Kone ja netti hidastunut todella paljon lähiaikoina - Hjt -logi

Viestiketju Virukset ja haittaohjelmat - HijackThis -logit -osiossa. Ketjun avasi hosee 23.09.2008.

  1. hosee

    hosee Member

    Liittynyt:
    23.09.2008
    Viestejä:
    5
    Kiitokset:
    0
    Pisteet:
    11
    Eli nyt lähiaikoina on hidastunut kone huomattavasti ja nettikin on ollut uskomattoman hidas. Olen yrittänyt etsiä vikaa Spybotilla ja Ad-Awarella ja kaikella mahdollisella tuloksetta. Firefox useampaan kertaan teki niin että jumitti ladatessaan jotain sivua ja ei enää vastannut. Tämän jälkeen prosessia ei saanut lopetettua edes tehtävienhallinnasta vaan joutui käynnistämään uudestaan. Myöskin pari kertaa on kone käynnistänyt itsensä uudelleen. Jos joku viksumpi osaisi jotain sanoa tästä?

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:39:46, on 23.9.2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Launch Manager\LManager.exe
    C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\Program Files\Microsoft IntelliType Pro\itype.exe
    D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Apoint2K\ApMsgFwd.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\Users\Jussi\AppData\Local\Temp\RtkBtMnt.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Windows\Explorer.exe
    C:\Windows\system32\mmc.exe
    C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\SearchFilterHost.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fi.intl.acer.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.intl.acer.yahoo.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
    O4 - HKLM\..\Run: [DPAgnt] D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O20 - Winlogon Notify: DPWLN - C:\Windows\system32\DPWLEvHd.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
    O23 - Service: Avira AntiVir Premium Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
    O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
    O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Avira AntiVir Premium MailGuard helper service (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - D:\Program Files\DigitalPersona\Bin\DpHost.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
    O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 9889 bytes
     
    Viimeksi muokattu: 23.09.2008
    hosee, 23.09.2008
    #1
  2.  
  3. Hujo

    Hujo Guest

    Luo poistolista:
    • Avaa HiJackThis
    • Klikkaa "Configure" valintaa oikealla alhaalla
    • Klikkaa "Misc Tools"
    • Klikkaa boxia joka sanoo "Uninstall Manager"
    • Klikkaa valintaa "Save list"
    • Kopioi ja liitä kyseinen lista muistiosta ketjuusi

    ===============

    Lataa Malwarebytes' Anti-Malware työpöydällesi.

    1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
    2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja
    Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish.
    3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
    4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan.
    5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
    6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.
    7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
    löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
    Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
    8. Lähetä lokin sisältö seuraavassa viestissäsi

     
    Hujo, 24.09.2008
    #2
  4. hosee

    hosee Member

    Liittynyt:
    23.09.2008
    Viestejä:
    5
    Kiitokset:
    0
    Pisteet:
    11
    Uninstall lista:

