Angående:
LSA Shell (Export version) encountered a problem needed to close

Så skriver du at du har hentet hotfixes…du skal nok lige tjekke for hotfixes igen, på windows update, indtil der ikke er flere at hente.

mvh.

Logfile of HijackThis v1.97.7
Scan saved at 12:55:52, on 20-05-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:/WINDOWS/System32/smss.exe
C:/WINDOWS/system32/winlogon.exe
C:/WINDOWS/system32/services.exe
C:/WINDOWS/system32/lsass.exe
C:/WINDOWS/system32/svchost.exe
C:/WINDOWS/System32/svchost.exe
C:/WINDOWS/system32/spoolsv.exe
C:/mysql/bin/mysqld.exe
C:/Program Files/Norton AntiVirus/navapsvc.exe
C:/Program Files/Norton AntiVirus/AdvTools/NPROTECT.EXE
C:/WINDOWS/System32/svchost.exe
C:/WINDOWS/Explorer.EXE
C:/Program Files/Nokia/Nokia PC Suite 5/DataLayer.exe
C:/Program Files/Common Files/Nokia/NCLTools/NclTray.exe
C:/Program Files/QuickTime/qttask.exe
C:/Program Files/Adobe/Adobe Version Cue/ControlPanel/VersionCueTray.exe
C:/WINDOWS/System32/ctfmon.exe
C:/Program Files/MSN Messenger/MsnMsgr.Exe
C:/Program Files/Common Files/Nokia/Services/ServiceLayer.exe
C:/WINDOWS/Plaxo/1.5.2.32/InstallStub.exe
C:/Program Files/ArtecUSB/ScanPanel/ScnPanel.exe
C:/Program Files/Adobe/Acrobat 5.0/Distillr/AcroTray.exe
C:/Palm/hotsync.exe
C:/Program Files/SpywareGuard/sgmain.exe
C:/Program Files/SpywareGuard/sgbhp.exe
D:/Install/HiJackThis/HijackThis.exe

R1 - HKCU/Software/Microsoft/Internet Explorer/Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:/Program Files/Adobe/Acrobat 5.0/Acrobat/ActiveX/AcroIEHelper.ocx
O2 - BHO: (no name) - {41353F8B-78CE-48A5-BE44-153ED293D192} - C:/PROGRA~1/POPUPP~1/PopLib.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:/Program Files/SpywareGuard/dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:/PROGRA~1/SPYBOT~1/SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:/Program Files/Norton AntiVirus/NavShExt.dll
O3 - Toolbar: &Google; - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:/WINDOWS/Downloaded Program Files/googlenav.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:/Program Files/Norton AntiVirus/NavShExt.dll
O3 - Toolbar: &Radio; - {8E718888-423F-11D2-876E-00A0C9082467} - C:/WINDOWS/System32/msdxm.ocx
O4 - HKLM/../Run: [NeroCheck] C:/WINDOWS/system32/NeroCheck.exe
O4 - HKLM/../Run: [DataLayer] C:/Program Files/Nokia/Nokia PC Suite 5/DataLayer.exe
O4 - HKLM/../Run: [Nokia Tray Application] C:/Program Files/Common Files/Nokia/NCLTools/NclTray.exe
O4 - HKLM/../Run: [QuickTime Task] “C:/Program Files/QuickTime/qttask.exe” -atboottime
O4 - HKLM/../Run: [ccApp] “C:/Program Files/Common Files/Symantec Shared/ccApp.exe”
O4 - HKLM/../Run: [ccRegVfy] “C:/Program Files/Common Files/Symantec Shared/ccRegVfy.exe”
O4 - HKLM/../Run: [Advanced Tools Check] C:/PROGRA~1/NORTON~1/AdvTools/ADVCHK.EXE
O4 - HKLM/../Run: [AdobeVersionCue] C:/Program Files/Adobe/Adobe Version Cue/ControlPanel/VersionCueTray.exe
O4 - HKCU/../Run: [CTFMON.EXE] C:/WINDOWS/System32/ctfmon.exe
O4 - HKCU/../Run: [MsnMsgr] “C:/Program Files/MSN Messenger/MsnMsgr.Exe” /background
O4 - HKCU/../Run: [PlaxoUpdate] C:/WINDOWS/Plaxo/1.5.2.32/InstallStub.exe -a
O4 - Startup: HotSync Manager.lnk = C:/Palm/hotsync.exe
O4 - Startup: WinMySQLadmin.lnk = D:/Web Server/mySQL/bin/winmysqladmin.exe
O4 - Startup: SpywareGuard.lnk = C:/Program Files/SpywareGuard/sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:/Program Files/Common Files/Adobe/Calibration/Adobe Gamma Loader.exe
O4 - Global Startup: ScanPanel.lnk = C:/Program Files/ArtecUSB/ScanPanel/ScnPanel.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:/Program Files/Adobe/Acrobat 5.0/Distillr/AcroTray.exe
O8 - Extra context menu item: &Google; Search - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links; - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed; Snapshot of Page - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmcache.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:/PROGRA~1/MICROS~1/OFFICE11/EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar; Pages - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmsimilar.html
O9 - Extra button: PopupPopper Kontrol Panel (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: show/hide IEB Toolbar (HKLM)
O9 - Extra ‘Tools’ menuitem: IE Booster Toolbar (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra ‘Tools’ menuitem: Show &Related; Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra ‘Tools’ menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:/Program Files/Internet Explorer/Plugins/NPDocBox.dll
O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - http://down.plaxo.com/down/release/PlaxoInstall.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38126.5207523148
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) - http://www.microsoft.com/security/controls/Sasser/20/SassCln.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4327/mcfscan.cab
O16 - DPF: {f760cb9e-c60f-4a89-890e-fae8b849493e} -

