1. Tämä sivusto käyttää keksejä (cookie). Jatkamalla sivuston käyttämistä hyväksyt keksien käyttämisen. Lue lisää.

Koneella virus.

Viestiketju Virukset ja haittaohjelmat - HijackThis -logit -osiossa. Ketjun avasi Blu_ray32 08.08.2009.

Sivu 2 / 2
  1. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    Mutta.. Uskallanko koittaa sillä ohjelmalla mikä on Ohjelmat/toiminnot kohdassa kun se on sen Zwangin oma poisto-ohjelma..
     
    Blu_ray32, 11.08.2009
    #21
  2.  
  3. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    Onkohan tämä pahaa unta ???
    Nyt sä et halukkaan poistaa Zwangia ????
    .
     
    kalminen, 11.08.2009
    #22
  4. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    Ajattelin vaan että kun se on sen viruksen oma poisto-ohjelma se vähintään poistaa jotain muutakin :p
    Ja nyt kun koitan käynnistää sitä poisto-ohjelmaa tulee vaan että virhe yrittäessä poistaa Zwangi 1.0 build 117 asennusta. Se on ehkä jo poistettu. Poistetaanko kohde luettelosta.
     
    Blu_ray32, 11.08.2009
    #23
  5. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    Kun sinä nämä asiat tiedät niin hyvin,
    niin tee tahtosi.
    .
     
    kalminen, 11.08.2009
    #24
  6. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    Jaa no kiitos kumminkin kun oot auttanu. Jos jaksat kattella tällästä puupäätä niin voikko auttaa ton. Vai onko pilalla kokonaan? Ymmärrän, jos loppu hermot.
     
    Blu_ray32, 11.08.2009
    #25
  7. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    Sain yhden poistamani Zwangin tiedoston takas. Siin oli se uninstall ohjelma kai. Ajoin sen ja nyt sitä Zwangia ei enää näy. Ihmettelen miks sen viruksen mukana tulee poisto-ohjelma? Kiitos kauheesti avusta :)
     
    Blu_ray32, 11.08.2009
    #26
  8. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    Homma meni siinä pieleen, kun minä annoin ohjeet
    mutta sinä teit oman pääsimukaan.

    -----------------------------------------------

    Toimenpiteet Vistassa suoritetaan Järjestelmänvalvojana
    (tarkista älä oleta)

    Kun käynnistät Ehdotetun ohjelman = tee se hiiren oikealla napilla
    ja valitset Suorita Järjestelmänvalvojana

    **************************************************

    Tupla-klikkaa SystemLook.exe ajaaksesi sen.

    Kopioi(CTRL+C) alla olevasta laatikosta kaikki teksti, tekstialueeseen.

    Koodi:
    :regfind
Zwangi
zwangi117

:dir
C:\WINDOWS\system32\drivers\etc /s
C:\ProgramData\Zwangi /s
C:\Program Files\Zwangi /s
    Klikkaa nappulaa Look aloittaaksesi skannauksen.

    Kun skannaus on valmis avautuu muistio joka sisältää lokitiedot
    Klikkaa lokia hiiren oikealla painikkeella ja valitse "Valitse kaikki"
    Kopio ja liitä se seuraavaan viestiisi.
    (Loki löytyy myös työpöydältäsi nimellä SystemLook.txt)

    ------------------------------------------------------------------------------

    * Lataa TÄSTÄ random's system information tool (RSIT) by random/random ja tallenna se työpöydälle
    * Tuplaklikkaa RSIT.exeä ajaaksesi RSITin.
    * Klikkaa Continue.
    * Kun RSIT on valmis, kaksi lokia avautuu muistioon. Lähetä sekä

    log.txt:n (<<avautuu suurennettuna) että
    info.txt:n (<<avautuu pienennettynä) sisältö seuraavassa viestissäsi.

    => SystemLook.txt
    .
     
    kalminen, 12.08.2009
    #27
  9. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    Täes nää logit. Ajattelin kattoo kun olin ton RSIT ajanu että olinko ajanu sen järjestelmänvalvojana. Nyt kun ajaa uudestaan ton RSIT ohjelman niin antaa vaan ton log tiedoston.