    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    2007 Microsoft Office Suite Service Pack 1 (SP1)
    Acer Arcade Deluxe
    Acer Crystal Eye webcam
    Acer Crystal Eye webcam
    Acer eAudio Management
    Acer eLock Management
    Acer Empowering Technology
    Acer eNet Management
    Acer ePower Management
    Acer ePresentation Management
    Acer eSettings Management
    Acer GridVista
    Acer Mobility Center Plug-In
    Acer ScreenSaver
    Acer Tour
    Acrobat.com
    Acrobat.com
    Activation Assistant for the 2007 Microsoft Office suites
    Ad-Aware
    Adobe AIR
    Adobe AIR
    Adobe Anchor Service CS3
    Adobe Asset Services CS3
    Adobe Bridge CS3
    Adobe Bridge Start Meeting
    Adobe Camera Raw 4.0
    Adobe CMaps
    Adobe Color - Photoshop Specific
    Adobe Color Common Settings
    Adobe Color Common Settings
    Adobe Color EU Extra Settings
    Adobe Color JA Extra Settings
    Adobe Color NA Recommended Settings
    Adobe Default Language CS3
    Adobe Device Central CS3
    Adobe ExtendScript Toolkit 2
    Adobe Flash Player 9 ActiveX
    Adobe Flash Player Plugin
    Adobe Fonts All
    Adobe Help Viewer CS3
    Adobe Linguistics CS3
    Adobe PDF Library Files
    Adobe Photoshop CS3
    Adobe Photoshop CS3
    Adobe Reader 9
    Adobe Setup
    Adobe Setup
    Adobe Shockwave Player 11
    Adobe Stock Photos CS3
    Adobe Type Support
    Adobe Update Manager CS3
    Adobe Version Cue CS3 Client
    Adobe WinSoft Linguistics Plugin
    Adobe XMP Panels CS3
    Ajokorttikoulu
    ALPS Touch Pad Driver
    Apple Mobile Device Support
    Apple Software Update
    Avira AntiVir Premium
    BigRigs over the road Racing
    Borland Turbo C++
    Call of Duty(R) 4 - Modern Warfare(TM)
    CCleaner (remove only)
    Creative Jukebox Driver
    Creative Software AutoUpdate
    Creative System Information
    Creative ZEN
    DigitalPersona Password Manager 2.0.1
    DivX Codec
    DivX Converter
    DivX Player
    DivX Web Player
    Easy GIF Animator 4.5 Pro
    Easy GIF Animator 4.61
    Google Earth
    Google Gears
    Google Toolbar for Internet Explorer
    Google Toolbar for Internet Explorer
    GTA San Andreas
    GTA2
    HDAUDIO Soft Data Fax Modem with SmartCP
    HijackThis 2.0.2
    Hitman Blood Money
    iTunes
    Java(TM) 6 Update 10
    Last.fm 1.5.1.29527
    Launch Manager
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB929729)
    Microsoft .NET Framework SDK (English) 1.1
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Works
    MobileMe-säätöpaneeli
    MSVC80_x86
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB941833)
    MTA:SA DM Developer Preview 2
    Nokia Connectivity Cable Driver
    Nokia Flashing Cable Driver
    Nokia Multimedia Factory
    Nokia Multimedia Factory
    Nokia PC Suite
    Nokia PC Suite
    Nokia Software Updater
    Notepad++
    NTI Backup NOW! 4.7
    NTI CD & DVD-Maker
    NVIDIA Drivers
    Opposing Force
    PC Connectivity Solution
    PDF Settings
    PowerProducer 3.72
    QuickTime
    Realtek High Definition Audio Driver
    RevConnect
    RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
    Security Task Manager 1.7f
    Security Update for 2007 Microsoft Office System (KB951596)
    Security Update for 2007 Microsoft Office System (KB951944)
    Security Update for Microsoft Office Excel 2007 (KB951546)
    Security Update for Microsoft Office OneNote 2007 (KB950130)
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)
    Security Update for Microsoft Office Publisher 2007 (KB950114)
    Security Update for Microsoft Office system 2007 (KB951808)
    Security Update for Microsoft Office system 2007 (KB954326)
    Security Update for Microsoft Office Word 2007 (KB950113)
    SimCity™ Societies
    SmartFTP Client
    SmartFTP Client 3.0 Setup Files (remove only)
    Sony ACID Pro 6.0
    Sony Media Manager 2.2
    Start++
    Steam
    Symantec Technical Support Web Controls
    System Requirements Lab
    TmNationsForever
    TweakNow WinSecret Professional
    Uniblue RegistryBooster 2
    Update for Microsoft Office Outlook 2007 (KB952142)
    Update for Office 2007 (KB946691)
    Update for Outlook 2007 Junk Email Filter (kb956080)
    Ventrilo Client
    Ventrilo Server
    WIDCOMM Bluetooth Software
    VideoLAN VLC media player 0.8.6d
    Winamp
    Windows Live installer
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Liven sähköposti
    Windows Media Player Firefox Plugin
    Windowsin ohjainpaketti - Nokia Modem (08/03/2007 6.84.0.2)
    Windowsin ohjainpaketti - Nokia Modem (10/12/2007 3.6)
    WinRAR-pakkausohjelma
    ZEN Media Explorer
    ZENcast Organizer
    ZoneAlarm

     
    hosee, 24.09.2008
    #3
  5. Hujo

    Hujo Guest

    Hujo, 24.09.2008
    #4
  6. hosee

    hosee Member

    Liittynyt:
    23.09.2008
    Viestejä:
    5
    Kiitokset:
    0
    Pisteet:
    11
    Tein kaikki nuo mitä ehdotit.
    Malwarebytes loki:

    Malwarebytes' Anti-Malware 1.28
    Tietokantaversio: 1201
    Windows 6.0.6001 Service Pack 1

    24.9.2008 18:01:01
    mbam-log-2008-09-24 (18-01-01).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
    Tarkistetut kohteet: 213419
    Kulunut aika: 1 hour(s), 42 minute(s), 9 second(s)

    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 0
    Saastuneita rekisteriavaimia: 0
    Saastuneita rekisteriarvoja: 0
    Saastuneita rekisterikohteita: 0
    Saastuneita hakemistoja: 2
    Saastuneita tiedostoja: 1

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriavaimia:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriarvoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisterikohteita:
    (Haitallisia kohteita ei löydetty)

    Saastuneita hakemistoja:
    C:\Program Files\RADIO_USA (Adware.Agent) -> Quarantined and deleted successfully.
    C:\Program Files\Live_TV (Adware.Agent) -> Quarantined and deleted successfully.

