Winedb32.rom

[Arwen]

Hej,

jag får ett felmeddelande varje gång jag startar datorn som säger "Det uppstod ett problem med starten av winebd32.rom det går inte att hitta den angivna modulen". Hur får jag bort det?

 

Tack på förhand!

 

MM

[Mats H]

Hej,

du kan prova med att köra Malwarebytes och se om det hittar något.

http://www.malwarebytes.org/mbam.php

Kör en snabbskanner och följ programmets instruktioner. Omstart kan krävas.

Klistra in din logg här i din tråd efter körning.

Loggar hittas under fliken Loggar.

Mvh

Mats H

[Arwen]

Fick följande resultat:

 

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

 

Databasversion: 6094

 

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

 

2011-03-18 09:12:24

mbam-log-2011-03-18 (09-12-24).txt

 

Skanningstyp: Snabbskanning

Antal skannade objekt: 162876

Förfluten tid: 2 minut(er), 46 sekund(er)

 

Infekterade minnesprocesser: 0

Infekterade minnesmoduler: 0

Infekterade registernycklar: 0

Infekterade registervärden: 1

Infekterade registerdataposter: 0

Infekterade mappar: 0

Infekterade filer: 0

 

Infekterade minnesprocesser:

(Inga illasinnade poster hittades)

 

Infekterade minnesmoduler:

(Inga illasinnade poster hittades)

 

Infekterade registernycklar:

(Inga illasinnade poster hittades)

 

Infekterade registervärden:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSSMSGS (Backdoor.Bot) -> Value: MSSMSGS -> Quarantined and deleted successfully.

 

Infekterade registerdataposter:

(Inga illasinnade poster hittades)

 

Infekterade mappar:

(Inga illasinnade poster hittades)

 

Infekterade filer:

(Inga illasinnade poster hittades)

 

 

Hej,

du kan prova med att köra Malwarebytes och se om det hittar något.

http://www.malwarebytes.org/mbam.php

Kör en snabbskanner och följ programmets instruktioner. Omstart kan krävas.

Klistra in din logg här i din tråd efter körning.

Loggar hittas under fliken Loggar.

Mvh

Mats H

[Mats H]

Hej,

fint att du hittade detta, hur fungerar datorn nu?

Kör nu en DDS,

Klistra in loggen/resultatet från programmet DDS. Spara DDS på Skrivbordet.

http://download.blee...om/sUBs/dds.scr

Starta programmet genom att dubbelklicka på det.

Tryck Yes/Ja om frågan om Optional Scan dyker upp.

I ditt svar klistrar du in loggen DSS.txt. Medan du bifogar Attach.txt som en fil.

 

DDS är ett program som listar processer som kör, program och tjänster som startas automatiskt samt filer i sådana mappar som är vanliga att skadliga program och som är nya eller ändrade under senaste 1-3 månader. DDS är ett mycket vanligt program bland oss som hjälper till att rensa datorer. Resultatet ger oss en grundläggande kunskap om vad som händer och har hänt nyligen i datorn, och från det kan vi dra slutsatser om vad som är nästa lämpliga steg i rensningen av datorn.

 

Obs! När du klistrar in en logg eller ett resultat i ditt inlägg använd inga knappar eller taggar utan kopiera det i programmet (oftast Anteckningar) och klistra in det direkt i rutan du skriver i.

Mvh

Mats H

[Arwen]

Hej igen,

har kört DDS och fick nedanstående. Datorn fungerar väl som den ska egentligen förutom att jag får en massa meddelanden från MSN Messenger av mina vänner att jag är inloggad fast jag avinstallerat programmet helt och hållet.

 

.

DDS (Ver_11-03-05.01) - NTFS_AMD64

Run by Rebecca at 9:05:37,92 on 2011-03-21

Internet Explorer: 8.0.7600.16385

Microsoft Windows 7 Home Premium 6.1.7600.0.1252.46.1053.18.3999.2560 [GMT 1:00]

.