    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Järjestelmänvalvoja2 at 2009-08-12 13:23:42
    Microsoft® Windows Vista™ Home Premium Service Pack 1
    System drive C: has 44 GB (38%) free of 114 GB
    Total RAM: 2046 MB (38% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:23:54, on 12.8.2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18813)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Acer\Empowering Technology\eAudio\eAudio.exe
    C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
    C:\Windows\System32\rundll32.exe
    C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
    C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
    C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
    C:\Windows\system32\conime.exe
    C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
    C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
    C:\Program Files\Huawei technologies\Mobile Connect\Mobile Connect.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\Järjestelmänvalvoja2\Desktop\RSIT.exe
    C:\Program Files\Trend Micro\HijackThis\Järjestelmänvalvoja2.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fi.intl.acer.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
    O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
    O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-21-2720350341-3534642408-2642988695-1000\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (User 'Apire 5520G-502G25Mi')
    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
    O4 - S-1-5-21-2720350341-3534642408-2642988695-1000 Startup: OneNoten sisällysluettelo.onetoc2 (User 'Apire 5520G-502G25Mi')
    O4 - S-1-5-21-2720350341-3534642408-2642988695-1000 User Startup: OneNoten sisällysluettelo.onetoc2 (User 'Apire 5520G-502G25Mi')
    O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe
    O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4AEF234B-43A2-432F-A778-A9FAE9D750F2}: NameServer = 195.197.54.100 195.74.0.47
    O17 - HKLM\System\CS1\Services\Tcpip\..\{07550F8B-9510-49D3-9F67-E0DE28F787F1}: NameServer = 195.197.54.100 195.74.0.47
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
    O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
    O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSAUA\program\fsaua.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    O23 - Service: Google-päivityspalvelu (gupdate1c98f731dfe1e70) (gupdate1c98f731dfe1e70) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 9420 bytes

    ======Scheduled tasks folder======

    C:\Windows\tasks\Ad-Aware Update (Weekly).job
    C:\Windows\tasks\Google Software Updater.job
    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    C:\Windows\tasks\PCConfidential.job
    C:\Windows\tasks\RegPowerClean.job
    C:\Windows\tasks\RPCReminder.job
    C:\Windows\tasks\User_Feed_Synchronization-{FC0DA673-CB84-4D17-9061-75C4D13402A6}.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Windows Liven kirjautumisapuohjelma - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-23 251504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-07-20 669168]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2009-01-23 522224]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-30 41368]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Windows\system32\eDStoolbar.dll [2007-04-25 151552]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-23 251504]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
    "eAudio"=C:\Acer\Empowering Technology\eAudio\eAudio.exe [2007-06-11 1286144]
    "Acer Tour"= []
    "PlayMovie"=C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe [2007-05-24 206952]
    "eRecoveryService"= []
    "Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe [2007-05-22 151552]
    "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-03-30 267048]
    "F-Secure Manager"=C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE [2007-05-25 183208]
    "F-Secure TNB"=C:\Program Files\F-Secure Internet Security\FSGUI\TNBUtil.exe [2007-05-25 740208]
    "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-29 13543968]
    "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-29 92704]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Acer Tour Reminder"= []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
    C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Taitopeli-Screen taustalukija.lnk]
    C:\PROGRA~1\TAITOP~1\ntsbin.exe [2008-10-27 246784]

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "LogonHoursAction"=2
    "DontDisplayLogonHoursWarnings"=1

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableUIADesktopToggle"=0

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe"="C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu"
    "C:\Acer\Empowering Technology\eDataSecurity\encryption.exe"="C:\Acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption"
    "C:\Acer\Empowering Technology\eDataSecurity\decryption.exe"="C:\Acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eaf36616-d3e2-11dc-a9d2-001b385723c4}]
    shell\AutoRun\command - F:\StartVMCLite.exe


    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1
    .js - open - C:\Windows\System32\WScript.exe "%1" %*

