virus eller hacker ?

[Dardush]

tja !!

 

de e såå att jag tycker att min dator är lite konstigt, den är inte som det ska.

jag har vart runt lite på nätet och så när jag skulle kolla på filmer.

och jag undrar bara finns det någon som kan hjälpa mig o få reda på om

jag har någon virus på min dator eller att nån har hackat den ?

och vilken programa behöver jag ?

 

skulle varit tacksam !

[Mats H]

Hej,

du kan börja med detta:

För att du ska få så bra hjälp som möjligt så är det bra om nedanstående information finns i ditt inlägg.

 

Beskriv noga vad du har för problem med datorn, varför du tror eller vet att det finns skadliga program i datorn.

 

Om något antivirus- eller antispionprogram har hittat något skadligt så klistra in en logg där det framgår vad som har hittats och vilka filer och mappar som är inblandade.

 

Klistra in loggen/resultatet från programmet DDS. Spara DDS på Skrivbordet.

http://download.bleepingcomputer.com/sUBs/dds.scr

 

Starta programmet genom att dubbelklicka på det.

Tryck Yes/Ja om frågan om Optional Scan dyker upp.

I ditt svar klistrar du in loggen DSS.txt. Medan du bifogar Attach.txt som en fil.

 

DDS är ett program som listar processer som kör, program och tjänster som startas automatiskt samt filer i sådana mappar som är vanliga att skadliga program och som är nya eller ändrade under senaste 1-3 månader. DDS är ett mycket vanligt program bland oss som hjälper till att rensa datorer. Resultatet ger oss en grundläggande kunskap om vad som händer och har hänt nyligen i datorn, och från det kan vi dra slutsatser om vad som är nästa lämpliga steg i rensningen av datorn.

 

Obs! När du klistrar in en logg eller ett resultat i ditt inlägg använd inga knappar eller taggar utan kopiera det i programmet (oftast Anteckningar) och klistra in det direkt i rutan du skriver i.

Mvh

Mats H

[Dardush]

jag har gjort det och ¨fått fram filerna. hur ska jag göraa med de nu ?

[Mats H]

Hej,

använd Anteckningar, (Notepad) för att öppna DDS.txt.

Markera hela textdokumentet, tryck Ctrl +C för kopiera,

ställ markören här i inläggsrutan, Snabbsvar,

tryck sedan sedan Ctrl+V, så klistras dokumentet in.

 

Attatch.txt kan du bifoga som fil, se under snabbsvarsrutan och välj först Knappen Använd Full Redigerare, sedan Bläddra för att hitta filen, tryck sedan bifoga. Avsluta med att Skicka.

Mvh

Mats H

[Dardush]

DDS (Ver_10-12-12.02) - NTFS_AMD64

Run by Dardan at 23:29:35,67 on 2011-02-04

Internet Explorer: 8.0.7600.16385

Microsoft Windows 7 Home Premium 6.1.7600.0.1252.46.1053.18.3835.2106 [GMT 1:00]

 

AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

 

============== Running Processes ===============

 

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Program Files\IDT\WDM\STacSV64.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\Hpservice.exe

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\WLANExt.exe

C:\Windows\system32\conhost.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\IDT\WDM\AESTSr64.exe

C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe

C:\Windows\system32\taskhost.exe

C:\Windows\SysWOW64\ezSharedSvcHost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe

C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\IDT\WDM\sttray64.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe

C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe

C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\Windows\system32\wbengine.exe

C:\Windows\System32\svchost.exe -k swprv

C:\Windows\System32\vds.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10h_ActiveX.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Dardan\Desktop\dds.scr

C:\Windows\system32\conhost.exe

 

============== Pseudo HJT Report ===============

 

uStart Page = hxxp://google.se/

uSearch Bar = Preserve

mWinlogon: Userinit=userinit.exe

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

BHO: DivX HiQ: {593ddec6-7468-4cdd-90e1-42dadaa222e9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll

BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\IPS\IPSBHO.DLL

BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll

TB: @c:\Program Files (x86)\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\Program Files (x86)\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll

uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

uRunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10h_ActiveX.exe -update activex

mRun: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume

mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

StartupFolder: C:\Users\Dardan\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\SKRMUR~1.LNK - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-explorer: EnableShellExecuteHooks = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

mPolicies-system: HideFastUserSwitching = 0 (0x0)

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL

SEH: EasyBits ShellExecute Hook: {e54729e8-bb3d-4270-9d49-7389ea579090} - C:\Windows\SysWow64\EZUPBH~1.DLL

SEH: UPB:{B5A7F190-DDA6-4420-B3BA-52453494E6CD} - No File

mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"

{72853161-30C5-4D22-B7F9-0BBC1D38A37E}

{9030D464-4C02-4ABF-8ECC-5164760863C6}

{B4F3A835-0E21-4959-BA22-42B3008E02FF}

{DBC80044-A445-435b-BC74-9C25C1C588A9}

TB-X64: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

mRun-x64: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe

mRun-x64: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe

mRun-x64: [smartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background

mRun-x64: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden

SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook

 

============= SERVICES / DRIVERS ===============

 

R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\NISx64\1205000.07D\symds64.sys [2011-1-15 450608]

R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\NISx64\1205000.07D\symefa64.sys [2011-1-15 802864]

R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20110114.001\BHDrvx64.sys [2011-1-19 953904]

R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20110203.001\IDSviA64.sys [2011-2-4 476792]

R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\NISx64\1205000.07D\ironx64.sys [2011-1-15 171128]

R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\NISx64\1205000.07D\symnets.sys [2011-1-15 382072]

R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-14 59904]

R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2010-11-16 89600]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2011-1-5 203776]

R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-1-4 354304]

R2 AMD Reservation Manager;AMD Reservation Manager;C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-6-17 194496]

R2 ezSharedSvc;Easybits Services for Windows;C:\Windows\System32\ezSharedSvcHost.exe --> C:\Windows\System32\ezSharedSvcHost.exe [?]

R2 HP Wireless Assistant Service;HP Wireless Assistant Service;C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-6-19 103992]

R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-6-25 92216]

R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2009-7-8 30520]

R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-6-30 27192]

R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccsvchst.exe [2011-1-15 130000]

R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-1 2804568]

R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2011-2-4 46136]

R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2011-1-5 8283136]

R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2011-1-5 294400]

R3 clwvd;HP Webcam Splitter;C:\Windows\System32\drivers\clwvd.sys [2010-6-25 32880]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-1-16 132656]

R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]

R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2010-11-16 38456]

RUnknown WinFLdrv;WinFLdrv; [x]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-1-19 136176]

S2 KMService;KMService;C:\Windows\system32\srvany.exe --> C:\Windows\system32\srvany.exe [?]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-1-21 51445112]

S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]

S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-11-16 239136]

S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-11-16 295424]

S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]

S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]

S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]

S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-1-17 1255736]

S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]

 

=============== Created Last 30 ================

 

2011-02-04 22:20:23 -------- d-----w- C:\PROGRA~3\Recovery

2011-02-04 22:05:10 -------- d-----w- C:\Program Files (x86)\MSECache

2011-02-03 23:52:34 -------- d-----w- C:\Users\Dardan\AppData\Local\AMD

2011-02-03 23:50:18 -------- d-----w- C:\Program Files\Common Files\ATI Technologies

2011-02-03 23:50:18 -------- d-----w- C:\Program Files (x86)\Common Files\ATI Technologies

2011-02-03 23:50:13 -------- d-----w- C:\Program Files (x86)\ATI Stream

2011-02-03 23:49:50 -------- d-----w- C:\Program Files (x86)\ATI Technologies

2011-02-03 23:49:48 -------- d-----w- C:\PROGRA~3\AMD

2011-02-03 23:49:43 46136 ----a-w- C:\Windows\System32\drivers\amdiox64.sys

2011-02-03 23:46:05 -------- d-----w- C:\Program Files\ATI Technologies

2011-02-03 23:45:04 -------- d-----w- C:\ATI

2011-02-03 23:43:32 -------- d-----w- C:\AMD

2011-02-01 13:25:13 -------- d-----w- C:\Users\Dardan\AppData\Roaming\Local

2011-02-01 13:24:28 -------- d-----w- C:\Program Files (x86)\Common Files\PX Storage Engine