Nu ser det da ud til at jeg har fået has på LSA Shell.
Min Norton er stadigvæk disablet og jeg kan hverken lave reinstall eller uninstall på den.

What to do ?

Der er stadig nogle ting tilbage som skal væk. Fix disse:

R1 - HKCU/Software/Microsoft/Internet Explorer/Main,HomeOldSP = about:blank

O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {f760cb9e-c60f-4a89-890e-fae8b849493e} -

Derefter en tur i Regedit.
Klik på Start gå i - Kør - skriv: regedit - tast enter
Du får et vindue lidt ligesom stifinder.
Gå i rediger - ned i søg - i linjen skriver du: HOMEOldSP
Klik på find næste. Delete filen hvis den findes. Tast f3 for at finde næste (der er sikkert kun en) Luk på X når du får at vide der ikke er flere filer at finde.

Genstart, og en ny hijackthislog.

Logfile of HijackThis v1.97.7
Scan saved at 16:00:38, on 20-05-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:/WINDOWS/System32/smss.exe
C:/WINDOWS/system32/winlogon.exe
C:/WINDOWS/system32/services.exe
C:/WINDOWS/system32/lsass.exe
C:/WINDOWS/system32/svchost.exe
C:/WINDOWS/System32/svchost.exe
C:/WINDOWS/system32/spoolsv.exe
C:/mysql/bin/mysqld.exe
C:/Program Files/Norton AntiVirus/navapsvc.exe
C:/Program Files/Norton AntiVirus/AdvTools/NPROTECT.EXE
C:/WINDOWS/System32/svchost.exe
C:/WINDOWS/Explorer.EXE
C:/Program Files/Nokia/Nokia PC Suite 5/DataLayer.exe
C:/Program Files/Common Files/Nokia/NCLTools/NclTray.exe
C:/Program Files/QuickTime/qttask.exe
C:/Program Files/Common Files/Symantec Shared/ccApp.exe
C:/Program Files/Adobe/Adobe Version Cue/ControlPanel/VersionCueTray.exe
C:/WINDOWS/System32/ctfmon.exe
C:/Program Files/MSN Messenger/MsnMsgr.Exe
C:/WINDOWS/Plaxo/1.5.2.32/InstallStub.exe
C:/Program Files/Common Files/Nokia/Services/ServiceLayer.exe
C:/Program Files/ArtecUSB/ScanPanel/ScnPanel.exe
C:/Program Files/Adobe/Acrobat 5.0/Distillr/AcroTray.exe
C:/Palm/hotsync.exe
C:/Program Files/SpywareGuard/sgmain.exe
C:/Program Files/SpywareGuard/sgbhp.exe
D:/Install/HiJackThis/HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:/Program Files/Adobe/Acrobat 5.0/Acrobat/ActiveX/AcroIEHelper.ocx
O2 - BHO: (no name) - {41353F8B-78CE-48A5-BE44-153ED293D192} - C:/PROGRA~1/POPUPP~1/PopLib.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:/Program Files/SpywareGuard/dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:/PROGRA~1/SPYBOT~1/SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:/Program Files/Norton AntiVirus/NavShExt.dll
O3 - Toolbar: &Google; - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:/WINDOWS/Downloaded Program Files/googlenav.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:/Program Files/Norton AntiVirus/NavShExt.dll
O3 - Toolbar: &Radio; - {8E718888-423F-11D2-876E-00A0C9082467} - C:/WINDOWS/System32/msdxm.ocx