    ======List of files/folders created in the last 1 months======

    2009-08-12 13:04:43 ----D---- C:\rsit
    2009-08-11 15:42:34 ----D---- C:\Users\Järjestelmänvalvoja2\AppData\Roaming\F-Secure
    2009-08-10 14:09:39 ----A---- C:\Windows\ntbtlog.txt
    2009-08-09 14:10:05 ----SHD---- C:\Config.Msi
    2009-08-08 20:47:50 ----D---- C:\Program Files\Trend Micro
    2009-08-08 01:50:09 ----D---- C:\Program Files\Freeze.com
    2009-08-08 01:41:51 ----A---- C:\Windows\system32\WINUTIL5.DLL
    2009-08-08 01:41:51 ----A---- C:\Windows\system32\WINLCTL5.DLL
    2009-08-08 01:41:47 ----D---- C:\Program Files\Winferno
    2009-08-07 23:16:56 ----D---- C:\Program Files\Microangelo Toolset 6
    2009-08-07 01:00:17 ----D---- C:\Program Files\Stardock
    2009-08-06 22:54:46 ----D---- C:\Program Files\SpywareBlaster
    2009-08-02 01:42:24 ----D---- C:\ProgramData\Lavasoft
    2009-08-01 12:20:26 ----D---- C:\Windows\pss
    2009-08-01 00:20:57 ----D---- C:\Program Files\CCleaner
    2009-07-31 23:33:06 ----D---- C:\ProgramData\CheckPoint
    2009-07-31 23:33:06 ----D---- C:\Program Files\Zone Labs
    2009-07-31 23:32:16 ----D---- C:\Windows\Internet Logs
    2009-07-30 10:05:08 ----A---- C:\Windows\system32\javaws.exe
    2009-07-30 10:05:08 ----A---- C:\Windows\system32\deploytk.dll
    2009-07-30 10:05:07 ----A---- C:\Windows\system32\javaw.exe
    2009-07-30 10:05:06 ----A---- C:\Windows\system32\java.exe
    2009-07-29 15:03:24 ----A---- C:\Windows\system32\mshtml.dll
    2009-07-29 15:03:22 ----A---- C:\Windows\system32\ieframe.dll
    2009-07-29 15:03:21 ----A---- C:\Windows\system32\iertutil.dll
    2009-07-29 15:03:20 ----A---- C:\Windows\system32\urlmon.dll
    2009-07-29 15:03:19 ----A---- C:\Windows\system32\wininet.dll
    2009-07-29 15:03:19 ----A---- C:\Windows\system32\occache.dll
    2009-07-29 15:03:19 ----A---- C:\Windows\system32\msfeeds.dll
    2009-07-29 15:03:18 ----A---- C:\Windows\system32\iedkcs32.dll
    2009-07-29 15:03:16 ----A---- C:\Windows\system32\ieui.dll
    2009-07-29 15:03:15 ----A---- C:\Windows\system32\ieUnatt.exe
    2009-07-29 15:03:15 ----A---- C:\Windows\system32\iepeers.dll
    2009-07-29 15:03:14 ----A---- C:\Windows\system32\msfeedsbs.dll
    2009-07-29 15:03:14 ----A---- C:\Windows\system32\jsproxy.dll
    2009-07-29 15:03:14 ----A---- C:\Windows\system32\iesysprep.dll
    2009-07-29 15:03:13 ----A---- C:\Windows\system32\msfeedssync.exe
    2009-07-29 15:03:13 ----A---- C:\Windows\system32\iesetup.dll
    2009-07-29 15:03:13 ----A---- C:\Windows\system32\iernonce.dll
    2009-07-29 15:03:13 ----A---- C:\Windows\system32\ie4uinit.exe
    2009-07-19 00:29:01 ----D---- C:\Users\Järjestelmänvalvoja2\AppData\Roaming\Google
    2009-07-17 00:14:10 ----A---- C:\Windows\system32\t2embed.dll
    2009-07-17 00:14:09 ----A---- C:\Windows\system32\fontsub.dll
    2009-07-17 00:14:09 ----A---- C:\Windows\system32\atmfd.dll
    2009-07-17 00:14:08 ----A---- C:\Windows\system32\dciman32.dll