2011-02-01 13:24:14 -------- d-----w- C:\Program Files\DivX

2011-02-01 13:23:49 -------- d-----w- C:\Program Files (x86)\Common Files\DivX Shared

2011-02-01 13:23:21 -------- d-----w- C:\Program Files (x86)\DivX

2011-02-01 13:22:52 -------- d-----w- C:\PROGRA~3\DivX

2011-01-26 19:58:25 -------- d-----w- C:\Users\Dardan\AppData\Local\HP MediaSmart Video

2011-01-19 01:03:34 -------- d-----w- C:\Users\Dardan\AppData\Local\Google

2011-01-18 20:38:35 -------- d-----w- C:\Program Files (x86)\VoipStunt.com

2011-01-18 13:38:12 -------- d-----w- C:\Windows\pss

2011-01-17 21:32:52 -------- d-----w- C:\Users\Dardan\AppData\Roaming\Personal

2011-01-17 21:32:34 -------- d-----w- C:\Program Files (x86)\Personal

2011-01-17 16:19:00 -------- d-----w- C:\Users\Dardan\AppData\Local\Omnifone_Ltd

2011-01-17 16:12:34 -------- d-----w- C:\Program Files (x86)\MusicStation

2011-01-17 16:12:34 -------- d-----w- C:\PROGRA~3\MusicStation

2011-01-17 16:11:59 -------- d-----w- C:\Users\Dardan\AppData\Local\Downloaded Installations

2011-01-17 16:11:45 -------- d-----w- C:\Program Files (x86)\Microsoft Synchronization Services

2011-01-17 16:03:41 -------- d-----w- C:\Users\Dardan\AppData\Roaming\WildTangent

2011-01-17 02:02:19 -------- d-----w- C:\Program Files (x86)\MSXML 4.0

2011-01-17 01:55:18 -------- d-----w- C:\Windows\SysWow64\Wat

2011-01-17 01:55:18 -------- d-----w- C:\Windows\System32\Wat

2011-01-16 22:57:08 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll

2011-01-16 22:57:08 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll

2011-01-16 22:57:08 48960 ----a-w- C:\Windows\System32\netfxperf.dll

2011-01-16 22:57:08 444752 ----a-w- C:\Windows\System32\mscoree.dll

2011-01-16 22:57:08 320352 ----a-w- C:\Windows\System32\PresentationHost.exe

2011-01-16 22:57:08 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll

2011-01-16 22:57:08 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe

2011-01-16 22:57:08 1942856 ----a-w- C:\Windows\System32\dfshim.dll

2011-01-16 22:57:08 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll

2011-01-16 22:57:08 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll

2011-01-16 22:55:31 294912 ----a-w- C:\Windows\System32\browserchoice.exe

2011-01-16 22:40:39 -------- d-----w- C:\Program Files (x86)\MSN Toolbar

2011-01-16 22:30:10 243712 ----a-w- C:\Windows\System32\drivers\ks.sys

2011-01-16 22:30:10 184832 ----a-w- C:\Windows\System32\drivers\usbvideo.sys

2011-01-16 17:11:32 255552 ----a-w- C:\Windows\SysWow64\drivers\mcdbus.sys

2011-01-16 17:11:31 255552 ----a-w- C:\Windows\System32\drivers\mcdbus.sys

2011-01-16 17:11:31 -------- d-----w- C:\Program Files (x86)\MagicDisc

2011-01-16 17:03:33 -------- d-----w- C:\Program Files\Microsoft Synchronization Services

