XP Security Center?

2008-09-13, 21:19 #25

Bannlyst

Citat:

Ursprungligen postat av w580i

fixa denna

O20 - AppInit_DLLs: karina.dat

kan du posta loggen du fick av malwarebytes också?

Installerade precis TrendMicro's internet security pro. Håller på och gör en fullscan. Jag har tyvärr inte kvar loggen ifrån malmwawrebytes.. kan man få fram den utan att scanna igen? Det tog ungefär 1 timma att scanna..

Citera

2008-09-13, 21:24 #26

Medlem

Reg: Jul 2007

Inlägg: 1 285

Citat:

Ursprungligen postat av chabbsteR

Installerade precis TrendMicro's internet security pro. Håller på och gör en fullscan. Jag har tyvärr inte kvar loggen ifrån malmwawrebytes.. kan man få fram den utan att scanna igen? Det tog ungefär 1 timma att scanna..

Du avinstallerade nod32 innan du installerade trendmicro eller?

starta malwarebytes, gå till fliken "loggar" dubbelklicka på txt filen och kopiera och posta här.

Gör även en ny scan med malwarebytes

Citera

2008-09-13, 21:26 #27

Medlem

Reg: Mar 2007

Inlägg: 12 238

Citat:

Ursprungligen postat av chabbsteR

Installerade precis TrendMicro's internet security pro. Håller på och gör en fullscan. Jag har tyvärr inte kvar loggen ifrån malmwawrebytes.. kan man få fram den utan att scanna igen? Det tog ungefär 1 timma att scanna..

ska du scanna igen så räcker det att du väljer snabb scan

Citera

2008-09-13, 23:06 #28

Bannlyst

Jepp trendmicro krävde att jag tog bort ad-aware och nod32. Vilket av dom antivirusprogrammen rekomenderar du? Hursomhelst så kommer båda loggarna här, först gjorde jag en snabbscan med malwarebytes och sen med hijackthis.

Malwarebytes' Anti-Malware 1.28
Databasversion: 1145
Windows 5.1.2600 Service Pack 2

2008-09-13 20:48:53
mbam-log-2008-09-13 (20-48-53).txt

Skanningstyp: Fullständig skanning (C:\|D:\|)
Antal skannade objekt: 167934
Förfluten tid: 52 minute(s), 52 second(s)

Infekterade minnesprocesser: 0
Infekterade minnesmoduler: 1
Infekterade registernycklar: 6
Infekterade registervärden: 2
Infekterade registerdataposter: 0
Infekterade mappar: 1
Infekterade filer: 40

Infekterade minnesprocesser:
(Inga illasinnade poster hittades)

Infekterade minnesmoduler:
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.

Infekterade registernycklar:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w inmp58 (Rootkit.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\w inmp58 (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\winmp58 (Rootkit.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WinCtrl32 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\xp_securitycenter (Rogue.XPSecurityCenter) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\wkey (Malware.Trace) -> Quarantined and deleted successfully.

Infekterade registervärden:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\buritos (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Cur rentVersion\Run\braviax (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Infekterade registerdataposter:
(Inga illasinnade poster hittades)

Infekterade mappar:
C:\Program\WinAntispyware2008 (Rogue.WinAntiSpyware) -> Quarantined and deleted successfully.

Infekterade filer:
C:\Documents and Settings\XXXXXXXX\Lokala inställningar\Temp\Temporary Internet Files\Content.IE5\Q903E9I5\Install[2].exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\XXXXXXXX\Lokala inställningar\Temporary Internet Files\Content.IE5\85UFW16N\Install[1].exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\XXXXXXXX\Lokala inställningar\Temporary Internet Files\Content.IE5\QMNFX0VF\Install[1].exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Program\WinAntispyware2008\Uninstall.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP646\A0117582.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP646\A0117613.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP646\A0117614.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP646\A0117637.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP646\A0117642.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP647\A0117667.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP647\A0117672.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP647\A0117688.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP647\A0118710.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP647\A0118715.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0118912.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0118928.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0118945.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0118946.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0118995.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0118997.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0119017.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP648\A0119016.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP649\A0119137.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP649\A0119138.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP649\A0119152.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B5BB2F26-82EB-4EBD-8355-038304BB8FCD}\RP649\A0119153.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\karina.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\karina.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winivstr.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\Winmp58.sys (Rootkit.Agent) -> Delete on reboot.
C:\WINDOWS\system32\buritos.exe (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\WinCtrl32.dl_ (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\delself.bat (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\beep.sys (Fake.Beep.Sys) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\beep.sys (Fake.Beep.Sys) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\~.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\buritos.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\_scui.cpl (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Citera

