Miisu
-
Innlegg
28 -
Ble med
-
Besøkte siden sist
Innholdstype
Profiler
Forum
Hendelser
Blogger
Om forumet
Innlegg skrevet av Miisu
-
-
Hei!
har kjøpt meg en acer one som har w7 starter som OS. Funker veldig dårlig og har null funksjoner. Vil derfor bytte til xp som for meg funker veldig bra på en annen acer one jeg har.
Propblemet er at pc'n ikke har cd eller dvdspiller for å boote iso fil. den ville ikke boote fra ekstern hardisk.
Noen som kan hjelpe?
-
Hey!
Jeg har en VX Revolution mus men den usb saken jeg dytter inn i maskinen er ødelagt. En dum katt som har satt tenna litt for hardt i den...
Noen som vet hvor jeg får fatt på en slik?
Litt dumt å kjøpe ny mus når den er helt ny.
Takker for all hjelp!!
-
hva er KernelFaultChek?
Får den opp i oppstartsprogram...
-
Når jeg svarer nei så hopper den tilbake til velkomsthilsen og pålogg. -først kommer "logger av" for så å gi meg ny velkomsthilsen.Du kan vel svare nei til å aktivere nå? Du har 30 dager på å aktivere den.Frustrerende.
men: hvis jeg imorgen kjøper en tråløs sak, må den da instaleres først? da er jeg like langt... men hvis ikke kan det jo være jeg kommer på nett.
Takk for tålmodigheten din!!!
-
En venn av meg som tilsynelatende vet litt om data ba meg om å reinstalere windows. Så nå har jeg gjort det. Kun ett problem: Når jeg starter opp maskinen får jeg beskjed om "dette eksemplaret av windows må aktiveres hos microsoft før du logger på. Vil du aktivere nå? ja/nei"
jo da fint det, men jeg har jo ikke nett så da går dette bare i sirkel. logger meg på får popopp for så å måtte logge meg på igjen.
Så nå er maskinen max føkka vil jeg påstå.
Finnes det noe bakvei inn? via F10? F8?
forklar veldig nøye om detfinnes. Er ikke så god på slike boot menyer og likt.
og ja jeg forsøkte den Fix saken først. Fungerte dessverre heller ikke.
-
hvis det er blokkering i programkontrollen til brannmuren pleier det som oftest å funke å pinge, men det gjør det jo ikke hos deg.. og virker som du har avinnstallert alt av brannmur software?
du kan jo forsøke å reinstallere nettverkskortet:
gå inn på kontrollpanel - system - maskinvare - enhetsbehandling - under nettverkskort høyreklikker du på ethernet controller/network card (heter sikkert nvidia, broadcom eller realtek feks) og velger avinstaller.
restart maskin og vent til kortet blir installert på nytt
Da er det også forsøkt. Fremdeles ingen nett dessverre. kun de vante ikonene som sier jeg er på nett.... hehe
Nå begyner jeg å lure veldig på hva som kan være galt her når ingen klarer å løse det. Er det da jeg må reinstalere alt? (formatere?)
-
Har opplevd slike problemer før, og problemet er stort sett enten feil innstillinger eller for svakt signal.
Ring kundeservice til leverandøren og gå gjennom innstillingene og se at det er riktig.
Jeg har opplevd trøbbel med å ha routere i mixed network modus (dvs at de kjøre A, B og G nettverk +eventuellt N samtidig)
Er en fordel å låse nettverket til kun å bruke G eller N.
Har også opplevd at adobe reader har kuttet signalstyrken, så fjern den og legg f.eks inn pdf xchange viewer isteden.
Ellers har det hjulpet å installere oppdaterte driver og eventuelt oppdatere firmware i router....men det er når alt annet ikke funker.
Den beste hjelpen får man fra de som har lest tråden.. Han bruker ikke trådløst nett.
Du sier at du har TO nettverksikoner på startlinja? Hvilke to er det? Du skal egentlig bare ha en. Om det er to kan det være et dummy-nettverk i tillegg til det vanlige nettverket. Da vil alle programmer prøve å gå gjennom dummyen og da feile.
Skjønner!!
Jeg har bare ett ikon som er av 2 maskiner som vier at jeg er pålogget. :-)
Annen ting:
på nettverkstilkoblinger så har jeg en som sier: lokal tilkobling, tilkoblet, NVIDIA nForse Networkong Co...
Den andre sier: 1394-tilkobling, Deaktivert, 1394 nettverkskort
Jeg har forsøkt å bytte for å bruke den andre med samme resultat...
-
Har opplevd slike problemer før, og problemet er stort sett enten feil innstillinger eller for svakt signal.
Ring kundeservice til leverandøren og gå gjennom innstillingene og se at det er riktig.
Jeg har opplevd trøbbel med å ha routere i mixed network modus (dvs at de kjøre A, B og G nettverk +eventuellt N samtidig)
Er en fordel å låse nettverket til kun å bruke G eller N.
Har også opplevd at adobe reader har kuttet signalstyrken, så fjern den og legg f.eks inn pdf xchange viewer isteden.
Ellers har det hjulpet å installere oppdaterte driver og eventuelt oppdatere firmware i router....men det er når alt annet ikke funker.
Hei!
Hvis det er signalet så burde ikke min laptop komme på nett med samme kabel, så det utelukker jeg.
har snakket i timesvis med TN og de kan ikke hjelpe meg. Virker som om de ikke kan stort mer enn meg.
Så lenge maskinen viser ar den er pålogget så kan ikke jeg skjønne annet enn at det er noe som "sperrer" tingangen ett eller annet sted i maskinen.
-
Du skal nå ha en fil
reset SYSTEM\CurrentControlSet\Services\Dhcp\Parameters\Options\15\RegLocation
old REG_MULTI_SZ =
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\?\DhcpDomain
SYSTEM\CurrentControlSet\Services\TcpIp\Parameters\DhcpDomain
added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{6F2F8ECE-059C-49CD-9843-88A37966CEC1}\NetbiosOptions
added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{B3EF4EF1-7E39-41BF-AD55-DC33728E28D0}\NetbiosOptions
deleted SYSTEM\CurrentControlSet\Services\Netbt\Parameters\EnableLmhosts
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\AddressType
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\DisableDynamicUpdate
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\RawIpAllowedProtocols
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\TcpAllowedPorts
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\UdpAllowedPorts
old REG_MULTI_SZ =
0
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\AddressType
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\DisableDynamicUpdate
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\RawIpAllowedProtocols
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\TcpAllowedPorts
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\UdpAllowedPorts
old REG_MULTI_SZ =
0
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\AddressType
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\DisableDynamicUpdate
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\RawIpAllowedProtocols
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\TcpAllowedPorts
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\UdpAllowedPorts
old REG_MULTI_SZ =
0
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\DisableDynamicUpdate
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationAddress
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationMask
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationSeed
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\RawIpAllowedProtocols
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\TcpAllowedPorts
old REG_MULTI_SZ =
0
reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\UdpAllowedPorts
old REG_MULTI_SZ =
0
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DontAddDefaultGatewayDefault
added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\UseDomainNameDevolution
reset Linkage\UpperBind for S716CR\{94EFA48D-06CA-4AF6-B21D-7B3755732A8E}\3579660103791300_08. bad value was:
REG_MULTI_SZ =
PSched
reset Linkage\UpperBind for SE44CR\{36286483-91BB-44AD-9B18-EE5921C16978}\3546490180807500_08. bad value was:
REG_MULTI_SZ =
PSched
reset Linkage\UpperBind for {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0269\4&1781570&0&01. bad value was:
REG_MULTI_SZ =
PSched
reset Linkage\UpperBind for ROOT\MS_NDISWANIP000. bad value was:
REG_MULTI_SZ =
PSched
<completed>
<completed>
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationAddress
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationMask
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationSeed
<completed>
på maskinen din:
c:\log.txt
kan du poste innholdet av den her ?
uff da for en passering, men du får den vel opp.hehe
ikke helt god på dette...