2011-01-16 17:03:09 -------- d-----w- C:\Windows\PCHEALTH

2011-01-16 17:03:09 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition

2011-01-16 17:00:55 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8

2011-01-16 17:00:04 -------- d-----w- C:\Program Files\Microsoft Analysis Services

2011-01-16 17:00:03 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services

2011-01-16 16:59:57 -------- d-----w- C:\Windows\SHELLNEW

2011-01-16 16:06:09 8192 ----a-w- C:\Windows\SysWow64\srvany.exe

2011-01-16 15:50:09 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared

2011-01-16 14:30:20 15256 ----a-w- C:\Users\Dardan\AppData\Roaming\Microsoft\IdentityCRL\Production\ppcrlconfig.dll

2011-01-16 13:13:13 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

2011-01-16 13:13:13 2048 ----a-w- C:\Windows\System32\tzres.dll

2011-01-16 13:13:01 148992 ----a-w- C:\Windows\System32\t2embed.dll

2011-01-16 13:13:01 109056 ----a-w- C:\Windows\SysWow64\t2embed.dll

2011-01-16 13:11:39 516096 ----a-w- C:\Program Files\Windows Mail\wab.exe

2011-01-15 22:29:45 802864 ----a-w- C:\Windows\System32\drivers\NISx64\1205000.07D\symefa64.sys

2011-01-15 22:29:45 450608 ----a-w- C:\Windows\System32\drivers\NISx64\1205000.07D\symds64.sys

2011-01-15 22:29:45 382072 ----a-w- C:\Windows\System32\drivers\NISx64\1205000.07D\symnets.sys

2011-01-15 22:29:44 735864 ----a-w- C:\Windows\System32\drivers\NISx64\1205000.07D\srtsp64.sys

2011-01-15 22:29:44 40568 ----a-w- C:\Windows\System32\drivers\NISx64\1205000.07D\srtspx64.sys

2011-01-15 22:29:44 171128 ----a-w- C:\Windows\System32\drivers\NISx64\1205000.07D\ironx64.sys

2011-01-15 22:29:33 -------- d-----w- C:\Windows\System32\drivers\NISx64\1205000.07D

2011-01-15 20:24:13 -------- d-----w- C:\Program Files (x86)\SpeedFan

2011-01-15 20:18:18 -------- d-----w- C:\Users\Dardan\AppData\Local\CrashDumps

2011-01-15 20:02:43 -------- d-----w- C:\PROGRA~3\regid.1986-12.com.adobe

2011-01-15 19:24:57 -------- d-----w- C:\Users\Dardan\AppData\Local\Adobe

2011-01-15 18:39:08 -------- d-----w- C:\Program Files (x86)\VideoLAN

2011-01-15 18:34:08 -------- d-----w- C:\Users\Dardan\AppData\Local\Microsoft Help

2011-01-15 18:18:28 395640 ----a-w- C:\Users\Dardan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent.exe

2011-01-15 18:18:28 -------- d-----w- C:\Program Files (x86)\uTorrent

2011-01-15 18:17:46 -------- d-----w- C:\Users\Dardan\AppData\Roaming\uTorrent

2011-01-15 15:44:50 -------- d-----w- C:\Users\Dardan\AppData\Roaming\Spotify

2011-01-15 15:44:50 -------- d-----w- C:\Users\Dardan\AppData\Local\Spotify

2011-01-15 15:44:48 -------- d-----w- C:\Program Files (x86)\Spotify

2011-01-15 15:40:02 -------- d-----w- C:\Users\Dardan\Tracing

2011-01-15 15:38:56 -------- d-----w- C:\Users\Dardan\AppData\Local\CyberLink

2011-01-15 15:38:55 -------- d-----w- C:\Users\Dardan\AppData\Local\PowerCinema

2011-01-15 15:29:53 1397248 ----a-w- C:\Windows\SysWow64\win_utilman.exe

2011-01-15 15:29:47 -------- d-----w- C:\Users\Dardan\AppData\Roaming\_MDLogs

2011-01-15 15:28:53 8199504 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{4C6F864E-161D-45CC-903B-30386AE0FC48}\mpengine.dll