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskhost.exe

C:\Program Files (x86)\Bonjour\mDNSResponder.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Launch Manager\dsiwmis.exe

C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerSvc.exe

C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe

C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe

C:\Program Files (x86)\Packard Bell GameZone\GameConsole\OberonGameConsoleService.exe

C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Packard Bell\Optical Drive Power Management\ODDPWR.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files (x86)\uTorrent\uTorrent.exe

C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

C:\Users\Rebecca\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe

C:\Program Files (x86)\Personal\bin\Personal.exe

C:\Program Files\Packard Bell\Optical Drive Power Management\ODDPWRSvc.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

C:\Program Files (x86)\Voddler\service\voddler.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\WUDFHost.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files (x86)\Launch Manager\LManager.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Windows\system32\svchost.exe -k SDRSVC

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTray.exe

C:\Windows\system32\igfxext.exe

C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerEvent.exe

C:\Windows\system32\svchost.exe -k WindowsMobile

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe

C:\Users\Rebecca\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\79XHJ6OW\dds[1].scr

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uSearch Bar = Preserve

uStart Page = hxxp://www.di.se/nyheter

uDefault_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=041d&m=en_butterfly_m&r=27360510s306l0321z1k5f4831u257

mDefault_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=041d&m=en_butterfly_m&r=27360510s306l0321z1k5f4831u257

mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=041d&m=en_butterfly_m&r=27360510s306l0321z1k5f4831u257

uInternet Settings,ProxyOverride = *.local

uURLSearchHooks: H - No File

mWinlogon: Userinit=userinit.exe,

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

BHO: Inloggningshjälp för Windows Live ID: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

TB: {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File

uRun: [Google Update] "C:\Users\Rebecca\AppData\Local\Google\Update\GoogleUpdate.exe" /c

uRun: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"

uRun: [spybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun: [<NO NAME>]

mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"

mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BANKID~1.LNK - C:\Program Files (x86)\Personal\bin\Personal.exe

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {DC6FEBC5-0A2D-458A-A01B-5DB15EEC4305} - hxxp://webc.mariakyrkan.org/auth/controls/IlosoftImageUpload.dll

DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/m3/photouploadcontrol/VistaMSNPUplden-us.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

{9030D464-4C02-4ABF-8ECC-5164760863C6}

TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

TB-X64: {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File

TB-X64: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File

mRun-x64: [iAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe

mRun-x64: [igfxTray] C:\Windows\system32\igfxtray.exe

mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe

mRun-x64: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe

mRun-x64: [ODDPwr] "C:\Program Files\Packard Bell\Optical Drive Power Management\ODDPwr.exe"

mRun-x64: [Acer ePower Management] C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTrayLauncher.exe

mRun-x64: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

mRun-x64: [skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe

.

============= SERVICES / DRIVERS ===============

.

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-10-1 202752]

R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2009-10-1 107016]

R2 ePowerSvc;Acer ePower Service;C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerSvc.exe [2009-10-1 787968]

R2 Greg_Service;GRegService;C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [2009-6-4 1150496]

R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2009-8-21 62720]

R2 OberonGameConsoleService;Oberon Media Game Console service;C:\Program Files (x86)\Packard Bell GameZone\GameConsole\OberonGameConsoleService.exe [2009-10-1 44312]

R2 ODDPwrSvc;Acer ODD Power Service;C:\Program Files\Packard Bell\Optical Drive Power Management\ODDPWRSvc.exe [2009-10-1 151552]

R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2011-3-15 1153368]

R2 Updater Service;Updater Service;C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2009-10-1 240160]

R2 VoddlerNet;VoddlerNet;C:\Program Files (x86)\Voddler\service\voddler.exe [2010-8-24 1194192]

R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atipmdag.sys [2009-10-1 6204416]

R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2009-10-1 140800]

R3 intelkmd;intelkmd;C:\Windows\System32\drivers\igdpmd64.sys [2009-10-1 7370176]

R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:\Windows\System32\drivers\L1C62x64.sys [2009-10-1 58880]

R3 NETw1v64;Intel® Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw1v64.sys [2009-10-1 7058432]

R3 seehcri;Sony Ericsson seehcri Device Driver;C:\Windows\System32\drivers\seehcri.sys [2010-6-19 34032]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2010-6-19 13352]

S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\System32\drivers\netaapl64.sys [2010-4-19 22528]

S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw5v64.sys [2009-10-1 5435904]

S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-6-19 155344]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2010-9-28 51712]

S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-6-8 1255736]

.

=============== Created Last 30 ================

.

