Gå til innhold

Miisu

Medlemmer
  • Innlegg

    28
  • Ble med

  • Besøkte siden sist

Innlegg skrevet av Miisu

  1. Du kan vel svare nei til å aktivere nå? Du har 30 dager på å aktivere den.
    Når jeg svarer nei så hopper den tilbake til velkomsthilsen og pålogg. -først kommer "logger av" for så å gi meg ny velkomsthilsen.

     

    Frustrerende.

     

    men: hvis jeg imorgen kjøper en tråløs sak, må den da instaleres først? da er jeg like langt... men hvis ikke kan det jo være jeg kommer på nett.

     

    Takk for tålmodigheten din!!!

  2. En venn av meg som tilsynelatende vet litt om data ba meg om å reinstalere windows. Så nå har jeg gjort det. Kun ett problem: Når jeg starter opp maskinen får jeg beskjed om "dette eksemplaret av windows må aktiveres hos microsoft før du logger på. Vil du aktivere nå? ja/nei"

     

    jo da fint det, men jeg har jo ikke nett så da går dette bare i sirkel. logger meg på får popopp for så å måtte logge meg på igjen.

     

    Så nå er maskinen max føkka vil jeg påstå.

    Finnes det noe bakvei inn? via F10? F8?

    forklar veldig nøye om detfinnes. Er ikke så god på slike boot menyer og likt.

     

    og ja jeg forsøkte den Fix saken først. Fungerte dessverre heller ikke.

  3. hvis det er blokkering i programkontrollen til brannmuren pleier det som oftest å funke å pinge, men det gjør det jo ikke hos deg.. og virker som du har avinnstallert alt av brannmur software?

     

    du kan jo forsøke å reinstallere nettverkskortet:

    gå inn på kontrollpanel - system - maskinvare - enhetsbehandling - under nettverkskort høyreklikker du på ethernet controller/network card (heter sikkert nvidia, broadcom eller realtek feks) og velger avinstaller.

    restart maskin og vent til kortet blir installert på nytt

     

    Da er det også forsøkt. Fremdeles ingen nett dessverre. kun de vante ikonene som sier jeg er på nett.... hehe

    Nå begyner jeg å lure veldig på hva som kan være galt her når ingen klarer å løse det. Er det da jeg må reinstalere alt? (formatere?)

  4. Har opplevd slike problemer før, og problemet er stort sett enten feil innstillinger eller for svakt signal.

    Ring kundeservice til leverandøren og gå gjennom innstillingene og se at det er riktig.

    Jeg har opplevd trøbbel med å ha routere i mixed network modus (dvs at de kjøre A, B og G nettverk +eventuellt N samtidig)

    Er en fordel å låse nettverket til kun å bruke G eller N.

    Har også opplevd at adobe reader har kuttet signalstyrken, så fjern den og legg f.eks inn pdf xchange viewer isteden.

    Ellers har det hjulpet å installere oppdaterte driver og eventuelt oppdatere firmware i router....men det er når alt annet ikke funker.

    Den beste hjelpen får man fra de som har lest tråden.. Han bruker ikke trådløst nett.

     

    Du sier at du har TO nettverksikoner på startlinja? Hvilke to er det? Du skal egentlig bare ha en. Om det er to kan det være et dummy-nettverk i tillegg til det vanlige nettverket. Da vil alle programmer prøve å gå gjennom dummyen og da feile.

    Skjønner!!

     

    Jeg har bare ett ikon som er av 2 maskiner som vier at jeg er pålogget. :-)

     

    Annen ting:

    på nettverkstilkoblinger så har jeg en som sier: lokal tilkobling, tilkoblet, NVIDIA nForse Networkong Co...

    Den andre sier: 1394-tilkobling, Deaktivert, 1394 nettverkskort

     

    Jeg har forsøkt å bytte for å bruke den andre med samme resultat...

  5. Har opplevd slike problemer før, og problemet er stort sett enten feil innstillinger eller for svakt signal.

    Ring kundeservice til leverandøren og gå gjennom innstillingene og se at det er riktig.

    Jeg har opplevd trøbbel med å ha routere i mixed network modus (dvs at de kjøre A, B og G nettverk +eventuellt N samtidig)

    Er en fordel å låse nettverket til kun å bruke G eller N.

    Har også opplevd at adobe reader har kuttet signalstyrken, så fjern den og legg f.eks inn pdf xchange viewer isteden.

    Ellers har det hjulpet å installere oppdaterte driver og eventuelt oppdatere firmware i router....men det er når alt annet ikke funker.

    Hei!

     

    Hvis det er signalet så burde ikke min laptop komme på nett med samme kabel, så det utelukker jeg.

     

    har snakket i timesvis med TN og de kan ikke hjelpe meg. Virker som om de ikke kan stort mer enn meg.

    Så lenge maskinen viser ar den er pålogget så kan ikke jeg skjønne annet enn at det er noe som "sperrer" tingangen ett eller annet sted i maskinen.

  6. Du skal nå ha en fil

    reset SYSTEM\CurrentControlSet\Services\Dhcp\Parameters\Options\15\RegLocation

    old REG_MULTI_SZ =

    SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\?\DhcpDomain

    SYSTEM\CurrentControlSet\Services\TcpIp\Parameters\DhcpDomain

     

    added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{6F2F8ECE-059C-49CD-9843-88A37966CEC1}\NetbiosOptions

    added SYSTEM\CurrentControlSet\Services\Netbt\Parameters\Interfaces\Tcpip_{B3EF4EF1-7E39-41BF-AD55-DC33728E28D0}\NetbiosOptions

    deleted SYSTEM\CurrentControlSet\Services\Netbt\Parameters\EnableLmhosts

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\AddressType

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\DisableDynamicUpdate

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\RawIpAllowedProtocols

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\TcpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09A8752F-B2A3-458F-9BC4-769A6097BF50}\UdpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\AddressType

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\DisableDynamicUpdate

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\RawIpAllowedProtocols

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\TcpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{112A74E4-ECE9-460E-AFBB-2C843502443A}\UdpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\AddressType

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\DisableDynamicUpdate

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\RawIpAllowedProtocols

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\TcpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3177FFFA-F4A8-42A8-ACA8-80B4412BC0B9}\UdpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\DisableDynamicUpdate

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationAddress

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationMask

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationSeed

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\RawIpAllowedProtocols

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\TcpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    reset SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\UdpAllowedPorts

    old REG_MULTI_SZ =

    0

     

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DontAddDefaultGatewayDefault

    added SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\UseDomainNameDevolution

    reset Linkage\UpperBind for S716CR\{94EFA48D-06CA-4AF6-B21D-7B3755732A8E}\3579660103791300_08. bad value was:

    REG_MULTI_SZ =

    PSched

     

    reset Linkage\UpperBind for SE44CR\{36286483-91BB-44AD-9B18-EE5921C16978}\3546490180807500_08. bad value was:

    REG_MULTI_SZ =

    PSched

     

    reset Linkage\UpperBind for {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0269\4&1781570&0&01. bad value was:

    REG_MULTI_SZ =

    PSched

     

    reset Linkage\UpperBind for ROOT\MS_NDISWANIP000. bad value was:

    REG_MULTI_SZ =

    PSched

     

    <completed>

     

    <completed>

     

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationAddress

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationMask

    deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C66ABE62-6BD6-4601-A5DB-6A9554BC1392}\IpAutoconfigurationSeed

    <completed>

     

     

    på maskinen din:

    c:\log.txt

    kan du poste innholdet av den her ?

