\complmgr.exe"

uRun: [XBV6RD5SZF] c:\docume~1\perjoh~1\lokala~1\temp\Yzk.exe

mRun: [synchronization Manager] mobsync.exe /logon

mRun: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

mRun: [nwiz] nwiz.exe /install

mRun: [AVG8_TRAY] c:\program\avg\avg8\avgtray.exe

mRun: [Microsoft Driver Setup] c:\winnt\system32\drivers\Cafgm.exe

mRun: [sunJavaUpdateSched] "c:\program\delade filer\java\java update\jusched.exe"

mRun: [sta] rundll32 "stcup.dll",,Run

mRun: [MChk] c:\winnt\system32\ftcup.exe

mRun: [szetyj67v] c:\winnt\system32\szetyj67v.exe

mRun: [szetyj67vx] c:\winnt\system32\szetyj67vx.exe

dRun: [internat.exe] internat.exe

dRunOnce: [^SetupICWDesktop] c:\program\internet explorer\connection wizard\icwconn1.exe /desktop

mExplorerRun: [Microsoft Driver Setup] c:\winnt\system32\drivers\Cafgm.exe

mExplorerRun: [jgyo0w] c:\docume~1\perjoh~1\lokala~1\temp\19aqp.exe

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\micros~1.lnk - c:\program\microsoft office\office\FINDFAST.EXE

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\office~1.lnk - c:\program\microsoft office\office\OSA.EXE

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\pictur~1.lnk - c:\program\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\adobeg~1.lnk - c:\program\delade filer\adobe\calibration\Adobe Gamma Loader.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\exifla~1.lnk - c:\program files\finepixviewer\QuickDCF2.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\personal.lnk - c:\program\personal\bin\Personal.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\uleadp~1.lnk - c:\program\ulead systems\ulead photo express 3.0 se\CalCheck.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\watch.lnk - c:\program\packard bell diamond 1200plus\driver\WATCH.exe

uPolicies-system: DisableTaskMgr = 1 (0x1)

uPolicies-system: DisableRegistryTools = 1 (0x1)

dPolicies-system: DisableTaskMgr = 1 (0x1)

dPolicies-system: DisableRegistryTools = 1 (0x1)

IE: &FreeRIP Search - c:\program\freerip3\toolband.dll/MENUSEARCH.HTM

DPF: DirectAnimation Java Classes - file://c:\winnt\java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://c:\winnt\java\classes\xmldso.cab

DPF: {0000000A-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/d/4/4/d446e8a9-3a86-4b59-bb19-f5bd11b40367/wmavax.CAB

DPF: {00000161-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/msaudio.cab

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {31564D57-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmvax.cab

DPF: {3234504D-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/mpeg4ax.CAB

DPF: {32564D57-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmv8ax.cab

DPF: {3334504D-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/mpeg4ax.cab

DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} - hxxps://asp.photoprintit.de/microsite/5025/defaults/activex/ips/IPSUploader4.cab

DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program\avg\avg8\avgpp.dll

Notify: avgrsstarter - avgrsstx.dll

Notify: nwprovau - nwprovau.dll

LSA: Authentication Packages = msv1_0 nwprovau

 

================= FIREFOX ===================

 

FF - ProfilePath - c:\docume~1\perjoh~1\applic~1\mozilla\firefox\profiles\y5n96x1p.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.blt.se

FF - plugin: c:\documents and settings\per johansson\application data\mozilla\firefox\profiles\y5n96x1p.default\extensions\2020player@2020technologies.com\plugins\NP2020Player.dll

FF - plugin: c:\program\personal\bin\np_prsnl.dll

FF - plugin: c:\program\real\realone player\netscape6\nppl3260.dll

FF - plugin: c:\program\real\realone player\netscape6\nprjplug.dll

FF - plugin: c:\program\real\realone player\netscape6\nprpjplug.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program\java\jre6\lib\deploy\jqs\ff

FF - Ext: 20-20 3D Viewer: 2020Player@2020Technologies.com - %profile%\extensions\2020Player@2020Technologies.com

 

============= SERVICES / DRIVERS ===============

 

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\winnt\system32\drivers\avgldx86.sys [2009-4-10 335240]

R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\winnt\system32\drivers\avgmfx86.sys [2009-4-10 27784]

R1 AvgTdiX;AVG Free8 Network Redirector;c:\winnt\system32\drivers\avgtdix.sys [2009-4-10 108552]

R2 AppleTalk;AppleTalk Protocol;c:\winnt\system32\drivers\sfmatalk.sys [2000-1-12 148400]

R2 avg8wd;AVG Free8 WatchDog;c:\program\avg\avg8\avgwdsvc.exe [2009-4-10 297752]

R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [2003-4-26 15968]

R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [2003-4-26 13776]

R3 usbhub20;Stöd för USB 2.0 Rotnav;c:\winnt\system32\drivers\usbhub20.sys [2004-9-13 49776]

S2 ASKUpgrade;ASKUpgrade;c:\program\askbardis\bar\bin\ASKUpgrade.exe [2009-9-13 234888]

S2 DegCs Controler;DegCs Controler;"c:\winnt\system32\drivers\degcs.exe" --> c:\winnt\system32\drivers\DegCs.exe [?]

S3 viafilter;VIA USB Filter;c:\winnt\system32\drivers\viausb.sys [2003-4-26 9038]

 

=============== Created Last 30 ================

 

2010-11-23 06:46:23 -------- d-----w- c:\docume~1\alluse~1\applic~1\MFAData

2010-11-17 08:23:35 -------- d-----w- c:\docume~1\alluse~1\applic~1\FreeRIP

 

==================== Find3M ====================

 

2006-05-03 09:06:54 163328 --sh--r- c:\winnt\system32\flvDX.dll

2007-02-21 10:47:16 31232 --sh--r- c:\winnt\system32\msfDX.dll

 

============= FINISH: 14:06:39,35 ===============

Attach.txt

Link to comment
Share on other sites

Hej,

börja med att köra Malwarebytes,

hittas här:

Malwarebytes' Anti-Malware

Kör en snabbskanner. Följ programmets instruktioner noga, när något hittats.

Omstart kan krävas.

Återkom med logg, som du klistrar in i din tråd, om loggen inte poppar upp, hittas den under fliken loggar i Malwarebytes.

Mvh

Mats H

Link to comment
Share on other sites

Att klockan ställer om sig vid varje inloggning beror på att BIOS batteriet är slut

(virusangripet ;-) av det sk silverviruset som regelmässigt drabbar äldre datorer)

men det finns bot, köp ett nytt BIOS batteri, litet runt platt batteri, sitter på moderkortet

stort som ungefär en 1kr.

Link to comment
Share on other sites

Körde Malaware och tog bort de filer han hittade.

Här är logen:

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

 

Databasversion: 5531

 

Windows 5.0.2195 Service Pack 4

Internet Explorer 6.0.2800.1106

 

2011-01-16 15:53:55

mbam-log-2011-01-16 (15-53-55).txt

 

Skanningstyp: Snabbskanning

Antal skannade objekt: 105939

Förfluten tid: 29 minut(er), 1 sekund(er)

 

Infekterade minnesprocesser: 0

Infekterade minnesmoduler: 0

Infekterade registernycklar: 4

Infekterade registervärden: 9

Infekterade registerdataposter: 5

Infekterade mappar: 1

Infekterade filer: 18

 

Infekterade minnesprocesser:

(Inga illasinnade poster hittades)

 

Infekterade minnesmoduler:

(Inga illasinnade poster hittades)

 

Infekterade registernycklar:

HKEY_CURRENT_USER\SOFTWARE\OTGV1DNWQQ (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\XBV6RD5SZF (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\$NtUninstallMTF1011$ (Adware.Adrotator) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_WINSOFT_SERVICE_CONTROLER (Backdoor.IRCBot) -> Quarantined and deleted successfully.