2011-03-18 18:45:15 7947600 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{AEDB08A0-37E6-4C7A-B9C5-0641C1950636}\mpengine.dll

2011-03-18 08:09:03 -------- d-----w- C:\Users\Rebecca\AppData\Roaming\Malwarebytes

2011-03-18 08:08:58 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys

2011-03-18 08:08:57 -------- d-----w- C:\PROGRA~3\Malwarebytes

2011-03-18 08:08:54 24152 ----a-w- C:\Windows\System32\drivers\mbam.sys

2011-03-18 08:08:54 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2011-03-15 17:37:45 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy

2011-03-15 17:37:45 -------- d-----w- C:\PROGRA~3\Spybot - Search & Destroy

2011-03-15 14:09:39 469256 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\9dc279a81cbe31a2d\InstallManager_WLE_WLE.exe

2011-03-15 14:09:16 15712 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\91af010a1cbe31a21\MeshBetaRemover.exe

2011-03-15 14:08:55 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\8477f1271cbe31a1a\DSETUP.dll

2011-03-15 14:08:55 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\8477f1271cbe31a1a\DXSETUP.exe

2011-03-15 14:08:55 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\8477f1271cbe31a1a\dsetup32.dll

2011-03-15 14:08:53 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\83284f201cbe31a19\DSETUP.dll

2011-03-15 14:08:53 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\83284f201cbe31a19\DXSETUP.exe

2011-03-15 14:08:53 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\83284f201cbe31a19\dsetup32.dll

2011-03-15 14:07:52 -------- d-----w- C:\Users\Rebecca\AppData\Local\Windows Live

2011-03-11 20:42:47 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2011-03-11 09:38:58 -------- d-----w- C:\Program Files (x86)\Common Files\Macrovision Shared

2011-03-09 20:44:02 -------- d-----w- C:\Program Files (x86)\Personal

2011-02-27 08:20:15 -------- d-----w- C:\Users\Rebecca\AppData\Local\ElevatedDiagnostics

2011-02-24 10:08:01 367104 ----a-w- C:\Windows\System32\wcncsvc.dll

2011-02-24 10:08:01 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll

2011-02-23 15:37:06 442880 ----a-w- C:\Windows\SysWow64\XpsPrint.dll

2011-02-23 15:37:05 662528 ----a-w- C:\Windows\System32\XpsPrint.dll

2011-02-23 15:37:05 475648 ----a-w- C:\Windows\System32\XpsGdiConverter.dll

2011-02-23 15:37:05 288256 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll

.

==================== Find3M ====================

.

2011-02-19 06:37:44 1135104 ----a-w- C:\Windows\System32\FntCache.dll

2011-02-19 06:37:10 1540608 ----a-w- C:\Windows\System32\DWrite.dll

2011-02-19 06:36:49 902656 ----a-w- C:\Windows\System32\d2d1.dll

2011-02-19 05:32:48 1074176 ----a-w- C:\Windows\SysWow64\DWrite.dll

2011-02-19 05:32:35 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll

2011-02-02 16:11:20 270720 ------w- C:\Windows\System32\MpSigStub.exe

2011-01-26 06:53:10 982912 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2011-01-26 06:53:10 265088 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2011-01-26 06:31:20 144384 ----a-w- C:\Windows\System32\cdd.dll

2011-01-07 08:06:50 46080 ----a-w- C:\Windows\System32\atmlib.dll

2011-01-07 07:27:11 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

2011-01-07 05:49:20 366080 ----a-w- C:\Windows\System32\atmfd.dll

2011-01-07 05:33:11 294400 ----a-w- C:\Windows\SysWow64\atmfd.dll

2011-01-05 06:20:30 612352 ----a-w- C:\Windows\System32\vbscript.dll

2011-01-05 05:37:33 428032 ----a-w- C:\Windows\SysWow64\vbscript.dll

2011-01-05 04:00:16 3127808 ----a-w- C:\Windows\System32\win32k.sys

2010-12-23 06:07:50 1118720 ----a-w- C:\Windows\System32\sbe.dll

2010-12-23 06:07:49 961024 ----a-w- C:\Windows\System32\CPFilters.dll

2010-12-23 06:07:49 723968 ----a-w- C:\Windows\System32\EncDec.dll

2010-12-23 06:02:33 259072 ----a-w- C:\Windows\System32\mpg2splt.ax

2010-12-23 05:28:29 850432 ----a-w- C:\Windows\SysWow64\sbe.dll

2010-12-23 05:28:28 642048 ----a-w- C:\Windows\SysWow64\CPFilters.dll

2010-12-23 05:28:28 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll

2010-12-23 05:24:02 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax

2010-01-05 10:32:14 12148656 ----a-w- C:\Program Files (x86)\fcc32.exe

2009-07-08 15:57:06 1061944 ----a-w- C:\Program Files (x86)\dbghelp.dll

2008-01-08 17:41:46 970752 ----a-w- C:\Program Files (x86)\fcsmapi.dll

.