2011-01-15 15:28:52 270720 ------w- C:\Windows\System32\MpSigStub.exe

2011-01-15 15:27:50 174640 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS

2011-01-15 15:27:49 -------- d-----w- C:\Program Files\Symantec

2011-01-15 15:27:49 -------- d-----w- C:\Program Files\Common Files\Symantec Shared

2011-01-15 15:27:34 -------- d-----w- C:\Users\Dardan\AppData\Local\ATI

2011-01-15 15:27:33 -------- d-----w- C:\Users\Dardan\AppData\Roaming\hpqLog

2011-01-15 15:26:41 -------- d-----w- C:\Users\Dardan\AppData\Local\Hewlett-Packard

2011-01-15 15:20:07 -------- d-----w- C:\Users\Dardan\AppData\Local\VirtualStore

2011-01-15 15:16:03 4398360 ----a-w- C:\Windows\System32\d3dx9_32.dll

2011-01-15 15:16:03 3426072 ----a-w- C:\Windows\SysWow64\d3dx9_32.dll

2011-01-15 15:16:00 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2011-01-15 15:15:00 -------- d-----w- C:\Program Files (x86)\Windows Live SkyDrive

2011-01-15 15:14:23 74520 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\e40a71a21cbb4c6\DSETUP.dll

2011-01-15 15:14:23 484632 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\e40a71a21cbb4c6\DXSETUP.exe

2011-01-15 15:14:23 1670936 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\e40a71a21cbb4c6\dsetup32.dll

2011-01-15 15:13:46 139789648 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\wlcF852.tmp

2011-01-15 15:13:36 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live

 

==================== Find3M ====================

 

