Eli kone on temppuillut ja hidastellut nyt jonkin aikaa. Myös utorrentissa ei jostain syystä tule läheskään maksimia, vaikka jakajia on tarpeeksi. Hermot alko palamaan, joten ajattelin jos joku teistä viisaammista osaisi auttaa tässä ongelmassa. Tässä tämä HJT logi Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:35:48, on 23.8.2008 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16711) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Media Player\wmpnscfg.exe E:\Program Files\iTunes\iTunesHelper.exe E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe E:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe E:\Program Files\PDFCreator\PDFCreator.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe E:\Program Files\Mozilla Firefox\firefox.exe E:\Program Files\Winamp\winamp.exe E:\Program Files\uTorrent\uTorrent.exe E:\Program Files\WinRAR\WinRAR.exe E:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\SearchFilterHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O1 - Hosts: ::1 localhost O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll O3 - Toolbar: Norton-työkalurivi - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file) O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [PC Suite Tray] "E:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [Nokia.PCSync] "E:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog O4 - HKCU\..\Run: [amsn] E:\Program Files\aMSN\amsn.exe O4 - HKCU\..\Run: [Steam] "C:\valve\Steam.exe" -silent O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu') O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: PDFCreator.lnk = E:\Program Files\PDFCreator\PDFCreator.exe O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNfox000 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - (no file) O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - (no file) O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{00F2FC21-329C-43DC-87DD-7796C543172C}: NameServer = 193.229.0.40,193.229.0.42 O17 - HKLM\System\CCS\Services\Tcpip\..\{54FE35F2-0265-4132-B05E-441538644E0A}: NameServer = 217.112.252.215,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\..\{00F2FC21-329C-43DC-87DD-7796C543172C}: NameServer = 193.229.0.40,193.229.0.42 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ccEvtMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: ccSetMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- End of file - 11170 bytes Kiitos jo etukäteen!
scannaa hjt:llä merkkaa paina Fix checked R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file) O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file) O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredit...html?p=ZNfox000 O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - (no file) O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - (no file) ============== siellä on avira ja norton koneella poista toinen ============== 1.Lataa combofix.exe työpöydällesi yhdestä linkistä: combofix1 combofix2 2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia. 3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi. Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen. ============= Lataa Malwarebytes' Anti-Malware työpöydällesi. 1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman. 2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish. 3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version. 4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan. 5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset. 6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected. 7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt 8. Lähetä lokin sisältö seuraavassa viestissäsi.