-
Prøv denne kommando i cmd:
netsh int ip reset c:\log.txt
Og avinstaller alt av antivirus! Spesielt Norton
ok, da skal jeg forsøke det.
har nå kjørt det du skriver i cmd, får kun opp det samme som stod etter atjeg trykket enter. Altså: c:/documents and settings/(min maskin)....
da avinstalerer jeg alle slike program.
-
Får du pinget ?
Start, kjør..., CMD <enter> og skriv ping vg.no
Får du svar ?
Nei får ikke pinget dessverre.
OK, da ser det ut som du er tilkoblet routeren fra Telenor og får korrekt ipadresse.Feilen ligger da i maskinen og du får forsøke å rette det opp.
Gå i dosvindu igjen og skriv følgende kommando:
netsh winsock reset
Denne kommandoen tilbakestiller winsock som kan bli korrupt hvis man fjerner programmer.
Da har jeg forsøkt dette og har restartet. Fortsatt ingen nettside. kun de vanlie 2-pc ikonene nede til høyere som sier at jeg er online...
-
Jeg forstår det sånn at du får internett på LAN men at PC ikke vil fungere.
PerB spurte hvilken ipadresse maskinen din har. Hvis du går i dosvindu (Start, kjør..., CMD <enter>) og skriver ipconfig så ser du hvilken ipadresse og standard gateway maskinen din har.
Får nett på laptop men ikke på den stasjonære. Den stasjonære har kun nettverkskabel og er ikke trådløs. -laptop funker med kabel og trådløst så det må være selve pcen det er noe galt med.
Den har
10.0.0.2
10.0.0.138
som sakt jeg er koblet til og makinen sier så men får dog likevel ikke opp noen nettside.
-
det var telio ruteren til iptelefoen...
(hadde forsøkt å koblr gjnnom den...)
har satt kabel tilbake til modem, tildeler nå rett IP men fremdeles ingen nett.
Når jeg åpner en nettside står det nederst "søker etter proxy instillinger..." så kommer "slår opp vg.no" så kommer siden som sier jeg ikke er koblet til internett.
nesten så jeg går og kjøper meg trådløs tilkobling men det er så usikkert å spille med så det er bare nesten...
Bytt kabel mellom PC og modemhehe, hadde det vært så enkelt. har gjort det og har testet kabelen på laptop. Den funker ;-)
-
Takk for fin veiledning!!
Alle innstillinger står som vist i veiledningen, men maskinen har ikke rett IP osv. -har den gamle og ikke det samme som jeg har på denne laptopen.
Jeg la alt inn mauelt men fremdeles ingen nett selv om den altså sier den er tilkoblet og online. Så gikk jeg tilbake til DHCP og den hentet IP som er helt feil...
jeg får denne maskinen rett på nett med samme kabelen.
hjelp?
-
Hei og takk for svar!
Hvor gjør jeg det???
-
Har flyttet og gått fra å ha Get til Telenor.
Fått modem fra telenor (multimodem)hvor jeg får koblet til trådløst på den bærbare, får opp IP telefonen fra Telio men den tasjonære pcen som kun kan kobles med kabel vil ikke på nett. Har kjørt alt av cder fra telenor og de kan ikke lenger hjelpe meg så lenge nettet faktisk fungerer her.
Når jeg går inn på nettverkstilkoblinger så stårdet at jeg er koblet til. Har også forsøkt å skru av alt av brannmur osv + å restarte maskinen sette innstillinger tilbake i tid osv. Nå har jeg ikke flere forslag så kanskjede finnes et lyst hode der ute som kan hjelpe?
takker for all hjelp jeg kan få!
-
Har flyttet og gått fra Get til Telenor.
Fått modem fra telenor (multimodem)hvor jeg får koblet til trådløst på den bærbare, får opp IP telefonen fra Telio men den tasjonære pcen som kun kan kobles med kabel vil ikke på nett. Har kjørt alt av cder fra telenor og de kan ikke lenger hjelpe meg så lenge nettet faktisk fungerer her.
Når jeg går inn på nettverkstilkoblinger så stårdet at jeg er koblet til. Har også forsøkt å skru av alt av brannmur osv + å restarte maskinen sette innstillinger tilbake i tid osv. Nå har jeg ikke flere forslag så kanskjede finnes et lyst hode der ute som kan hjelpe?
takker for all hjelp jeg kan få!
-
Be den operatøren du har nå om å sende deg ett eierskifteskjema, fyll ut, signer og send inn. (dette er den juridisk rette måten å gjeøre det på. Og det er viktig at både ny og tidligere eier signerer.)
Done
-
Kjempe fin telefon for oss som kjøper telefon for telefonens skyld. Også ser den litt finere ut enn mange andre :-)
Jeg vil tippe at 512 MG holder i massevis for 90% av befolkningen.
Men: skulle gjerne sett at G705 kom også.
-
der har vi det ja. det er jo nettopp det jeg gjør. trodde ikke Norman var brannmur men kun antivirus jeg da. så da må norman av?
-det står kun at jeg har "Virus- og Spionvareberskyttelse". Trodde med det at det var ok å kjøre de samtidig.
Har kjørt den saken din nå og ting sernoe smoodere ut. Enn så lenge. hehe :-)
-
Så hvordan er situasjonen nå - kjører pc'n ok?
nei nå er den helt på tur. har logget seg av internett (av seg selv) ingen program svarer eller lukker osv.
Nå må jeg skrive dette fra laptop... så ille har den aldri vært faktisk.
-
må få med at etter denne siste CF kjøringen med den filen så ble maskinen helt sirup.
kjørte CF igjen (uten noe fil) og den ble noe bedre. for den som skjønner slikt...
her er siste logg:
ComboFix 08-12-15.01 - Trine Og Diana 2008-12-15 21:33:22.8 - NTFSx86
Kjører fra: c:\documents and settings\Trine Og Diana\Skrivebord\ComboFix.exe
* Resident AV is active
ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!
.
((((((((((((((((((((((((((( Filer Opprettet Fra 2008-11-15 til 2008-12-15 )))))))))))))))))))))))))))))))))
.