2011-01-05 03:37:14 8283136 ----a-w- C:\Windows\System32\drivers\atikmdag.sys

2011-01-05 03:22:46 22100480 ----a-w- C:\Windows\System32\atio6axx.dll

2011-01-05 03:03:34 17043968 ----a-w- C:\Windows\SysWow64\atioglxx.dll

2011-01-05 03:02:40 143360 ----a-w- C:\Windows\System32\atiapfxx.exe

2011-01-05 03:02:28 596480 ----a-w- C:\Windows\SysWow64\aticfx32.dll

2011-01-05 03:01:12 708608 ----a-w- C:\Windows\System32\aticfx64.dll

2011-01-05 02:58:42 462848 ----a-w- C:\Windows\System32\ATIDEMGX.dll

2011-01-05 02:58:22 480256 ----a-w- C:\Windows\System32\atieclxx.exe

2011-01-05 02:57:44 203776 ----a-w- C:\Windows\System32\atiesrxx.exe

2011-01-05 02:56:30 120320 ----a-w- C:\Windows\System32\atitmm64.dll

2011-01-05 02:56:10 423424 ----a-w- C:\Windows\System32\atipdl64.dll

2011-01-05 02:56:02 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll

2011-01-05 02:55:50 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll

2011-01-05 02:55:46 16384 ----a-w- C:\Windows\System32\atimuixx.dll

2011-01-05 02:55:40 59392 ----a-w- C:\Windows\System32\atiedu64.dll

2011-01-05 02:55:34 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll

2011-01-05 02:52:20 4101632 ----a-w- C:\Windows\SysWow64\atidxx32.dll

2011-01-05 02:43:20 4844544 ----a-w- C:\Windows\System32\atidxx64.dll

2011-01-05 02:33:30 51200 ----a-w- C:\Windows\System32\aticalrt64.dll

2011-01-05 02:33:28 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll

2011-01-05 02:33:20 44544 ----a-w- C:\Windows\System32\aticalcl64.dll

2011-01-05 02:33:20 4162048 ----a-w- C:\Windows\SysWow64\atiumdag.dll

2011-01-05 02:33:16 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll

2011-01-05 02:33:08 6815232 ----a-w- C:\Windows\System32\aticaldd64.dll

2011-01-05 02:32:56 1208320 ----a-w- C:\Windows\System32\atiumd6v.dll

2011-01-05 02:32:22 3218944 ----a-w- C:\Windows\System32\atiumd6a.dll

2011-01-05 02:31:52 5441024 ----a-w- C:\Windows\SysWow64\aticaldd.dll

2011-01-05 02:28:08 58880 ----a-w- C:\Windows\System32\coinst.dll

2011-01-05 02:27:06 5305856 ----a-w- C:\Windows\System32\atiumd64.dll

2011-01-05 02:25:04 3461120 ----a-w- C:\Windows\SysWow64\atiumdva.dll

2011-01-05 02:20:20 353792 ----a-w- C:\Windows\System32\atiadlxx.dll

2011-01-05 02:20:10 249856 ----a-w- C:\Windows\SysWow64\atiadlxy.dll

2011-01-05 02:19:58 14848 ----a-w- C:\Windows\System32\atig6pxx.dll

2011-01-05 02:19:54 12800 ----a-w- C:\Windows\SysWow64\atiglpxx.dll

2011-01-05 02:19:54 12800 ----a-w- C:\Windows\System32\atiglpxx.dll

2011-01-05 02:19:52 32256 ----a-w- C:\Windows\System32\atig6txx.dll

2011-01-05 02:19:44 27648 ----a-w- C:\Windows\SysWow64\atigktxx.dll

2011-01-05 02:19:38 294400 ----a-w- C:\Windows\System32\drivers\atikmpag.sys

2011-01-05 02:18:52 39936 ----a-w- C:\Windows\System32\atiuxp64.dll

2011-01-05 02:18:46 30720 ----a-w- C:\Windows\SysWow64\atiuxpag.dll

2011-01-05 02:18:34 38400 ----a-w- C:\Windows\System32\atiu9p64.dll

2011-01-05 02:18:26 28672 ----a-w- C:\Windows\SysWow64\atiu9pag.dll

2011-01-05 02:17:20 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll

2011-01-05 02:11:10 53760 ----a-w- C:\Windows\System32\atimpc64.dll

2011-01-05 02:11:10 53760 ----a-w- C:\Windows\System32\amdpcom64.dll

2011-01-05 02:11:00 52736 ----a-w- C:\Windows\SysWow64\atimpc32.dll

2011-01-05 02:11:00 52736 ----a-w- C:\Windows\SysWow64\amdpcom32.dll

2010-12-07 11:17:20 51200 ----a-w- C:\Windows\SysWow64\OpenCL.dll

2010-12-07 11:15:30 52736 ----a-w- C:\Windows\System32\OpenCL.dll

2010-11-16 09:00:31 52224 ----a-w- C:\Windows\System32\rtutils.dll

2010-11-16 09:00:31 37376 ----a-w- C:\Windows\SysWow64\rtutils.dll

2010-11-16 09:00:20 82944 ----a-w- C:\Windows\SysWow64\iccvid.dll

2010-11-16 08:58:48 5507968 ----a-w- C:\Windows\System32\ntoskrnl.exe

2010-11-16 08:58:48 3955080 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

2010-11-16 08:58:48 3899784 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

2010-11-16 08:57:45 1736608 ----a-w- C:\Windows\System32\ntdll.dll

2010-11-16 08:57:45 1289528 ----a-w- C:\Windows\SysWow64\ntdll.dll

2010-11-16 08:56:44 84992 ----a-w- C:\Windows\System32\asycfilt.dll

2010-11-16 08:56:44 67584 ----a-w- C:\Windows\SysWow64\asycfilt.dll

2010-11-16 08:56:31 1896832 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2010-11-16 08:56:18 613888 ----a-w- C:\Windows\System32\psisdecd.dll

