Spywarefri Forum | Windows genstarter hvert 10. min

Windows genstarter hvert 10. min

[ Ignorer ] KristuZz
21.03.2010 18:06:06 Antal indlæg: 69	Igår begyndte mit windows XP SP3 at genstarte spontant ca. hvert 10. min. Jeg har allerede forsøgt flere ting uden held, bl.a. en system restore et par dage tilbage hvor der ikke var noget problem. Dette ordnede også min mistanke mod at jeg for nylig installerede Google Chrome, men det var åbenbart ikke problemet. Når computeren starter op igen, og jeg sender en fejlrapport siger den windows side der kommer i firefox at logfilen er korrupt - noget den ikke var de første gange den genstartede. Nu sender jeg altså en Hijackthis log og håber i kan hjælpe. Jeg mener også der er nogle andre ting man plejer at gøre, men jeg kan ikke finde guiden mere herinde? Men hvis i mangler noget så skriv endelig, også gør jeg det. tak på forhånd: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:02:45, on 21-03-2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Programmer\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Programmer\Tall Emu\Online Armor\OAcat.exe C:\Programmer\Tall Emu\Online Armor\oasrv.exe C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe C:\Programmer\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Programmer\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\svchost.exe C:\Programmer\Fælles filer\InterVideo\RegMgr\iviRegMgr.exe C:\Programmer\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\bmon.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programmer\RALINK\Common\RaRegistry.exe C:\Programmer\RosettaStoneLtdServices\RosettaStoneLtdController.exe C:\WINDOWS\snApp\data\sasvc.exe C:\Programmer\RosettaStoneLtdServices\RosettaStoneLtdServer.exe C:\Programmer\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\Dan Nielsen\Local Settings\Application Data\Zimbra\zdesktop\zdesktop.exe C:\Programmer\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe C:\Programmer\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\Programmer\Elantech\ETDCtrl.exe C:\Programmer\EeePC\ACPI\AsTray.exe C:\Programmer\EeePC\ACPI\AsAcpiSvr.exe C:\Programmer\EeePC\ACPI\AsEPCMon.exe C:\WINDOWS\system32\igfxsrvc.exe C:\WINDOWS\system32\igfxext.exe C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Programmer\Winamp\winampa.exe C:\Programmer\Windows Defender\MSASCui.exe C:\Programmer\Tall Emu\Online Armor\oaui.exe C:\Programmer\Java\jre6\bin\jusched.exe C:\Programmer\iTunes\iTunesHelper.exe C:\Programmer\Hp\HP Software Update\HPWuSchd2.exe C:\Programmer\Tall Emu\Online Armor\OAhlp.exe C:\Programmer\DAEMON Tools Lite\DTLite.exe C:\Programmer\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Programmer\iPod\bin\iPodService.exe C:\Programmer\VIP Quality Software\VIP Organizer\VIP Organizer.exe C:\Programmer\WIDCOMM\Bluetooth Software\BTTray.exe C:\Programmer\Launchy\Launchy.exe C:\Programmer\RALINK\Common\RaUI.exe C:\Programmer\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe C:\Documents and Settings\Dan Nielsen\Application Data\Dropbox\bin\Dropbox.exe C:\WINDOWS\explorer.exe C:\Programmer\Mozilla Firefox\firefox.exe D:\Arkiv\Install filer\Beskytteles software\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eeepc.asus.com/global R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Programmer\Windows Live\Family Safety\fssbho.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programmer\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmer\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programmer\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmer\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows; Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programmer\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [ETDWare] C:\Programmer\Elantech\ETDCtrl.exe O4 - HKLM\..\Run: [AsusTray] C:\Programmer\EeePC\ACPI\AsTray.exe O4 - HKLM\..\Run: [AsusACPIServer] C:\Programmer\EeePC\ACPI\AsAcpiSvr.exe O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Programmer\EeePC\ACPI\AsEPCMon.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [fssui] “C:\Programmer\Windows Live\Family Safety\fsui.exe” -autorun O4 - HKLM\..\Run: [WinampAgent] C:\Programmer\Winamp\winampa.exe O4 - HKLM\..\Run: [Windows Defender] “C:\Programmer\Windows Defender\MSASCui.exe” -hide O4 - HKLM\..\Run: [@OnlineArmor GUI] “C:\Programmer\Tall Emu\Online Armor\oaui.exe” O4 - HKLM\..\Run: [SunJavaUpdateSched] “C:\Programmer\Java\jre6\bin\jusched.exe” O4 - HKLM\..\Run: [QuickTime Task] “C:\Programmer\QuickTime\qttask.exe” -atboottime O4 - HKLM\..\Run: [iTunesHelper] “C:\Programmer\iTunes\iTunesHelper.exe” O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] “C:\Programmer\Adobe\Reader 8.0\Reader\Reader_sl.exe” O4 - HKLM\..\Run: [Adobe ARM] “C:\Programmer\Fælles filer\Adobe\ARM\1.0\AdobeARM.exe” O4 - HKLM\..\Run: [HP Software Update] C:\Programmer\Hp\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [VIP Simple To Do List] “C:\Programmer\VIP Quality Software\VIP Organizer\VIP Simple To Do List.exe” O4 - HKCU\..