============= FINISH: 9:06:45,18 ===============

 

 

 

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_11-03-05.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 2010-05-30 22:21:40

System Uptime: 2011-03-21 08:46:05 (1 hours ago)

.

Motherboard: Packard Bell | | EN Butterfly m

Processor: Genuine Intel® CPU U4100 @ 1.30GHz | CPU | 1300/800mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 454 GiB total, 318,947 GiB free.

D: is FIXED (FAT) - 2 GiB total, 1,843 GiB free.

E: is Removable

F: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP140: 2011-02-25 12:52:48 - Windows Update

RP141: 2011-02-28 08:39:27 - Windows Update

RP142: 2011-03-02 10:58:23 - Windows Update

RP143: 2011-03-05 10:34:15 - Windows Update

RP144: 2011-03-08 09:04:57 - Windows Update

RP145: 2011-03-09 20:44:08 - Windows Update

RP146: 2011-03-11 08:34:31 - Windows Update

RP147: 2011-03-11 21:20:35 - Windows Säkerhetskopiering

RP148: 2011-03-11 21:31:59 - Windows Säkerhetskopiering

RP149: 2011-03-11 21:33:36 - Windows Säkerhetskopiering

RP150: 2011-03-11 21:43:24 - Installed Sony Ericsson Drivers

RP151: 2011-03-13 19:00:13 - Windows Säkerhetskopiering

RP152: 2011-03-15 15:06:20 - Windows Update

RP153: 2011-03-15 15:14:49 - Windows Update

RP154: 2011-03-17 20:19:06 - Windows Update

RP155: 2011-03-18 19:44:31 - Windows Update

RP156: 2011-03-20 19:00:14 - Windows Säkerhetskopiering

.

==== Installed Programs ======================

.

Acrobat.com

Adobe Acrobat X Pro - English, Français, Deutsch

Adobe AIR

Adobe Anchor Service CS3

Adobe Asset Services CS3

Adobe Bridge CS3

Adobe Bridge Start Meeting

Adobe Camera Raw 4.0

Adobe CMaps

Adobe Color - Photoshop Specific

Adobe Color Common Settings

Adobe Color EU Recommended Settings

Adobe Color JA Extra Settings

Adobe Color NA Extra Settings

Adobe Default Language CS3

Adobe Device Central CS3

Adobe ExtendScript Toolkit 2

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Fonts All

Adobe Help Viewer CS3

Adobe Linguistics CS3

Adobe PDF Library Files

Adobe Photoshop CS3

Adobe Reader 9.3.3 MUI

Adobe Setup

Adobe Shockwave Player 11.5

Adobe Stock Photos CS3

Adobe Type Support

Adobe Update Manager CS3

Adobe Version Cue CS3 Client

Adobe WinSoft Linguistics Plugin

Adobe XMP Panels CS3

Advertising Center

Apple Application Support

Apple Software Update

Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

µTorrent

Backup Manager Basic

BankID säkerhetsprogram 4.17.0

Catalyst Control Center - Branding

Catalyst Control Center Core Implementation

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Vista

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-core-static

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

CyberLink PowerDVD 8

FirstClass® Client

Google Chrome

Google Toolbar for Internet Explorer

Identity Card

ImagXpress

Java Auto Updater

Java 6 Update 24

Junk Mail filter update

Launch Manager

Malwarebytes' Anti-Malware

Microsoft Choice Guard

Microsoft Office 2007 Service Pack 2 (SP2)

Microsoft Office Access MUI (English) 2007

Microsoft Office Access Setup Metadata MUI (English) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (English) 2007

Microsoft Office Groove MUI (English) 2007

Microsoft Office Groove Setup Metadata MUI (English) 2007

Microsoft Office InfoPath MUI (English) 2007

Microsoft Office Live Add-in 1.5

Microsoft Office OneNote MUI (English) 2007

Microsoft Office Outlook MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office PowerPoint Viewer 2007 (Swedish)

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

Microsoft Office Publisher MUI (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Suite Activation Assistant

Microsoft Office Word MUI (English) 2007

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Works

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Nero 9 Essentials

Nero ControlCenter

Nero DiscSpeed

Nero DiscSpeed Help

Nero DriveSpeed

Nero DriveSpeed Help

Nero Express Help

Nero InfoTool

Nero InfoTool Help

Nero Installer

Nero Online Upgrade

Nero StartSmart

Nero StartSmart Help

Nero StartSmart OEM

NeroExpress

neroxml

Net iD 5.3 (32-bit Edition)

