Farbar Service Scanner Version: 18-01-2012 01
Ran by sun (administrator) on 27-01-2012 at 13:41:11
Microsoft Windows 7 Home Premium   (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============
SDRSVC Service is not running. Checking service configuration:
The start type of SDRSVC service is OK.
The ImagePath of SDRSVC service is OK.
The ServiceDll of SDRSVC service is OK.

VSS Service is not running. Checking service configuration:
The start type of VSS service is OK.
The ImagePath of VSS service is OK.

System Restore Disabled Policy:
========================

Security Center:
============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll
[2009-07-13 18:09] - [2009-07-13 19:41] - 0824832 ____A (Microsoft Corporation) AECAB449567D1846DAD63ECE49E893E3

C:\Windows\System32\bfe.dll
[2009-07-13 18:09] - [2009-07-13 19:40] - 0703488 ____A (Microsoft Corporation) 4992C609A6315671463E30F6512BC022

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll
[2009-07-13 17:36] - [2009-07-13 19:41] - 0170496 ____A (Microsoft Corporation) 765A27C3279CE11D14CB9E4F5869FCA5

C:\Windows\System32\vssvc.exe
[2009-07-13 17:39] - [2009-07-13 19:39] - 1598976 ____A (Microsoft Corporation) 787898BF9FB6D7BD87A36E2D95C899BA

C:\Windows\System32\wscsvc.dll
[2011-06-21 11:27] - [2010-12-21 00:16] - 0097280 ____A (Microsoft Corporation) 8F9F3969933C02DA96EB0F84576DB43E

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

1. Hent dette lille værktøj:

http://jpshortstuff.247fixes.com/SystemLook_x64.exe

2. Dobbeltklik på SystemLook_x64.exe - nu dukker der et lille vindue op, hvor du skal kopiere HELE indholdet med fed skrift ind:

:service
SDRSVC
VSS
:filefind
mpssvc.dll
bfe.dll
SDRSVC.dll
vssvc.exe
wscsvc.dll

3. Luk så alle andre vinduer og klik på knappen Look. Programmet vil nu lede på din computer.

4. Når programmet er færdig med at lede, vil der dukke et notepad-vindue op, med en log fra SystemLook. Den skal du kopiere herind i forum i dit næste svar. Log’en kan også findes på dit Skrivebord med navnet: SystemLook.txt.

Vista og Windows 7 - højreklik på filen - Kør som Administrator.

SystemLook 30.07.11 by jpshortstuff
Log created at 15:38 on 27/01/2012 by sun
Administrator - Elevation successful

========== service ==========

SDRSVC
Windows Backup
“Provides Windows Backup and Restore capabilities.”
Current Status: Stopped
Startup Type: Demand
Error Control: Critical
Binary: C:\windows\system32\svchost.exe -k SDRSVC
Group: (none)
SafeBoot:
Dependencies:
->RPCSS
Dependant Services:
(none)

VSS
Volume Shadow Copy
“Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.”
Current Status: Stopped
Startup Type: Demand
Error Control: Critical
Binary: C:\windows\system32\vssvc.exe
Group: (none)
SafeBoot:
Dependencies:
->RPCSS
Dependant Services:
(none)

========== filefind ==========

Searching for “mpssvc.dll”
C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_networking-mpssvc-svc_31bf3856ad364e35_6.1.7601.17514_none_f83a40e7de7c47da\MPSSVC.dll   —a——828416 bytes   [02:15 21/12/2011]  [13:26 20/11/2010] 54FFC9C8898113ACE189D4AA7199D2C1
C:\Windows\System32\MPSSVC.dll   —a——824832 bytes   [00:09 14/07/2009]  [01:41 14/07/2009] AECAB449567D1846DAD63ECE49E893E3
C:\Windows\winsxs\amd64_networking-mpssvc-svc_31bf3856ad364e35_6.1.7600.16385_none_f6092d1fe18dc440\MPSSVC.dll   —a——824832 bytes   [00:09 14/07/2009]  [01:41 14/07/2009] AECAB449567D1846DAD63ECE49E893E3

Searching for “bfe.dll”
C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.17514_none_2b4a7558412a624a\BFE.DLL   —a——705024 bytes   [02:14 21/12/2011]  [13:25 20/11/2010] 82974D6A2FD19445CC5171FC378668A4
C:\Windows\System32\BFE.DLL   —a——703488 bytes   [00:09 14/07/2009]  [01:40 14/07/2009] 4992C609A6315671463E30F6512BC022
C:\Windows\winsxs\amd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7600.16385_none_29196190443bdeb0\BFE.DLL   —a——703488 bytes   [00:09 14/07/2009]  [01:40 14/07/2009] 4992C609A6315671463E30F6512BC022