     

    uff da for en passering, men du får den vel opp.hehe

     

    ikke helt god på dette...

  7. Får du pinget ?

     

    Start, kjør..., CMD <enter> og skriv ping vg.no

     

    Får du svar ?

     

    Nei får ikke pinget dessverre.

     

     

    OK, da ser det ut som du er tilkoblet routeren fra Telenor og får korrekt ipadresse.

    Feilen ligger da i maskinen og du får forsøke å rette det opp.

    Gå i dosvindu igjen og skriv følgende kommando:

    netsh winsock reset

    Denne kommandoen tilbakestiller winsock som kan bli korrupt hvis man fjerner programmer.

     

    Da har jeg forsøkt dette og har restartet. Fortsatt ingen nettside. kun de vanlie 2-pc ikonene nede til høyere som sier at jeg er online...

  8. Jeg forstår det sånn at du får internett på LAN men at PC ikke vil fungere.

    PerB spurte hvilken ipadresse maskinen din har. Hvis du går i dosvindu (Start, kjør..., CMD <enter>) og skriver ipconfig så ser du hvilken ipadresse og standard gateway maskinen din har.

     

    Får nett på laptop men ikke på den stasjonære. Den stasjonære har kun nettverkskabel og er ikke trådløs. -laptop funker med kabel og trådløst så det må være selve pcen det er noe galt med.

     

    Den har

    10.0.0.2

    10.0.0.138

     

    som sakt jeg er koblet til og makinen sier så men får dog likevel ikke opp noen nettside.

  9. det var telio ruteren til iptelefoen...

    (hadde forsøkt å koblr gjnnom den...)

     

    har satt kabel tilbake til modem, tildeler nå rett IP men fremdeles ingen nett.

    Når jeg åpner en nettside står det nederst "søker etter proxy instillinger..." så kommer "slår opp vg.no" så kommer siden som sier jeg ikke er koblet til internett.

     

    nesten så jeg går og kjøper meg trådløs tilkobling men det er så usikkert å spille med så det er bare nesten...

     

    Bytt kabel mellom PC og modem ;)

     

    hehe, hadde det vært så enkelt. har gjort det og har testet kabelen på laptop. Den funker ;-)

  10. Takk for fin veiledning!!

     

    Alle innstillinger står som vist i veiledningen, men maskinen har ikke rett IP osv. -har den gamle og ikke det samme som jeg har på denne laptopen.

    Jeg la alt inn mauelt men fremdeles ingen nett selv om den altså sier den er tilkoblet og online. Så gikk jeg tilbake til DHCP og den hentet IP som er helt feil...

     

    jeg får denne maskinen rett på nett med samme kabelen.

     

    hjelp?

  11. Har flyttet og gått fra å ha Get til Telenor.

    Fått modem fra telenor (multimodem)hvor jeg får koblet til trådløst på den bærbare, får opp IP telefonen fra Telio men den tasjonære pcen som kun kan kobles med kabel vil ikke på nett. Har kjørt alt av cder fra telenor og de kan ikke lenger hjelpe meg så lenge nettet faktisk fungerer her.

     

    Når jeg går inn på nettverkstilkoblinger så stårdet at jeg er koblet til. Har også forsøkt å skru av alt av brannmur osv + å restarte maskinen sette innstillinger tilbake i tid osv. Nå har jeg ikke flere forslag så kanskjede finnes et lyst hode der ute som kan hjelpe?

     

    takker for all hjelp jeg kan få!

  12. Har flyttet og gått fra Get til Telenor.

    Fått modem fra telenor (multimodem)hvor jeg får koblet til trådløst på den bærbare, får opp IP telefonen fra Telio men den tasjonære pcen som kun kan kobles med kabel vil ikke på nett. Har kjørt alt av cder fra telenor og de kan ikke lenger hjelpe meg så lenge nettet faktisk fungerer her.

     

    Når jeg går inn på nettverkstilkoblinger så stårdet at jeg er koblet til. Har også forsøkt å skru av alt av brannmur osv + å restarte maskinen sette innstillinger tilbake i tid osv. Nå har jeg ikke flere forslag så kanskjede finnes et lyst hode der ute som kan hjelpe?

     

    takker for all hjelp jeg kan få!

  13. må få med at etter denne siste CF kjøringen med den filen så ble maskinen helt sirup.

    kjørte CF igjen (uten noe fil) og den ble noe bedre. for den som skjønner slikt...

     

    her er siste logg:

     

     

    ComboFix 08-12-15.01 - Trine Og Diana 2008-12-15 21:33:22.8 - NTFSx86

    Kjører fra: c:\documents and settings\Trine Og Diana\Skrivebord\ComboFix.exe

    * Resident AV is active

     

     

    ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!

    .

     

    ((((((((((((((((((((((((((( Filer Opprettet Fra 2008-11-15 til 2008-12-15 )))))))))))))))))))))))))))))))))

    .

     

    2008-12-08 21:48 . 2008-12-08 21:48 <DIR> d-------- c:\programfiler\Malwarebytes' Anti-Malware

    2008-12-08 21:48 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

    2008-12-08 21:48 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys

    2008-12-06 15:53 . 2008-12-06 15:53 <DIR> d-------- c:\programfiler\Trend Micro

    2008-12-06 14:59 . 2008-12-06 14:59 <DIR> d-------- c:\documents and settings\All Users\Programdata\Lavasoft

    2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iTunes

    2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iPod

    2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\documents and settings\All Users\Programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

    2008-12-05 22:51 . 2008-12-05 22:51 <DIR> d-------- c:\programfiler\QuickTime

    2008-12-05 22:07 . 2007-12-18 17:07 405,504 --a------ c:\windows\system32\cmdiag.cpl

    2008-12-05 22:07 . 2006-11-20 14:43 241,664 --a------ c:\windows\system32\cmabout.dll

    2008-12-05 22:07 . 2007-12-18 07:50 10,357 --a------ c:\windows\system32\cmdiag.ini

    2008-12-05 22:07 . 2007-12-13 18:33 142 --a------ c:\windows\system32\cmabout.ini

    2008-12-05 02:58 . 2008-12-05 02:58 410,984 --a------ c:\windows\system32\deploytk.dll

    2008-12-01 23:47 . 2008-12-01 23:47 716,272 --a------ c:\windows\system32\drivers\sptd.sys

    2008-11-30 17:26 . 2008-11-30 17:26 <DIR> d-------- C:\CloneDVDTemp

    2008-11-30 15:05 . 2008-11-30 15:05 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\dvdcss

    2008-11-30 05:17 . 2008-12-03 17:32 <DIR> d-------- c:\programfiler\DVDFab 5

    2008-11-30 05:17 . 2008-11-30 05:18 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\Vso

    2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\windows\system32\drivers\pcouffin.sys

    2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\documents and settings\Trine Og Diana\Programdata\pcouffin.sys

    2008-11-30 04:51 . 2008-11-30 04:51 <DIR> d-------- c:\documents and settings\All Users\Programdata\Elaborate Bytes

    2008-11-30 04:50 . 2008-11-30 04:50 <DIR> d-------- c:\programfiler\Elaborate Bytes

    2008-11-28 00:51 . 2008-12-06 14:55 <DIR> d-------- c:\programfiler\Fellesfiler\Apple

    2008-11-28 00:49 . 2008-11-28 00:49 <DIR> d-------- c:\programfiler\Bonjour

    2008-11-28 00:33 . 2008-11-28 00:33 <DIR> d-------- c:\programfiler\Secunia

    2008-11-27 14:53 . 2008-11-27 14:53 8,704 --ahs---- c:\windows\Thumbs.db

    2008-11-26 18:46 . 2008-11-26 18:46 <DIR> d--h----- c:\windows\system32\CanonIJ Uninstaller Information