    Saastuneita tiedostoja:
    C:\Program Files\RADIO_USA\INSTALL.LOG (Adware.Agent) -> Quarantined and deleted successfully.
     
    hosee, 24.09.2008
    #5
  7. Hujo

    Hujo Guest

    1.Lataa Combofix.exe työpöydällesi yhdestä linkistä:
    Combofix1
    Combofix2

    2. Tuplaklikkaa Combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
     
    Hujo, 24.09.2008
    #6
  8. hosee

    hosee Member

    Liittynyt:
    23.09.2008
    Viestejä:
    5
    Kiitokset:
    0
    Pisteet:
    11
    ComboFix 08-09-24.01 - Jussi 2008-09-24 22:17:22.1 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1035.18.1021 [GMT 3:00]
    Sijainti: C:\Users\Jussi\Documents\Lataukset\ComboFix.exe
    * Uusi palautuspiste luotu
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\DRV\TVtuner\Liteon\Resources\_desktop.ini
    C:\Windows\winhelp.ini

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavolillo: 2008-08-24 to 2008-09-24 )))))))))))))))))
    .

    2008-09-24 22:13 . 2008-09-24 22:14 <KANSIO> d-------- C:\32788R22FWJFW
    2008-09-24 22:04 . 2008-09-24 22:12 <KANSIO> d-------- C:\Windows\System32\drivers\Avg
    2008-09-24 22:04 . 2008-09-24 22:04 <KANSIO> d-------- C:\ProgramData\avg8
    2008-09-24 22:04 . 2008-09-24 22:04 <KANSIO> d-------- C:\Program Files\AVG
    2008-09-24 22:04 . 2008-09-24 22:04 97,928 --a------ C:\Windows\System32\drivers\avgldx86.sys
    2008-09-24 22:04 . 2008-09-24 22:04 10,520 --a------ C:\Windows\System32\avgrsstx.dll
    2008-09-24 21:23 . 2008-09-24 21:23 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Comodo
    2008-09-24 21:23 . 2008-09-24 21:30 <KANSIO> d-------- C:\ProgramData\comodo
    2008-09-24 21:23 . 2008-09-24 21:23 <KANSIO> d-------- C:\Program Files\COMODO
    2008-09-24 21:23 . 2008-09-24 21:23 143,104 --a------ C:\Windows\System32\guard32.dll
    2008-09-24 21:23 . 2008-09-24 21:23 85,008 --a------ C:\Windows\System32\drivers\cmdguard.sys
    2008-09-24 21:23 . 2008-09-24 21:23 25,104 --a------ C:\Windows\System32\drivers\cmdhlp.sys
    2008-09-24 20:26 . 2008-09-24 20:26 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\SystemRequirementsLab
    2008-09-24 16:28 . 2008-09-24 16:28 <KANSIO> d-------- C:\ProgramData\NortonInstaller
    2008-09-24 16:04 . 2008-09-24 16:04 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Malwarebytes
    2008-09-24 16:04 . 2008-09-24 16:04 <KANSIO> d-------- C:\ProgramData\Malwarebytes
    2008-09-24 16:04 . 2008-09-24 16:06 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-09-24 16:04 . 2008-09-10 00:04 38,528 --a------ C:\Windows\System32\drivers\mbamswissarmy.sys
    2008-09-24 16:04 . 2008-09-10 00:03 17,200 --a------ C:\Windows\System32\drivers\mbam.sys
    2008-09-21 16:15 . 2008-09-21 16:15 <KANSIO> d-------- C:\ProgramData\CheckPoint
    2008-09-21 16:15 . 2008-03-03 15:06 279,440 --a------ C:\Windows\System32\drivers\~GLH0014.TMP
    2008-09-21 16:13 . 2008-09-24 21:03 <KANSIO> d-------- C:\Windows\Internet Logs
    2008-09-21 15:06 . 2008-09-24 19:28 <KANSIO> d-------- C:\ProgramData\SecTaskMan
    2008-09-21 14:58 . 2008-09-21 14:58 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Locktime
    2008-09-21 14:53 . 2008-09-21 14:53 <KANSIO> d-------- C:\ProgramData\Locktime
    2008-09-21 01:03 . 2008-09-21 01:11 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Notepad++
    2008-09-21 01:03 . 2008-09-21 01:07 <KANSIO> d-------- C:\Program Files\Notepad++
    2008-09-17 00:07 . 2008-09-17 00:07 <KANSIO> d-------- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2008-09-17 00:07 . 2008-09-22 20:56 <KANSIO> d-------- C:\Program Files\iPod
    2008-09-17 00:07 . 2008-04-17 13:12 107,368 --a------ C:\Windows\System32\GEARAspi.dll
    2008-09-17 00:07 . 2008-04-17 13:12 15,464 --a------ C:\Windows\System32\drivers\GEARAspiWDM.sys
    2008-09-17 00:05 . 2008-09-17 00:06 <KANSIO> d-------- C:\Program Files\QuickTime
    2008-09-15 21:15 . 2008-09-15 21:15 0 --ah----- C:\Windows\System32\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
    2008-09-10 10:14 . 2008-09-10 10:14 <KANSIO> d-------- C:\Users\Public\Uusi kansio
    2008-09-10 10:12 . 2008-09-10 10:12 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
    2008-09-10 08:37 . 2008-07-31 04:13 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
    2008-09-10 08:37 . 2008-08-02 04:01 625,152 --a------ C:\Windows\System32\drivers\dxgkrnl.sys
    2008-09-10 08:37 . 2008-06-26 06:29 565,248 --a------ C:\Windows\System32\emdmgmt.dll
    2008-09-10 08:37 . 2008-06-26 06:29 303,616 --a------ C:\Windows\System32\wmpeffects.dll
    2008-09-10 08:37 . 2008-05-08 22:21 211,968 --a------ C:\Windows\System32\drivers\mrxsmb10.sys
    2008-09-10 08:37 . 2008-05-20 05:07 148,480 --a------ C:\Windows\System32\drivers\nwifi.sys
    2008-09-10 08:37 . 2008-06-26 06:29 45,056 --a------ C:\Windows\System32\dataclen.dll
    2008-09-10 08:37 . 2008-08-02 06:26 36,864 --a------ C:\Windows\System32\cdd.dll
    2008-09-10 08:37 . 2008-07-31 06:32 28,160 --a------ C:\Windows\System32\Apphlpdm.dll
    2008-09-06 23:04 . 2008-09-06 23:04 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
    2008-09-06 15:09 . 2008-09-06 15:09 90,112 --a------ C:\Windows\System32\QuickTimeVR.qtx
    2008-09-06 15:09 . 2008-09-06 15:09 57,344 --a------ C:\Windows\System32\QuickTime.qts
    2008-09-05 10:08 . 2008-04-26 11:25 3,600,952 --a------ C:\Windows\System32\ntkrnlpa.exe
    2008-09-04 21:54 . 2008-09-24 21:15 <KANSIO> d-------- C:\ProgramData\Avira
    2008-08-29 10:18 . 2008-08-29 10:18 87,336 --a------ C:\Windows\System32\dns-sd.exe
    2008-08-29 09:53 . 2008-08-29 09:53 61,440 --a------ C:\Windows\System32\dnssd.dll
    2008-08-28 11:40 . 2008-07-19 08:09 1,811,656 --a------ C:\Windows\System32\wuaueng.dll
    2008-08-28 11:40 . 2008-07-19 06:44 1,524,736 --a------ C:\Windows\System32\wucltux.dll
    2008-08-28 11:40 . 2008-07-19 08:10 53,448 --a------ C:\Windows\System32\wuauclt.exe
    2008-08-28 11:40 . 2008-07-19 08:10 45,768 --a------ C:\Windows\System32\wups2.dll
    2008-08-28 11:39 . 2008-07-19 08:09 563,912 --a------ C:\Windows\System32\wuapi.dll
    2008-08-28 11:39 . 2008-07-18 22:08 163,904 --a------ C:\Windows\System32\wuwebv.dll
    2008-08-28 11:39 . 2008-07-19 06:44 83,456 --a------ C:\Windows\System32\wudriver.dll
    2008-08-28 11:39 . 2008-07-19 08:10 36,552 --a------ C:\Windows\System32\wups.dll
    2008-08-28 11:39 . 2008-07-18 20:44 31,232 --a------ C:\Windows\System32\wuapp.exe