Joo, kiitoksia sinulle jo avusta! Eli poistin norttonin kokonaan koneelta ja tein kaiken mitä tuossa sanoit. Tässä tämä combofix-logi: ComboFix 08-08-25.01 - Eetu 2008-08-26 20:01:12.1 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.906 [GMT 3:00] Running from: C:\Users\Eetu\Desktop\ComboFix.exe * Created a new restore point . (((((((((((((((((((((((((((((((((((((( Muut poistot )))))))))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\internet explorer\msimg32.dll C:\Users\Eetu\AppData\Roaming\macromedia\Flash Player\#SharedObjects\4M2XY87N\bin.clearspring.com C:\Users\Eetu\AppData\Roaming\macromedia\Flash Player\#SharedObjects\4M2XY87N\bin.clearspring.com\clearspring.sol C:\Users\Eetu\AppData\Roaming\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com C:\Users\Eetu\AppData\Roaming\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol C:\Windows\cookies.ini C:\Windows\system32\f3PSSavr.scr C:\Windows\system32\fhxrnosf.ini C:\Windows\system32\fimanwqm.ini C:\Windows\system32\fnnmavbt.ini C:\Windows\system32\hudxfyne.ini C:\Windows\system32\jqohtxjp.ini C:\Windows\system32\lbyoumvs.ini C:\Windows\system32\ogkntino.ini C:\Windows\system32\ohbeehkb.ini C:\Windows\system32\upgmrnlp.ini C:\Windows\system32\waigvdqo.ini C:\Windows\system32\wcnohhfg.ini C:\Windows\system32\vpndtspl.ini . ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-07-26 to 2008-08-26 ))))))))))))))))) . Tiedostoja ei ole luotu tällä aikavälillä . (((((((((((((((((((((((((((((((((((( Find3M-raportti )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-26 17:01 --------- d-----w C:\Users\Eetu\AppData\Roaming\uTorrent 2008-08-26 16:48 --------- d-----w C:\ProgramData\Symantec 2008-08-26 16:48 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-08-26 16:42 --------- d-----w C:\Program Files\Norton 360 2008-08-25 21:00 123,386 ----a-w C:\Users\Eetu\AppData\Roaming\nvModes.dat 2008-08-23 08:33 --------- d-----w C:\Program Files\Common Files\Steam 2008-08-17 10:38 --------- d-----w C:\ProgramData\Yahoo! Companion 2008-08-15 16:10 --------- d-----w C:\Program Files\Yahoo! 2008-08-13 21:00 --------- d-----w C:\ProgramData\Microsoft Help 2008-08-13 20:55 --------- d-----w C:\Program Files\Windows Mail 2008-08-11 19:41 253,116 ----a-w C:\Windows\PDFCreator_Toolbar_Uninstaller_5279.exe 2008-08-11 19:41 --------- d-----w C:\Program Files\PDFCreator Toolbar 2008-08-08 09:42 --------- d-----w C:\Users\Eetu\AppData\Roaming\dvdcss 2008-08-06 18:58 --------- d-----w C:\ProgramData\Avira 2008-08-06 09:36 --------- d-----w C:\Program Files\Common Files\AVSMedia 2008-07-16 19:31 --------- d-----w C:\Users\Eetu\AppData\Roaming\PC Suite 2008-07-15 23:48 2,048 ----a-w C:\Windows\System32\tzres.dll 2008-07-12 12:08 --------- d-----w C:\Program Files\DAEMON Tools Toolbar 2008-07-12 12:01 717,296 ----a-w C:\Windows\system32\drivers\sptd.sys 2008-07-09 22:29 174 --sha-w C:\Program Files\desktop.ini 2008-06-30 15:44 --------- d-----w C:\Users\Eetu\AppData\Roaming\Symantec 2008-06-30 15:25 --------- d-----w C:\ProgramData\Symantec Temporary Files 2008-06-29 11:59 --------- d-----w C:\Users\Eetu\AppData\Roaming\mIRC 2008-06-27 03:54 826,368 ----a-w C:\Windows\System32\wininet.dll 2008-06-27 03:54 56,320 ----a-w C:\Windows\System32\iesetup.dll 2008-06-27 03:54 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll 2008-06-27 03:54 26,624 ----a-w C:\Windows\System32\ieUnatt.exe 2008-06-26 00:34 7,964,672 ----a-w C:\Windows\System32\NlsLexicons0024.dll 2008-06-26 00:33 9,892,864 ----a-w C:\Windows\System32\NlsLexicons000a.dll 2008-06-19 03:25 61,440 ----a-w C:\Windows\System32\winipsec.dll 2008-06-19 03:25 361,984 ----a-w C:\Windows\System32\IPSECSVC.DLL 2008-06-19 03:25 28,672 ----a-w C:\Windows\System32\FwRemoteSvr.dll 2008-06-19 03:25 272,896 ----a-w C:\Windows\System32\polstore.dll 2007-12-29 16:56 22,328 ----a-w C:\Users\Eetu\AppData\Roaming\PnkBstrK.sys 2007-12-02 18:03 13,072 ----a-w C:\Users\Vieras\AppData\Roaming\nvModes.dat . (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet ))))))))))))))))))))))))))))))))))))))))))))) . . *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 18:00 1232896] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 15:35 125440] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184] "PC Suite Tray"="E:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-03-28 11:20 1079296] "Nokia.PCSync"="E:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 18:41 1232896] "Steam"="C:\valve\Steam.exe" [2008-08-22 19:48 1271032] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 15:36 201728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-04-04 19:41 86016] "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-04-04 19:41 8429568] "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-04-04 19:41 81920] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-08-02 21:36 815104] "Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 18:38 583048] "iTunesHelper"="E:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048] "!AVG Anti-Spyware"="E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 12:25 6731312] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648] "avgnt"="E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 14:28 266497] "RtHDVCpl"="RtHDVCpl.exe" [2007-06-20 16:56 4493312 C:\Windows\RtHDVCpl.