    2008-11-26 18:45 . 2008-11-26 18:45 <DIR> d--h----- c:\programfiler\CanonBJ

    2008-11-26 18:42 . 2008-11-26 18:42 <DIR> d--h----- c:\documents and settings\All Users\Programdata\CanonBJ

    2008-11-26 18:41 . 2007-10-22 06:00 223,744 --a------ c:\windows\system32\CNMLM97.DLL

    2008-11-18 14:36 . 2008-11-18 14:36 7,808 --a------ c:\windows\system32\drivers\psi_mf.sys

     

    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2008-12-12 20:22 --------- d-----w c:\programfiler\SUPERAntiSpyware

    2008-12-11 12:04 --------- d-----w c:\documents and settings\All Users\Programdata\Microsoft Help

    2008-12-06 13:59 --------- d-----w c:\programfiler\Lavasoft

    2008-12-06 13:58 --------- d-----w c:\programfiler\Fellesfiler\Wise Installation Wizard

    2008-12-06 13:53 --------- d-----w c:\programfiler\Enigma Software Group

    2008-12-06 12:39 147,192 ----a-w c:\windows\system32\guard32.dll

    2008-12-06 12:39 101,776 ----a-w c:\windows\system32\drivers\cmdguard.sys

    2008-12-05 01:58 --------- d-----w c:\programfiler\Java

    2008-12-02 02:08 --------- d-----w c:\documents and settings\All Users\Programdata\DVD Shrink

    2008-12-01 23:56 --------- d-----w c:\programfiler\PokerStars

    2008-11-30 04:22 --------- d-----w c:\programfiler\SlySoft

    2008-11-30 04:22 --------- d-----w c:\programfiler\Canon

    2008-11-30 03:44 --------- d-----w c:\programfiler\DVD Shrink

    2008-11-28 01:42 --------- d-----w c:\documents and settings\Trine Og Diana\Programdata\LimeWire

    2008-11-27 23:59 --------- d-----w c:\programfiler\Opera

    2008-11-27 23:51 --------- d-----w c:\programfiler\Apple Software Update

    2008-11-20 23:04 --------- d-----w c:\programfiler\SoIP-player

    2008-11-20 03:04 31,504 ----a-w c:\windows\system32\drivers\cmdhlp.sys

    2008-11-19 02:29 --------- d-----w c:\programfiler\Fellesfiler\Adobe

    2008-11-06 19:06 93,128 ----a-w c:\windows\system32\ElbyCDIO.dll

    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys

    2008-10-23 12:43 286,720 ----a-w c:\windows\system32\gdi32.dll

    2008-10-16 20:33 826,368 ----a-w c:\windows\system32\wininet.dll

    2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll

    2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll

    2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll

    2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll

    2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll

    2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe

    2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll

    2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll

    2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll

    2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll

    2008-10-03 10:04 247,326 ----a-w c:\windows\system32\strmdll.dll

    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll

    2008-09-15 15:29 1,846,400 ----a-w c:\windows\system32\win32k.sys

    2007-03-30 13:54 702,096 ----a-w c:\programfiler\APR2007_d3dx10_33_x64.cab

    2007-03-30 13:54 699,466 ----a-w c:\programfiler\APR2007_d3dx10_33_x86.cab

    2007-03-30 13:54 56,902 ----a-w c:\programfiler\APR2007_xinput_x86.cab

    2007-03-30 13:54 45,302 ----a-w c:\programfiler\dxdllreg_x86.cab

    2007-03-30 13:54 199,384 ----a-w c:\programfiler\APR2007_XACT_x64.cab

    2007-03-30 13:54 155,350 ----a-w c:\programfiler\APR2007_XACT_x86.cab

    2007-03-30 13:54 100,434 ----a-w c:\programfiler\APR2007_xinput_x64.cab

    2007-03-30 13:54 1,610,998 ----a-w c:\programfiler\APR2007_d3dx9_33_x64.cab

    2007-03-30 13:54 1,610,311 ----a-w c:\programfiler\APR2007_d3dx9_33_x86.cab

    2007-03-30 13:38 85,883 ----a-w c:\programfiler\dxupdate.cab

    2007-03-30 13:38 77,160 ----a-w c:\programfiler\DSETUP.dll

    2007-03-30 13:38 503,144 ----a-w c:\programfiler\DXSETUP.exe

    2007-03-30 13:38 1,673,576 ----a-w c:\programfiler\dsetup32.dll

    2008-07-25 18:30 32,768 --sha-w c:\windows\system32\config\systemprofile\Lokale innstillinger\Logg\History.IE5\MSHist012008072520080726\index.dat

    .

     

    (((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

    REGEDIT4

     

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

    "SUPERAntiSpyware"="c:\programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-12 1809648]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]

    "JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-08-14 352256]

    "Gainward"="c:\windows\TBPanel.exe" [2007-01-12 2162688]

    "Norman ZANDA"="c:\norman\Npm\Bin\ZLH.EXE" [2008-06-02 277616]

    "OpwareSE2"="c:\programfiler\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]

    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8523776]

    "COMODO Firewall Pro"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]

    "COMODO Internet Security"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]

    "SunJavaUpdateSched"="c:\programfiler\Java\jre6\bin\jusched.exe" [2008-12-05 136600]

    "nwiz"="nwiz.exe" [2007-11-06 c:\windows\system32\nwiz.exe]

     

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    "Exetender"="c:\programfiler\SoIP-player\GPlayer.exe" [2008-05-15 1958400]

     

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programfiler\SUPERAntiSpyware\SASSEH.DLL" [2008-10-02 77824]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

    2008-12-12 21:22 352256 c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

    "AppInit_DLLs"= c:\windows\system32\guard32.dll

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "msacm.clmp3enc"= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

    --------- 2006-11-15 09:46 204288 c:\programfiler\Windows Media Player\wmpnscfg.exe

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "c:\\Programfiler\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=

    "c:\\Programfiler\\LimeWire\\LimeWire.exe"=

    "c:\\WINDOWS\\system32\\sessmgr.exe"=

    "c:\\Programfiler\\Windows Media Player\\wmplayer.exe"=

    "c:\\Programfiler\\QuickTime\\QuickTimePlayer.exe"=

    "c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

    "c:\\Programfiler\\Windows Live\\Messenger\\livecall.exe"=

    "c:\\Programfiler\\Messenger\\msmsgs.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\WINDOWS\\system32\\winver.exe"=

    "c:\\Programfiler\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

    "c:\\Programfiler\\Bonjour\\mDNSResponder.exe"=

    "c:\\Programfiler\\iTunes\\iTunes.exe"=

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "7887:TCP"= 7887:TCP:BitComet 7887 TCP

    "7887:UDP"= 7887:UDP:BitComet 7887 UDP

     

    R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2008-08-13 101776]

    R1 cmdHlp;COMODO Firewall Pro Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2008-08-13 31504]

    R1 SASDIFSV;SASDIFSV;\??\c:\programfiler\SUPERAntiSpyware\SASDIFSV.SYS [2006-10-10 8944]

    R1 SASKUTIL;SASKUTIL;\??\c:\programfiler\SUPERAntiSpyware\SASKUTIL.sys [2007-02-27 55024]

    R2 Ndiskio;Ndiskio;\??\c:\norman\Nse\bin\NDISKIO.SYS [2007-04-26 20448]