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-09-24 18:03 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-09-24 17:39 --------- d-----w C:\Program Files\Google
    2008-09-24 17:23 --------- d-----w C:\Program Files\Windows Live
    2008-09-24 17:18 --------- d-----w C:\Program Files\NewTech Infosystems
    2008-09-24 17:18 --------- d-----w C:\Program Files\Common Files\NewTech Infosystems
    2008-09-24 17:08 --------- d-----w C:\ProgramData\Microsoft Help
    2008-09-24 16:27 --------- d-----w C:\Program Files\Nokia
    2008-09-24 16:27 --------- d-----w C:\Program Files\Common Files\Nokia
    2008-09-24 16:25 --------- d-----w C:\Program Files\MTA San Andreas
    2008-09-24 16:19 --------- d-----w C:\Program Files\Microsoft.NET
    2008-09-24 15:17 167,685 ----a-w C:\Users\Jussi\AppData\Roaming\nvModes.dat
    2008-09-24 13:27 --------- d-----w C:\Program Files\Common Files\Symantec Shared
    2008-09-23 19:54 --------- d-----w C:\Program Files\Steam
    2008-09-23 14:42 46,811,442 ----a-w C:\Windows\Internet Logs\vsmon_on_demand_2008_09_23_16_54_46_full.dmp.zip
    2008-09-23 14:41 46,802,521 ----a-w C:\Windows\Internet Logs\vsmon_on_demand_2008_09_23_16_21_12_full.dmp.zip
    2008-09-23 14:41 46,798,853 ----a-w C:\Windows\Internet Logs\vsmon_on_demand_2008_09_23_16_19_03_full.dmp.zip
    2008-09-23 14:29 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
    2008-09-23 12:57 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
    2008-09-23 12:56 --------- d-----w C:\ProgramData\Lavasoft
    2008-09-23 11:42 --------- d-----w C:\Users\Jussi\AppData\Roaming\uTorrent
    2008-09-23 11:40 --------- d-----w C:\Program Files\Bonjour
    2008-09-17 12:31 --------- d-----w C:\Program Files\Common Files\Steam
    2008-09-16 21:07 --------- d-----w C:\Program Files\iTunes
    2008-09-16 21:05 --------- d-----w C:\Program Files\Common Files\Apple
    2008-09-15 22:33 --------- d-----w C:\ProgramData\Installations
    2008-09-15 18:17 --------- d-----w C:\Users\Jussi\AppData\Roaming\PC Suite
    2008-09-13 08:03 --------- d-----w C:\Program Files\Microsoft Works
    2008-09-10 06:01 --------- d-----w C:\Program Files\RevConnect
    2008-09-04 23:51 174 --sha-w C:\Program Files\desktop.ini
    2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Sidebar
    2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Photo Gallery
    2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Mail
    2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Defender
    2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Calendar
    2008-09-04 23:19 82,432 ----a-w C:\Windows\System32\axaltocm.dll
    2008-09-04 23:19 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
    2008-08-19 20:44 --------- d-----w C:\Program Files\Apple Software Update
    2008-08-19 18:46 --------- d-----w C:\Program Files\Common Files\Adobe AIR
    2008-08-19 18:45 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-08-19 18:32 410,976 ----a-w C:\Windows\System32\deploytk.dll
    2008-08-19 18:32 --------- d-----w C:\Program Files\Java
    2008-08-19 17:14 --------- d-----w C:\Program Files\Creative
    2008-08-19 16:56 --------- d-----w C:\Users\Jussi\AppData\Roaming\Apple Computer
    2008-08-18 03:15 921,600 ----a-w C:\Windows\system32\drivers\athr.sys
    2008-07-31 03:32 460,288 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
    2008-07-31 03:32 2,154,496 ----a-w C:\Windows\AppPatch\AcGenral.dll
    2008-07-31 03:32 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
    2008-07-16 01:32 2,048 ----a-w C:\Windows\System32\tzres.dll
    2008-06-27 04:15 827,392 ----a-w C:\Windows\System32\wininet.dll
    2008-06-26 03:29 801,280 ----a-w C:\Windows\System32\NaturalLanguage6.dll
    2008-06-26 01:45 2,644,480 ----a-w C:\Windows\System32\NlsLexicons0009.dll
    2008-06-26 01:45 12,240,896 ----a-w C:\Windows\System32\NlsLexicons0007.dll
    2008-04-14 11:45 22,328 ----a-w C:\Users\Jussi\AppData\Roaming\PnkBstrK.sys
    2008-02-25 03:10 1,192 ----a-w C:\Users\Jussi\AppData\Roaming\wklnhst.dat
    .

    (((((((((((((((((((((((((((((( Rekisterin koynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjio arvoja ja laillisia oletusarvoja ei noyteto
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 125952]
    "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
    "Google Update"="C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe" [2008-09-23 133104]
    "Start++"="D:\Program Files\Brandon Paddock\Start++\Start++.exe" [2008-04-26 570880]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "PlayMovie"="C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2007-05-24 206952]
    "Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2007-06-06 159744]
    "itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe" [2006-11-21 813912]
    "DPAgnt"="D:\Program Files\DigitalPersona\Bin\DPAgnt.exe" [2006-10-09 807440]
    "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
    "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-06-06 86016]
    "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-06-06 81920]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
    "COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-09-24 1655552]
    "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-09-24 1235736]
    "RtHDVCpl"="RtHDVCpl.exe" [2007-05-18 C:\Windows\RtHDVCpl.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "Nokia.PCSync"="D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 1232896]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableLUA"= 0 (0x0)
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DPWLN ]
    2006-10-09 17:27 99856 C:\Windows\System32\DPWLEvHd.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=C:\Windows\system32\guard32.dll,avgrsstx.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Notification Packages REG_MULTI_SZ scecli DPPWDFLT