2008-09-13, 23:07 #29

Bannlyst

Och här kommer Hijackthis loggen (allt fick inte plats i ett och samma inlägg)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:06:15, on 2008-09-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program\Winamp\winampa.exe
C:\Program\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program\Logitech\Video\LogiTray.exe
C:\Program\QuickTime\qttask.exe
C:\Program\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program\Logitech\Video\FxSvr2.exe
C:\Program\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\rserver30\RServer3.exe
C:\Program\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\rserver30\FamItrfc.Exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\zstatus.exe
C:\Program\Trend Micro\BM\TMBMSRV.exe
C:\Program\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program\Trend Micro\Internet Security\TmProxy.exe
C:\Program\Trend Micro\TrendSecure\TSCFCommander.exe
C:\Program\Trend Micro\TrendSecure\TSCFPlatformCOMSvr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program\Internet Explorer\iexplore.exe
C:\Program\Trend Micro\TrendSecure\TransactionProtector\Dependent\H SChkProxyExe.exe
C:\WINDOWS\system32\kdfmgr.exe
C:\Program\Internet Explorer\iexplore.exe
C:\WINDOWS\regedit.exe
C:\Program\uTorrent\uTorrent.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\XXXXXXXXXX\Skrivbord\apan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: TransactionProtector BHO - {C1656CCA-D2EA-4A32-94AE-AE0B180E6449} - C:\Program\Trend Micro\TrendSecure\TransactionProtector\TSToolbar.d ll
O3 - Toolbar: Transaction Protector - {E7620C98-FCCC-40E5-92EC-C7685D2E1E40} - C:\Program\Trend Micro\TrendSecure\TransactionProtector\TSToolbar.d ll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [hp 1000 firmware] C:\Program\hp LaserJet 1000\fwdl.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SansaDispatch] C:\Program\SanDisk\Sansa Updater\SansaDispatch.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Program\Logitech\Video\ManifestEngine.exe boot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-1757981266-1060284298-1420408851-1003\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: PalTalk.lnk = C:\Program\Paltalk Messenger\paltalk.exe
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office12\EXCEL.EXE/3000
O20 - AppInit_DLLs: karina.dat
O23 - Service: COM+ System Application COMSysAppLmHostsRemoteRegistry (COMSysAppLmHostsRemoteRegistry) - Unknown owner - C:\WINDOWS\
O23 - Service: COM+ System Application COMSysAppSysmonLog (COMSysAppSysmonLog) - Unknown owner - C:\WINDOWS\
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service iPodSwPrv (iPodSwPrv) - Unknown owner - C:\WINDOWS\
O23 - Service: TCP/IP NetBIOS Helper LmHostsRemoteRegistry (LmHostsRemoteRegistry) - Unknown owner - C:\WINDOWS\
O23 - Service: TCP/IP NetBIOS Helper LmHostsRemoteRegistry LmHostsRemoteRegistryHidServ (LmHostsRemoteRegistryHidServ) - Unknown owner - C:\WINDOWS\
O23 - Service: Network Connections NetmanEventSystem (NetmanEventSystem) - Unknown owner - C:\WINDOWS\
O23 - Service: Network Location Awareness (NLA) NlaCOMSysAppSysmonLog (NlaCOMSysAppSysmonLog) - Unknown owner - C:\WINDOWS\
O23 - Service: Office Source Engine oseTapiSrv (oseTapiSrv) - Unknown owner - C:\WINDOWS\
O23 - Service: Radmin Server V3 (RServer3) - Famatech International Corp. - C:\WINDOWS\system32\rserver30\RServer3.exe
O23 - Service: Smart Card SCardSvrNetDDE (SCardSvrNetDDE) - Unknown owner - C:\WINDOWS\
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) SharedAccessAlerter (SharedAccessAlerter) - Unknown owner - C:\WINDOWS\
O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) SharedAccessAlerter SharedAccessAlerterShellHWDetection (SharedAccessAlerterShellHWDetection) - Unknown owner - C:\WINDOWS\
O23 - Service: SQLAgent$PINNACLESYS SQLAgent$PINNACLESYSTlntSvr (SQLAgent$PINNACLESYSTlntSvr) - Unknown owner - C:\WINDOWS\
O23 - Service: Terminal Services TermServiceTrkWks (TermServiceTrkWks) - Unknown owner - C:\WINDOWS\
O23 - Service: Themes ThemesNetDDEdsdm (ThemesNetDDEdsdm) - Unknown owner - C:\WINDOWS\
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program\Trend Micro\Internet Security\TmProxy.exe