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Nokia.PCSync"="E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 18:41 1232896] C:\Users\Eetu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-08-24 04:45:42 101784] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ PDFCreator.lnk - E:\Program Files\PDFCreator\PDFCreator.exe [2008-08-11 22:40:57 2641920] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{055618C5-11D6-4B04-9E02-5A7CD2812FC4}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{12BF364C-3B9D-48B2-89F7-10C3C8682E80}"= UDP:E:\Program Files 1\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2 "{3D912DAA-388D-462B-899F-BF4AFBC31152}"= TCP:E:\Program Files 1\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2 "{FAB5C60E-33B8-4697-B659-F030C7BA3241}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent "{88DC5283-5EF6-4800-AFB0-6F98E065FB42}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent "{8D7A84E7-7E19-4176-B133-D720827DC3AF}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{83ACDF77-D8B1-426D-9F3C-2E185988480A}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{7E8DCC01-E8CB-4857-A477-BFE797F60B89}"= UDP:C:\Windows\System32\PnkBstrA.exenkBstrA "{7F72F54B-65CD-4EBC-868E-2DCD46CD6580}"= TCP:C:\Windows\System32\PnkBstrA.exenkBstrA "{04658F49-DED4-4029-88D9-85D63D0F3562}"= UDP:C:\Windows\System32\PnkBstrB.exenkBstrB "{9C7BCD03-0305-4045-B99F-83F90D5DDC49}"= TCP:C:\Windows\System32\PnkBstrB.exenkBstrB "{E8843AF0-5017-4566-BE88-78AD5D0EEDEF}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook "{0D0FCD9F-13B3-405A-B52E-4CB7F19FB9AF}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove "{CA3CE660-CED5-45B7-82A1-2A60E0844E7E}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove "{FDCA5DE9-549A-404D-86A9-F39E18AFD0C2}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{361DEAD4-8CE2-4EB9-B1A2-66750C3D45D6}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{B9834E87-9F85-47CE-8C77-DB42FF51A548}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent "{6E383768-91ED-47E7-A527-FB35A2EA3F48}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent "{3DEBAD30-BB7B-438D-8D44-7C1436ECFE45}"= UDP:C:\Windows\System32\PnkBstrA.exenkBstrA "{3F4E5893-BAFD-436F-AF34-F72DC0461310}"= TCP:C:\Windows\System32\PnkBstrA.exenkBstrA "{4F4AC4B0-9BF7-4B94-9B63-64C9BC1F5457}"= UDP:C:\Windows\System32\PnkBstrB.exenkBstrB "{28382A1E-6D90-44C7-8D10-238B2E849104}"= TCP:C:\Windows\System32\PnkBstrB.exenkBstrB "{B0A848ED-CCEE-450C-99BE-BCE3FE3FF10A}"= UDP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb "{99C4DFF9-ABCE-412F-BC32-D8F6C6D79F9A}"= TCP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb "{50855C8F-6047-4B00-BA95-29150D8A8637}"= UDP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray "{7F69E995-4D57-4E71-BFAE-E605B1782437}"= TCP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray "{ABC5D61C-441E-46F5-A77E-613AFCD13B13}"= UDP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR "{1A2E1EC8-67D3-448D-9CCB-76C6B969306C}"= TCP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR "{B8B032D9-5691-46F8-B4DC-BE187D897061}"= UDP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client "{9666CC0F-19CE-4119-83B3-4C411ED491C8}"= TCP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client "{A73524EA-B72C-4EAA-9EBA-85C6A8310A6F}"= Disabled:UDP:C:\Program Files\Skype\Phone\Skype.exe:Skype "{03551341-7DE4-4A54-A3C8-AC7EFD3501DE}"= Disabled:TCP:C:\Program Files\Skype\Phone\Skype.exe:Skype "{8B8B65E4-6F69-4892-93B9-9F7F6B7E2BFA}"= UDP:E:\utorrent.exe:µTorrent "{01CB633E-81BB-4B5F-BEE5-01A1DB5995D0}"= TCP:E:\utorrent.exe:µTorrent "{0B49E906-3911-4740-8C4F-001376DFD894}"= Disabled:UDP:C:\Program Files\Skype\Phone\Skype.exe:Skype "{F029D53E-5E4A-49E0-A3B0-B592142DC956}"= Disabled:TCP:C:\Program Files\Skype\Phone\Skype.exe:Skype "{C47FBE1D-4E33-46F5-801A-271527078242}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes "{29EE21F4-55B3-4F60-8ECE-1079AEC35605}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes "{497080A5-0AA2-4E1D-B702-19BC19450A68}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "{02A29670-1A19-4A8C-A1B0-B8E56BB67946}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "{ED22578D-2E6C-4792-B81E-970FEEA87DA3}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour "{8B123DAF-A4EF-42A6-A32D-E5C204F6A009}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour "{A6037691-3A58-43E2-9C64-28587DC9CEE5}"= UDP:E:\Program Files\iTunes\iTunes.exe:iTunes "{C3951BE2-A6DF-4AD4-BB66-43938A438D57}"= TCP:E:\Program Files\iTunes\iTunes.exe:iTunes "{E0A16431-B12C-4192-B958-17A7A96D12E9}"= UDP:E:\Program Files\uTorrent\uTorrent.exe:µTorrent (TCP-In) "{F16F2B5E-58D4-4173-B185-B2F76F082E98}"= TCP:E:\Program Files\uTorrent\uTorrent.exe:µTorrent (UDP-In) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System] "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic| [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\b57nd60x.sys [2006-11-02 10:30] R3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-08-22 19:51] R3 winbondcir;Winbond IR Transceiver;C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 07:51] S3 BthAvrcp;Bluetooth-AVRCP-profiili;C:\Windows\system32\DRIVERS\BthAvrcp.sys [2007-08-24 20:34] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4b922d0d-4022-11dc-ae9b-806e6f6e6963}] \shell\AutoRun\command - G:\AUTORUN.EXE *Newly Created Service* - PROCEXP90 . 'Ajoitetut tehtävät'-kansion sisältö 2008-08-26 C:\Windows\Tasks\User_Feed_Synchronization-{BEE8170E-113A-46F8-8BB4-5C7F59776083}.job - C:\Windows\system32\msfeedssync.exe [2006-11-02 12:45] . - - - - ORPHANS REMOVED - - - - HKCU-Run-amsn - E:\Program Files\aMSN\amsn.exe . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Users\Eetu\AppData\Roaming\Mozilla\Firefox\Profiles\dsvxikb0.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fi FF -: plugin - C:\Program Files\Yahoo!\Common\npyaxmpb.dll FF -: plugin - E:\Program Files\iTunes\Mozilla Plugins\npitunes.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\np32dsw.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npdivx32.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npnul32.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\nppdf32.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-26 20:05:33 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... C:\Windows\TEMP\TMP0000006A18F2857BAEEC3CCB scan completed successfully hidden files: 1 ************************************************************************** . Completion time: 2008-08-26 20:07:58 ComboFix-quarantined-files.txt 2008-08-26 17:07:32 Pre-Run: Järjestelmä ei löydä sanomaa numerolle 0x2379 ohjelman Application sanomatiedostossa. Post-Run: 2,992,734,208 tavua vapaana 216 --- E O F --- 2008-08-20 17:01:30 Ja tässä tämä Mbam-logi: Malwarebytes' Anti-Malware 1.25 Tietokantaversio: 1088 Windows 6.0.6000 22:33:06 26.8.2008 mbam-log-08-26-2008 (22-33-06).txt Tarkistustyyppi: Täysi tarkistus (C:\|D:\|E:\|F:\|) Tarkistetut kohteet: 130062 Kulunut aika: 1 hour(s), 44 minute(s), 24 second(s) Saastuneita muistiprosesseja: 0 Saastuneita muistimoduuleja: 0 Saastuneita rekisteriavaimia: 15 Saastuneita rekisteriarvoja: 1 Saastuneita rekisterikohteita: 0 Saastuneita hakemistoja: 0 Saastuneita tiedostoja: 3 Saastuneita muistiprosesseja: (Haitallisia kohteita ei löydetty) Saastuneita muistimoduuleja: (Haitallisia kohteita ei löydetty) Saastuneita rekisteriavaimia: HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. Saastuneita rekisteriarvoja: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully. Saastuneita rekisterikohteita: (Haitallisia kohteita ei löydetty) Saastuneita hakemistoja: (Haitallisia kohteita ei löydetty) Saastuneita tiedostoja: C:\QooBox\Quarantine\C\Program Files\Internet Explorer\msimg32.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\QooBox\Quarantine\C\Windows\System32\f3PSSavr.scr.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully. E:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