 

Infekterade registervärden:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\COM+ Manager (Trojan.Agent) -> Value: COM+ Manager -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\XBV6RD5SZF (Trojan.FakeAlert) -> Value: XBV6RD5SZF -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Microsoft Driver Setup (Worm.Palevo) -> Value: Microsoft Driver Setup -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\jgyo0w (Trojan.Downloader) -> Value: jgyo0w -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Driver Setup (Worm.Palevo) -> Value: Microsoft Driver Setup -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sta (Trojan.Agent.Gen) -> Value: sta -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MChk (Trojan.Agent.Gen) -> Value: MChk -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\szetyj67v (Trojan.Dropper) -> Value: szetyj67v -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\szetyj67vx (Trojan.Dropper) -> Value: szetyj67vx -> Quarantined and deleted successfully.

 

Infekterade registerdataposter:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (Explorer.exe %windir%\system32\drivers\Scqs.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

 

Infekterade mappar:

c:\WINNT\$ntuninstallmtf1011$ (Adware.Adrotator) -> Quarantined and deleted successfully.

 

Infekterade filer:

c:\WINNT\system32\asr_12677.exe (Virus.Virut) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\sgg7yhw5.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\aecnwxorsm.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\jydtya.exe (Rogue.SecuritySuite) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\rnoecxsawm.tmp (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\pcofizrp.exe (Backdoor.Bot) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\yzh.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\yzi.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\yzj.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\srmnocxwea.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.

c:\documents and settings\per johansson\lokala inställningar\temp\ufgxxw.exe (Adware.BHO) -> Quarantined and deleted successfully.

c:\zrpt.xml (Malware.Trace) -> Quarantined and deleted successfully.

c:\WINNT\system32\comsats.sys (Trojan.Agent) -> Quarantined and deleted successfully.

c:\WINNT\system32\wsrchc2.dll (Adware.WordsOnWeb) -> Quarantined and deleted successfully.

c:\WINNT\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\WINNT\Tasks\{35dc3473-a719-4d14-b7c1-fd326ca84a0c}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\WINNT\$ntuninstallmtf1011$\apuninstall.exe (Adware.Adrotator) -> Quarantined and deleted successfully.

c:\WINNT\$ntuninstallmtf1011$\zrpt.xml (Adware.Adrotator) -> Quarantined and deleted successfully.

Link to comment
Share on other sites

Det var mycket det. Det visar hur farligt det är att ha datorer med Windows 2000 anslutna till internet, många säkerhetshål att infektera datorn genom.

 

Eftersom "virut" nämns gör en scan med programmet http://download.avgfree.com/filedir/util/avg_rem_sup.dir/rmvirut/rmvirut.exe så man får en uppfattning hur många och vilka filer som är infekterade. Klistra in loggen i ditt svar, eller om den är väldigt lång bifoga den.

 

Kör DDS och klistra in DDS.txt också så får vi se vad som finns kvar.

 

c:\documents and settings\per johansson\lokala inställningar\temp\srmnocxwea.tmp (Spyware.Passwords.XGen)
Det innebär att alla lösenord som du någonsin använt på den datorn för inloggning på någon webbsida etc behöver bytas ut från en säkert ren dator.
Link to comment
Share on other sites

Körde AVG virut/rmvirut.exe loggen blev låååång men den hittade ingenting mer som var infekterat. Klockan har börjat gå rätt så det är ju ett bra tecken....

Körde DDS och .txt ligger som bilaga.

Attach.txt

Link to comment
Share on other sites

Här e DDS'n:

 

DDS (Ver_10-12-12.02) - NTFSx86

Run by Per Johansson at 19:08:39,95 on sö 2011-01-16

Internet Explorer: 6.0.2800.1106 BrowserJavaVersion: 1.6.0_18

Microsoft Windows 2000 Professional 5.0.2195.4.1252.46.1053.18.639.307 [GMT 1:00]

 

 

============== Running Processes ===============

 

C:\WINNT\system32\LEXBCES.EXE

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\LEXPPS.EXE

C:\Program\AVG\AVG8\avgwdsvc.exe

C:\WINNT\system32\bgsvcgen.exe

C:\Program\Java\jre6\bin\jqs.exe

C:\WINNT\System32\nvsvc32.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\system32\stisvc.exe

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\WINNT\system32\mspmspsv.exe

C:\Program\AVG\AVG8\avgnsx.exe

C:\Program\AVG\AVG8\avgrsx.exe

C:\WINNT\Explorer.EXE

C:\Program\AVG\AVG8\avgtray.exe

C:\Program\Delade filer\Java\Java Update\jusched.exe

C:\WINNT\system32\internat.exe

C:\Program\Skype\Phone\Skype.exe

C:\Program\DAEMON Tools Lite\daemon.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Program\Personal\bin\Personal.exe

C:\Program\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe

C:\Program\Packard Bell Diamond 1200Plus\Driver\WATCH.exe

C:\Program\Microsoft Office\Office\OSA.EXE

C:\Program\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe

C:\WINNT\System32\SCardSvr.exe

C:\Program\Delade filer\Java\Java Update\jucheck.exe

C:\Program\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Per Johansson\Mina dokument\Hämtade filer\dds(3).scr

 

============== Pseudo HJT Report ===============

 

uStart Page = hxxp://www.blt.se/

mStart Page = about:blank

mWinlogon: SFCDisable=-99 (0xffffff9d)

BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program\askbardis\bar\bin\askBar.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program\avg\avg8\avgssie.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program\askbardis\bar\bin\askBar.dll

TB: FreeRIP.com Toolbar: {081230f8-ea50-42a9-983c-d22abc2eed3b} - c:\program\freerip3\toolband.dll

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

EB: Media Band: {32683183-48a0-441b-a342-7c2a440a9478} - %SystemRoot%\System32\browseui.dll

uRun: [internat.exe] internat.exe

uRun: [skype] "c:\program\skype\phone\Skype.exe" /nosplash /minimized

uRun: [DAEMON Tools Lite] "c:\program\daemon tools lite\daemon.exe" -autorun

mRun: [synchronization Manager] mobsync.exe /logon

mRun: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

mRun: [nwiz] nwiz.exe /install

mRun: [AVG8_TRAY] c:\program\avg\avg8\avgtray.exe

mRun: [sunJavaUpdateSched] "c:\program\delade filer\java\java update\jusched.exe"

dRun: [internat.exe] internat.exe

dRunOnce: [^SetupICWDesktop] c:\program\internet explorer\connection wizard\icwconn1.exe /desktop

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\micros~1.lnk - c:\program\microsoft office\office\FINDFAST.EXE

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\office~1.lnk - c:\program\microsoft office\office\OSA.EXE

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\pictur~1.lnk - c:\program\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\adobeg~1.lnk - c:\program\delade filer\adobe\calibration\Adobe Gamma Loader.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\exifla~1.lnk - c:\program files\finepixviewer\QuickDCF2.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\personal.lnk - c:\program\personal\bin\Personal.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\uleadp~1.lnk - c:\program\ulead systems\ulead photo express 3.0 se\CalCheck.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\watch.lnk - c:\program\packard bell diamond 1200plus\driver\WATCH.exe

dPolicies-system: DisableTaskMgr = 1 (0x1)

dPolicies-system: DisableRegistryTools = 1 (0x1)

IE: &FreeRIP Search - c:\program\freerip3\toolband.dll/MENUSEARCH.HTM

DPF: DirectAnimation Java Classes - file://c:\winnt\java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://c:\winnt\java\classes\xmldso.cab

DPF: {0000000A-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/d/4/4/d446e8a9-3a86-4b59-bb19-f5bd11b40367/wmavax.CAB