--
End of file - 6497 bytes

Citera

2008-09-13, 23:18 #30

Medlem

Reg: Jul 2007

Inlägg: 1 390

Det är nåt som hindrar hijackthis från att ta bort saker ur loggen, starta om datorn i felsäkertläge och kör hijackthis därifrån.
Sen gör du en ny logg i normal windowsläge och kontrollerar om det är borta.

Citera

2008-09-13, 23:23 #31

Medlem

Reg: Jul 2007

Inlägg: 1 285

Scanna med malwarebytes till det ser rent ut, det räcker att du väljer snabb scan

fixa denna
O20 - AppInit_DLLs: karina.dat

ifall den fortfarande är kvar i hijackthis, starta om datorn i felsäkert läge och ta bort den där ifrån, starta sedan datorn i normalt läge och posta en ny HJT logg
du starta daotn i felsäkert läge genom att nöta in F8 vid uppstarten

__________________
Senast redigerad av w580i 2008-09-13 kl. 23:26.

Citera

2008-09-13, 23:26 #32

Bannlyst

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:23:53, on 2008-09-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rserver30\RServer3.exe
C:\Program\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\rserver30\FamItrfc.Exe
C:\Program\Winamp\winampa.exe
C:\Program\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program\Logitech\Video\LogiTray.exe
C:\Program\QuickTime\qttask.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\Program\Paltalk Messenger\paltalk.exe
C:\Program\Trend Micro\BM\TMBMSRV.exe
C:\Program\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\zstatus.exe
C:\Documents and Settings\XXXXXXX\Skrivbord\apan.exe
C:\Program\MSN Messenger\usnsvc.exe
C:\Program\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program\Trend Micro\TrendSecure\TSCFCommander.exe
C:\Program\Trend Micro\TrendSecure\TSCFPlatformCOMSvr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: TransactionProtector BHO - {C1656CCA-D2EA-4A32-94AE-AE0B180E6449} - C:\Program\Trend Micro\TrendSecure\TransactionProtector\TSToolbar.d ll
O3 - Toolbar: Transaction Protector - {E7620C98-FCCC-40E5-92EC-C7685D2E1E40} - C:\Program\Trend Micro\TrendSecure\TransactionProtector\TSToolbar.d ll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [hp 1000 firmware] C:\Program\hp LaserJet 1000\fwdl.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SansaDispatch] C:\Program\SanDisk\Sansa Updater\SansaDispatch.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Program\Logitech\Video\ManifestEngine.exe boot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-1757981266-1060284298-1420408851-1003\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: PalTalk.lnk = C:\Program\Paltalk Messenger\paltalk.exe
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office12\EXCEL.EXE/3000
O23 - Service: COM+ System Application COMSysAppLmHostsRemoteRegistry (COMSysAppLmHostsRemoteRegistry) - Unknown owner - C:\WINDOWS\
O23 - Service: COM+ System Application COMSysAppSysmonLog (COMSysAppSysmonLog) - Unknown owner - C:\WINDOWS\
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service iPodSwPrv (iPodSwPrv) - Unknown owner - C:\WINDOWS\