    R2 NVOY;Norman's Very Own supplY of resources;"c:\norman\npm\bin\nvoy.exe" [2008-03-05 121912]

    R2 X4HSX32Ex;X4HSX32Ex;\??\c:\programfiler\SoIP-player\X4HSX32Ex.Sys [2008-09-20 29856]

    R3 cxbu0wdm;CardMan 3x21;c:\windows\system32\DRIVERS\cxbu0wdm.sys [2008-01-15 97792]

    R3 nsesvc;Norman Scanner Engine Service;"c:\norman\nse\bin\NSESVC.EXE" -daemon [2008-06-27 322616]

    R3 NvcMFlt;NvcMFlt;c:\windows\system32\DRIVERS\nvcw32mf.sys [2007-05-03 19512]

    R3 nvcoas;Norman Virus Control on-access component;"c:\norman\Nvc\bin\nvcoas.exe" [2008-01-15 191544]

    R3 NVCScheduler;Norman Virus Control Scheduler;"c:\norman\Npm\bin\NVCSCHED.EXE" [2008-03-05 154680]

    R3 SASENUM;SASENUM;\??\c:\programfiler\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]

    S3 nvcfsr;nvcfsr;\??\c:\norman\Nvc\bin\nvcfsr.sys [2007-04-26 6712]

    S3 nvcoafl51;nvcoafl51;\??\c:\norman\Nvc\bin\nvcoafl51.sys [2007-04-26 30264]

    S3 nvcoaft51;nvcoaft51;\??\c:\norman\Nvc\bin\nvcoaft51.sys [2007-04-26 129848]

    S3 nvcoarc51;nvcoarc51;\??\c:\norman\Nvc\bin\nvcoarc51.sys [2007-04-26 23224]

    S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2008-11-18 7808]

    S3 s716bus;Sony Ericsson Device 716 driver (WDM);c:\windows\system32\DRIVERS\s716bus.sys [2007-12-22 83208]

    S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s716mdfl.sys [2007-12-30 15112]

    S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s716mdm.sys [2007-12-30 108552]

    S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s716mgmt.sys [2008-02-04 100360]

    S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS);c:\windows\system32\DRIVERS\s716nd5.sys [2008-02-04 23176]

    S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s716obex.sys [2007-12-30 98568]

    S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM);c:\windows\system32\DRIVERS\s716unic.sys [2008-02-04 98952]

    S3 USBAAPL;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl.sys []

    S3 z530bus;Sony Ericsson Z530 Driver driver (WDM);c:\windows\system32\DRIVERS\z530bus.sys [2008-10-08 58288]

    S3 z530mdfl;Sony Ericsson Z530 USB WMC Modem Filter;c:\windows\system32\DRIVERS\z530mdfl.sys [2008-10-08 8336]

    S3 z530mdm;Sony Ericsson Z530 USB WMC Modem Driver;c:\windows\system32\DRIVERS\z530mdm.sys [2008-10-08 94064]

    S3 z530mgmt;Sony Ericsson Z530 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\z530mgmt.sys [2008-10-08 85408]

    S3 z530obex;Sony Ericsson Z530 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\z530obex.sys [2008-10-08 83344]

    .

    Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)

     

    2008-12-12 c:\windows\Tasks\AppleSoftwareUpdate.job

    - c:\programfiler\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

    .

    .

    ------- Tilleggsskanning -------

    .

    uStart Page = hxxp://www.db.no/

    uInternet Connection Wizard,ShellNext = iexplore

    uInternet Settings,ProxyOverride = *.local

    IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    IE: Easy-WebPrint Add To Print List - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

    IE: Easy-WebPrint High Speed Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

    IE: Easy-WebPrint Preview - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

    IE: Easy-WebPrint Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

     

    c:\windows\Downloaded Program Files\zylomgamesplayer.dll - O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}

    hxxp://game01.zylom.com/activex/zylomgamesplayer.cab

    c:\windows\Downloaded Program Files\ZylomGamesPlayer.inf

    FF - ProfilePath - c:\documents and settings\Trine Og Diana\Programdata\Mozilla\Firefox\Profiles\aztt2aer.default\

    FF - prefs.js: browser.startup.homepage - www.vg.no

    FF - plugin: c:\programfiler\Opera\program\plugins\npdivx32.dll

    FF - plugin: c:\programfiler\Opera\program\plugins\NPOFF12.DLL

    .

     

    **************************************************************************

     

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2008-12-15 21:38:15

    Windows 5.1.2600 Service Pack 3 NTFS

     

    skanner skjulte prosesser ...

     

    skanner skjulte autostart-oppføringer ...

     

    skanner skjulte filer ...

     

    skanning vellykket

    skjulte filer: 0

     

    **************************************************************************

    .

    --------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

     

    - - - - - - - > 'winlogon.exe'(792)

    c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL

    .

    Tidspunkt ferdig: 2008-12-15 21:39:19

    ComboFix-quarantined-files.txt 2008-12-15 20:39:16

    ComboFix2.txt 2008-12-15 19:53:12

    ComboFix3.txt 2008-12-09 09:44:57

    ComboFix4.txt 2008-12-08 21:27:11

    ComboFix5.txt 2008-12-15 20:32:24

     

    Pre-Run: 294 298 951 680 byte ledig

    Post-Run: 294,277,062,656 byte ledig

     

    222 --- E O F --- 2008-12-11 18:12:15

     

     

  14. Her kommer den:

     

     

    ComboFix 08-12-15.01 - Trine Og Diana 2008-12-15 20:22:55.7 - NTFSx86

    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1044.18.2046.1389 [GMT 1:00]

    Kjører fra: c:\documents and settings\Trine Og Diana\Skrivebord\ComboFix.exe

    Command switches brukt :: c:\documents and settings\Trine Og Diana\Skrivebord\CFScript.txt

    * Opprettet nytt gjenopprettingspunkt

    * Resident AV is active

     

     

    ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!

    .

     

    ((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    c:\windows\myVRmfcax

    c:\windows\myVRmfcax\myVRmfcax-1.00700.ocx

    c:\windows\myVRmfcax\myVRmfcax.lic

    c:\windows\myVRmfcax\uninstall.exe

    c:\windows\myVRmfcax\uninstall.exe.manifest

    c:\windows\system32\tmp.reg

     

    .

    ((((((((((((((((((((((((((((((((((((((( Drivere/Tjenester )))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    -------\Service_b768beaa

     

     

    ((((((((((((((((((((((((((( Filer Opprettet Fra 2008-11-15 til 2008-12-15 )))))))))))))))))))))))))))))))))

    .

