Bootattu.
SDFix: Version 1.180
Run by Riihiaho on to 08.05.2008 at 21:10
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\Riihiaho\TYPYT~1\SDFix\SDFix
Checking Services :
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
Checking Files :
No Trojan Files Found
Removing Temp Files
ADS Check :
Final Check :
catchme 0.3.1359.2 W2K/XP/Vista - rootkit/stealth malware detector by
Gmer,
http://www.gmer.net
Rootkit scan 2008-05-08 21:21:47
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}]
"DisplayName"="Alcohol 120%"
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
Remaining Services :
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:utorrent"
"C:\\Documents and Settings\\Riihiaho\\Ty”p”yt„\\Emmin rojut\\Phone\\Skype.exe"="C:\\Documents and Settings\\Riihiaho\\Ty”p”yt„\\Emmin rojut\\Phone\\Skype.exe:*:Enabled:Skype"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
Remaining Files :
File Backups: - C:\DOCUME~1\Riihiaho\TYPYT~1\SDFix\SDFix\backups\backups.zip
Files with Hidden Attributes :
Sat 27 Mar 2004 27,648 A..H. --- "C:\Emmi\Emmin Sukututkimus\~WRL0355.tmp"
Sat 27 Mar 2004 28,160 A..H. --- "C:\Emmi\Emmin Sukututkimus\~WRL0863.tmp"
Sat 27 Mar 2004 28,672 A..H. --- "C:\Emmi\Emmin Sukututkimus\~WRL2981.tmp"
Sat 27 Mar 2004 28,160 A..H. --- "C:\Emmi\Emmin Sukututkimus\~WRL3361.tmp"
Sat 27 Mar 2004 27,648 A..H. --- "C:\Emmi\Emmin Sukututkimus\~WRL3418.tmp"
Sun 30 Mar 2008 952 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Thu 21 Apr 2005 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 17 Feb 2004 62,464 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL0268.tmp"
Sun 15 Feb 2004 177,152 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL0399.tmp"
Tue 17 Feb 2004 121,856 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL0817.tmp"
Tue 17 Feb 2004 64,000 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL1077.tmp"
Tue 17 Feb 2004 62,976 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL1569.tmp"
Tue 17 Feb 2004 64,000 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL1601.tmp"
Tue 17 Feb 2004 180,736 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL2119.tmp"
Tue 17 Feb 2004 63,488 A..H. --- "C:\Emmi\Emmin koulujutut\Kuntouttava kasvatusty”\~WRL2228.tmp"
Wed 28 May 2003 23,040 A..H. --- "C:\Emmi\Emmin koulujutut\Markkinointi\~WRL0001.tmp"
Mon 27 Jan 2003 22,016 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL0124.tmp"
Mon 27 Jan 2003 20,480 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL0274.tmp"
Mon 27 Jan 2003 19,968 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL2209.tmp"
Mon 27 Jan 2003 22,528 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL2390.tmp"
Mon 27 Jan 2003 19,456 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL3035.tmp"
Mon 27 Jan 2003 20,992 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL3217.tmp"
Mon 27 Jan 2003 23,040 A..H. --- "C:\Emmi\Emmin koulujutut\Mediaprojekti\~WRL3627.tmp"
Sun 21 Nov 2004 240,128 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0003.tmp"
Sun 21 Nov 2004 232,448 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0105.tmp"
Mon 22 Nov 2004 90,624 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0108.tmp"
Sun 21 Nov 2004 247,808 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0247.tmp"
Sun 21 Nov 2004 253,440 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0261.tmp"
Sun 21 Nov 2004 246,272 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0307.tmp"
Mon 22 Nov 2004 66,048 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0417.tmp"
Sun 21 Nov 2004 231,936 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0442.tmp"
Sun 21 Nov 2004 246,272 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0517.tmp"
Mon 22 Nov 2004 133,632 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0543.tmp"
Sun 21 Nov 2004 241,152 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL0932.tmp"
Mon 22 Nov 2004 131,072 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1145.tmp"
Sun 21 Nov 2004 246,272 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1221.tmp"
Sun 21 Nov 2004 247,296 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1362.tmp"
Sun 21 Nov 2004 254,976 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1386.tmp"