Searching for “SDRSVC.dll”
C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-safedocs-main_31bf3856ad364e35_6.1.7601.17514_none_832fc1bb7d681e0d\sdrsvc.dll   —a——170496 bytes   [02:11 21/12/2011]  [13:27 20/11/2010] 6EA4234DC55346E0709560FE7C2C1972
C:\Windows\System32\sdrsvc.dll   —a——170496 bytes   [23:36 13/07/2009]  [01:41 14/07/2009] 765A27C3279CE11D14CB9E4F5869FCA5
C:\Windows\winsxs\amd64_microsoft-windows-safedocs-main_31bf3856ad364e35_6.1.7600.16385_none_80feadf380799a73\sdrsvc.dll   —a——170496 bytes   [23:36 13/07/2009]  [01:41 14/07/2009] 765A27C3279CE11D14CB9E4F5869FCA5

Searching for “vssvc.exe”
C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-vssservice_31bf3856ad364e35_6.1.7601.17514_none_b8f2d3e62e76fe08\VSSVC.exe   —a——1600512 bytes   [02:15 21/12/2011]  [13:25 20/11/2010] B60BA0BC31B0CB414593E169F6F21CC2
C:\Windows\System32\VSSVC.exe   —a——1598976 bytes   [23:39 13/07/2009]  [01:39 14/07/2009] 787898BF9FB6D7BD87A36E2D95C899BA
C:\Windows\winsxs\amd64_microsoft-windows-vssservice_31bf3856ad364e35_6.1.7600.16385_none_b6c1c01e31887a6e\VSSVC.exe   —a——1598976 bytes   [23:39 13/07/2009]  [01:39 14/07/2009] 787898BF9FB6D7BD87A36E2D95C899BA

Searching for “wscsvc.dll”
C:\Windows\System32\wscsvc.dll   —a——97280 bytes   [17:27 21/06/2011]  [06:16 21/12/2010] 8F9F3969933C02DA96EB0F84576DB43E
C:\Windows\winsxs\amd64_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.1.7600.16385_none_76354f59cbc9dce8\wscsvc.dll   —a——97280 bytes   [23:48 13/07/2009]  [01:41 14/07/2009] E8B1FE6669397D1772D8196DF0E57A9E
C:\Windows\winsxs\amd64_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.1.7600.16723_none_767435e5cb9af730\wscsvc.dll   —a——97280 bytes   [17:27 21/06/2011]  [06:16 21/12/2010] 8F9F3969933C02DA96EB0F84576DB43E
C:\Windows\winsxs\amd64_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.1.7600.20862_none_76d192b6e4d9ed67\wscsvc.dll   —a——97280 bytes   [17:27 21/06/2011]  [06:09 21/12/2010] 34D280957E8681E4BD9492B3F1FC27B9
C:\Windows\winsxs\amd64_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.1.7601.17514_none_78666321c8b86082\wscsvc.dll   —a——97280 bytes   [23:48 13/07/2009]  [01:41 14/07/2009] E8B1FE6669397D1772D8196DF0E57A9E

-= EOF =-

Vil du godt prøve at lave et nyt Systemgendannelses punkt.
Jeg vil bare gerne sikre mig at det virker, for umiddelbart ser det rigtigt ud.

Mener du ERUNT eller via windows?

Jeg mener et Windows Systemgendannelses punkt.

Det vil jeg forsøge, når folk står op i USA Mange tak for hjælpen, jeg betror dig at det ser rigtigt ud.

H-C - 28.01.2012 12:10:56

Det vil jeg forsøge, når folk står op i USA ...

Ja - de sover vel endnu, men det gør du bare

Så er der lavet et gendannelses punkt og det virker til at køre fint nu.

Det lyder godt :

Tast <Windows> + <R> samtidig og kopier dette ind: combofix /uninstall
Tryk enter
Det vil fjerne Combofix og nulstille urets indstillinger.
Nulstille Systemgendannelsen.
Skjule filtypenavne hvis det kræves.
Skjule System/skjulte filer hvis det kræves.

———

Hent og kør OTC af OldTimer.
Klik “CleanUp” og lad den genstarte. Den fjerner andre værktøjer vi har brugt til at rense maskinen.

Hvis der efterlades noget, må du slette det manuelt.

—-

Vil du godt melde tilbage når det er gjort, så vi kan lukke tråden ordentligt.

Det er nu gjort

Fint

Jeg lukker tråden. Du laver bare en ny, hvis du har behov for det