O4 - HKLM/../Run: [NeroCheck] C:/WINDOWS/system32/NeroCheck.exe
O4 - HKLM/../Run: [DataLayer] C:/Program Files/Nokia/Nokia PC Suite 5/DataLayer.exe
O4 - HKLM/../Run: [Nokia Tray Application] C:/Program Files/Common Files/Nokia/NCLTools/NclTray.exe
O4 - HKLM/../Run: [QuickTime Task] “C:/Program Files/QuickTime/qttask.exe” -atboottime
O4 - HKLM/../Run: [ccApp] “C:/Program Files/Common Files/Symantec Shared/ccApp.exe”
O4 - HKLM/../Run: [ccRegVfy] “C:/Program Files/Common Files/Symantec Shared/ccRegVfy.exe”
O4 - HKLM/../Run: [Advanced Tools Check] C:/PROGRA~1/NORTON~1/AdvTools/ADVCHK.EXE
O4 - HKLM/../Run: [AdobeVersionCue] C:/Program Files/Adobe/Adobe Version Cue/ControlPanel/VersionCueTray.exe
O4 - HKCU/../Run: [CTFMON.EXE] C:/WINDOWS/System32/ctfmon.exe
O4 - HKCU/../Run: [MsnMsgr] “C:/Program Files/MSN Messenger/MsnMsgr.Exe” /background
O4 - HKCU/../Run: [PlaxoUpdate] C:/WINDOWS/Plaxo/1.5.2.32/InstallStub.exe -a
O4 - Startup: HotSync Manager.lnk = C:/Palm/hotsync.exe
O4 - Startup: WinMySQLadmin.lnk = D:/Web Server/mySQL/bin/winmysqladmin.exe
O4 - Startup: SpywareGuard.lnk = C:/Program Files/SpywareGuard/sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:/Program Files/Common Files/Adobe/Calibration/Adobe Gamma Loader.exe
O4 - Global Startup: ScanPanel.lnk = C:/Program Files/ArtecUSB/ScanPanel/ScnPanel.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:/Program Files/Adobe/Acrobat 5.0/Distillr/AcroTray.exe
O8 - Extra context menu item: &Google; Search - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links; - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed; Snapshot of Page - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmcache.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:/PROGRA~1/MICROS~1/OFFICE11/EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar; Pages - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmsimilar.html
O9 - Extra button: PopupPopper Kontrol Panel (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: show/hide IEB Toolbar (HKLM)
O9 - Extra ‘Tools’ menuitem: IE Booster Toolbar (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra ‘Tools’ menuitem: Show &Related; Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra ‘Tools’ menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:/Program Files/Internet Explorer/Plugins/NPDocBox.dll
O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - http://down.plaxo.com/down/release/PlaxoInstall.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://toolbar.google.com/data/da/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38126.5207523148
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) - http://www.microsoft.com/security/controls/Sasser/20/SassCln.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4327/mcfscan.cab