2008-12-08 21:48 . 2008-12-08 21:48 <DIR> d-------- c:\programfiler\Malwarebytes' Anti-Malware
2008-12-08 21:48 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-08 21:48 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2008-12-06 15:53 . 2008-12-06 15:53 <DIR> d-------- c:\programfiler\Trend Micro
2008-12-06 14:59 . 2008-12-06 14:59 <DIR> d-------- c:\documents and settings\All Users\Programdata\Lavasoft
2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iTunes
2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iPod
2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\documents and settings\All Users\Programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-05 22:51 . 2008-12-05 22:51 <DIR> d-------- c:\programfiler\QuickTime
2008-12-05 22:07 . 2007-12-18 17:07 405,504 --a------ c:\windows\system32\cmdiag.cpl
2008-12-05 22:07 . 2006-11-20 14:43 241,664 --a------ c:\windows\system32\cmabout.dll
2008-12-05 22:07 . 2007-12-18 07:50 10,357 --a------ c:\windows\system32\cmdiag.ini
2008-12-05 22:07 . 2007-12-13 18:33 142 --a------ c:\windows\system32\cmabout.ini
2008-12-05 02:58 . 2008-12-05 02:58 410,984 --a------ c:\windows\system32\deploytk.dll
2008-12-01 23:47 . 2008-12-01 23:47 716,272 --a------ c:\windows\system32\drivers\sptd.sys
2008-11-30 17:26 . 2008-11-30 17:26 <DIR> d-------- C:\CloneDVDTemp
2008-11-30 15:05 . 2008-11-30 15:05 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\dvdcss
2008-11-30 05:17 . 2008-12-03 17:32 <DIR> d-------- c:\programfiler\DVDFab 5
2008-11-30 05:17 . 2008-11-30 05:18 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\Vso
2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\windows\system32\drivers\pcouffin.sys
2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\documents and settings\Trine Og Diana\Programdata\pcouffin.sys
2008-11-30 04:51 . 2008-11-30 04:51 <DIR> d-------- c:\documents and settings\All Users\Programdata\Elaborate Bytes
2008-11-30 04:50 . 2008-11-30 04:50 <DIR> d-------- c:\programfiler\Elaborate Bytes
2008-11-28 00:51 . 2008-12-06 14:55 <DIR> d-------- c:\programfiler\Fellesfiler\Apple
2008-11-28 00:49 . 2008-11-28 00:49 <DIR> d-------- c:\programfiler\Bonjour
2008-11-28 00:33 . 2008-11-28 00:33 <DIR> d-------- c:\programfiler\Secunia
2008-11-27 14:53 . 2008-11-27 14:53 8,704 --ahs---- c:\windows\Thumbs.db
2008-11-26 18:46 . 2008-11-26 18:46 <DIR> d--h----- c:\windows\system32\CanonIJ Uninstaller Information
2008-11-26 18:45 . 2008-11-26 18:45 <DIR> d--h----- c:\programfiler\CanonBJ
2008-11-26 18:42 . 2008-11-26 18:42 <DIR> d--h----- c:\documents and settings\All Users\Programdata\CanonBJ
2008-11-26 18:41 . 2007-10-22 06:00 223,744 --a------ c:\windows\system32\CNMLM97.DLL
2008-11-18 14:36 . 2008-11-18 14:36 7,808 --a------ c:\windows\system32\drivers\psi_mf.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-12 20:22 --------- d-----w c:\programfiler\SUPERAntiSpyware
2008-12-11 12:04 --------- d-----w c:\documents and settings\All Users\Programdata\Microsoft Help
2008-12-06 13:59 --------- d-----w c:\programfiler\Lavasoft
2008-12-06 13:58 --------- d-----w c:\programfiler\Fellesfiler\Wise Installation Wizard
2008-12-06 13:53 --------- d-----w c:\programfiler\Enigma Software Group
2008-12-06 12:39 147,192 ----a-w c:\windows\system32\guard32.dll
2008-12-06 12:39 101,776 ----a-w c:\windows\system32\drivers\cmdguard.sys
2008-12-05 01:58 --------- d-----w c:\programfiler\Java
2008-12-02 02:08 --------- d-----w c:\documents and settings\All Users\Programdata\DVD Shrink
2008-12-01 23:56 --------- d-----w c:\programfiler\PokerStars
2008-11-30 04:22 --------- d-----w c:\programfiler\SlySoft
2008-11-30 04:22 --------- d-----w c:\programfiler\Canon
2008-11-30 03:44 --------- d-----w c:\programfiler\DVD Shrink
2008-11-28 01:42 --------- d-----w c:\documents and settings\Trine Og Diana\Programdata\LimeWire
2008-11-27 23:59 --------- d-----w c:\programfiler\Opera
2008-11-27 23:51 --------- d-----w c:\programfiler\Apple Software Update
2008-11-20 23:04 --------- d-----w c:\programfiler\SoIP-player
2008-11-20 03:04 31,504 ----a-w c:\windows\system32\drivers\cmdhlp.sys
2008-11-19 02:29 --------- d-----w c:\programfiler\Fellesfiler\Adobe
2008-11-06 19:06 93,128 ----a-w c:\windows\system32\ElbyCDIO.dll
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-23 12:43 286,720 ----a-w c:\windows\system32\gdi32.dll
2008-10-16 20:33 826,368 ----a-w c:\windows\system32\wininet.dll
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-03 10:04 247,326 ----a-w c:\windows\system32\strmdll.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-15 15:29 1,846,400 ----a-w c:\windows\system32\win32k.sys
2007-03-30 13:54 702,096 ----a-w c:\programfiler\APR2007_d3dx10_33_x64.cab
2007-03-30 13:54 699,466 ----a-w c:\programfiler\APR2007_d3dx10_33_x86.cab
2007-03-30 13:54 56,902 ----a-w c:\programfiler\APR2007_xinput_x86.cab
2007-03-30 13:54 45,302 ----a-w c:\programfiler\dxdllreg_x86.cab
2007-03-30 13:54 199,384 ----a-w c:\programfiler\APR2007_XACT_x64.cab
2007-03-30 13:54 155,350 ----a-w c:\programfiler\APR2007_XACT_x86.cab
2007-03-30 13:54 100,434 ----a-w c:\programfiler\APR2007_xinput_x64.cab
2007-03-30 13:54 1,610,998 ----a-w c:\programfiler\APR2007_d3dx9_33_x64.cab
2007-03-30 13:54 1,610,311 ----a-w c:\programfiler\APR2007_d3dx9_33_x86.cab
2007-03-30 13:38 85,883 ----a-w c:\programfiler\dxupdate.cab
2007-03-30 13:38 77,160 ----a-w c:\programfiler\DSETUP.dll
2007-03-30 13:38 503,144 ----a-w c:\programfiler\DXSETUP.exe
2007-03-30 13:38 1,673,576 ----a-w c:\programfiler\dsetup32.dll
2008-07-25 18:30 32,768 --sha-w c:\windows\system32\config\systemprofile\Lokale innstillinger\Logg\History.IE5\MSHist012008072520080726\index.dat
.