DPF: {00000161-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/msaudio.cab

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {31564D57-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmvax.cab

DPF: {3234504D-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/mpeg4ax.CAB

DPF: {32564D57-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmv8ax.cab

DPF: {3334504D-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/mpeg4ax.cab

DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} - hxxps://asp.photoprintit.de/microsite/5025/defaults/activex/ips/IPSUploader4.cab

DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program\avg\avg8\avgpp.dll

Notify: avgrsstarter - avgrsstx.dll

Notify: nwprovau - nwprovau.dll

LSA: Authentication Packages = msv1_0 nwprovau

 

================= FIREFOX ===================

 

FF - ProfilePath - c:\docume~1\perjoh~1\applic~1\mozilla\firefox\profiles\y5n96x1p.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.blt.se

FF - plugin: c:\documents and settings\per johansson\application data\mozilla\firefox\profiles\y5n96x1p.default\extensions\2020player@2020technologies.com\plugins\NP2020Player.dll

FF - plugin: c:\program\personal\bin\np_prsnl.dll

FF - plugin: c:\program\real\realone player\netscape6\nppl3260.dll

FF - plugin: c:\program\real\realone player\netscape6\nprjplug.dll

FF - plugin: c:\program\real\realone player\netscape6\nprpjplug.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program\java\jre6\lib\deploy\jqs\ff

FF - Ext: 20-20 3D Viewer: 2020Player@2020Technologies.com - %profile%\extensions\2020Player@2020Technologies.com

 

============= SERVICES / DRIVERS ===============

 

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\winnt\system32\drivers\avgldx86.sys [2009-4-10 335240]

R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\winnt\system32\drivers\avgmfx86.sys [2009-4-10 27784]

R1 AvgTdiX;AVG Free8 Network Redirector;c:\winnt\system32\drivers\avgtdix.sys [2009-4-10 108552]

R2 AppleTalk;AppleTalk Protocol;c:\winnt\system32\drivers\sfmatalk.sys [2000-1-12 148400]

R2 avg8wd;AVG Free8 WatchDog;c:\program\avg\avg8\avgwdsvc.exe [2009-4-10 297752]

R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [2003-4-26 15968]

R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [2003-4-26 13776]

R3 usbhub20;Stöd för USB 2.0 Rotnav;c:\winnt\system32\drivers\usbhub20.sys [2004-9-13 49776]

S2 ASKUpgrade;ASKUpgrade;c:\program\askbardis\bar\bin\ASKUpgrade.exe [2009-9-13 234888]

S2 DegCs Controler;DegCs Controler;"c:\winnt\system32\drivers\degcs.exe" --> c:\winnt\system32\drivers\DegCs.exe [?]

S3 viafilter;VIA USB Filter;c:\winnt\system32\drivers\viausb.sys [2003-4-26 9038]

 

=============== Created Last 30 ================

 

 

==================== Find3M ====================

 

2006-05-03 09:06:54 163328 --sh--r- c:\winnt\system32\flvDX.dll

2007-02-21 10:47:16 31232 --sh--r- c:\winnt\system32\msfDX.dll

 

============= FINISH: 19:09:31,36 ===============

DDS.txt

Link to comment
Share on other sites

Hej,

Ladda upp dessa två filer på Virustotal, som hittas här:

http://www.virustotal.com/index.html,

tryck på Bläddraknappen, hitta filen och tryck Send File.

Återkom med färdiganalyserade, svarslänkar här i din tråd.

c:\winnt\system32\flvDX.dll

c:\winnt\system32\msfDX.dll

 

Kör sedan Combofix:

Spara ComboFix på Skrivbordet:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

 

Stäng av alla program du ser inklusive antivirusprogram och antispionprogram men lämna brandväggen på.

Hur? Se http://www.bleepingcomputer.com/forums/topic114351.html

Kör ComboFix och följ anvisningarna som visas.

Om det kommer upp en fråga om du vill installera återställningskonsolen så svara ja.

 

VIKTIGT! Klicka inte på ComboFix-fönstret med musen när den körs annars kan den hänga upp sig.

 

När den är färdig så ska en logg komma upp, klistra in den i ditt svar. Kontrollera att antivirusprogram mm är igång innan du ansluter till internet.

 

Om du får problem med att komma ut på internet:

Kontrollpanelen - Nätverksanslutningar

högerklicka på din internetanslutning och välj Reparera och/eller starta om datorn.

 

Varning! ComboFix förhindrar automatisk körning av CD, disketter och USB-enheter för att göra det lättare att rensa datorn och skydda datorn mot infektioner i framtiden. Det kan bli problem t ex om datorn har internet via ett USB-modem eller USB-nätverkskort. Säg då till i stället för att köra ComboFix.

 

Mvh

Mats H

Link to comment
Share on other sites

Båda var uppladdade sen tidigare:

c:\winnt\system32\flvDX.dll

 

MD5: 8453687a045c926f0291301ebaf50370

Date first seen: 2007-04-15 23:30:53 (UTC)

Date last seen: 2010-12-27 10:17:03 (UTC)

Detection ratio: 0/43

 

Och:

 

c:\winnt\system32\msfDX.dll

 

MD5: 21d8f42d54598b73c2e1a9571399113b

Date first seen: 2007-06-18 18:39:15 (UTC)

Date last seen: 2011-01-03 20:32:14 (UTC)

Detection ratio: 1/42

 

Kan inte köra Combofix trots att jag avaktiverat. Han vill att jag avinstallerar AVG helt. Finns det någon annan väg att gå ?

 

Klockan har slutat fungera igen så det kanske kan vara batteriet ?

Link to comment
Share on other sites

Hej,

avinstallera ASK Toolbar via Kontrollpanelen och Program.

Avinstallera AVG på samma sätt.

Prova att köra Combofix igen.

Återkom med logg.

 

Efter Combofixkörningen, eller om den misslyckas. Starta om datorn och installera Avast 5.0, hittas här:

http://www.avast.com/free-antivirus-download.

 

Skanna din dator, om ngt hittas, återkom med information.

Mvh

Mats H

Link to comment
Share on other sites

För att kunna avinstallera AVG 8.5 krävs att man laddar ner AVG remover

Finns här:

http://www.avg.com/w.../download-tools

 

Han tog bort en hel del o loggen blev :

 

_____ _ _

_ __ _____ _| ___(_)_ __ __| |

| '_ \ / _ \ \ / / |_ | | '_ \ / _` |

| |_) | __/\ V /| _| | | | | | (_| |

| .__/ \___| \_/ |_| |_|_| |_|\__,_|

|_| by Billy Robert O'Neal III

Version 1021

Distributed under the Boost Software License, Version 1.0.

http://www.boost.org/LICENSE_1_0.txt

pevFind contains some code from Info-ZIP, used with permission.

In accordance with Info-ZIP's License, it can be found at

http://billy-oneal.com/infozip.txt

Filename regular expressions library is

Copyright ©1997-1998 by David R. Tribble, all rights reserved.