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a------ 2008-06-12 02:38 34672 C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncU.exe]
    --a------ 2007-07-17 11:03 868352 C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eAudio]
    --a------ 2007-06-11 14:54 1286144 C:\Acer\Empowering Technology\eAudio\eAudio.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    --a------ 2008-09-10 17:40 289576 C:\Program Files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
    --a------ 2008-04-16 12:53 1079808 D:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSet]
    --a------ 2007-04-24 12:49 45056 C:\Windows\PLFSet.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    --a------ 2008-09-06 15:09 413696 C:\Program Files\QuickTime\QTTask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WarReg_PopUp]
    --a------ 2006-11-05 22:48 57344 C:\Acer\WR_PopUp\WarReg_PopUp.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
    --a------ 2008-01-19 10:38 1008184 C:\Program Files\Windows Defender\MSASCui.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
    --a------ 2007-05-18 10:24 4468736 C:\Windows\RtHDVCpl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "UacDisableNotify"=dword:00000001
    "InternetSettingsDisableNotify"=dword:00000001
    "AutoUpdateDisableNotify"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2906536669-2531276552-139435704-1000]
    "EnableNotificationsRef"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{67C1EF2A-B860-4456-BCD1-B25F1B5C5455}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{5729045D-9D55-4D83-A466-8D9154487C09}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{7FCDF7D5-2DF9-4DC7-8DF9-04BBE324841E}"= C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
    "{3E33E619-5F74-4EE6-982F-F301194ED111}"= C:\Program Files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
    "{F038AAA7-F9CE-43AA-9D15-E45EECA2CABF}"= C:\Program Files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
    "{2329B720-E8B2-4A1C-9043-BC9DE8902584}"= C:\Program Files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
    "{2E137681-23AE-452F-8479-8CE0F3226F08}"= C:\Program Files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
    "{3B4F88F6-67F1-4BA1-8E19-9F7DEF3D3218}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:play Movie
    "{A875E6F7-9726-4D84-993C-B3F536589AF0}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe:play Movie Resident Program
    "{B0FB27CA-AC40-488C-B737-9CDBD5407F4D}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{34A9F03F-1032-432E-8D35-6C78D2723D78}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
    "{5352D189-3566-4104-8579-855781CE14D6}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
    "TCP Query User{FB0B07FA-694C-413F-9E24-47D3EFFBE40B}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= UDP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
    "UDP Query User{1158BC8F-2B87-4B0F-8403-636D07461638}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= TCP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
    "TCP Query User{5EB6B667-8CB5-4F74-9495-96E332D35CC0}C:\\program files\\revconnect\\dcplusplus.exe"= UDP:C:\program files\revconnect\dcplusplus.exe:DC++
    "UDP Query User{E8E20BAC-82EF-468D-8563-A318FE1BFF5D}C:\\program files\\revconnect\\dcplusplus.exe"= TCP:C:\program files\revconnect\dcplusplus.exe:DC++
    "TCP Query User{CDB20F80-F7A8-4CC4-8EE7-BA2BF0232CA9}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "UDP Query User{22A13D84-E7D5-4ED5-8F88-75504F2C8590}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "TCP Query User{FBD7DA10-BD9C-45D0-9302-89852FBAD9A4}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= UDP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
    "UDP Query User{3810522B-3449-4DF9-BF96-51405D258BB2}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= TCP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
    "TCP Query User{6A10E53F-852F-4960-BDAD-DC00395DB241}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= UDP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
    "UDP Query User{4423E493-7ECB-4229-B1A8-041E44F766FE}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= TCP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