(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"SUPERAntiSpyware"="c:\programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-12 1809648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-08-14 352256]
"Gainward"="c:\windows\TBPanel.exe" [2007-01-12 2162688]
"Norman ZANDA"="c:\norman\Npm\Bin\ZLH.EXE" [2008-06-02 277616]
"OpwareSE2"="c:\programfiler\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8523776]
"COMODO Firewall Pro"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]
"COMODO Internet Security"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]
"SunJavaUpdateSched"="c:\programfiler\Java\jre6\bin\jusched.exe" [2008-12-05 136600]
"nwiz"="nwiz.exe" [2007-11-06 c:\windows\system32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"Exetender"="c:\programfiler\SoIP-player\GPlayer.exe" [2008-05-15 1958400]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programfiler\SUPERAntiSpyware\SASSEH.DLL" [2008-10-02 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-12 21:22 352256 c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"= c:\windows\system32\guard32.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.clmp3enc"= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
--------- 2006-11-15 09:46 204288 c:\programfiler\Windows Media Player\wmpnscfg.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Programfiler\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"c:\\Programfiler\\LimeWire\\LimeWire.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Programfiler\\Windows Media Player\\wmplayer.exe"=
"c:\\Programfiler\\QuickTime\\QuickTimePlayer.exe"=
"c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programfiler\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Programfiler\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"c:\\Programfiler\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programfiler\\Bonjour\\mDNSResponder.exe"=
"c:\\Programfiler\\iTunes\\iTunes.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7887:TCP"= 7887:TCP:BitComet 7887 TCP
"7887:UDP"= 7887:UDP:BitComet 7887 UDP
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2008-08-13 101776]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2008-08-13 31504]
R1 SASDIFSV;SASDIFSV;\??\c:\programfiler\SUPERAntiSpyware\SASDIFSV.SYS [2006-10-10 8944]
R1 SASKUTIL;SASKUTIL;\??\c:\programfiler\SUPERAntiSpyware\SASKUTIL.sys [2007-02-27 55024]
R2 Ndiskio;Ndiskio;\??\c:\norman\Nse\bin\NDISKIO.SYS [2007-04-26 20448]
R2 NVOY;Norman's Very Own supplY of resources;"c:\norman\npm\bin\nvoy.exe" [2008-03-05 121912]
R2 X4HSX32Ex;X4HSX32Ex;\??\c:\programfiler\SoIP-player\X4HSX32Ex.Sys [2008-09-20 29856]
R3 cxbu0wdm;CardMan 3x21;c:\windows\system32\DRIVERS\cxbu0wdm.sys [2008-01-15 97792]
R3 nsesvc;Norman Scanner Engine Service;"c:\norman\nse\bin\NSESVC.EXE" -daemon [2008-06-27 322616]
R3 NvcMFlt;NvcMFlt;c:\windows\system32\DRIVERS\nvcw32mf.sys [2007-05-03 19512]
R3 nvcoas;Norman Virus Control on-access component;"c:\norman\Nvc\bin\nvcoas.exe" [2008-01-15 191544]
R3 NVCScheduler;Norman Virus Control Scheduler;"c:\norman\Npm\bin\NVCSCHED.EXE" [2008-03-05 154680]
R3 SASENUM;SASENUM;\??\c:\programfiler\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]
S3 nvcfsr;nvcfsr;\??\c:\norman\Nvc\bin\nvcfsr.sys [2007-04-26 6712]
S3 nvcoafl51;nvcoafl51;\??\c:\norman\Nvc\bin\nvcoafl51.sys [2007-04-26 30264]
S3 nvcoaft51;nvcoaft51;\??\c:\norman\Nvc\bin\nvcoaft51.sys [2007-04-26 129848]
S3 nvcoarc51;nvcoarc51;\??\c:\norman\Nvc\bin\nvcoarc51.sys [2007-04-26 23224]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2008-11-18 7808]
S3 s716bus;Sony Ericsson Device 716 driver (WDM);c:\windows\system32\DRIVERS\s716bus.sys [2007-12-22 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s716mdfl.sys [2007-12-30 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s716mdm.sys [2007-12-30 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s716mgmt.sys [2008-02-04 100360]
S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS);c:\windows\system32\DRIVERS\s716nd5.sys [2008-02-04 23176]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s716obex.sys [2007-12-30 98568]
S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM);c:\windows\system32\DRIVERS\s716unic.sys [2008-02-04 98952]
S3 USBAAPL;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl.sys []
S3 z530bus;Sony Ericsson Z530 Driver driver (WDM);c:\windows\system32\DRIVERS\z530bus.sys [2008-10-08 58288]
S3 z530mdfl;Sony Ericsson Z530 USB WMC Modem Filter;c:\windows\system32\DRIVERS\z530mdfl.sys [2008-10-08 8336]
S3 z530mdm;Sony Ericsson Z530 USB WMC Modem Driver;c:\windows\system32\DRIVERS\z530mdm.sys [2008-10-08 94064]
S3 z530mgmt;Sony Ericsson Z530 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\z530mgmt.sys [2008-10-08 85408]
S3 z530obex;Sony Ericsson Z530 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\z530obex.sys [2008-10-08 83344]
.
Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)
2008-12-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programfiler\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
.
------- Tilleggsskanning -------
.
uStart Page = hxxp://www.db.no/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
c:\windows\Downloaded Program Files\zylomgamesplayer.dll - O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}
hxxp://game01.zylom.com/activex/zylomgamesplayer.cab
c:\windows\Downloaded Program Files\ZylomGamesPlayer.inf
FF - ProfilePath - c:\documents and settings\Trine Og Diana\Programdata\Mozilla\Firefox\Profiles\aztt2aer.default\
FF - prefs.js: browser.startup.homepage - www.vg.no
FF - plugin: c:\programfiler\Opera\program\plugins\npdivx32.dll
FF - plugin: c:\programfiler\Opera\program\plugins\NPOFF12.DLL
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-15 21:38:15
Windows 5.1.2600 Service Pack 3 NTFS
skanner skjulte prosesser ...
skanner skjulte autostart-oppføringer ...
skanner skjulte filer ...
skanning vellykket
skjulte filer: 0
**************************************************************************
.
--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------
- - - - - - - > 'winlogon.exe'(792)
c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL
.
Tidspunkt ferdig: 2008-12-15 21:39:19
ComboFix-quarantined-files.txt 2008-12-15 20:39:16
ComboFix2.txt 2008-12-15 19:53:12
ComboFix3.txt 2008-12-09 09:44:57
ComboFix4.txt 2008-12-08 21:27:11
ComboFix5.txt 2008-12-15 20:32:24
Pre-Run: 294 298 951 680 byte ledig
Post-Run: 294,277,062,656 byte ledig
222 --- E O F --- 2008-12-11 18:12:15
-
Her kommer den:
ComboFix 08-12-15.01 - Trine Og Diana 2008-12-15 20:22:55.7 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1044.18.2046.1389 [GMT 1:00]
Kjører fra: c:\documents and settings\Trine Og Diana\Skrivebord\ComboFix.exe
Command switches brukt :: c:\documents and settings\Trine Og Diana\Skrivebord\CFScript.txt
* Opprettet nytt gjenopprettingspunkt
* Resident AV is active
ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!