 

 

 

((((((((((((((((((((((((((((((((((((((( Andra raderingar ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\Per Johansson\.COMMgr

c:\documents and settings\Per Johansson\Skrivbord\

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\1091946292TopRightTopRight.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\1x01.htm

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\addthis_widget.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\addthis_widget_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ads

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ads.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\beskrivning.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\beskrivning.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\hemnet_analytics.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\hemnetLogoSmall.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\jquery_bundle.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\logga_dngpbostad.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\m.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet.htm

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\129.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3OVI1V4L3OOS7VB9_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3P531PR0AH041P0U_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3P7BA10JMID0E49Q_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3P7IE5FICM20KOT8_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PCB3700BM56LF61_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PEJMT613V5RNP72_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PF2J1GCVM2QVQLS_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PGQJMU8BLFKSKNA_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PGRO7BGB3P7HFPS_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PIBGA5K4FFPC7EA_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\3PIBGN1Q8CMJQ059_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\All.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\AmWP2IT_-1192962159.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\AmWP2IT_-400457933.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\AmWP2IT_-871324628.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\AmWP2IT_1306071722.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\AmWP2IT_150505357.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\AmWP2IT_906617352.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\Avantime.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\blommar_____resize_cs_128_96.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\browserdetect.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\clear.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\clear_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\converter.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\core.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\ga.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\IncrementCounter.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\jquery-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\jquery-ui-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\jquery.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\jquery_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\locationsuggest.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\main.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\main.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\Menu.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\MicrosoftAjax.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\MicrosoftAjaxWebForms.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\objektssida-fotostyling.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\objektssidan-tavling.gif

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\prototype.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\rekrytera.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\rekrytera.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\RouteToMeIFrame.htm

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\RouteToMeIFrame_data\common.txt

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\RouteToMeIFrame_data\Hitta.txt

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\RouteToMeIFrame_data\script.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\RouteToMeIFrame_data\Styles.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\s_code.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\sf_snacka_internal__203x152.swf

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\sf_sverige.swf

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\sfsoand.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\StartupScript.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\structure.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\svf_objekt_minbostad.swf

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\swfobject.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\units.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\WebResource.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\ObjectHemnet_data\wscSelVisit901363.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\Objekt

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\script.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\sh18.htm

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\standard.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\sv.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\v53.js

c:\documents and settings\Per Johansson\Skrivbord\ \704124-filer\widget38.css

c:\documents and settings\Per Johansson\Skrivbord\ \704124.htm

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\1375334574TopRightTopRight.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\1x01.htm

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\a.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\addthis_widget.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\addthis_widget_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ads

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\hemnet-beskrivning.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\hemnet.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\hemnet.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\hemnet_analytics.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\hemnetLogoSmall.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\jquery-bundle.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\logga_dngpbostad.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\m.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet.htm

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\129.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3HA44ILP3T3LFS29_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3KSJ9PTIIUGDT8B9_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3LS2CRC68DNJK02L_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3M9461A6HPT4M67F_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3PGSAKBRVRH2CQA5_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3Q2IK17H4F4LC391_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\3Q4R5U3M5S5VPJTP_____resize_cs_25_25.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\All.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\AmWP2IT_-1192962159.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\AmWP2IT_-400457933.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\AmWP2IT_-871324628.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\AmWP2IT_1306071722.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\AmWP2IT_150505357.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\AmWP2IT_906617352.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\Avantime.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\blommar_____resize_cs_128_96.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\browserdetect.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\clear.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\clear_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\converter.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\core.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\ga.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\IncrementCounter.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\jquery-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\jquery-ui-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\jquery.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\jquery_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\locationsuggest.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\main.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\main.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\Menu.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\MicrosoftAjax.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\MicrosoftAjaxWebForms.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\objektssida-fotostyling.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\prototype.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\rekrytera.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\rekrytera.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\RouteToMeIFrame.htm

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\RouteToMeIFrame_data\common.txt

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\RouteToMeIFrame_data\Hitta.txt

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\RouteToMeIFrame_data\script.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\RouteToMeIFrame_data\Styles.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\s_code.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\sf_snacka_internal__203x152.swf

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\sf_sverige.swf

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\sfsoand.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\snoop.php

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\snoop2.php

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\StartupScript.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\structure.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\svf_objekt_minbostad.swf

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\swfobject.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\units.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\WebResource.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\ObjectHemnet_data\wscSelVisit901363.shtml

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\Objekt

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\script.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\sh21.htm

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\sv.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\telia-knapp.gif

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\v53.js

c:\documents and settings\Per Johansson\Skrivbord\ \829665-filer\widget42.css

c:\documents and settings\Per Johansson\Skrivbord\ \829665.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\0MjYzNDYwOTkAAAAAAAAAADwdn1MKgv9mZ5w.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\60.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\791518630.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8032992825.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8406835043.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8423881681.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8433596986.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8445592119.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8445592119_002.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8490980391.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\8493752068.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\9b4df316-bb15-47de-b65c-e32e225de989.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\abuse_big.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\ad_reply_mail_icon.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\ad_view.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\ad_view.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\ad_view_print.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\all_pages.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\arrays_v2.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\campaigns.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\common.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\destination_logo.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\eas.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\experian_footer.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\experian_head.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\fb_icon.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\footer_paragraph.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\generic.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\gw.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\header_logo_new.png

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\hittalogo_skugga.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\icon_edit_options_notepad.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\icon_securitycenter_footer.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\blocket_gemb.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\distans.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\eas.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\finans.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\FreeFin-Logo2.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\Ikano_Bank_0422.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_newpartner_data\imp.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\BannerBackground.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\eas.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\eas.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\eas_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\eas_data\728x90.swf

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\eas_data\addyn3.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\iframe_radannons_topp_data\iframe.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\ikon_print.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\inkclub_print_com.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\jquery-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\jquery-footer-gallery-slider.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\jquery.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\klart_se.css

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\marknadsforing_footer.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\mobilikon_mellan.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\navbar_shadow_vi_bg.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\nothumb.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\printcentre_blocket.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\printcentre_blocket_big.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\printcentre_plate_normal_text.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\printcentre_plate_stripe_text.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\printcentre_printer.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\printcentre_printer_big.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\sendtip.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\tele_red.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\tfclient.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\tfengine.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\tfregisterclick.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\thumb_left_top.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\thumb_single_left_bottom.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\thumb_single_right_bottom.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\thumb_single_right_top.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\trafikfonden.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\transparent.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\ufo.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\vi_menu_buy_contract.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\vi_menu_mail.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\vi_menu_phone.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\vi_menu_save.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\xtcore.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099-filer\xtiub.js

c:\documents and settings\Per Johansson\Skrivbord\ \Frasch_etta_pa_Galgamarken_nara_till_BTH_26346099.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892400.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892402.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892404.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892405.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892408.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892409.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892411.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892412.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892413.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4892414.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4903131.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4903132.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\4915620.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\boxes.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\fastbyranViewAll.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\ga.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\grid.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\0.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\1.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\2.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\3.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\3dapplet.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\4.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\403.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\403_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\403_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\403_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\404.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\404_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\404_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\404_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\405.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\405_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\405_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\405_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\406.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\406_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\406_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\406_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\407.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\407_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\407_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\407_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\AccidentTypeSmall.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\common.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\converter.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\core.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\debug.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\deployJava.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\distance_bicycle.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\distance_walk.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\domready.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\dropbutton.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\dropdown.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\eas.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\eas_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\EAS_tag.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Explosion.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Fire.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hearticon.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hit.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Hitta.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Hitta.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Hitta_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Hitta_002.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Hitta_003.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Hitta_004.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hitta_labb30.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\HittaMap.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-coordinate.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-distance.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-forecastruler.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-poimanager.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-pointeditor.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-polyedit.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-weather.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap-viewer.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\hmap.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\IncidentTypeSmall.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\jquery-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\json2.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\loading.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\logo.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\map.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\MapJack.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\maximize.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\minimize.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\minimize_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Movable.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\point.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\popup.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Print.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\prototype.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\script.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\searchmap.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\SkidHazardsTypeSmall.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\sos-logo-30x12.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\Styles.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\swfobject.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\tfclient.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\tfengine.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\tfregisterclick.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\toolbarlogo.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\tools.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\xtcore.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\zoom_bkg.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\zoom_handle.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\zoom_in.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\largemap_data\zoom_out.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\links.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\navigation.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\ObjectImages.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\Print.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\ScriptResource.axd