Hej gernot

En lang sej kamp har nået sin ende. [:D]

Din log er nu helt ren og du må gerne slå systemgendannelsen til igen.
Lidt råd med på vejen herfra skal du da også have.
For at sikre din pc fremover ville det være en god idé at bruge nogle af programmerne fra vores lille pakke som du kan se her:
http://www.spywarefri.dk/pakken.htm

Især vil jeg anbefale Spybot/og eller Ad-aware, SpywareBlaster, IE Privacy Keeper/el. EmtyTempFolder, IE-Spyad og SpywareGuard som minimum. De er alle gratis, fylder ikke meget, sløver ikke din pc og konflikter ikke med dine andre programmer

Ønsker du ikke mange små prg. så kan du i stedet købe et prg. som Spy Sweeper. Den ligger også i pakken, hvor du kan læse lidt mere. Der ligger også et link til dansk manual. Vælger du at købe Spy Sweeper, så er det eneste andet du har brug for, et cookie remover program.

Og så skal du også lige skjule dine filer og mapper igen, så du ikke ved en fejl kommer til at slette en vigtig fil. Det gør du samme sted, hvor du satte det til at vise alle filer, denne gang vælger du bare: Vis ikke skjulte filer og mapper.

Hej igen,

Det lyder jo RIGTIG dejligt, men… min Norton Anti 2003 kan jeg ikke få lov til at enable
Auto-protect er off, email-scanning viser error og automatic live-update er også off.
Selv om jeg forsøger at ændre deres indstillinger ignoreres de.

Har I et forslag til hvad jeg skal gøre ?

Re-install og Un-install er ikke muligt, jeg får en fatal fejl af en slags. Begge dele er prøvet, både i safe mode og normal mode.
Jeg har scannet for Klez - der var ikke noget !

Hej gernot

Prøv lige denne uninstaller som er helt fantastisk god. ftp://ftp.symantec.com/misc/consumer/Rnav2003.exe

Hej igen igen,

Spywareblaster kan ikke installeres ?!?

“This program has been damaged, possibly by a bad sector of the hard drive or a virus. Please reinstall it”

Det har jeg så forsøgt 2 gange - uden held.
Derefter downloadet fra et mirror site - samme fejl

?!?

Gaaabbbb…

Un-install gik fint men jeg kan ikke få lov til at re-installere Norton Antivirus 2003
Fejl : Fatal error - Insllation ended prematurely because of an error

Det er jo ikke super fedt at være på nettet uden virus scanner :o|

Hej gernot

Prøv lige at køre denne kommando her, som vil rette ødelagte eller mistede systemfiler.

Gå i start - kør - skriv: sfc /scannow - tast enter
Din Xp cd skal være i drevet under denne kommando her
Og det mellemrum skal være der mellem sfc og /

Prøv så igen at installere Norton.

Hej Aovergaard,

Det virker ikke :-(
Øv…nu var jeg lige så glad for at vi var ved vejs ende…

Hvad så ?

I vores pakkeløsning ligger en virusscanner som faktisk er på højde med Norton. Jeg har den selv installeret og den er ret god. Avast - du finder den her: http://www.spywarefri.dk/virusscannere.htm#avast bare klik på banneret med Avast. Samme sted finder du manualen på dansk.

Prøv at se om du ikke kan installere det prg. Eller kontakt Norton og hør dem hvorfor du ikke kan få Norton installeret.