.
((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\myVRmfcax
c:\windows\myVRmfcax\myVRmfcax-1.00700.ocx
c:\windows\myVRmfcax\myVRmfcax.lic
c:\windows\myVRmfcax\uninstall.exe
c:\windows\myVRmfcax\uninstall.exe.manifest
c:\windows\system32\tmp.reg
.
((((((((((((((((((((((((((((((((((((((( Drivere/Tjenester )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_b768beaa
((((((((((((((((((((((((((( Filer Opprettet Fra 2008-11-15 til 2008-12-15 )))))))))))))))))))))))))))))))))
.
2008-12-08 21:48 . 2008-12-08 21:48 <DIR> d-------- c:\programfiler\Malwarebytes' Anti-Malware
2008-12-08 21:48 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-08 21:48 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2008-12-06 15:53 . 2008-12-06 15:53 <DIR> d-------- c:\programfiler\Trend Micro
2008-12-06 14:59 . 2008-12-06 14:59 <DIR> d-------- c:\documents and settings\All Users\Programdata\Lavasoft
2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iTunes
2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iPod
2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\documents and settings\All Users\Programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-05 22:51 . 2008-12-05 22:51 <DIR> d-------- c:\programfiler\QuickTime
2008-12-05 22:07 . 2007-12-18 17:07 405,504 --a------ c:\windows\system32\cmdiag.cpl
2008-12-05 22:07 . 2006-11-20 14:43 241,664 --a------ c:\windows\system32\cmabout.dll
2008-12-05 22:07 . 2007-12-18 07:50 10,357 --a------ c:\windows\system32\cmdiag.ini
2008-12-05 22:07 . 2007-12-13 18:33 142 --a------ c:\windows\system32\cmabout.ini
2008-12-05 02:58 . 2008-12-05 02:58 410,984 --a------ c:\windows\system32\deploytk.dll
2008-12-01 23:47 . 2008-12-01 23:47 716,272 --a------ c:\windows\system32\drivers\sptd.sys
2008-11-30 17:26 . 2008-11-30 17:26 <DIR> d-------- C:\CloneDVDTemp
2008-11-30 15:05 . 2008-11-30 15:05 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\dvdcss
2008-11-30 05:17 . 2008-12-03 17:32 <DIR> d-------- c:\programfiler\DVDFab 5
2008-11-30 05:17 . 2008-11-30 05:18 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\Vso
2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\windows\system32\drivers\pcouffin.sys
2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\documents and settings\Trine Og Diana\Programdata\pcouffin.sys
2008-11-30 04:51 . 2008-11-30 04:51 <DIR> d-------- c:\documents and settings\All Users\Programdata\Elaborate Bytes
2008-11-30 04:50 . 2008-11-30 04:50 <DIR> d-------- c:\programfiler\Elaborate Bytes
2008-11-28 00:51 . 2008-12-06 14:55 <DIR> d-------- c:\programfiler\Fellesfiler\Apple
2008-11-28 00:49 . 2008-11-28 00:49 <DIR> d-------- c:\programfiler\Bonjour
2008-11-28 00:33 . 2008-11-28 00:33 <DIR> d-------- c:\programfiler\Secunia
2008-11-27 14:53 . 2008-11-27 14:53 8,704 --ahs---- c:\windows\Thumbs.db
2008-11-26 18:46 . 2008-11-26 18:46 <DIR> d--h----- c:\windows\system32\CanonIJ Uninstaller Information
2008-11-26 18:45 . 2008-11-26 18:45 <DIR> d--h----- c:\programfiler\CanonBJ
2008-11-26 18:42 . 2008-11-26 18:42 <DIR> d--h----- c:\documents and settings\All Users\Programdata\CanonBJ
2008-11-26 18:41 . 2007-10-22 06:00 223,744 --a------ c:\windows\system32\CNMLM97.DLL
2008-11-18 14:36 . 2008-11-18 14:36 7,808 --a------ c:\windows\system32\drivers\psi_mf.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-12 20:22 --------- d-----w c:\programfiler\SUPERAntiSpyware
2008-12-11 12:04 --------- d-----w c:\documents and settings\All Users\Programdata\Microsoft Help
2008-12-06 13:59 --------- d-----w c:\programfiler\Lavasoft
2008-12-06 13:58 --------- d-----w c:\programfiler\Fellesfiler\Wise Installation Wizard
2008-12-06 13:53 --------- d-----w c:\programfiler\Enigma Software Group
2008-12-06 12:39 147,192 ----a-w c:\windows\system32\guard32.dll
2008-12-06 12:39 101,776 ----a-w c:\windows\system32\drivers\cmdguard.sys
2008-12-05 01:58 --------- d-----w c:\programfiler\Java
2008-12-02 02:08 --------- d-----w c:\documents and settings\All Users\Programdata\DVD Shrink
2008-12-01 23:56 --------- d-----w c:\programfiler\PokerStars
2008-11-30 04:22 --------- d-----w c:\programfiler\SlySoft
2008-11-30 04:22 --------- d-----w c:\programfiler\Canon
2008-11-30 03:44 --------- d-----w c:\programfiler\DVD Shrink
2008-11-28 01:42 --------- d-----w c:\documents and settings\Trine Og Diana\Programdata\LimeWire
2008-11-27 23:59 --------- d-----w c:\programfiler\Opera
2008-11-27 23:51 --------- d-----w c:\programfiler\Apple Software Update
2008-11-20 23:04 --------- d-----w c:\programfiler\SoIP-player
2008-11-20 03:04 31,504 ----a-w c:\windows\system32\drivers\cmdhlp.sys
2008-11-19 02:29 --------- d-----w c:\programfiler\Fellesfiler\Adobe
2008-11-06 19:06 93,128 ----a-w c:\windows\system32\ElbyCDIO.dll
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-23 12:43 286,720 ----a-w c:\windows\system32\gdi32.dll
2008-10-16 20:33 826,368 ----a-w c:\windows\system32\wininet.dll
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-03 10:04 247,326 ----a-w c:\windows\system32\strmdll.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-15 15:29 1,846,400 ----a-w c:\windows\system32\win32k.sys
2007-03-30 13:54 702,096 ----a-w c:\programfiler\APR2007_d3dx10_33_x64.cab
2007-03-30 13:54 699,466 ----a-w c:\programfiler\APR2007_d3dx10_33_x86.cab
2007-03-30 13:54 56,902 ----a-w c:\programfiler\APR2007_xinput_x86.cab
2007-03-30 13:54 45,302 ----a-w c:\programfiler\dxdllreg_x86.cab
2007-03-30 13:54 199,384 ----a-w c:\programfiler\APR2007_XACT_x64.cab
2007-03-30 13:54 155,350 ----a-w c:\programfiler\APR2007_XACT_x86.cab
2007-03-30 13:54 100,434 ----a-w c:\programfiler\APR2007_xinput_x64.cab
2007-03-30 13:54 1,610,998 ----a-w c:\programfiler\APR2007_d3dx9_33_x64.cab
2007-03-30 13:54 1,610,311 ----a-w c:\programfiler\APR2007_d3dx9_33_x86.cab
2007-03-30 13:38 85,883 ----a-w c:\programfiler\dxupdate.cab
2007-03-30 13:38 77,160 ----a-w c:\programfiler\DSETUP.dll
2007-03-30 13:38 503,144 ----a-w c:\programfiler\DXSETUP.exe
2007-03-30 13:38 1,673,576 ----a-w c:\programfiler\dsetup32.dll
2008-07-25 18:30 32,768 --sha-w c:\windows\system32\config\systemprofile\Lokale innstillinger\Logg\History.IE5\MSHist012008072520080726\index.dat
.