Sun 21 Nov 2004 247,296 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1425.tmp"
Mon 22 Nov 2004 148,480 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1700.tmp"
Sun 21 Nov 2004 249,856 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1732.tmp"
Sun 21 Nov 2004 249,344 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1753.tmp"
Sun 21 Nov 2004 253,952 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL1890.tmp"
Mon 22 Nov 2004 219,136 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2036.tmp"
Mon 22 Nov 2004 219,648 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2347.tmp"
Sun 21 Nov 2004 247,808 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2444.tmp"
Sun 21 Nov 2004 247,808 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2694.tmp"
Sun 21 Nov 2004 252,928 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2736.tmp"
Mon 22 Nov 2004 88,064 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2752.tmp"
Sun 21 Nov 2004 253,952 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2755.tmp"
Sun 21 Nov 2004 244,736 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2815.tmp"
Mon 22 Nov 2004 219,136 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2822.tmp"
Sun 21 Nov 2004 233,472 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2904.tmp"
Sun 21 Nov 2004 248,832 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2927.tmp"
Sun 21 Nov 2004 251,904 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2992.tmp"
Sun 21 Nov 2004 253,440 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL2996.tmp"
Sun 21 Nov 2004 247,296 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3170.tmp"
Sun 21 Nov 2004 252,928 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3200.tmp"
Mon 22 Nov 2004 125,952 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3261.tmp"
Sun 21 Nov 2004 227,328 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3426.tmp"
Mon 22 Nov 2004 146,432 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3454.tmp"
Sun 21 Nov 2004 254,464 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3491.tmp"
Mon 22 Nov 2004 125,440 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3524.tmp"
Sun 21 Nov 2004 234,496 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3589.tmp"
Sun 21 Nov 2004 248,832 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3642.tmp"
Sun 21 Nov 2004 239,616 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3731.tmp"
Sun 21 Nov 2004 246,272 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3754.tmp"
Sun 21 Nov 2004 247,808 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3831.tmp"
Mon 22 Nov 2004 125,952 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3848.tmp"
Sun 21 Nov 2004 251,904 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3867.tmp"
Mon 22 Nov 2004 147,968 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL3949.tmp"
Sun 21 Nov 2004 246,784 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL4025.tmp"
Sun 21 Nov 2004 249,344 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL4046.tmp"
Mon 22 Nov 2004 57,856 ...H. --- "C:\Emmi\Emmin koulujutut\P„ihdety”\~WRL4074.tmp"
Thu 27 Nov 2003 175,616 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL0559.tmp"
Thu 27 Nov 2003 176,128 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL1020.tmp"
Thu 27 Nov 2003 176,128 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL1488.tmp"
Thu 27 Nov 2003 176,640 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL1741.tmp"
Thu 27 Nov 2003 176,128 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL2215.tmp"
Thu 27 Nov 2003 176,128 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL2444.tmp"
Thu 27 Nov 2003 176,128 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL2744.tmp"
Thu 27 Nov 2003 176,640 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL2856.tmp"
Thu 27 Nov 2003 176,128 A..H. --- "C:\Emmi\Emmin koulujutut\VaTu\~WRL3801.tmp"
Mon 12 Dec 2005 1,225,216 ...H. --- "C:\Emmi\Ty”juttuja\Vaahterat\~WRL1303.tmp"
Mon 12 Dec 2005 1,228,288 ...H. --- "C:\Emmi\Ty”juttuja\Vaahterat\~WRL1880.tmp"
Mon 12 Dec 2005 19,456 ...H. --- "C:\Emmi\Ty”juttuja\Vaahterat\~WRL2072.tmp"
Mon 12 Dec 2005 1,593,344 ...H. --- "C:\Emmi\Ty”juttuja\Vaahterat\~WRL2354.tmp"