    ======List of files/folders modified in the last 1 months======

    2009-08-12 13:23:45 ----D---- C:\Windows\Temp
    2009-08-12 13:22:09 ----D---- C:\Windows\Tasks
    2009-08-12 13:20:19 ----SD---- C:\Users\Järjestelmänvalvoja2\AppData\Roaming\Microsoft
    2009-08-12 13:13:16 ----D---- C:\ProgramData\Google Updater
    2009-08-11 23:53:32 ----SHD---- C:\System Volume Information
    2009-08-11 22:28:21 ----D---- C:\Windows\System32
    2009-08-11 22:28:21 ----D---- C:\Windows\inf
    2009-08-11 22:28:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2009-08-11 22:23:21 ----RD---- C:\Program Files
    2009-08-11 12:13:09 ----D---- C:\Program Files\SwiftKit
    2009-08-10 21:47:20 ----HD---- C:\ProgramData
    2009-08-10 21:35:45 ----SD---- C:\Windows\Downloaded Program Files
    2009-08-10 14:39:50 ----D---- C:\Windows\Prefetch
    2009-08-10 14:33:11 ----SHD---- C:\Windows\Installer
    2009-08-10 14:09:39 ----D---- C:\Windows
    2009-08-10 13:53:53 ----D---- C:\Program Files\Common Files
    2009-08-09 14:11:06 ----D---- C:\Program Files\Common Files\Symantec Shared
    2009-08-09 14:10:11 ----D---- C:\ProgramData\Symantec
    2009-08-09 12:48:34 ----D---- C:\ProgramData\F-Secure
    2009-08-08 17:21:10 ----D---- C:\Windows\system32\drivers
    2009-08-08 02:10:48 ----AD---- C:\ProgramData\TEMP
    2009-08-08 01:43:43 ----D---- C:\Windows\system32\Tasks
    2009-08-05 01:29:08 ----DC---- C:\Windows\system32\DRVSTORE
    2009-08-02 01:44:07 ----D---- C:\Windows\system32\catroot
    2009-08-02 01:42:09 ----D---- C:\Windows\winsxs
    2009-08-01 12:21:53 ----D---- C:\Windows\Minidump
    2009-08-01 12:21:53 ----D---- C:\Windows\Debug
    2009-08-01 12:19:26 ----D---- C:\Program Files\NetSnippets
    2009-08-01 01:54:14 ----D---- C:\Program Files\FDRLab
    2009-08-01 01:53:11 ----D---- C:\Program Files\DVD Photo Slideshow
    2009-08-01 01:51:14 ----D---- C:\Program Files\Adventure Game Studio 3.1.2 SP1
    2009-08-01 01:47:32 ----D---- C:\Program Files\Common Files\Apple
    2009-08-01 01:44:39 ----D---- C:\Windows\system32\catroot2
    2009-08-01 00:50:02 ----D---- C:\Program Files\Xeno Assault II Demo
    2009-08-01 00:48:12 ----D---- C:\Program Files\Google
    2009-08-01 00:45:43 ----RD---- C:\Program Files\TypingMaster
    2009-08-01 00:45:07 ----D---- C:\Program Files\Yahoo!
    2009-08-01 00:44:35 ----D---- C:\Program Files\Common Files\DVDVideoSoft
    2009-08-01 00:42:20 ----A---- C:\Windows\ULead32.ini
    2009-08-01 00:34:04 ----D---- C:\games
    2009-08-01 00:33:42 ----D---- C:\Program Files\IrfanView
    2009-08-01 00:30:01 ----D---- C:\Program Files\EA GAMES
    2009-08-01 00:28:36 ----D---- C:\Program Files\Microsoft Games
    2009-07-30 03:08:38 ----D---- C:\Windows\system32\migration
    2009-07-30 03:08:36 ----D---- C:\Program Files\Internet Explorer
    2009-07-26 10:42:36 ----D---- C:\Program Files\Liikkuva laajakaista
    2009-07-25 18:31:57 ----D---- C:\Windows\ModemLogs
    2009-07-24 00:12:33 ----D---- C:\Windows\Microsoft.NET
    2009-07-17 03:08:03 ----D---- C:\Program Files\Windows Mail
    2009-07-15 20:40:11 ----RSD---- C:\Windows\assembly