    "TCP Query User{3B8A05C1-C926-41D3-89F9-0E90E4D2754C}C:\\program files\\revconnect\\dcplusplus.exe"= UDP:C:\program files\revconnect\dcplusplus.exe:DC++
    "UDP Query User{41581D19-AA6F-4767-B634-A219702242F5}C:\\program files\\revconnect\\dcplusplus.exe"= TCP:C:\program files\revconnect\dcplusplus.exe:DC++
    "TCP Query User{A81A442F-1293-4273-8FC3-3239126B0B46}E:\\d-link.exe"= UDP:E:\d-link.exe:Setup Wizard Template
    "UDP Query User{566FD9F0-8282-43FC-8F65-4C6D8DB43B9A}E:\\d-link.exe"= TCP:E:\d-link.exe:Setup Wizard Template
    "{CEA1C911-8AD5-47B5-BB3C-2EE9A7027242}"= UDP:C:\Windows\System32\PnkBstrA.exe:pnkBstrA
    "{B34DF395-FB46-496C-8006-39E21AACBF69}"= TCP:C:\Windows\System32\PnkBstrA.exe:pnkBstrA
    "{50167056-A628-4277-A088-5F057C46C8C5}"= UDP:C:\Windows\System32\PnkBstrB.exe:pnkBstrB
    "{D96AFD71-2A02-403F-B561-8886C2524A00}"= TCP:C:\Windows\System32\PnkBstrB.exe:pnkBstrB
    "{64E77DC1-09B4-4E9F-A417-E0648FB7BD71}"= UDP:C:\Program Files\SmartFTP Client\SmartFTP.exe:SmartFTP Client
    "{2B7EE271-E641-42E6-9D68-258D68CCF04F}"= TCP:C:\Program Files\SmartFTP Client\SmartFTP.exe:SmartFTP Client
    "TCP Query User{BCC0B0F5-DD70-4119-A923-76A17FFBD521}D:\\program files\\tmnationsforever\\tmforever.exe"= UDP:D:\program files\tmnationsforever\tmforever.exe:TmForever
    "UDP Query User{4DF06FD1-408E-48F7-8103-1228F619A957}D:\\program files\\tmnationsforever\\tmforever.exe"= TCP:D:\program files\tmnationsforever\tmforever.exe:TmForever
    "TCP Query User{00B598AD-6FC9-4B7D-8D4F-98E715C96EE2}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= UDP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
    "UDP Query User{9D9CEC49-AFA3-4CB5-B329-8833562E0DE1}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= TCP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
    "TCP Query User{04B1FC3E-9219-4A0D-8C6F-539C9D82F33D}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= UDP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
    "UDP Query User{43E8F800-2754-43DE-894A-CBCCC68EB2E8}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= TCP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
    "{6DAD887B-BBD0-4794-B2BC-754F736BCC3D}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
    "{A7ED34C5-0518-431D-A81C-B41221ADE0DE}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{E65FCBBB-E4B1-4F56-AA7F-DB97797E9C0E}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{C1857E63-761F-4285-806E-5328D2A132E3}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{C8BC203D-4FE6-4F82-B4D0-6D7F6CE24E9A}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "TCP Query User{56E40373-A1FB-43AB-9228-2A952EF7E3C5}C:\\users\\jussi\\desktop\\myspacemp3gopher.exe"= UDP:C:\users\jussi\desktop\myspacemp3gopher.exe:myspacemp3gopher.exe
    "UDP Query User{ED7A16A6-4807-437B-9896-6A515D0442A3}C:\\users\\jussi\\desktop\\myspacemp3gopher.exe"= TCP:C:\users\jussi\desktop\myspacemp3gopher.exe:myspacemp3gopher.exe
    "TCP Query User{590A25C5-469B-4BEE-9621-CCA92D53BFB4}C:\\program files\\itunes\\itunes.exe"= UDP:C:\program files\itunes\itunes.exe:iTunes
    "UDP Query User{732B5958-AB13-42F8-B148-278704FE95A0}C:\\program files\\itunes\\itunes.exe"= TCP:C:\program files\itunes\itunes.exe:iTunes
    "{A5FF3AD1-4512-4C3C-950B-655D955A52A4}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "TCP Query User{B5516F02-9C6A-4143-9036-088F16EAAC27}C:\\program files\\steam\\steamapps\\jiah\\half-life\\hl.exe"= UDP:C:\program files\steam\steamapps\jiah\half-life\hl.exe:Half-Life Launcher
    "UDP Query User{E4BAE536-04C8-4E73-949E-01751F8949A7}C:\\program files\\steam\\steamapps\\jiah\\half-life\\hl.exe"= TCP:C:\program files\steam\steamapps\jiah\half-life\hl.exe:Half-Life Launcher
    "{BEB66574-406B-4199-9F6C-A7CC690E64F3}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{14B82444-287A-47FB-B9B2-86689D12DDA3}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{50502A7C-8599-4CE9-BAE7-B33E1012B027}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "{630D9404-4A2D-41B4-BA78-DDFC4CEAF74D}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "{E79C3BCD-D89C-4649-8B50-3D2E699088FB}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe

    R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-09-24 97928]
    R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys [2008-09-24 85008]
    R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys [2008-09-24 25104]
    R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 17:51 13560]
    R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-09-24 231704]
    R3 dpK0Bx01;Fingerprint Reader Filter Driver;C:\Windows\system32\DRIVERS\dpK0Bx01.sys [2006-09-16 35584]
    R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-05-16 32256]
    R3 usbdpfp;Fingerprint Reader Class Driver;C:\Windows\system32\DRIVERS\usbdpfp.sys [2006-09-16 47360]
    S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-09-16 92656]
    S3 UMPass;Microsoft UMPass-ohjain;C:\Windows\system32\DRIVERS\umpass.sys [2008-01-19 7680]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71567a02-a33f-11dc-a5de-806e6f6e6963}]
    \shell\AutoRun\command - E:\asenna.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2f3f1b0-a6a2-11dc-bf8c-001b384f0933}]
    \shell\AutoRun\command - F:\autorun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3328a34-0a0e-11dd-8ecc-001b384f0933}]
    \shell\AutoRun\command - F:\setup\rsrc\Autorun.exe
    \shell\dinstall\command - F:\Directx\dxsetup.exe
    .
    'Ajoitetut tehtovot'-kansion sisoltö
    .
    - - - - POISTETUT JÄMÄRIVIT - - - -