Optical Drive Power Management

Packard Bell GameZone Console

Packard Bell InfoCentre

Packard Bell MyBackup

Packard Bell PowerSave Solution

Packard Bell Recovery Management

Packard Bell Registration

Packard Bell ScreenSaver

Packard Bell Updater

PDF Settings

PX Profile Update

QuickTime

Realtek High Definition Audio Driver

Security Update for 2007 Microsoft Office System (KB2288621)

Security Update for 2007 Microsoft Office System (KB2288931)

Security Update for 2007 Microsoft Office System (KB2289158)

Security Update for 2007 Microsoft Office System (KB2344875)

Security Update for 2007 Microsoft Office System (KB2345043)

Security Update for 2007 Microsoft Office System (KB969559)

Security Update for 2007 Microsoft Office System (KB976321)

Security Update for Microsoft Office Access 2007 (KB979440)

Security Update for Microsoft Office Excel 2007 (KB2345035)

Security Update for Microsoft Office Groove 2007 (KB2494047)

Security Update for Microsoft Office InfoPath 2007 (KB979441)

Security Update for Microsoft Office PowerPoint 2007 (KB982158)

Security Update for Microsoft Office PowerPoint Viewer (KB2413381)

Security Update for Microsoft Office Publisher 2007 (KB2284697)

Security Update for Microsoft Office system 2007 (972581)

Security Update for Microsoft Office system 2007 (KB974234)

Security Update for Microsoft Office Visio Viewer 2007 (KB973709)

Security Update for Microsoft Office Word 2007 (KB2344993)

Sony Ericsson PC Companion 2.01.123

Sony Ericsson Update Engine

Spotify

Spybot - Search & Destroy

Update for 2007 Microsoft Office System (KB2284654)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft Office 2007 Help for Common Features (KB963673)

Update for Microsoft Office Access 2007 Help (KB963663)

Update for Microsoft Office Excel 2007 Help (KB963678)

Update for Microsoft Office Infopath 2007 Help (KB963662)

Update for Microsoft Office OneNote 2007 (KB980729)

Update for Microsoft Office OneNote 2007 Help (KB963670)

Update for Microsoft Office Outlook 2007 (KB2412171)

Update for Microsoft Office Outlook 2007 Help (KB963677)

Update for Microsoft Office Powerpoint 2007 Help (KB963669)

Update for Microsoft Office Publisher 2007 Help (KB963667)

Update for Microsoft Office Script Editor Help (KB963671)

Update for Microsoft Office Word 2007 Help (KB963665)

Update for Outlook 2007 Junk Email Filter (KB2508979)

Update Service

Welcome Center

Video Web Camera

Windows Live Communications Platform

Windows Live Essentials

Windows Live Mail

Windows Live Photo Gallery

Windows Live Sync

Windows Live Upload Tool

Windows Live Writer

WinRAR archiver

VLC media player 1.0.5

VoddlerNet

VoddlerPlayer

.

==== End Of File ===========================

[Cecilia]

Datorn fungerar väl som den ska egentligen förutom att jag får en massa meddelanden från MSN Messenger av mina vänner att jag är inloggad fast jag avinstallerat programmet helt och hållet.

Det är någon som har kommit över ditt lösenord till MSN skulle jag tro, kan vara det skadliga program som fanns i datorn förut eftersom "Backdoor" betyder att programmet öppnade en bakdörr till datorn så att andra ute på internet kunde komma åt datorn. Byt alla lösenord som du använder i datorn och på internet samt kontakta banker etc om du någon gång har anslutit till en bank etc från datorn.

 

Mats kommer nog att gå igenom din DDS-logg när han besöker Eforum nästa gång.

[Mats H]

Hej

du skriver:

"Datorn fungerar väl som den ska egentligen förutom att jag får en massa meddelanden från MSN Messenger av mina vänner att jag är inloggad fast jag avinstallerat programmet helt och hållet"

 

I DDS loggarna finns det kvar, gjordes avinstallationen efter DDS?

Sedan kan du ju alltid logga in på ditt Windows Live konto via webben, och där ändra lösenord samt logga ut din profil, alternativt anmäla att den kapats.

I övrigt ser DDS bra ut.

Mvh

Mats H