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\ScriptResource.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\ScriptResource_002.axd

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\ScriptResource_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\sIFR.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\Styles.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\text.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx-filer\WebResource.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectImages.aspx.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4I1S5VPJV8_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4I1S5VPJVA_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4I1S5VPJVC_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4I1S5VPJVE_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVG_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVI_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVK_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVM_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVO_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVS_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4J1S5VPJVU_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4JVS5VPK00_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4JVS5VPK02_____resize_s_800_0.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4JVS5VPK04_____resize_s_800_0.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4JVS5VPK08.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4JVS5VPK0A.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4KVS5VPK11_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\3Q4R5U3M5S5VPJTP_3Q4R5U4LTS5VPK13_____resize_s_800_0.JPG

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\clear.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\flip2d3d.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\logo_vertikal.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\main.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\0.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\1.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2020.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2020_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2020_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2020_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2020_005.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2021.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2021_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2021_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2021_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2021_005.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2022.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2022_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2022_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2022_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2022_005.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2023.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2023_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2023_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2023_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2023_005.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2024.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2024_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2024_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2024_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2024_005.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2025.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2025_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2025_003.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2025_004.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\2025_005.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\3.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\3dapplet.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\3Q4R5U3M5S5VPJTP_____resize_s_135_0.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\4.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\AccidentTypeSmall.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\common.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\converter.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\core.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\debug.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\deployJava.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\distance_bicycle.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\distance_walk.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\domready.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\dropbutton.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\dropdown.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\EAS_tag.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Explosion.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Fire.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hearticon.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Hitta.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Hitta.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Hitta_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Hitta_002.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Hitta_003.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Hitta_004.txt

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hitta_labb30.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\HittaMap.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-coordinate.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-distance.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-forecastruler.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-poimanager.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-pointeditor.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-polyedit.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-weather.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap-viewer.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\hmap.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\IncidentTypeSmall.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\jquery-1.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\json2.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\loading.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\logo.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\map.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\MapJack.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\maximize.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\minimize.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\minimize_002.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Movable.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\point.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\popup.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Print.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\prototype.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\script.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\searchmap.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\SkidHazardsTypeSmall.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\sos-logo-30x12.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\Styles.css

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\swfobject.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\tfclient.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\tfengine.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\tfregisterclick.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\toolbarlogo.gif

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\tools.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\zoom_bkg.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\zoom_handle.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\zoom_in.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\MapViewer_data\zoom_out.png

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx-filer\s_code.js

c:\documents and settings\Per Johansson\Skrivbord\ \ObjectViewPictures.aspx.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_002.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_003.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_004.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_005.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_006.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_007.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_008.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\BannerBackground.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\eas.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\eas.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\eas_002.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\eas_data\30907.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\eas_data\30907_data\30132-s3.swf

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\eas_data\30907_data\41de77bdc33052ed7f7ee87d676ef5d42e3aab8d_a.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data\iframe.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_002\eas.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\blocket_gemb.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\distans.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\eas.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\finans.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\FreeFin-Logo2.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\Ikano_Bank_0422.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_005\imp.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\23295_120841097949328_2506_q.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\491Zf1v7EcB.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\a.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\a_data\hzBTTnN3Vwl.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\a_data\v7-eEs7lplH.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\a_data\vKhd8DzTDBU.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\a_data\ZJv8EQn2OP8.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\_blank_data_007\I8LGpcXIwHB.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2000675963.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2013863082.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2020702566.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2028525748.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2033785541.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2055779540.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2055779540_002.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\2a7e2b53-3fef-432d-899e-1ff2ad5da4c4.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\60.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\825986906.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\ad_view_print.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\arrays_v2.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\blocket_all_min.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\blocket_view_min.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\eas.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\experian_footer.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\experian_head.jpg

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\general_sprite_min.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\gw.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\hittalogo_skugga.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\Hn8.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like_data\a.htm

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like_data\a_data\HWL11JhzW9w.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like_data\a_data\LTZyom2qdgv.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like_data\a_data\x88wB7IgOvY.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like_data\n4Glmua-sK8.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\like_data\VdleF9_YJSf.css

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\navbar_shadow_vi_bg.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\tfclient.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\tfengine.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\tfregisterclick.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\transparent.gif

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\ufo.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\xtcore.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735-filer\xtiub.js

c:\documents and settings\Per Johansson\Skrivbord\ \Renoverad_med_havsutsikt_30571735.htm

c:\documents and settings\Per Johansson\Skrivbord\ \ZMF120.pdf

C:\restore

c:\winnt\system32\i

 

.

(((((((((((((((((((((((( Filer Skapade från 2010-12-17 till 2011-01-17 ))))))))))))))))))))))))))))))

.

 

2011-01-17 23:31 . 2011-01-17 23:31 -------- d-----r- C:\32788R22FWJFW

2011-01-16 19:02 . 2011-01-16 19:02 238864 ----a-w- c:\winnt\system32\CF30765.exe

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-12-20 17:09 . 2010-11-23 14:09 38224 ----a-w- c:\winnt\system32\drivers\mbamswissarmy.sys

2010-12-20 17:08 . 2008-07-12 09:31 19288 ----a-w- c:\winnt\system32\drivers\mbam.sys

2006-05-03 09:06 163328 --sh--r- c:\winnt\system32\flvDX.dll

2007-02-21 10:47 31232 --sh--r- c:\winnt\system32\msfDX.dll

.

 

------- Sigcheck -------

 

[-] 2008-12-18 19:23 . 15BD2683E49CD82ECD19344CDCE1CA1F . 95024 . . [ERROR: 0x0] . . c:\winnt\system32\sfc.dll

[7] 2003-06-19 19:05 . 5B08171DF0A01804D8F8287CA0354C0B . 95024 . . [ERROR: 0x0] . . c:\winnt\ServicePackFiles\i386\sfc.dll

 

[-] 2002-12-20 16:14 . ADDAF2C086E24065549D9CB616EAD113 . 52224 . . [ERROR: 0x0] . . c:\winnt\system32\mspmsnsv.dll

 

[-] 2004-07-09 03:27 . 0E51BD586D186F61A9E4453DB8AEC774 . 1703936 . . [ERROR: 0x0] . . c:\winnt\system32\d3d9.dll

.

((((((((((((((((((((((((((((( SnapShot@2009-06-21_10.33.05 )))))))))))))))))))))))))))))))))))))))))

.

+ 2011-01-17 23:47 . 2011-01-17 23:47 16384 c:\winnt\system32\Perflib_Perfdata_ec.dat

+ 2011-01-17 23:45 . 2011-01-17 23:45 16384 c:\winnt\system32\Perflib_Perfdata_27c.dat

+ 2009-08-21 10:11 . 2010-02-18 13:48 84661 c:\winnt\system32\Macromed\Flash\uninstall_plugin.exe

+ 2000-01-12 16:00 . 2003-06-19 19:05 17840 c:\winnt\system32\dllcache\asyncmac.sys

- 2008-05-02 20:05 . 2008-05-02 21:54 43520 c:\winnt\system32\CmdLineExt03.dll

+ 2008-05-02 20:05 . 2009-11-28 15:14 43520 c:\winnt\system32\CmdLineExt03.dll

+ 2005-10-21 09:38 . 2005-10-21 09:38 20480 c:\winnt\Installer\3ae598.msi

+ 2010-01-27 01:07 . 2010-01-27 01:07 256280 c:\winnt\system32\Macromed\Flash\NPSWF32_FlashUtil.exe