    HKU-Default-Run-Acer Tour Reminder - C:\Acer\AcerTour\Reminder.exe
    MSConfigStartUp-AppleSyncNotifier - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    MSConfigStartUp-swg - C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe


    .
    ------- Toydentovo tarkistus -------
    .
    FireFox -: Profile - C:\Users\Jussi\AppData\Roaming\Mozilla\Firefox\Profiles\fcmnel4n.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://google.fi
    FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
    FF -: plugin - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
    FF -: plugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
    FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
    FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
    FF -: plugin - D:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
    FF -: plugin - D:\Program Files\DivX\DivX Web Player\npdivx32.dll
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-24 22:30:27
    Windows 6.0.6001 Service Pack 1 NTFS

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja koynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************
    .
    ------------------------ Muut prosessit ------------------------
    .
    C:\Windows\System32\audiodg.exe
    D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Program Files\COMODO\Firewall\cmdagent.exe
    D:\Program Files\DigitalPersona\Bin\DpHost.exe
    C:\Program Files\Common Files\microsoft shared\VS7Debug\mdm.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\Windows\System32\conime.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Apoint2K\ApMsgFwd.exe
    C:\Program Files\AVG\AVG8\avgtray.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Apoint2K\ApntEx.exe
    C:\Users\Jussi\AppData\Local\Temp\RtkBtMnt.exe
    .
    **************************************************************************
    .
    Valmistumisajankohta: 2008-09-24 22:37:34 - kone koynnistettiin uudelleen
    ComboFix-quarantined-files.txt 2008-09-24 19:37:13

    Ennen ajoa: J„rjestelm„ ei l”yd„ sanomaa numerolle 0x2379 ohjelman Application sanomatiedostossa.
    Ajon jälkeen: 11,761,041,408 tavua vapaana

    330 --- E O F --- 2008-09-18 18:36:04

     
    hosee, 24.09.2008
    #7
  9. Hujo

    Hujo Guest

    scannaa uusi hjt:n loki

    ==========

    mites kone toimii
     
    Hujo, 24.09.2008
    #8
  10. hosee

    hosee Member

    Liittynyt:
    23.09.2008
    Viestejä:
    5
    Kiitokset:
    0
    Pisteet:
    11
    Tuli vähän putsailtua ja poistin muutaman turhan ohjelmankin. :)
    Kone on nyt huomattavasti nopeampi ja tuntuu kaikin puolin toimivan hyvin.
    Tuossa uusi HjT -loki:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 23:18:12, on 24.9.2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\conime.exe
    C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\Program Files\Microsoft IntelliType Pro\itype.exe
    D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\COMODO\Firewall\cfp.exe
    C:\Program Files\Apoint2K\ApMsgFwd.exe
    C:\Program Files\AVG\AVG8\avgtray.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\Users\Jussi\AppData\Local\Temp\RtkBtMnt.exe
    C:\Windows\system32\wuauclt.exe
    C:\Windows\Explorer.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Windows\Explorer.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.intl.acer.yahoo.com
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
    O4 - HKLM\..\Run: [DPAgnt] D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [Start++] "D:\Program Files\Brandon Paddock\Start++\Start++.exe" /startup
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
    O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll,avgrsstx.dll
    O20 - Winlogon Notify: DPWLN - C:\Windows\system32\DPWLEvHd.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe
    O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - D:\Program Files\DigitalPersona\Bin\DpHost.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

    --
    End of file - 7682 bytes
     
    Viimeksi muokattu: 24.09.2008
    hosee, 24.09.2008
    #9
  11. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina Fix checked

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
     
    Hujo, 24.09.2008
    #10

Jaa tämä sivu