     

    2008-12-08 21:48 . 2008-12-08 21:48 <DIR> d-------- c:\programfiler\Malwarebytes' Anti-Malware

    2008-12-08 21:48 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

    2008-12-08 21:48 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys

    2008-12-06 15:53 . 2008-12-06 15:53 <DIR> d-------- c:\programfiler\Trend Micro

    2008-12-06 14:59 . 2008-12-06 14:59 <DIR> d-------- c:\documents and settings\All Users\Programdata\Lavasoft

    2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iTunes

    2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\programfiler\iPod

    2008-12-05 22:53 . 2008-12-05 22:53 <DIR> d-------- c:\documents and settings\All Users\Programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

    2008-12-05 22:51 . 2008-12-05 22:51 <DIR> d-------- c:\programfiler\QuickTime

    2008-12-05 22:07 . 2007-12-18 17:07 405,504 --a------ c:\windows\system32\cmdiag.cpl

    2008-12-05 22:07 . 2006-11-20 14:43 241,664 --a------ c:\windows\system32\cmabout.dll

    2008-12-05 22:07 . 2007-12-18 07:50 10,357 --a------ c:\windows\system32\cmdiag.ini

    2008-12-05 22:07 . 2007-12-13 18:33 142 --a------ c:\windows\system32\cmabout.ini

    2008-12-05 02:58 . 2008-12-05 02:58 410,984 --a------ c:\windows\system32\deploytk.dll

    2008-12-01 23:47 . 2008-12-01 23:47 716,272 --a------ c:\windows\system32\drivers\sptd.sys

    2008-11-30 17:26 . 2008-11-30 17:26 <DIR> d-------- C:\CloneDVDTemp

    2008-11-30 15:05 . 2008-11-30 15:05 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\dvdcss

    2008-11-30 05:17 . 2008-12-03 17:32 <DIR> d-------- c:\programfiler\DVDFab 5

    2008-11-30 05:17 . 2008-11-30 05:18 <DIR> d-------- c:\documents and settings\Trine Og Diana\Programdata\Vso

    2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\windows\system32\drivers\pcouffin.sys

    2008-11-30 05:17 . 2008-11-30 05:17 47,360 --a------ c:\documents and settings\Trine Og Diana\Programdata\pcouffin.sys

    2008-11-30 04:51 . 2008-11-30 04:51 <DIR> d-------- c:\documents and settings\All Users\Programdata\Elaborate Bytes

    2008-11-30 04:50 . 2008-11-30 04:50 <DIR> d-------- c:\programfiler\Elaborate Bytes

    2008-11-28 00:51 . 2008-12-06 14:55 <DIR> d-------- c:\programfiler\Fellesfiler\Apple

    2008-11-28 00:49 . 2008-11-28 00:49 <DIR> d-------- c:\programfiler\Bonjour

    2008-11-28 00:33 . 2008-11-28 00:33 <DIR> d-------- c:\programfiler\Secunia

    2008-11-27 14:53 . 2008-11-27 14:53 8,704 --ahs---- c:\windows\Thumbs.db

    2008-11-26 18:46 . 2008-11-26 18:46 <DIR> d--h----- c:\windows\system32\CanonIJ Uninstaller Information

    2008-11-26 18:45 . 2008-11-26 18:45 <DIR> d--h----- c:\programfiler\CanonBJ

    2008-11-26 18:42 . 2008-11-26 18:42 <DIR> d--h----- c:\documents and settings\All Users\Programdata\CanonBJ

    2008-11-26 18:41 . 2007-10-22 06:00 223,744 --a------ c:\windows\system32\CNMLM97.DLL

    2008-11-18 14:36 . 2008-11-18 14:36 7,808 --a------ c:\windows\system32\drivers\psi_mf.sys

     

    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2008-12-12 20:22 --------- d-----w c:\programfiler\SUPERAntiSpyware

    2008-12-11 12:04 --------- d-----w c:\documents and settings\All Users\Programdata\Microsoft Help

    2008-12-06 13:59 --------- d-----w c:\programfiler\Lavasoft

    2008-12-06 13:58 --------- d-----w c:\programfiler\Fellesfiler\Wise Installation Wizard

    2008-12-06 13:53 --------- d-----w c:\programfiler\Enigma Software Group

    2008-12-06 12:39 147,192 ----a-w c:\windows\system32\guard32.dll

    2008-12-06 12:39 101,776 ----a-w c:\windows\system32\drivers\cmdguard.sys

    2008-12-05 01:58 --------- d-----w c:\programfiler\Java

    2008-12-02 02:08 --------- d-----w c:\documents and settings\All Users\Programdata\DVD Shrink

    2008-12-01 23:56 --------- d-----w c:\programfiler\PokerStars

    2008-11-30 04:22 --------- d-----w c:\programfiler\SlySoft

    2008-11-30 04:22 --------- d-----w c:\programfiler\Canon

    2008-11-30 03:44 --------- d-----w c:\programfiler\DVD Shrink

    2008-11-28 01:42 --------- d-----w c:\documents and settings\Trine Og Diana\Programdata\LimeWire

    2008-11-27 23:59 --------- d-----w c:\programfiler\Opera

    2008-11-27 23:51 --------- d-----w c:\programfiler\Apple Software Update

    2008-11-20 23:04 --------- d-----w c:\programfiler\SoIP-player

    2008-11-20 03:04 31,504 ----a-w c:\windows\system32\drivers\cmdhlp.sys

    2008-11-19 02:29 --------- d-----w c:\programfiler\Fellesfiler\Adobe

    2008-11-06 19:06 93,128 ----a-w c:\windows\system32\ElbyCDIO.dll

    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys

    2008-10-23 12:43 286,720 ----a-w c:\windows\system32\gdi32.dll

    2008-10-16 20:33 826,368 ----a-w c:\windows\system32\wininet.dll

    2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll

    2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll

    2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll

    2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll

    2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll

    2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe

    2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll

    2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll

    2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll

    2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll

    2008-10-03 10:04 247,326 ----a-w c:\windows\system32\strmdll.dll

    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll

    2008-09-15 15:29 1,846,400 ----a-w c:\windows\system32\win32k.sys

    2007-03-30 13:54 702,096 ----a-w c:\programfiler\APR2007_d3dx10_33_x64.cab

    2007-03-30 13:54 699,466 ----a-w c:\programfiler\APR2007_d3dx10_33_x86.cab

    2007-03-30 13:54 56,902 ----a-w c:\programfiler\APR2007_xinput_x86.cab

    2007-03-30 13:54 45,302 ----a-w c:\programfiler\dxdllreg_x86.cab

    2007-03-30 13:54 199,384 ----a-w c:\programfiler\APR2007_XACT_x64.cab

    2007-03-30 13:54 155,350 ----a-w c:\programfiler\APR2007_XACT_x86.cab

    2007-03-30 13:54 100,434 ----a-w c:\programfiler\APR2007_xinput_x64.cab

    2007-03-30 13:54 1,610,998 ----a-w c:\programfiler\APR2007_d3dx9_33_x64.cab

    2007-03-30 13:54 1,610,311 ----a-w c:\programfiler\APR2007_d3dx9_33_x86.cab

    2007-03-30 13:38 85,883 ----a-w c:\programfiler\dxupdate.cab

    2007-03-30 13:38 77,160 ----a-w c:\programfiler\DSETUP.dll

    2007-03-30 13:38 503,144 ----a-w c:\programfiler\DXSETUP.exe

    2007-03-30 13:38 1,673,576 ----a-w c:\programfiler\dsetup32.dll

    2008-07-25 18:30 32,768 --sha-w c:\windows\system32\config\systemprofile\Lokale innstillinger\Logg\History.IE5\MSHist012008072520080726\index.dat

    .

     

    ((((((((((((((((((((((((((((( snapshot@2008-12-08_22.18.31,75 )))))))))))))))))))))))))))))))))))))))))

    .