+ 2010-02-25 14:08 . 2010-02-25 14:07 153376 c:\winnt\system32\javaws.exe

+ 2010-02-25 14:08 . 2010-02-25 14:07 145184 c:\winnt\system32\javaw.exe

+ 2010-02-25 14:08 . 2010-02-25 14:07 145184 c:\winnt\system32\java.exe

+ 2010-02-25 14:08 . 2010-02-25 14:07 411368 c:\winnt\system32\deploytk.dll

+ 2003-04-25 22:57 . 2003-04-25 22:57 264704 c:\winnt\Installer\efa6.msi

+ 2010-02-25 14:08 . 2010-02-25 14:08 178176 c:\winnt\Installer\cfddbe.msi

+ 2010-02-25 14:07 . 2010-02-25 14:07 576000 c:\winnt\Installer\cfddb8.msi

+ 2008-08-01 10:52 . 2008-08-01 10:52 331264 c:\winnt\Installer\9d0ed1.msi

+ 2009-05-08 14:00 . 2009-05-08 14:00 222208 c:\winnt\Installer\66b5a.msi

+ 2008-01-14 10:21 . 2008-01-14 10:21 354304 c:\winnt\Installer\40fd19.msi

+ 2009-11-04 12:47 . 2009-11-04 12:47 969216 c:\winnt\Installer\30a24c.msi

+ 2005-05-16 18:56 . 2003-06-19 19:05 1366528 c:\winnt\system32\webfldrs.msi

+ 2010-01-27 01:07 . 2010-01-27 01:07 3884312 c:\winnt\system32\Macromed\Flash\NPSWF32.dll

+ 2004-09-13 12:15 . 2003-06-19 19:05 1366528 c:\winnt\ServicePackFiles\i386\webfldrs.msi

+ 2008-02-23 17:50 . 2008-02-23 17:50 3405312 c:\winnt\Installer\b52cb.msi

+ 2005-10-03 11:48 . 2005-10-03 11:48 7718912 c:\winnt\Installer\8b756.msi

+ 2009-05-08 15:03 . 2009-05-08 15:03 6828544 c:\winnt\Installer\69d14.msi

+ 2008-08-02 10:59 . 2008-08-02 10:59 2109440 c:\winnt\Installer\6899f0.msi

+ 2005-12-11 11:05 . 2005-12-11 11:05 9781760 c:\winnt\Installer\4e0815.msi

+ 2004-10-02 14:19 . 2004-10-02 14:19 7718912 c:\winnt\Installer\3d1ae.msi

+ 2003-12-13 16:28 . 2003-12-13 16:28 6828544 c:\winnt\Installer\26b07.msi

+ 2004-06-10 18:13 . 2004-06-10 18:13 6828544 c:\winnt\Installer\218b45.msi

+ 2005-05-16 18:59 . 2000-01-12 16:00 1317376 c:\winnt\$NtServicePackUninstall$\webfldrs.msi

+ 2005-09-23 05:48 . 2005-09-23 05:48 24863744 c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\netfx.msi

.

(((((((((((((((((((((((((((((((((( Startpunkter i registret )))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Not* Tomma poster & legitima standardposter visas inte.

REGEDIT4

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{081230F8-EA50-42A9-983C-D22ABC2EED3B}"= "c:\program\FreeRIP3\toolband.dll" [2010-09-09 286720]

 

[HKEY_CLASSES_ROOT\clsid\{081230f8-ea50-42a9-983c-d22abc2eed3b}]

[HKEY_CLASSES_ROOT\ToolBand.ToolBandObj.1]

[HKEY_CLASSES_ROOT\TypeLib\{0097E905-1DFB-4A9C-9871-A4F95FD58945}]

[HKEY_CLASSES_ROOT\ToolBand.ToolBandObj]

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

"{081230F8-EA50-42A9-983C-D22ABC2EED3B}"= "c:\program\FreeRIP3\toolband.dll" [2010-09-09 286720]

 

[HKEY_CLASSES_ROOT\clsid\{081230f8-ea50-42a9-983c-d22abc2eed3b}]

[HKEY_CLASSES_ROOT\ToolBand.ToolBandObj.1]

[HKEY_CLASSES_ROOT\TypeLib\{0097E905-1DFB-4A9C-9871-A4F95FD58945}]

[HKEY_CLASSES_ROOT\ToolBand.ToolBandObj]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"internat.exe"="internat.exe" [2000-01-12 20752]

"Skype"="c:\program\Skype\Phone\Skype.exe" [2006-09-25 20053544]

"DAEMON Tools Lite"="c:\program\DAEMON Tools Lite\daemon.exe" [2008-02-13 486856]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="NvQTwk" [X]

"Synchronization Manager"="mobsync.exe" [2003-06-19 111888]

"nwiz"="nwiz.exe" [2002-08-30 372736]

"SunJavaUpdateSched"="c:\program\Delade filer\Java\Java Update\jusched.exe" [2010-01-11 246504]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"internat.exe"="internat.exe" [2000-01-12 20752]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"^SetupICWDesktop"="c:\program\Internet Explorer\Connection Wizard\icwconn1.exe" [2003-06-19 186640]

 

c:\documents and settings\Per Johansson\Start-meny\Program\Autostart\

Microsoft Office Snabbs”kning.lnk - c:\program\Microsoft Office\Office\FINDFAST.EXE [1997-1-21 111376]

Office-autostart.lnk - c:\program\Microsoft Office\Office\OSA.EXE [1997-1-21 51984]

Picture Motion Browser verktyg f”r mediekontroll.lnk - c:\program\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2008-9-25 368640]

 

c:\documents and settings\All Users\Start-meny\Program\Autostart\

Adobe Gamma Loader.lnk - c:\program\Delade filer\Adobe\Calibration\Adobe Gamma Loader.exe [2003-6-7 113664]

Exif Launcher 2.lnk - c:\program files\FinePixViewer\QuickDCF2.exe [2007-6-16 294912]

Personal.lnk - c:\program\Personal\bin\Personal.exe [2010-1-20 939920]

Ulead Photo Express 3.0 SE Calendar Checker.lnk - c:\program\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe [2003-5-28 61440]

Watch.lnk - c:\program\Packard Bell Diamond 1200Plus\Driver\WATCH.exe [2009-5-20 364544]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\nwprovau]

2003-06-19 19:05 139536 ----a-w- c:\winnt\system32\NWPROVAU.DLL

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

 

R0 sptd;sptd;c:\winnt\system32\drivers\sptd.sys [2008-02-23 716272]

R2 AppleTalk;AppleTalk Protocol;c:\winnt\system32\drivers\sfmatalk.sys [2000-01-12 148400]

R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [2003-04-26 15968]

R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [2003-04-26 13776]

R3 usbhub20;Stöd för USB 2.0 Rotnav;c:\winnt\system32\drivers\usbhub20.sys [2004-09-13 49776]

S2 DegCs Controler;DegCs Controler;"c:\winnt\system32\drivers\DegCs.exe" --> c:\winnt\system32\drivers\DegCs.exe [?]

S3 viafilter;VIA USB Filter;c:\winnt\system32\drivers\viausb.sys [2003-04-26 9038]

.

Innehållet i mappen 'Schemalagda aktiviteter':

 

2011-01-17 c:\winnt\Tasks\RegCure Program Check.job

- c:\program\RegCure\RegCure.exe [2008-12-29 17:58]

 

2010-11-18 c:\winnt\Tasks\RegCure.job

- c:\program\RegCure\RegCure.exe [2008-12-29 17:58]

.

.

------- Extra genomsökning -------

.

uStart Page = hxxp://www.blt.se/

mStart Page = about:blank

IE: &FreeRIP Search - c:\program\FreeRIP3\toolband.dll/MENUSEARCH.HTM

LSP: %SystemRoot%\system32\msafd.dll

DPF: DirectAnimation Java Classes - file://c:\winnt\Java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://c:\winnt\Java\classes\xmldso.cab

FF - ProfilePath - c:\documents and settings\Per Johansson\Application Data\Mozilla\Firefox\Profiles\y5n96x1p.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.blt.se

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program\Java\jre6\lib\deploy\jqs\ff

FF - Ext: 20-20 3D Viewer: 2020Player@2020Technologies.com - %profile%\extensions\2020Player@2020Technologies.com

.