2010-11-16 08:56:18 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll

2010-11-16 08:54:26 1877504 ----a-w- C:\Windows\System32\msxml3.dll

2010-11-16 08:54:26 1233920 ----a-w- C:\Windows\SysWow64\msxml3.dll

2010-11-16 08:54:14 144384 ----a-w- C:\Windows\System32\cdd.dll

2010-11-16 08:14:51 0 ----a-w- C:\Windows\ativpsrm.bin

2010-11-12 17:53:06 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2010-11-12 00:44:54 94208 ----a-w- C:\Windows\SysWow64\dpl100.dll

2010-11-08 22:57:04 353592 ----a-w- C:\Windows\SysWow64\DivXControlPanelApplet.cpl

 

============= FINISH: 23:30:55,25 ===============

[Dardush]

Hej,

använd Anteckningar, (Notepad) för att öppna DDS.txt.

Markera hela textdokumentet, tryck Ctrl +C för kopiera,

ställ markören här i inläggsrutan, Snabbsvar,

tryck sedan sedan Ctrl+V, så klistras dokumentet in.

 

Attatch.txt kan du bifoga som fil, se under snabbsvarsrutan och välj först Knappen Använd Full Redigerare, sedan Bläddra för att hitta filen, tryck sedan bifoga. Avsluta med att Skicka.

Mvh

Mats H

 

tyvärr men jag får inte fram någon ruta där jag kan bifoga filen även om jag väljer full redigerare.

[Mats H]

Hej,

Beskriv noga vad du har för problem med datorn, så vi förstår lite mera.

Hur du bifogar en fil, var kanske lite otydlig av mig!

Se denna bild, se Bilagor och Bläddra.

Mvh

Mats H

[Dardush]

det här fick jag fram när jag vill se på bilden !

 

[#10171] Du har inte rättigheter att visa denna bilaga.

 

alltså, iconerna på skrivbordet dom typp "blinkar" hela typp , typ som man skulle uppdatera skrivbordet så brukar man se hur ikoner försvinner o kommer tillbaka , o det händer hela tiden nu, och jag skulle hantera behörighet på mapppar så såg jag ett ökend konto där , som jag ite kunde ta bort, o den har inte funnits där innan.

[Mats H]

Hej,

kontrollera att inga av dessa program är igång till att börja med:

uTorrent och Spotify och MusicStation.

Vad har du för dator, RAM minne osv, grafikkort.

Är datorn gammal?

Vilken dag började problemen, datum om du kommer ihåg.

Mvh

Mats H

[Dardush]

HP pavilion notebook pc, 4 gig ram , AMD athlon™ II P340 Dual-core

ATI Mobility Radeon HD 5400 Series 512 mbit

datorn är köpt 4 veckor sen. datorn började betee sig så hära

efter att jag hade besökt hxxp://tv.blinkx.com...UTL8x91lqCkkjMX för att titta på lite serier , o då kom de pop-ups o så, jag är inte så dålig på datorer så skulle aldrig hålla på med virus sidor o så.

[Mats H]

Hej,

gör följande:

prova att installera Malwarebytes, hittas här:

Malwarebytes' Anti-Malware

Installera och välj att köra snabbskanner, följ programmets instruktioner noga, om något hittas och programmet vill starta om din dator ,gör det.

Klistra sedan in din logg här i din tråd.

Loggar hittas under fliken Loggar.

Mvh

Mats H

[Flyfisherman]

HP pavilion notebook pc, 4 gig ram , AMD athlon™ II P340 Dual-core

ATI Mobility Radeon HD 5400 Series 512 mbit

datorn är köpt 4 veckor sen. datorn började betee sig så hära

efter att jag hade besökt xxxxxxxxxxxxxxxx för att titta på lite serier , o då kom de pop-ups o så, jag är inte så dålig på datorer så skulle aldrig hålla på med virus sidor o så.

Är detta en skadlig webbplats, så kanske den länken skall bort?

[Dardush]

det verkar inte vara det , jag gjorde en backup igår på pc:n , det verkar funka fint nu igen, jag sökte igenom dator med malwarebytes o den hittade inget, så vet inte riktigt vad som hände. o länke e inte skadligt nej