((((((((((((((((((((((((((((( snapshot@2008-12-08_22.18.31,75 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
+ 2008-08-26 08:30:43 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
+ 2008-08-26 08:30:43 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
+ 2008-08-26 08:30:43 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
+ 2008-08-26 08:30:43 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
+ 2008-08-26 08:30:43 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
+ 2008-08-25 08:41:09 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
+ 2008-08-26 08:30:43 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
+ 2008-08-26 08:30:43 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
+ 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
+ 2008-08-26 08:30:43 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
+ 2008-08-26 08:30:43 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
+ 2008-10-03 17:31:14 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
+ 2008-08-26 08:30:44 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
+ 2008-08-26 08:30:44 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
+ 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
+ 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
+ 2008-08-26 08:30:44 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
+ 2008-08-26 08:30:44 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
+ 2008-08-26 08:30:44 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
+ 2008-08-27 09:30:46 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
+ 2008-08-26 08:30:45 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
+ 2008-08-26 08:30:45 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
+ 2008-08-26 08:30:45 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
+ 2008-08-26 08:30:45 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
+ 2008-08-26 08:30:45 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
+ 2007-03-06 02:01:51 214,752 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
+ 2007-03-06 02:03:01 374,496 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
+ 2008-08-26 08:30:45 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
+ 2008-08-26 08:30:45 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
+ 2008-08-26 08:30:45 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
+ 2008-08-26 08:30:45 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
- 2008-11-12 12:04:37 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-12-11 12:03:59 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
- 2008-11-12 12:04:37 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-12-11 12:04:00 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-11-12 12:04:37 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
+ 2008-12-11 12:04:00 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2008-11-12 12:04:37 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2008-12-11 12:04:00 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
- 2008-11-12 12:04:37 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-12-11 12:04:00 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-11-12 12:04:37 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-12-11 12:04:00 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-11-12 12:04:37 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-12-11 12:04:00 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2008-11-12 12:04:37 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-12-11 12:04:00 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2008-11-12 12:04:37 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-12-11 12:04:00 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2008-11-12 12:04:37 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-12-11 12:04:00 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-11-12 12:04:37 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-12-11 12:04:00 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-08-26 08:30:43 124,928 ----a-w c:\windows\system32\advpack.dll
+ 2008-10-16 20:33:22 124,928 ----a-w c:\windows\system32\advpack.dll
- 2008-08-26 08:30:43 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
+ 2008-10-16 20:33:22 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
- 2008-08-26 08:30:43 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-10-16 20:33:22 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-08-26 08:30:43 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2008-10-16 20:33:22 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
- 2008-08-26 08:30:43 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-10-16 20:33:22 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-10-23 12:43:42 286,720 -c----w c:\windows\system32\dllcache\gdi32.dll
- 2008-08-26 08:30:43 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
+ 2008-10-16 20:33:22 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
- 2008-08-25 08:41:09 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-10-16 13:15:01 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
- 2008-08-26 08:30:43 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
+ 2008-10-16 20:33:22 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
- 2008-08-26 08:30:43 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
+ 2008-10-16 20:33:23 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
- 2008-08-23 05:54:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
+ 2008-10-15 07:04:53 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
- 2008-08-26 08:30:43 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
+ 2008-10-16 20:33:23 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
- 2008-08-26 08:30:43 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-10-16 20:33:23 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-10-03 17:31:14 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
+ 2008-10-16 20:33:26 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
- 2008-08-26 08:30:44 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
+ 2008-10-16 20:33:26 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
- 2008-08-26 08:30:44 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
+ 2008-10-16 20:33:26 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
- 2008-08-25 08:38:00 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
+ 2008-10-16 13:11:09 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
- 2008-08-23 05:56:15 635,848 -c--a-w c:\windows\system32\dllcache\iexplore.exe
+ 2008-10-15 07:06:26 633,632 -c--a-w c:\windows\system32\dllcache\iexplore.exe
- 2008-08-26 08:30:44 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2008-10-16 20:33:27 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
- 2006-10-18 18:03:58 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe
+ 2008-06-18 00:09:22 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe
- 2008-08-26 08:30:44 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