- - - - FÖRÄLDRALÖSA POSTER SOM TAGITS BORT - - - -

 

Notify-avgrsstarter - avgrsstx.dll

AddRemove-adsonmedia - c:\winnt\system32\{6b4ffbcb-a303-0fd2-17f2-814fbb57bd01}.dll-uninst.exe

AddRemove-Avidemux 2.4 - c:\program\Avidemux 2.4\uninstall.exe

AddRemove-AviSplit Classic (Freeware)_is1 - c:\program\bobyte\AviSplit classic\unins000.exe

AddRemove-Q280838 - c:\winnt\$NtUninstallQ280838$\hotfix.exe

AddRemove-setup - c:\winnt\rundll32.exe

AddRemove-t@b ZS4 Video Editor_is1 - c:\program\t@b\unins000.exe

 

 

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2011-01-18 00:46

Windows 5.0.2195 Service Pack 4 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

 

c:\winnt\system32\Perflib_Perfdata_ec.dat 16384 bytes

 

scan completed successfully

hidden files: 1

 

**************************************************************************

.

--------------------- DLLer som "laddats" under processer som körs ---------------------

 

- - - - - - - > 'winlogon.exe'(224)

c:\winnt\system32\wzcdlg.dll

c:\winnt\system32\WZCSAPI.DLL

c:\winnt\system32\MPRAPI.DLL

 

- - - - - - - > 'Explorer.EXE'(1048)

c:\winnt\AppPatch\AcLayers.DLL

c:\winnt\system32\SHDOCVW.DLL

.

Sluttid: 2011-01-18 00:51:08 - datorn startades om.

ComboFix-quarantined-files.txt 2011-01-17 23:50

ComboFix2.txt 2009-06-21 10:35

ComboFix3.txt 2009-06-09 08:18

 

Före genomsökningen: 4 700 200 960 byte ledigt

Efter genomsökningen: 5 551 534 080 byte ledigt

 

- - End Of File - - 497BD4E17A47E0301035F0A5E8C18950

 

Har installerat avast väntar på scanning

Link to comment
Share on other sites

Har kört en fullständig scan med Avast och allt rullar på fint. Jag måste säga att det verkar vara bra mycket bättre än AVG.

Tackar för hjälpen....

/

Link to comment
Share on other sites

Hej,

det återstår en del saker fortfarande!

Kul att du är nöjd med Avast!

 

Om du tittar under rubrikraden

((((((((((((((((((((((((((((((((((((((( Andra raderingar ))))))))))))))))))))))))))))))))))))))))))))))))

i Combofixloggen, så finns det en hel del bilder och annat, ngt som du behöver ha kvar?

Finns i Combofix karantänen ännu.

 

Ladda upp följande fil på Virustotal: http://www.virustotal.com/#file-upload

c:\winnt\system32\mspmsnsv.dll

Återkom med svarslänk.

 

Avinstallera följande, kontrollpanelen\Program:

TB: FreeRIP.com Toolbar: {081230f8-ea50-42a9-983c-d22abc2eed3b} - c:\program\freerip3\toolband.dll

Java 6 Update 18 och installera senaste version: http://www.java.com/sv/

 

Kör sedan en ny DDS, bifoga också Attach.txt som fil.

Mvh

Mats H

Link to comment
Share on other sites

c:\winnt\system32\mspmsnsv.dll

 

MD5: addaf2c086e24065549d9cb616ead113

Date first seen: 2009-08-27 21:17:45 (UTC)

Date last seen: 2009-08-27 21:17:45 (UTC)

Detection ratio: 0/41

 

DDS:

 

DDS (Ver_10-12-12.02) - NTFSx86

Run by Per Johansson at 11:12:19,24 on to 2011-01-20

Internet Explorer: 6.0.2800.1106 BrowserJavaVersion: 1.6.0_23

Microsoft Windows 2000 Professional 5.0.2195.4.1252.46.1053.18.639.373 [GMT 1:00]

 

 

============== Running Processes ===============

 

C:\WINNT\system32\LEXBCES.EXE

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\LEXPPS.EXE

C:\Program\Alwil Software\Avast5\AvastSvc.exe

C:\WINNT\system32\bgsvcgen.exe

C:\WINNT\System32\nvsvc32.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\system32\stisvc.exe

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\WINNT\system32\mspmspsv.exe

C:\WINNT\Explorer.EXE

C:\Program\Alwil Software\Avast5\avastUI.exe

C:\WINNT\system32\internat.exe

C:\Program\Skype\Phone\Skype.exe

C:\Program\DAEMON Tools Lite\daemon.exe

C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Program\Personal\bin\Personal.exe

C:\Program\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe

C:\Program\Packard Bell Diamond 1200Plus\Driver\WATCH.exe

C:\Program\Microsoft Office\Office\OSA.EXE

C:\Program\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe

C:\WINNT\System32\SCardSvr.exe

C:\Program\Mozilla Firefox\firefox.exe

C:\Program\Outlook Express\msimn.exe

C:\WINNT\system32\msiexec.exe

C:\Program\Java\jre6\bin\jqs.exe

C:\Documents and Settings\Per Johansson\Mina dokument\Hämtade filer\dds(4).scr

 

============== Pseudo HJT Report ===============

 

uStart Page = hxxp://www.blt.se/

mStart Page = about:blank

BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: FreeRIP.com Toolbar: {081230f8-ea50-42a9-983c-d22abc2eed3b} - c:\program\freerip3\toolband.dll

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

EB: Media Band: {32683183-48a0-441b-a342-7c2a440a9478} - %SystemRoot%\System32\browseui.dll

uRun: [internat.exe] internat.exe

uRun: [skype] "c:\program\skype\phone\Skype.exe" /nosplash /minimized

uRun: [DAEMON Tools Lite] "c:\program\daemon tools lite\daemon.exe" -autorun

mRun: [synchronization Manager] mobsync.exe /logon

mRun: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

mRun: [nwiz] nwiz.exe /install

mRun: [avast5] "c:\program\alwil software\avast5\avastUI.exe" /nogui

mRun: [sunJavaUpdateSched] "c:\program\delade filer\java\java update\jusched.exe"

dRun: [internat.exe] internat.exe

dRunOnce: [^SetupICWDesktop] c:\program\internet explorer\connection wizard\icwconn1.exe /desktop

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\micros~1.lnk - c:\program\microsoft office\office\FINDFAST.EXE

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\office~1.lnk - c:\program\microsoft office\office\OSA.EXE

StartupFolder: c:\docume~1\perjoh~1\start-~1\program\autost~1\pictur~1.lnk - c:\program\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\adobeg~1.lnk - c:\program\delade filer\adobe\calibration\Adobe Gamma Loader.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\exifla~1.lnk - c:\program files\finepixviewer\QuickDCF2.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\personal.lnk - c:\program\personal\bin\Personal.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\uleadp~1.lnk - c:\program\ulead systems\ulead photo express 3.0 se\CalCheck.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\watch.lnk - c:\program\packard bell diamond 1200plus\driver\WATCH.exe

IE: &FreeRIP Search - c:\program\freerip3\toolband.dll/MENUSEARCH.HTM

DPF: DirectAnimation Java Classes - file://c:\winnt\java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://c:\winnt\java\classes\xmldso.cab

DPF: {0000000A-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/d/4/4/d446e8a9-3a86-4b59-bb19-f5bd11b40367/wmavax.CAB