    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE

    + 2008-08-26 08:30:43 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll

    + 2008-08-26 08:30:43 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll

    + 2008-08-26 08:30:43 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll

    + 2008-08-26 08:30:43 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll

    + 2008-08-26 08:30:43 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll

    + 2008-08-25 08:41:09 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe

    + 2008-08-26 08:30:43 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll

    + 2008-08-26 08:30:43 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll

    + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll

    + 2008-08-26 08:30:43 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll

    + 2008-08-26 08:30:43 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll

    + 2008-10-03 17:31:14 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll

    + 2008-08-26 08:30:44 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll

    + 2008-08-26 08:30:44 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll

    + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe

    + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe

    + 2008-08-26 08:30:44 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll

    + 2008-08-26 08:30:44 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll

    + 2008-08-26 08:30:44 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll

    + 2008-08-27 09:30:46 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll

    + 2008-08-26 08:30:45 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll

    + 2008-08-26 08:30:45 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll

    + 2008-08-26 08:30:45 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll

    + 2008-08-26 08:30:45 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll

    + 2008-08-26 08:30:45 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll

    + 2007-03-06 02:01:51 214,752 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe

    + 2007-03-06 02:03:01 374,496 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll

    + 2008-08-26 08:30:45 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll

    + 2008-08-26 08:30:45 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll

    + 2008-08-26 08:30:45 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll

    + 2008-08-26 08:30:45 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll

    - 2008-11-12 12:04:37 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe

    + 2008-12-11 12:03:59 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe

    - 2008-11-12 12:04:37 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe

    + 2008-12-11 12:04:00 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe

    - 2008-11-12 12:04:37 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe

    + 2008-12-11 12:04:00 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe

    - 2008-11-12 12:04:37 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe

    + 2008-12-11 12:04:00 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe

    - 2008-11-12 12:04:37 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe

    + 2008-12-11 12:04:00 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe

    - 2008-11-12 12:04:37 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe

    + 2008-12-11 12:04:00 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe

    - 2008-11-12 12:04:37 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe

    + 2008-12-11 12:04:00 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe

    - 2008-11-12 12:04:37 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe

    + 2008-12-11 12:04:00 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe

    - 2008-11-12 12:04:37 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe

    + 2008-12-11 12:04:00 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe

    - 2008-11-12 12:04:37 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe

    + 2008-12-11 12:04:00 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe

    - 2008-11-12 12:04:37 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe

    + 2008-12-11 12:04:00 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe

    - 2008-08-26 08:30:43 124,928 ----a-w c:\windows\system32\advpack.dll

    + 2008-10-16 20:33:22 124,928 ----a-w c:\windows\system32\advpack.dll

    - 2008-08-26 08:30:43 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll

    + 2008-10-16 20:33:22 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll

    - 2008-08-26 08:30:43 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll

    + 2008-10-16 20:33:22 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll

    - 2008-08-26 08:30:43 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll

    + 2008-10-16 20:33:22 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll

    - 2008-08-26 08:30:43 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll

    + 2008-10-16 20:33:22 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll

    + 2008-10-23 12:43:42 286,720 -c----w c:\windows\system32\dllcache\gdi32.dll

    - 2008-08-26 08:30:43 63,488 -c----w c:\windows\system32\dllcache\icardie.dll

    + 2008-10-16 20:33:22 63,488 -c----w c:\windows\system32\dllcache\icardie.dll

    - 2008-08-25 08:41:09 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe

    + 2008-10-16 13:15:01 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe

    - 2008-08-26 08:30:43 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll

    + 2008-10-16 20:33:22 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll

    - 2008-08-26 08:30:43 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll

    + 2008-10-16 20:33:23 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll

    - 2008-08-23 05:54:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll

    + 2008-10-15 07:04:53 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll

    - 2008-08-26 08:30:43 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll

    + 2008-10-16 20:33:23 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll

    - 2008-08-26 08:30:43 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll

    + 2008-10-16 20:33:23 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll

    - 2008-10-03 17:31:14 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll

    + 2008-10-16 20:33:26 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll

    - 2008-08-26 08:30:44 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll

    + 2008-10-16 20:33:26 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll

    - 2008-08-26 08:30:44 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll

    + 2008-10-16 20:33:26 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll

    - 2008-08-25 08:38:00 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe

    + 2008-10-16 13:11:09 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe

    - 2008-08-23 05:56:15 635,848 -c--a-w c:\windows\system32\dllcache\iexplore.exe

    + 2008-10-15 07:06:26 633,632 -c--a-w c:\windows\system32\dllcache\iexplore.exe

    - 2008-08-26 08:30:44 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll

    + 2008-10-16 20:33:27 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll

    - 2006-10-18 18:03:58 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe

    + 2008-06-18 00:09:22 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe

    - 2008-08-26 08:30:44 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll

    + 2008-10-16 20:33:27 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll

    - 2008-08-26 08:30:44 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll

    + 2008-10-16 20:33:27 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll

    - 2008-08-27 09:30:46 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll

    + 2008-10-17 01:03:32 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll

    - 2008-08-26 08:30:45 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll

    + 2008-10-16 20:33:30 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll

    - 2008-08-26 08:30:45 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll

    + 2008-10-16 20:33:30 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll

    - 2008-08-26 08:30:45 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll

    + 2008-10-16 20:33:31 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll

    - 2008-08-26 08:30:45 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll

    + 2008-10-16 20:33:31 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll

    - 2008-08-26 08:30:45 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll

    + 2008-10-16 20:33:31 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll

    - 2008-04-14 16:22:28 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll

    + 2008-10-03 10:04:49 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll

    - 2008-08-26 08:30:45 105,984 -c--a-w c:\windows\system32\dllcache\url.dll

    + 2008-10-16 20:33:31 105,984 -c--a-w c:\windows\system32\dllcache\url.dll

    - 2008-08-26 08:30:45 1,159,680 -c--a-w c:\windows\system32\dllcache\urlmon.dll

    + 2008-10-16 20:33:32 1,160,192 -c--a-w c:\windows\system32\dllcache\urlmon.dll

    - 2008-08-26 08:30:45 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll

    + 2008-10-16 20:33:32 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll

    - 2008-08-26 08:30:45 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll

    + 2008-10-16 20:33:33 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll

    - 2006-10-18 19:47:20 937,984 -c--a-w c:\windows\system32\dllcache\WMNetMgr.dll

    + 2008-06-18 04:03:08 938,496 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll

    - 2006-10-18 19:47:22 2,450,944 -c--a-w c:\windows\system32\dllcache\wmvcore.dll

    + 2008-06-18 04:03:14 2,458,112 -c--a-w c:\windows\system32\dllcache\WMVCore.dll

    - 2008-08-26 08:30:43 347,136 ----a-w c:\windows\system32\dxtmsft.dll

    + 2008-10-16 20:33:22 347,136 ----a-w c:\windows\system32\dxtmsft.dll

    - 2008-08-26 08:30:43 214,528 ----a-w c:\windows\system32\dxtrans.dll

    + 2008-10-16 20:33:22 214,528 ----a-w c:\windows\system32\dxtrans.dll

    - 2008-08-26 08:30:43 133,120 ----a-w c:\windows\system32\extmgr.dll

    + 2008-10-16 20:33:22 133,120 ----a-w c:\windows\system32\extmgr.dll

    - 2008-08-26 08:30:43 63,488 ----a-w c:\windows\system32\icardie.dll

    + 2008-10-16 20:33:22 63,488 ----a-w c:\windows\system32\icardie.dll

    - 2008-08-25 08:41:09 70,656 ----a-w c:\windows\system32\ie4uinit.exe

    + 2008-10-16 13:15:01 70,656 ----a-w c:\windows\system32\ie4uinit.exe

    - 2008-08-26 08:30:43 153,088 ----a-w c:\windows\system32\ieakeng.dll

    + 2008-10-16 20:33:22 153,088 ----a-w c:\windows\system32\ieakeng.dll

    - 2008-08-26 08:30:43 230,400 ----a-w c:\windows\system32\ieaksie.dll

    + 2008-10-16 20:33:23 230,400 ----a-w c:\windows\system32\ieaksie.dll

    - 2008-08-23 05:54:51 161,792 ----a-w c:\windows\system32\ieakui.dll

    + 2008-10-15 07:04:53 161,792 ----a-w c:\windows\system32\ieakui.dll

    - 2008-08-26 08:30:43 383,488 ----a-w c:\windows\system32\ieapfltr.dll

    + 2008-10-16 20:33:23 383,488 ----a-w c:\windows\system32\ieapfltr.dll

    - 2008-08-26 08:30:43 384,512 ----a-w c:\windows\system32\iedkcs32.dll

    + 2008-10-16 20:33:23 384,512 ----a-w c:\windows\system32\iedkcs32.dll

    - 2008-10-03 17:31:14 6,066,176 ----a-w c:\windows\system32\ieframe.dll

    + 2008-10-16 20:33:26 6,066,176 ----a-w c:\windows\system32\ieframe.dll

    - 2008-08-26 08:30:44 44,544 ----a-w c:\windows\system32\iernonce.dll

    + 2008-10-16 20:33:26 44,544 ----a-w c:\windows\system32\iernonce.dll

    - 2008-08-26 08:30:44 267,776 ----a-w c:\windows\system32\iertutil.dll

    + 2008-10-16 20:33:26 267,776 ----a-w c:\windows\system32\iertutil.dll

    - 2008-08-25 08:38:00 13,824 ----a-w c:\windows\system32\ieudinit.exe

    + 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\ieudinit.exe

    - 2008-08-26 08:30:44 27,648 ----a-w c:\windows\system32\jsproxy.dll

    + 2008-10-16 20:33:27 27,648 ----a-w c:\windows\system32\jsproxy.dll

    - 2006-10-18 18:03:58 100,864 ----a-w c:\windows\system32\logagent.exe

    + 2008-06-18 00:09:22 100,864 ----a-w c:\windows\system32\logagent.exe

    - 2008-11-03 15:10:26 17,318,336 ----a-w c:\windows\system32\MRT.exe

    + 2008-12-09 23:24:37 17,593,280 ----a-w c:\windows\system32\MRT.exe

    - 2008-08-26 08:30:44 459,264 ----a-w c:\windows\system32\msfeeds.dll

    + 2008-10-16 20:33:27 459,264 ----a-w c:\windows\system32\msfeeds.dll

    - 2008-08-26 08:30:44 52,224 ----a-w c:\windows\system32\msfeedsbs.dll

    + 2008-10-16 20:33:27 52,224 ----a-w c:\windows\system32\msfeedsbs.dll

    - 2008-08-27 09:30:46 3,593,216 ----a-w c:\windows\system32\mshtml.dll

    + 2008-10-17 01:03:32 3,593,216 ----a-w c:\windows\system32\mshtml.dll

    - 2008-08-26 08:30:45 477,696 ----a-w c:\windows\system32\mshtmled.dll

    + 2008-10-16 20:33:30 477,696 ----a-w c:\windows\system32\mshtmled.dll

    - 2008-08-26 08:30:45 193,024 ----a-w c:\windows\system32\msrating.dll

    + 2008-10-16 20:33:30 193,024 ----a-w c:\windows\system32\msrating.dll

    - 2008-08-26 08:30:45 671,232 ----a-w c:\windows\system32\mstime.dll

    + 2008-10-16 20:33:31 671,232 ----a-w c:\windows\system32\mstime.dll

    - 2008-08-26 08:30:45 102,912 ----a-w c:\windows\system32\occache.dll

    + 2008-10-16 20:33:31 102,912 ----a-w c:\windows\system32\occache.dll

    - 2008-08-26 08:30:45 44,544 ----a-w c:\windows\system32\pngfilt.dll

    + 2008-10-16 20:33:31 44,544 ----a-w c:\windows\system32\pngfilt.dll

    - 2008-07-08 13:08:08 17,784 ------w c:\windows\system32\spmsg.dll

    + 2007-11-30 12:39:50 17,784 ------w c:\windows\system32\spmsg.dll

    - 2008-07-11 12:42:28 62,976 ------w c:\windows\system32\tzchange.exe

    + 2008-10-23 10:06:59 62,976 ------w c:\windows\system32\tzchange.exe

    - 2008-08-26 08:30:45 105,984 ----a-w c:\windows\system32\url.dll

    + 2008-10-16 20:33:31 105,984 ----a-w c:\windows\system32\url.dll

    - 2008-08-26 08:30:45 1,159,680 ----a-w c:\windows\system32\urlmon.dll

    + 2008-10-16 20:33:32 1,160,192 ----a-w c:\windows\system32\urlmon.dll

    - 2008-08-26 08:30:45 233,472 ----a-w c:\windows\system32\webcheck.dll

    + 2008-10-16 20:33:32 233,472 ----a-w c:\windows\system32\webcheck.dll

    - 2006-10-18 19:47:20 937,984 ----a-w c:\windows\system32\WMNetMgr.dll

    + 2008-06-18 04:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll

    - 2006-10-18 19:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll

    + 2008-06-18 04:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll

    + 2008-12-15 19:47:17 16,384 ----atw c:\windows\temp\Perflib_Perfdata_3cc.dat

    - 2008-12-06 12:58:19 1,500 ----a-w c:\windows\UI\BIOSCTL.DAT

    + 2008-12-15 19:49:24 1,500 ----a-w c:\windows\UI\BIOSCTL.DAT

    .

    -- Snapshot resatt til dagens dato --

    .

    (((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

    REGEDIT4

     

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

    "SUPERAntiSpyware"="c:\programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-12 1809648]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]

    "JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-08-14 352256]

    "Gainward"="c:\windows\TBPanel.exe" [2007-01-12 2162688]

    "Norman ZANDA"="c:\norman\Npm\Bin\ZLH.EXE" [2008-06-02 277616]

    "OpwareSE2"="c:\programfiler\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]

    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8523776]

    "COMODO Firewall Pro"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]

    "COMODO Internet Security"="c:\programfiler\COMODO\Firewall\cfp.exe" [2008-12-06 1797880]

    "SunJavaUpdateSched"="c:\programfiler\Java\jre6\bin\jusched.exe" [2008-12-05 136600]

    "nwiz"="nwiz.exe" [2007-11-06 c:\windows\system32\nwiz.exe]

     

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    "Exetender"="c:\programfiler\SoIP-player\GPlayer.exe" [2008-05-15 1958400]

     

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programfiler\SUPERAntiSpyware\SASSEH.DLL" [2008-10-02 77824]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

    2008-12-12 21:22 352256 c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

    "AppInit_DLLs"= c:\windows\system32\guard32.dll

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "msacm.clmp3enc"= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

    --------- 2006-11-15 09:46 204288 c:\programfiler\Windows Media Player\wmpnscfg.exe

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "c:\\Programfiler\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=

    "c:\\Programfiler\\LimeWire\\LimeWire.exe"=

    "c:\\WINDOWS\\system32\\sessmgr.exe"=

    "c:\\Programfiler\\Windows Media Player\\wmplayer.exe"=

    "c:\\Programfiler\\QuickTime\\QuickTimePlayer.exe"=

    "c:\\Programfiler\\Windows Live\\Messenger\\msnmsgr.exe"=

    "c:\\Programfiler\\Windows Live\\Messenger\\livecall.exe"=

    "c:\\Programfiler\\Messenger\\msmsgs.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\WINDOWS\\system32\\winver.exe"=

