Norman temppuilee

Discussion in 'Virukset ja haittaohjelmat' started by Thoun, Mar 30, 2006.

  1. Thoun

    Thoun Regular member

    Joined:
    Mar 20, 2006
    Messages:
    183
    Likes Received:
    0
    Trophy Points:
    26
    Avasin koneen ja norman antoi seuraanvanlaisen "varoituksen":

    "An unexpected error occured in Norman Virus Control.

    Module cclaw.exe
    Location CClaw.c(274)
    Time stamp: Jan 12 2005
    Erroc code: 00130008
    Error text: NPIPERC_TIMEOUT

    Please make a note of the information before you contact support"

    Mistä on kyse, jos joku tietää niin kertokaa ihmeessä. Muitakin ongelmia on tullut lähiaikoina. En esimerkiksi voi installoida Battlefieldejä tms. Onkohan joku virus päässy koneelle? Ei ainakaan näy millään ohjelmalla esim. Ewido ja Norman itse.

    Kiitos jo valmiiksi.
     
  2. pongi

    pongi Regular member

    Joined:
    Apr 12, 2005
    Messages:
    189
    Likes Received:
    0
    Trophy Points:
    26
  3. Thoun

    Thoun Regular member

    Joined:
    Mar 20, 2006
    Messages:
    183
    Likes Received:
    0
    Trophy Points:
    26
    Joo pitäis varmaan tosiaan poistaa toi koko norman.. Tässä ois vielä hjt lista jos joku näkee sitä virheitä:

    Logfile of HijackThis v1.99.1
    Scan saved at 17:20:26, on 30.3.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5296.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\brsvc01a.exe
    C:\WINDOWS\system32\brss01a.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\CPUCooL\CooLSrv.exe
    C:\Documents and Settings\Nanzi\Omat tiedostot\ohjelmat\ewido anti-malware\ewidoctrl.exe
    C:\Norman\Bin\Zanda.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Program Files\Raxco\PerfectDisk\PDSched.exe
    C:\Norman\Nvc\bin\nvcoas.exe
    C:\Norman\Nvc\BIN\NVCSCHED.EXE
    C:\Norman\Nvc\BIN\nipsvc.exe
    C:\Norman\bin\NJEEVES.EXE
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\Norman\bin\ZLH.EXE
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Norman\Nvc\BIN\NIP.EXE
    C:\Norman\Nvc\BIN\NVCOD.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Hjt\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.savewealth.com/support/ie6/search/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.savewealth.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://g.msn.com/8SEENUS020100/FRWCompleteAddIns
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Wallpaper - {c23dd370-cb79-11d2-898a-00c04f80a47f} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: &Toolbar Wallpaper - {c23dd370-cb79-11d2-898a-00c04f80a47f} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/0.9.0944.26/WinSSWebAgent.CAB
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - https://scan.safety.live.com/resource/download/scanner/en-us/wlscbase7617.cab
    O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by18fd.bay18.hotmail.msn.com/activex/HMAtchmt.ocx
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - AppInit_DLLs: wbsys.dll msgplusloader.dll
    O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
    O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: CPUCooLServer Service (CPUCooLServer) - Unknown owner - C:\Program Files\CPUCooL\CooLSrv.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Documents and Settings\Nanzi\Omat tiedostot\ohjelmat\ewido anti-malware\ewidoctrl.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
    O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe

     
  4. pongi

    pongi Regular member

    Joined:
    Apr 12, 2005
    Messages:
    189
    Likes Received:
    0
    Trophy Points:
    26
    joo,valitettavasti login kans en voi auttaa,mä itekin odotan,ett joku viisampi katsois mun omani.Muutta tosin suosittelen Normanin vaihtamista.
     
  5. Thoun

    Thoun Regular member

    Joined:
    Mar 20, 2006
    Messages:
    183
    Likes Received:
    0
    Trophy Points:
    26
    Mä en kanssa oikein ymmärrä näistä Hjt lokeista. Kismittää myös kun en voi enää installoida ZoneAlarmia koneelle. Joku virhe aina installoinnin yhteydessä tulee.. Varmaan joku täällä ymmärtäisi senkin päälle. Seuraavanlainen virhe sanoma tulee kun yritän sitä:

    "The file C:\Documents and settings\Nanzi\Local settings\temp\NEWINFOPATH could not be opened. Prosessi ei voi käyttää tiedostoa, koska se on toisen perosessin käytössä."

    Että tämmöstä. OIlisi toi kiva jos joku ZoneAlarmin tuntija tietäis ratkaisun tähän pulmaa ;).
     
  6. Thoun

    Thoun Regular member

    Joined:
    Mar 20, 2006
    Messages:
    183
    Likes Received:
    0
    Trophy Points:
    26
    Sain ratkaistua. Piti poistaa WINDOWSIN kansiosta joku tiedosto :D
     
  7. pongi

    pongi Regular member

    Joined:
    Apr 12, 2005
    Messages:
    189
    Likes Received:
    0
    Trophy Points:
    26
    OK,kiva ,mistä olet keksinyt sen?
     
  8. Thoun

    Thoun Regular member

    Joined:
    Mar 20, 2006
    Messages:
    183
    Likes Received:
    0
    Trophy Points:
    26
    Luin ZoneAlarmin foorumeilta. Poistin kyllä ZA:n koska se ei oikein hyvin toimi meiän koneella. Tilalle latasin Omniquadin Total Security palomuurin :D
     
  9. tijulait

    tijulait Member

    Joined:
    Sep 5, 2005
    Messages:
    24
    Likes Received:
    0
    Trophy Points:
    11
    Niinpä kun toin normanin sais ikuisiksi ajoiksi pois tältä koneelta,on se vaikeaa mutta onnistuu.Windows kun käyttää sitä koko ajan.Pois toiminnasta se on helppo ottaa,eli siis se ei käynnisty lainkaan mutta sovellus jää koneelle niinku mulla ja vie turhaa tilaa
     
  10. blade81

    blade81 Active member

    Joined:
    Jul 28, 2003
    Messages:
    1,287
    Likes Received:
    0
    Trophy Points:
    66
    Vähän myöhässä, mutta kumminkin.. loki on ok. :)
     
  11. Thoun

    Thoun Regular member

    Joined:
    Mar 20, 2006
    Messages:
    183
    Likes Received:
    0
    Trophy Points:
    26
    Kiitos vain! :D
     

Share This Page