+ 2008-10-16 20:33:27 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
- 2008-08-26 08:30:44 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
+ 2008-10-16 20:33:27 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-08-27 09:30:46 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
+ 2008-10-17 01:03:32 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
- 2008-08-26 08:30:45 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2008-10-16 20:33:30 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
- 2008-08-26 08:30:45 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2008-10-16 20:33:30 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
- 2008-08-26 08:30:45 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-10-16 20:33:31 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
- 2008-08-26 08:30:45 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll
+ 2008-10-16 20:33:31 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll
- 2008-08-26 08:30:45 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-10-16 20:33:31 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
- 2008-04-14 16:22:28 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll
+ 2008-10-03 10:04:49 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll
- 2008-08-26 08:30:45 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
+ 2008-10-16 20:33:31 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
- 2008-08-26 08:30:45 1,159,680 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2008-10-16 20:33:32 1,160,192 -c--a-w c:\windows\system32\dllcache\urlmon.dll
- 2008-08-26 08:30:45 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll
+ 2008-10-16 20:33:32 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll
- 2008-08-26 08:30:45 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2008-10-16 20:33:33 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
- 2006-10-18 19:47:20 937,984 -c--a-w c:\windows\system32\dllcache\WMNetMgr.dll
+ 2008-06-18 04:03:08 938,496 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll
- 2006-10-18 19:47:22 2,450,944 -c--a-w c:\windows\system32\dllcache\wmvcore.dll
+ 2008-06-18 04:03:14 2,458,112 -c--a-w c:\windows\system32\dllcache\WMVCore.dll
- 2008-08-26 08:30:43 347,136 ----a-w c:\windows\system32\dxtmsft.dll
+ 2008-10-16 20:33:22 347,136 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-08-26 08:30:43 214,528 ----a-w c:\windows\system32\dxtrans.dll
+ 2008-10-16 20:33:22 214,528 ----a-w c:\windows\system32\dxtrans.dll
- 2008-08-26 08:30:43 133,120 ----a-w c:\windows\system32\extmgr.dll
+ 2008-10-16 20:33:22 133,120 ----a-w c:\windows\system32\extmgr.dll
- 2008-08-26 08:30:43 63,488 ----a-w c:\windows\system32\icardie.dll
+ 2008-10-16 20:33:22 63,488 ----a-w c:\windows\system32\icardie.dll
- 2008-08-25 08:41:09 70,656 ----a-w c:\windows\system32\ie4uinit.exe
+ 2008-10-16 13:15:01 70,656 ----a-w c:\windows\system32\ie4uinit.exe
- 2008-08-26 08:30:43 153,088 ----a-w c:\windows\system32\ieakeng.dll
+ 2008-10-16 20:33:22 153,088 ----a-w c:\windows\system32\ieakeng.dll
- 2008-08-26 08:30:43 230,400 ----a-w c:\windows\system32\ieaksie.dll
+ 2008-10-16 20:33:23 230,400 ----a-w c:\windows\system32\ieaksie.dll
- 2008-08-23 05:54:51 161,792 ----a-w c:\windows\system32\ieakui.dll
+ 2008-10-15 07:04:53 161,792 ----a-w c:\windows\system32\ieakui.dll
- 2008-08-26 08:30:43 383,488 ----a-w c:\windows\system32\ieapfltr.dll
+ 2008-10-16 20:33:23 383,488 ----a-w c:\windows\system32\ieapfltr.dll
- 2008-08-26 08:30:43 384,512 ----a-w c:\windows\system32\iedkcs32.dll
+ 2008-10-16 20:33:23 384,512 ----a-w c:\windows\system32\iedkcs32.dll
- 2008-10-03 17:31:14 6,066,176 ----a-w c:\windows\system32\ieframe.dll
+ 2008-10-16 20:33:26 6,066,176 ----a-w c:\windows\system32\ieframe.dll
- 2008-08-26 08:30:44 44,544 ----a-w c:\windows\system32\iernonce.dll
+ 2008-10-16 20:33:26 44,544 ----a-w c:\windows\system32\iernonce.dll
- 2008-08-26 08:30:44 267,776 ----a-w c:\windows\system32\iertutil.dll
+ 2008-10-16 20:33:26 267,776 ----a-w c:\windows\system32\iertutil.dll
- 2008-08-25 08:38:00 13,824 ----a-w c:\windows\system32\ieudinit.exe
+ 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\ieudinit.exe
- 2008-08-26 08:30:44 27,648 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-10-16 20:33:27 27,648 ----a-w c:\windows\system32\jsproxy.dll
- 2006-10-18 18:03:58 100,864 ----a-w c:\windows\system32\logagent.exe
+ 2008-06-18 00:09:22 100,864 ----a-w c:\windows\system32\logagent.exe
- 2008-11-03 15:10:26 17,318,336 ----a-w c:\windows\system32\MRT.exe
+ 2008-12-09 23:24:37 17,593,280 ----a-w c:\windows\system32\MRT.exe
- 2008-08-26 08:30:44 459,264 ----a-w c:\windows\system32\msfeeds.dll
+ 2008-10-16 20:33:27 459,264 ----a-w c:\windows\system32\msfeeds.dll
- 2008-08-26 08:30:44 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
+ 2008-10-16 20:33:27 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
- 2008-08-27 09:30:46 3,593,216 ----a-w c:\windows\system32\mshtml.dll
+ 2008-10-17 01:03:32 3,593,216 ----a-w c:\windows\system32\mshtml.dll
- 2008-08-26 08:30:45 477,696 ----a-w c:\windows\system32\mshtmled.dll
+ 2008-10-16 20:33:30 477,696 ----a-w c:\windows\system32\mshtmled.dll
- 2008-08-26 08:30:45 193,024 ----a-w c:\windows\system32\msrating.dll
+ 2008-10-16 20:33:30 193,024 ----a-w c:\windows\system32\msrating.dll
- 2008-08-26 08:30:45 671,232 ----a-w c:\windows\system32\mstime.dll
+ 2008-10-16 20:33:31 671,232 ----a-w c:\windows\system32\mstime.dll
- 2008-08-26 08:30:45 102,912 ----a-w c:\windows\system32\occache.dll
+ 2008-10-16 20:33:31 102,912 ----a-w c:\windows\system32\occache.dll
- 2008-08-26 08:30:45 44,544 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-10-16 20:33:31 44,544 ----a-w c:\windows\system32\pngfilt.dll
- 2008-07-08 13:08:08 17,784 ------w c:\windows\system32\spmsg.dll
+ 2007-11-30 12:39:50 17,784 ------w c:\windows\system32\spmsg.dll
- 2008-07-11 12:42:28 62,976 ------w c:\windows\system32\tzchange.exe
+ 2008-10-23 10:06:59 62,976 ------w c:\windows\system32\tzchange.exe
- 2008-08-26 08:30:45 105,984 ----a-w c:\windows\system32\url.dll
+ 2008-10-16 20:33:31 105,984 ----a-w c:\windows\system32\url.dll
- 2008-08-26 08:30:45 1,159,680 ----a-w c:\windows\system32\urlmon.dll
+ 2008-10-16 20:33:32 1,160,192 ----a-w c:\windows\system32\urlmon.dll
- 2008-08-26 08:30:45 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2008-10-16 20:33:32 233,472 ----a-w c:\windows\system32\webcheck.dll
- 2006-10-18 19:47:20 937,984 ----a-w c:\windows\system32\WMNetMgr.dll
+ 2008-06-18 04:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll
- 2006-10-18 19:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll
+ 2008-06-18 04:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
+ 2008-12-15 19:47:17 16,384 ----atw c:\windows\temp\Perflib_Perfdata_3cc.dat
- 2008-12-06 12:58:19 1,500 ----a-w c:\windows\UI\BIOSCTL.DAT
+ 2008-12-15 19:49:24 1,500 ----a-w c:\windows\UI\BIOSCTL.DAT
.
-- Snapshot resatt til dagens dato --
.