O23 - Service: TCP/IP NetBIOS Helper LmHostsRemoteRegistry (LmHostsRemoteRegistry) - Unknown owner - C:\WINDOWS\
O23 - Service: TCP/IP NetBIOS Helper LmHostsRemoteRegistry LmHostsRemoteRegistryHidServ (LmHostsRemoteRegistryHidServ) - Unknown owner - C:\WINDOWS\
O23 - Service: Network Connections NetmanEventSystem (NetmanEventSystem) - Unknown owner - C:\WINDOWS\
O23 - Service: Network Location Awareness (NLA) NlaCOMSysAppSysmonLog (NlaCOMSysAppSysmonLog) - Unknown owner - C:\WINDOWS\
O23 - Service: Office Source Engine oseTapiSrv (oseTapiSrv) - Unknown owner - C:\WINDOWS\
O23 - Service: Radmin Server V3 (RServer3) - Famatech International Corp. - C:\WINDOWS\system32\rserver30\RServer3.exe
O23 - Service: Smart Card SCardSvrNetDDE (SCardSvrNetDDE) - Unknown owner - C:\WINDOWS\
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) SharedAccessAlerter (SharedAccessAlerter) - Unknown owner - C:\WINDOWS\
O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) SharedAccessAlerter SharedAccessAlerterShellHWDetection (SharedAccessAlerterShellHWDetection) - Unknown owner - C:\WINDOWS\
O23 - Service: SQLAgent$PINNACLESYS SQLAgent$PINNACLESYSTlntSvr (SQLAgent$PINNACLESYSTlntSvr) - Unknown owner - C:\WINDOWS\
O23 - Service: Terminal Services TermServiceTrkWks (TermServiceTrkWks) - Unknown owner - C:\WINDOWS\
O23 - Service: Themes ThemesNetDDEdsdm (ThemesNetDDEdsdm) - Unknown owner - C:\WINDOWS\
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program\Trend Micro\Internet Security\TmProxy.exe

--
End of file - 6074 bytes

Borta

Tackar så mycket!!!!!! Är det något jag bör tänka på??? Vilket antivirusprogram är bäst, nod32 eller trendmicro eller varken eller?

För detta är farsans dator och det sitter alla möjliga människor på den hela tiden så spyware kan komma relativt lätt så något antivirusprogram med sånt skydd är bara plus!

Citera

2008-09-13, 23:32 #33

Medlem

Reg: Jul 2007

Inlägg: 1 285

så nu är skiten borta

nod32 tar mindre prestanda, och har bättre detektion, så ifall du tänker välja mellan nod32 och trend micro internet security, då rekommenderar jag nod32.

Fast jag rekommenderar att du skaffar kaspersky 2009 istället, finns att tanka hem från thepiratebay.org

Citera

2008-09-13, 23:54 #34

Medlem

Reg: Jul 2007

Inlägg: 1 390

Citat:

Ursprungligen postat av chabbsteR

Borta

Tackar så mycket!!!!!! Är det något jag bör tänka på??? Vilket antivirusprogram är bäst, nod32 eller trendmicro eller varken eller?

För detta är farsans dator och det sitter alla möjliga människor på den hela tiden så spyware kan komma relativt lätt så något antivirusprogram med sånt skydd är bara plus!

Inget av dom är bättre än det andra om man inte fattar och förstår sig på den.
Testa dig fram och se vad du/ni själva gillar och dra egna slutsatser.

Citera

XP Security Center?

Skapa ett konto eller logga in för att kommentera

Skapa ett konto

Logga in