\Run: [DAEMON Tools Lite] “C:\Programmer\DAEMON Tools Lite\DTLite.exe” -autorun O4 - HKCU\..\Run: [MSMSGS] “C:\Programmer\Messenger\msmsgs.exe” /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [VIP Organizer] “C:\Programmer\VIP Quality Software\VIP Organizer\VIP Organizer.exe” O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘LOKAL TJENESTE’) O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘NETVÆRKSTJENESTE’) O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O4 - Startup: Dropbox.lnk = C:\Documents and Settings\Dan Nielsen\Application Data\Dropbox\bin\Dropbox.exe O4 - Startup: Picaboo.lnk = C:\Programmer\Picaboo\Picaboo\PicabooMain.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Launchy.lnk = C:\Programmer\Launchy\Launchy.exe O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Programmer\RALINK\Common\RaUI.exe O4 - Global Startup: SuperHybridEngine.lnk = ? O8 - Extra context menu item: Add to &Evernote; - res://C:\Programmer\Evernote\Evernote3.5\enbar.dll/2000 O8 - Extra context menu item: E&ksporter; til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Send til &Bluetooth;-enhed… - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send til Bluetooth - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Blog det - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmer\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra ‘Tools’ menuitem: &Blog; det i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmer\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file) O9 - Extra ‘Tools’ menuitem: S&end; til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file) O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programmer\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra ‘Tools’ menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmer\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Programmer\Evernote\Evernote3.5\enbar.dll O9 - Extra ‘Tools’ menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Programmer\Evernote\Evernote3.5\enbar.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FLLESF~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmer\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Programmer\Bonjour\mDNSResponder.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programmer\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Programmer\Fælles filer\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programmer\iPod\bin\iPodService.exe O23 - Service: IviRegMgr - InterVideo - C:\Programmer\Fælles filer\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmer\Java\jre6\bin\jqs.exe O23 - Service: Monitor Color Manager (MCMUv2) - Unknown owner - C:\WINDOWS\System32\bmon.exe O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Programmer\Tall Emu\Online Armor\OAcat.exe O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Programmer\RALINK\Common\RaRegistry.exe O23 - Service: RosettaStoneLtdController - Rosetta Stone Ltd. - C:\Programmer\RosettaStoneLtdServices\RosettaStoneLtdController.exe O23 - Service: USB Device Adapter (SABBv1b) - Unknown owner - C:\WINDOWS\snApp\data\sasvc.exe O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Programmer\Tall Emu\Online Armor\oasrv.exe O23 - Service: Yahoo! Zimbra Desktop Service - Unknown owner - C:\Documents and Settings\Dan Nielsen\Local Settings\Application Data\Zimbra\zdesktop\zdesktop.exe — End of file - 13183 bytes
[ Ignorer ] [ # 1 ] KristuZz
21.03.2010 18:21:30 Antal indlæg: 69	Jeg forsøgte at køre en malwarebytes anti-malware, men jeg kan ikke nå at færdiggøre den før Windows genstarter igen. Jeg håber virkelig nogen kan hjælpe mig med dette ret irriterende problem!
[ Ignorer ] [ # 2 ] Fromsej TeamSpywarefri
21.03.2010 20:13:41 Administrator Team Spywarefri Antal indlæg: 54708	Der er ikke noget i din log. Det kan være varme, tag et kig her: http://www.fromsej.dk/html/rens.html Er det en bærbar, så tjek i bunden, om ikke der er en plade der kan fjernes, så du kan komme til blæser og køleprofil. Det er meget vigtigt at blæseren bliver pillet helt af, der kan sagtens sidde en kage af skidt, som ikke kan ses ellers. Signatur Member of “Alliance of Security Analysis Professionals” - Alle angaben wie immer “nur mit pistole” Græd du også over eventyret om smedens kat, da du var lille? http://www.spywarefri.dk/medarbejderne/ Nierne bomaye - You’ll never walk alone qui potest, obligatur
[ Ignorer ] [ # 3 ] KristuZz
24.03.2010 13:44:21 Antal indlæg: 69	Må hellere lige vende tilbage… Problemet stoppede helt af sig selv. Underligt nok skulle der ikke andet til en at jeg var et andet sted, end i den lejlighed hvor den blev ved at med gå ned (over 2 dage vel og mærke). Meget meget underligt. Anyway det er ikke sket igen. Fromsej tak for hjælpen alligevel. Mener denne guide engang gjorde min stationær noget mere stabil at køre på.
[ Ignorer ] [ # 4 ] Peder TeamSpywarefri
24.03.2010 13:54:32 Redaktør Team Spywarefri Antal indlæg: 12994	Du er velkommen Vi lukker tråden. Du laver bare en ny, hvis der er noget vi kan hjælpe med.