Mon 12 Dec 2005 39,424 ...H. --- "C:\Emmi\Ty”juttuja\Vaahterat\~WRL2992.tmp"
Sat 21 Jun 2003 377,344 A..H. --- "C:\Program Files\IsoBuster\Help\AHlp.exe"
Mon 5 May 2003 348,160 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\AACMP4.EXE"
Thu 7 Feb 2002 94,208 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\lpaccodec.dll"
Fri 2 Feb 2001 40,960 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\lpac_codec_api.dll"
Wed 16 Apr 2003 200,704 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\OFR.EXE"
Fri 17 Jan 2003 278,528 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\PNCRT.dll"
Mon 5 May 2003 16,384 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\RMADEC.EXE"
Tue 2 Nov 2004 7,793,664 ...H. --- "C:\Documents and Settings\Riihiaho\Application Data\Microsoft\Word\~WRL0004.tmp"
Sun 21 Jul 2002 45,056 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\AC3\AC3ENC.DLL"
Wed 20 Feb 2002 98,304 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\AC3\AZID.DLL"
Fri 11 Apr 2003 73,766 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\atrc3260.dll"
Fri 11 Apr 2003 45,099 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\auth3260.dll"
Fri 11 Apr 2003 65,575 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\cook3260.dll"
Fri 11 Apr 2003 102,437 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\drv13260.dll"
Fri 11 Apr 2003 176,165 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\drv23260.dll"
Fri 11 Apr 2003 208,935 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\drv33260.dll"
Fri 11 Apr 2003 217,127 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\drv43260.dll"
Wed 16 Apr 2003 976,896 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\pnen3260.dll"
Fri 11 Apr 2003 348,203 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\pnvi3260.dll"
Fri 11 Apr 2003 53,289 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\pnxr3260.dll"
Fri 11 Apr 2003 45,101 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\ramf3260.dll"
Fri 11 Apr 2003 135,213 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rare3260.dll"
Mon 14 Oct 2002 57,344 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rims3290.dll"
Fri 11 Apr 2003 163,885 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rmff3260.dll"
Mon 14 Oct 2002 737,280 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rmse3290.dll"
Mon 14 Oct 2002 245,760 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rmwr3260.dll"
Fri 11 Apr 2003 245,805 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rnlt3260.dll"
Mon 14 Oct 2002 245,760 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rorw3290.dll"
Mon 14 Oct 2002 114,688 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rtae3290.dll"
Mon 14 Oct 2002 65,536 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rtin3290.dll"
Mon 14 Oct 2002 163,840 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rtve3290.dll"
Fri 11 Apr 2003 45,093 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rv103260.dll"
Fri 11 Apr 2003 98,341 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rv203260.dll"
Fri 11 Apr 2003 94,247 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rv303260.dll"
Fri 11 Apr 2003 90,151 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rv403260.dll"
Fri 11 Apr 2003 159,785 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\rvre3260.dll"
Mon 14 Oct 2002 102,400 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\sipr3260.dll"
Fri 11 Apr 2003 61,485 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\smpl3260.dll"
Fri 11 Apr 2003 106,541 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\vsrl3260.dll"
Fri 11 Apr 2003 86,061 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\xmlp3261.dll"
Fri 11 Apr 2003 159,787 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Common\zipf3260.dll"
Sun 23 Feb 2003 64,512 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\MusePack\MPPDEC.EXE"
Sat 26 Oct 2002 79,360 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\MusePack\MPPENC.EXE"
Finished!
AMD Athlon 64 3000+, 2x 1024Mb DDR 400, Samsung 160Gb + 400Gb, LG GDR-8163B + GSA-4120B, Radeon 9600 Atlantis, Hauppauge HVR-1300
2x PS2 V5/6, Matrix Infinity, Samsung 160Gb
Commodore 128D, 1581, Action Replay MK6 Pro