    "c:\\Programfiler\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

    "c:\\Programfiler\\Bonjour\\mDNSResponder.exe"=

    "c:\\Programfiler\\iTunes\\iTunes.exe"=

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "7887:TCP"= 7887:TCP:BitComet 7887 TCP

    "7887:UDP"= 7887:UDP:BitComet 7887 UDP

     

    R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2008-08-13 101776]

    R1 cmdHlp;COMODO Firewall Pro Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2008-08-13 31504]

    R1 SASDIFSV;SASDIFSV;\??\c:\programfiler\SUPERAntiSpyware\SASDIFSV.SYS [2006-10-10 8944]

    R1 SASKUTIL;SASKUTIL;\??\c:\programfiler\SUPERAntiSpyware\SASKUTIL.sys [2007-02-27 55024]

    R2 Ndiskio;Ndiskio;\??\c:\norman\Nse\bin\NDISKIO.SYS [2007-04-26 20448]

    R2 NVOY;Norman's Very Own supplY of resources;"c:\norman\npm\bin\nvoy.exe" [2008-03-05 121912]

    R2 X4HSX32Ex;X4HSX32Ex;\??\c:\programfiler\SoIP-player\X4HSX32Ex.Sys [2008-09-20 29856]

    R3 cxbu0wdm;CardMan 3x21;c:\windows\system32\DRIVERS\cxbu0wdm.sys [2008-01-15 97792]

    R3 nsesvc;Norman Scanner Engine Service;"c:\norman\nse\bin\NSESVC.EXE" -daemon [2008-06-27 322616]

    R3 NvcMFlt;NvcMFlt;c:\windows\system32\DRIVERS\nvcw32mf.sys [2007-05-03 19512]

    R3 nvcoas;Norman Virus Control on-access component;"c:\norman\Nvc\bin\nvcoas.exe" [2008-01-15 191544]

    R3 NVCScheduler;Norman Virus Control Scheduler;"c:\norman\Npm\bin\NVCSCHED.EXE" [2008-03-05 154680]

    R3 SASENUM;SASENUM;\??\c:\programfiler\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]

    S3 nvcfsr;nvcfsr;\??\c:\norman\Nvc\bin\nvcfsr.sys [2007-04-26 6712]

    S3 nvcoafl51;nvcoafl51;\??\c:\norman\Nvc\bin\nvcoafl51.sys [2007-04-26 30264]

    S3 nvcoaft51;nvcoaft51;\??\c:\norman\Nvc\bin\nvcoaft51.sys [2007-04-26 129848]

    S3 nvcoarc51;nvcoarc51;\??\c:\norman\Nvc\bin\nvcoarc51.sys [2007-04-26 23224]

    S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2008-11-18 7808]

    S3 s716bus;Sony Ericsson Device 716 driver (WDM);c:\windows\system32\DRIVERS\s716bus.sys [2007-12-22 83208]

    S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s716mdfl.sys [2007-12-30 15112]

    S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s716mdm.sys [2007-12-30 108552]

    S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s716mgmt.sys [2008-02-04 100360]

    S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS);c:\windows\system32\DRIVERS\s716nd5.sys [2008-02-04 23176]

    S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s716obex.sys [2007-12-30 98568]

    S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM);c:\windows\system32\DRIVERS\s716unic.sys [2008-02-04 98952]

    S3 USBAAPL;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl.sys []

    S3 z530bus;Sony Ericsson Z530 Driver driver (WDM);c:\windows\system32\DRIVERS\z530bus.sys [2008-10-08 58288]

    S3 z530mdfl;Sony Ericsson Z530 USB WMC Modem Filter;c:\windows\system32\DRIVERS\z530mdfl.sys [2008-10-08 8336]

    S3 z530mdm;Sony Ericsson Z530 USB WMC Modem Driver;c:\windows\system32\DRIVERS\z530mdm.sys [2008-10-08 94064]

    S3 z530mgmt;Sony Ericsson Z530 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\z530mgmt.sys [2008-10-08 85408]

    S3 z530obex;Sony Ericsson Z530 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\z530obex.sys [2008-10-08 83344]

    .

    Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)

     

    2008-12-12 c:\windows\Tasks\AppleSoftwareUpdate.job

    - c:\programfiler\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

    .

    .

    ------- Tilleggsskanning -------

    .

    uStart Page = hxxp://www.db.no/

    uInternet Connection Wizard,ShellNext = iexplore

    uInternet Settings,ProxyOverride = *.local

    IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    IE: Easy-WebPrint Add To Print List - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

    IE: Easy-WebPrint High Speed Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

    IE: Easy-WebPrint Preview - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

    IE: Easy-WebPrint Print - c:\programfiler\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

     

    c:\windows\Downloaded Program Files\zylomgamesplayer.dll - O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}

    hxxp://game01.zylom.com/activex/zylomgamesplayer.cab

    c:\windows\Downloaded Program Files\ZylomGamesPlayer.inf

    FF - ProfilePath - c:\documents and settings\Trine Og Diana\Programdata\Mozilla\Firefox\Profiles\aztt2aer.default\

    FF - prefs.js: browser.startup.homepage - www.vg.no

    FF - plugin: c:\programfiler\Opera\program\plugins\npdivx32.dll

    FF - plugin: c:\programfiler\Opera\program\plugins\NPOFF12.DLL

    .

     

    **************************************************************************

     

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2008-12-15 20:48:03

    Windows 5.1.2600 Service Pack 3 NTFS

     

    detected NTDLL code modification:

    ZwClose

     

    skanner skjulte prosesser ...

     

    skanner skjulte autostart-oppføringer ...

     

    skanner skjulte filer ...

     

    skanning vellykket

    skjulte filer: 0

     

    **************************************************************************

    .

    --------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

     

    - - - - - - - > 'winlogon.exe'(792)

    c:\programfiler\SUPERAntiSpyware\SASWINLO.DLL

    .

    ------------------------ Andre Kjørende Prosesser ------------------------

    .

    c:\norman\npm\bin\elogsvc.exe

    c:\norman\npm\bin\Zanda.exe

    c:\programfiler\Lavasoft\Ad-Aware\aawservice.exe

    c:\windows\system32\scardsvr.exe

    c:\programfiler\Bonjour\mDNSResponder.exe

    c:\programfiler\COMODO\Firewall\cmdagent.exe

    c:\programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe

    c:\programfiler\Java\jre6\bin\jqs.exe

    c:\programfiler\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

    c:\windows\system32\nvsvc32.exe

    c:\programfiler\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe

    c:\programfiler\Windows Media Player\wmpnetwk.exe

    c:\norman\npm\bin\Njeeves.exe

    c:\norman\NVC\bin\Nip.exe

    c:\norman\NVC\bin\CClaw.exe

    c:\windows\system32\imapi.exe

    .

    **************************************************************************

    .

    Tidspunkt ferdig: 2008-12-15 20:53:10 - maskinen ble startet på nytt

    ComboFix-quarantined-files.txt 2008-12-15 19:52:59

    ComboFix2.txt 2008-12-09 09:44:57

    ComboFix3.txt 2008-12-08 21:27:11

    ComboFix4.txt 2008-12-08 21:19:00

     

    Pre-Run: 294 167 138 304 byte ledig

    Post-Run: 294,274,285,568 byte ledig

     

    454 --- E O F --- 2008-12-11 18:12:15

     

     

×
×
  • Opprett ny...