DPF: {00000161-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/msaudio.cab

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {31564D57-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmvax.cab

DPF: {3234504D-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/mpeg4ax.CAB

DPF: {32564D57-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmv8ax.cab

DPF: {3334504D-0000-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/mpeg4ax.cab

DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} - hxxps://asp.photoprintit.de/microsite/5025/defaults/activex/ips/IPSUploader4.cab

DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Notify: nwprovau - nwprovau.dll

 

================= FIREFOX ===================

 

FF - ProfilePath - c:\docume~1\perjoh~1\applic~1\mozilla\firefox\profiles\y5n96x1p.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.blt.se

FF - plugin: c:\documents and settings\per johansson\application data\mozilla\firefox\profiles\y5n96x1p.default\extensions\2020player@2020technologies.com\plugins\NP2020Player.dll

FF - plugin: c:\program\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program\mozilla firefox\plugins\npdeployJava1.dll

FF - plugin: c:\program\personal\bin\np_prsnl.dll

FF - plugin: c:\program\real\realone player\netscape6\nppl3260.dll

FF - plugin: c:\program\real\realone player\netscape6\nprjplug.dll

FF - plugin: c:\program\real\realone player\netscape6\nprpjplug.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program\java\jre6\lib\deploy\jqs\ff

FF - Ext: 20-20 3D Viewer: 2020Player@2020Technologies.com - %profile%\extensions\2020Player@2020Technologies.com

 

============= SERVICES / DRIVERS ===============

 

R1 aswSP;aswSP;c:\winnt\system32\drivers\aswSP.sys [2011-1-18 294608]

R2 AppleTalk;AppleTalk Protocol;c:\winnt\system32\drivers\sfmatalk.sys [2000-1-12 148400]

R2 aswFsBlk;aswFsBlk;c:\winnt\system32\drivers\aswFsBlk.sys [2011-1-18 17744]

R2 aswMon;aswMon;c:\winnt\system32\drivers\aswmon.sys [2011-1-18 94544]

R2 avast! Antivirus;avast! Antivirus;c:\program\alwil software\avast5\AvastSvc.exe [2011-1-18 40384]

R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [2003-4-26 15968]

R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [2003-4-26 13776]

R3 usbhub20;Stöd för USB 2.0 Rotnav;c:\winnt\system32\drivers\usbhub20.sys [2004-9-13 49776]

S2 DegCs Controler;DegCs Controler;"c:\winnt\system32\drivers\degcs.exe" --> c:\winnt\system32\drivers\DegCs.exe [?]

S3 viafilter;VIA USB Filter;c:\winnt\system32\drivers\viausb.sys [2003-4-26 9038]

 

=============== Created Last 30 ================

 

2011-01-20 10:10:30 472808 ----a-w- c:\winnt\system32\deployJava1.dll

2011-01-20 10:10:30 472808 ----a-w- c:\program\mozilla firefox\plugins\npdeployJava1.dll

2011-01-20 09:34:55 1409 ----a-w- c:\winnt\QTFont.for

2011-01-18 00:22:32 38848 ----a-w- c:\winnt\avastSS.scr

2011-01-18 00:22:03 -------- d-----w- c:\docume~1\alluse~1\applic~1\Alwil Software

2011-01-17 23:32:05 89088 ----a-w- c:\winnt\MBR.exe

2011-01-17 23:31:55 -------- d-----w- C:\ComboFix

2011-01-16 19:02:46 238864 ----a-w- c:\winnt\system32\CF30765.exe

 

==================== Find3M ====================

 

2010-11-12 15:34:10 73728 ----a-w- c:\winnt\system32\javacpl.cpl

2006-05-03 09:06:54 163328 --sh--r- c:\winnt\system32\flvDX.dll

2007-02-21 10:47:16 31232 --sh--r- c:\winnt\system32\msfDX.dll

 

============= FINISH: 11:14:01,91 ===============

Attach.txt

Link to comment
Share on other sites

Hej,

hur fungerar din dator nu?

DDS loggen ser bra ut, några saker återstår.

I Firefox, avinstallera eller inaktivera ditt gamla Java Tillägg 6 Update 18.

Starta om Firefox och sök efter uppdateringar av Firefox.

 

Avinstallera följande program/Toolbar i Kontrollpanelen\Program

FreeRIP v3.5

RegCure 1.5.2.7

 

Uppdatera följande:

Skype

VideoLAN VLC media player 0.8.6c

 

Städning:

1. Ta bort samtliga systemåterställningspunkter eftersom dessa kan vara infekterade.

Börja med att skapa en ny systemåterställningspunkt:

XP:

Start - Program- Tillbehör - Systemverktyg - Systemåterställning

Välj att skapa en ny återställningspunkt och tryck på Nästa.

Högerklick på Datorn - Egenskaper - Systemskydd

Tryck på Skapa.

 

Ta sedan bort alla gamla systemåterställningspunkter genom att köra diskrensningsprogrammet.

Högerklicka på C: i Den här datorn/Utforskaren och välj Egenskaper.

På fliken Allmänt finns det en knapp som heter Diskrensning. Välj den.

Efter några minuter kommer programmet upp och då väljer du en flik som heter Fler alternativ eller något likande. Tryck på den Rensa-knapp som tar bort alla systemåterställningspunkter utom den senaste.

 

2. Ladda ner avinstallationsprogrammet OTC till Skrivbordet.

http://oldtimer.geekstogo.com/OTC.exe

Dubbelklicka på filen för att starta programmet.

Tryck på knappen CleanUp! och de olika fix-program som du har laddat ner kommer att avinstalleras, inkl. detta program, efter en omstart av datorn. Ta bort DDS-programmet och dess loggar. Om något är kvar efter det så fråga hur du ska ta bort det.

 

3. Ta bort alla tillfälliga filer genom att ladda ner TFC-Cleaner på Skrivbordet:

http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

Stäng av alla andra program, särskilt webbläsare.

Dubbelklicka på TFC-Cleaner.exe för att starta programmet.

 

Om du använder Firefox: Tryck på Firefox och välj Select All. Tryck på Empty Selected. Om du vill ha kvar dina lösenord så tryck No vid frågan.

 

Obs! Detta kommer att ta bort alla cookies, om du har cookies som du vill ha kvar så får du antingen spara undan dem innan eller låta bli att välja Select All och i stället markera allt annat.

 

4. Byt alla lösenord som du använder i datorn och på internet eftersom dessa kan ha kommit i orätta händer.

http://mnin.blogspot.com/2009/02/why-i-enjoyed-tiggersyzor.html beskriver ett skadligt program som spionerar genom att ta skärmbilder, logga tangentbordsnedtryckningar och läsa lösenord som är lagrade i webbläsare, epostprogram etc.

 

http://sites.google.com/site/ceblstockholm/home

 

Mvh

Mats H

 

Link to comment
Share on other sites

Datorn går kanon. Mycket bättre än tidigare

Går det att behålla Freerip ? Tycker det är rätt bra. Har gjort det andra.

Klar ?

Link to comment
Share on other sites

Hej,

om du hämtat det här, http://www.freerip.com/

samt inte använder dess Toolbar, så ska det väl gå bra.

Lite osäker på vad Toolbaren gör i tysthet!

Kolla noga att det inte följer med ngn ASK Toolbar vid ev. nyinstallation, ofta imarkerad vid installation.

 

Ja då ska det inte vara ngt mera!

Var försiktig med ditt Windows som är betydlig mer sårbart än senare versioner!

Kul att det fungerar som det ska!

Mvh

Mats H

Link to comment
Share on other sites

STORT TACK för hjälpen !

Har ni något donationskonto ? Lämnar gärna lite i kaffekassan...

Det blir ett nytt windows framöver.

/

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...