(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"SUPERAntiSpyware"="c:\programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-12 1809648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-08-14 352256]
"Gainward"="c:\windows\TBPanel.exe" [2007-01-12 2162688]
"Norman ZANDA"="c:\norman\Npm\Bin\ZLH.EXE" [2008-06-02 277616]
"OpwareSE2"="c:\programfiler\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8523776]
"COMODO Firewall Pro"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]
"COMODO Internet Security"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]
"SunJavaUpdateSched"="c:\programfiler\Java\jre6\bin\jusched.exe" [2008-12-05 136600]
"nwiz"="nwiz.exe" [2007-11-06 c:\windows\system32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"Exetender"="c:\programfiler\SoIP-player\GPlayer.exe" [2008-05-15 1958400]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programfiler\SUPERAntiSpyware\SASSEH.DLL" [2008-10-02 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-12 21:22 352256 c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"= c:\windows\system32\guard32.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.clmp3enc"= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
--------- 2006-11-15 09:46 204288 c:\programfiler\Windows Media Player\wmpnscfg.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Programfiler\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"c:\\Programfiler\\LimeWire\\LimeWire.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Programfiler\\Windows Media Player\\wmplayer.exe"=
"c:\\Programfiler\\QuickTime\\QuickTimePlayer.exe"=
"c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programfiler\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Programfiler\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"c:\\Programfiler\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programfiler\\Bonjour\\mDNSResponder.exe"=
"c:\\Programfiler\\iTunes\\iTunes.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7887:TCP"= 7887:TCP:BitComet 7887 TCP
"7887:UDP"= 7887:UDP:BitComet 7887 UDP
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2008-08-13 101776]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2008-08-13 31504]
R1 SASDIFSV;SASDIFSV;\??\c:\programfiler\SUPERAntiSpyware\SASDIFSV.SYS [2006-10-10 8944]
R1 SASKUTIL;SASKUTIL;\??\c:\programfiler\SUPERAntiSpyware\SASKUTIL.sys [2007-02-27 55024]
R2 Ndiskio;Ndiskio;\??\c:\norman\Nse\bin\NDISKIO.SYS [2007-04-26 20448]
R2 NVOY;Norman's Very Own supplY of resources;"c:\norman\npm\bin\nvoy.exe" [2008-03-05 121912]
R2 X4HSX32Ex;X4HSX32Ex;\??\c:\programfiler\SoIP-player\X4HSX32Ex.Sys [2008-09-20 29856]
R3 cxbu0wdm;CardMan 3x21;c:\windows\system32\DRIVERS\cxbu0wdm.sys [2008-01-15 97792]
R3 nsesvc;Norman Scanner Engine Service;"c:\norman\nse\bin\NSESVC.EXE" -daemon [2008-06-27 322616]
R3 NvcMFlt;NvcMFlt;c:\windows\system32\DRIVERS\nvcw32mf.sys [2007-05-03 19512]
R3 nvcoas;Norman Virus Control on-access component;"c:\norman\Nvc\bin\nvcoas.exe" [2008-01-15 191544]
R3 NVCScheduler;Norman Virus Control Scheduler;"c:\norman\Npm\bin\NVCSCHED.EXE" [2008-03-05 154680]
R3 SASENUM;SASENUM;\??\c:\programfiler\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]
S3 nvcfsr;nvcfsr;\??\c:\norman\Nvc\bin\nvcfsr.sys [2007-04-26 6712]
S3 nvcoafl51;nvcoafl51;\??\c:\norman\Nvc\bin\nvcoafl51.sys [2007-04-26 30264]
S3 nvcoaft51;nvcoaft51;\??\c:\norman\Nvc\bin\nvcoaft51.sys [2007-04-26 129848]
S3 nvcoarc51;nvcoarc51;\??\c:\norman\Nvc\bin\nvcoarc51.sys [2007-04-26 23224]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2008-11-18 7808]
S3 s716bus;Sony Ericsson Device 716 driver (WDM);c:\windows\system32\DRIVERS\s716bus.sys [2007-12-22 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s716mdfl.sys [2007-12-30 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s716mdm.sys [2007-12-30 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s716mgmt.sys [2008-02-04 100360]
S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS);c:\windows\system32\DRIVERS\s716nd5.sys [2008-02-04 23176]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s716obex.sys [2007-12-30 98568]
S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM);c:\windows\system32\DRIVERS\s716unic.sys [2008-02-04 98952]
S3 USBAAPL;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl.sys []
S3 z530bus;Sony Ericsson Z530 Driver driver (WDM);c:\windows\system32\DRIVERS\z530bus.sys [2008-10-08 58288]
S3 z530mdfl;Sony Ericsson Z530 USB WMC Modem Filter;c:\windows\system32\DRIVERS\z530mdfl.sys [2008-10-08 8336]
S3 z530mdm;Sony Ericsson Z530 USB WMC Modem Driver;c:\windows\system32\DRIVERS\z530mdm.sys [2008-10-08 94064]
S3 z530mgmt;Sony Ericsson Z530 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\z530mgmt.sys [2008-10-08 85408]
S3 z530obex;Sony Ericsson Z530 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\z530obex.sys [2008-10-08 83344]
.
Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)
2008-12-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programfiler\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
.
------- Tilleggsskanning -------
.
uStart Page = hxxp://www.db.no/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
c:\windows\Downloaded Program Files\zylomgamesplayer.dll - O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}
hxxp://game01.zylom.com/activex/zylomgamesplayer.cab
c:\windows\Downloaded Program Files\ZylomGamesPlayer.inf
FF - ProfilePath - c:\documents and settings\Trine Og Diana\Programdata\Mozilla\Firefox\Profiles\aztt2aer.default\
FF - prefs.js: browser.startup.homepage - www.vg.no
FF - plugin: c:\programfiler\Opera\program\plugins\npdivx32.dll
FF - plugin: c:\programfiler\Opera\program\plugins\NPOFF12.DLL
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-15 20:48:03
Windows 5.1.2600 Service Pack 3 NTFS
detected NTDLL code modification:
ZwClose
skanner skjulte prosesser ...
skanner skjulte autostart-oppføringer ...
skanner skjulte filer ...
skanning vellykket
skjulte filer: 0
**************************************************************************
.
--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------
- - - - - - - > 'winlogon.exe'(792)
c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL
.
------------------------ Andre Kjørende Prosesser ------------------------
.
c:\norman\npm\bin\elogsvc.exe
c:\norman\npm\bin\Zanda.exe
c:\programfiler\Lavasoft\Ad-Aware\aawservice.exe
c:\windows\system32\scardsvr.exe
c:\programfiler\Bonjour\mDNSResponder.exe
c:\programfiler\COMODO\Firewall\cmdagent.exe
c:\programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe
c:\programfiler\Java\jre6\bin\jqs.exe
c:\programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
c:\windows\system32\nvsvc32.exe
c:\programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe
c:\programfiler\Windows Media Player\wmpnetwk.exe
c:\norman\npm\bin\Njeeves.exe
c:\norman\NVC\bin\Nip.exe
c:\norman\NVC\bin\CClaw.exe
c:\windows\system32\imapi.exe
.
**************************************************************************
.
Tidspunkt ferdig: 2008-12-15 20:53:10 - maskinen ble startet på nytt
ComboFix-quarantined-files.txt 2008-12-15 19:52:59
ComboFix2.txt 2008-12-09 09:44:57
ComboFix3.txt 2008-12-08 21:27:11
ComboFix4.txt 2008-12-08 21:19:00
Pre-Run: 294 167 138 304 byte ledig
Post-Run: 294,274,285,568 byte ledig
454 --- E O F --- 2008-12-11 18:12:15
-
Vet du hva dette er for ei mappe?:
c:\windows\myVRmfcax
Hmm, nei.
Inni ligger:
myVRmfcax-1.00700.ocx
uninstall.exe.manifest
myVRmfcax.lic
uninstall
Kan ikke si jeg har sett noe som heter dette noe sted nei...
skifte OS fra W7starter på netbook uten cd/dvd
i Operativsystemer
Skrevet
Supert da skal jeg forsøke dette.
Takk