ajas tuosta Nortonin poistokalu ja nytten kun sulla on pelkä antivir niin laita windowsin palomuuri päälle =========== scannaa uusi hjt:n loki
Ajoin nyt tuon nortonremoverin ja laitoin winukan oman palomuurin päälle, mutta mitä nyt oon ite ymmärtäny niin se on aika surkee. Joten pystytkö suosittelemaan mitään ilmasta palomuuria tuon tilalle? Tässä tämä hjt-logi: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:16:35, on 27.8.2008 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16711) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\RtHDVCpl.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe E:\Program Files\iTunes\iTunesHelper.exe E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe E:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Windows\ehome\ehmsas.exe C:\valve\Steam.exe C:\Program Files\Windows Media Player\wmpnscfg.exe E:\Program Files\PDFCreator\PDFCreator.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\PresentationSettings.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe E:\Program Files\Mozilla Firefox\firefox.exe E:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O1 - Hosts: ::1 localhost O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [PC Suite Tray] "E:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [Nokia.PCSync] "E:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog O4 - HKCU\..\Run: [Steam] "C:\valve\Steam.exe" -silent O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu') O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: PDFCreator.lnk = E:\Program Files\PDFCreator\PDFCreator.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{00F2FC21-329C-43DC-87DD-7796C543172C}: NameServer = 193.229.0.40,193.229.0.42 O17 - HKLM\System\CCS\Services\Tcpip\..\{54FE35F2-0265-4132-B05E-441538644E0A}: NameServer = 217.112.252.215,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\..\{00F2FC21-329C-43DC-87DD-7796C543172C}: NameServer = 193.229.0.40,193.229.0.42 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - E:\Program Files\AVG 7.5\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 7806 bytes
Joo, paljon kiitoksia sinulle kaikesta. Asensin ton comodon koneelle ja otin winukan oman pois päältä.
Javan päivitys ja välimuistin tyhjennys: Lataa JavaRa ja pura se työpöydällesi. ***Sulje kaikki päällä olevat Internet Explorerin ikkunat ennen jatkamista!*** * Tuplaklikkaa JavaRa.exeä käynnistääksesi ohjelma. * Valitse English pudotusvalikosta valitaksesi kieleksi englannin ja klikkaa Select. * Klikkaa Remove Older Versions poistaaksesi vanhat Java-versiot koneeltasi. * Klikkaa Yes kun pyydetään. Kun JavaRa on valmis, se ilmoittaa, että lokitiedosto on luotu. Klikkaa OK. * Lokitiedosto avautuu. Lähetä sen sisältö seuraavassa viestissäsi. 4. Asenna uusin Java päivitys seuraavasta linkistä.. http://java.sun.com/javase/downloads/index.jsp Rullaa alas kohteeseen Java Runtime Environment (JRE) 6 Update 7 Paina Download Laita Platform -kohtaan Windows Ruksaa I agree to the Java SE Runtime Environment 6 License Agreement ja paina Continue Paina Windows Offline Installationin alapuolella jre-6u4-windows-i586-p.exe Tallenna tiedosto vaikka työpöydälle ja asenna se. 5. Käynnistä kone uudelleen asennuksen jälkeen. 6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi). 7. General-välilehdellä klikkaa Settings. Vedä liukusäädintä (Disk Space) pienemmälle. (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa. Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle). 8. Klikkaa Delete Files -nappia. Varmista että kaikki kaksi valintaa ovat rastitettuja: * Applications and Applets * Trace and Log Files Ja paina OK -nappia Huomaa: Tämä poistaa kaikki ladatut sovellukset ja appletit VÄLIMUISTISTA. 9. Klikkaa OK "Temporary Files Settings" -ikkunassasi. 10. Välilehti Update: ota ruksi pois kohdasta Check for Updates automatically Valitse Never check 11. Klikkaa Apply ja OK jättääksesi Java asetusikkunasi.