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [2006-11-02 20112]
    R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2008-01-22 385072]
    R1 F-Secure HIPS;F-Secure HIPS; \??\C:\Program Files\F-Secure Internet Security\HIPS\fshs.sys [2008-07-05 41184]
    R1 FSES;F-Secure Email Scanning Driver; C:\Windows\System32\drivers\fses.sys [2007-05-25 35024]
    R1 FSFW;F-Secure Firewall Driver; C:\Windows\System32\drivers\fsdfw.sys [2008-07-05 60064]
    R1 fsvista;F-Secure Vista Support Driver; \??\C:\Program Files\F-Secure Internet Security\Anti-Virus\minifilter\fsvista.sys [2007-05-25 13168]
    R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 13560]
    R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys [2006-12-07 76584]
    R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2007-05-17 12672]
    R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
    R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
    R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
    R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-05-17 8192]
    R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-13 954368]
    R3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2008-01-19 93696]
    R3 Cam5607;Acer Crystal Eye webcam; C:\Windows\System32\Drivers\BisonC07.sys [2007-05-28 767664]
    R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
    R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]
    R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2007-05-16 32256]
    R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files\F-Secure Internet Security\Anti-Virus\minifilter\fsgk.sys [2009-07-03 77824]
    R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
    R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-05-17 985600]
    R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-05-17 207360]
    R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2007-03-01 92032]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-07-18 1841312]
    R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-07-27 6144]
    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-29 7497792]
    R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-19 88576]
    R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-05-17 659968]
    R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
    S1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\Windows\System32\Drivers\tosrfcom.sys []
    S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2007-06-14 154624]
    S3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys []
    S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\Windows\system32\DRIVERS\BlueletSCOAudio.sys []
    S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2008-01-19 93696]
    S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
    S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
    S3 BthEnum;Bluetooth-pyyntölohkojen ohjain; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-19 19456]
    S3 BthPan;Bluetooth-laite (henkilökohtainen lähiverkko); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
    S3 BTHPORT;Bluetooth-porttiohjain; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]
    S3 BTHUSB;Bluetooth-radion USB-ohjain; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]
    S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
    S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280]
    S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio -palvelu; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
    S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
    S3 MSKSSRV;Microsoft Streaming Service -välityspalvelin; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
    S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
    S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink -muunnin; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
    S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-18 1040544]
    S3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2007-05-17 12032]
    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
    S3 RFCOMM;Bluetooth-laite (RFCOMM-protokollan TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-19 49664]
    S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-19 8192]
    S3 toshidpt;Bluetooth HID Port; C:\Windows\system32\drivers\Toshidpt.sys []
    S3 tosporte;Bluetooth Port Driver from Toshiba; C:\Windows\system32\DRIVERS\tosporte.sys []
    S3 Tosrfbd;Bluetooth RFBUS; C:\Windows\System32\Drivers\tosrfbd.sys []
    S3 Tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys []
    S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys []
    S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys []
    S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\TosRfSnd.sys []
    S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\System32\Drivers\tosrfusb.sys []
    S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
    S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
    S3 WSVD;WSVD; \??\C:\Windows\system32\drivers\WSVD.sys [2006-09-19 80744]
    S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
    S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys [2008-08-21 104960]
    S3 ZTEusbnmea;ZTE NMEA Port; C:\Windows\system32\DRIVERS\ZTEusbnmea.sys [2008-08-21 104960]
    S3 ZTEusbser6k;ZTE Diagnostic Port; C:\Windows\system32\DRIVERS\ZTEusbser6k.sys [2008-08-21 104960]
    S4 F-Secure Filter;F-Secure File System Filter; \??\C:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSfilter.sys [2007-05-25 40048]
    S4 F-Secure Recognizer;F-Secure File System Recognizer; \??\C:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSrec.sys [2007-05-25 25456]
    S4 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-02-18 110592]
    R2 Bonjour Service;Bonjour-palvelu; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
    R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
    R2 eDataSecurity Service;eDSService.exe; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [2007-04-25 457512]
    R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-04-23 24576]
    R2 eNet Service;eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [2007-06-13 135168]
    R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-07-03 53248]
    R2 eSettingsService;eSettings Service; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2007-06-28 24576]
    R2 F-Secure Gatekeeper Handler Starter;FSGKHS; C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe [2007-05-25 48072]
    R2 FSMA;F-Secure Management Agent; C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE [2007-05-25 113576]
    R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
    R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 107008]
    R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-29 196608]
    R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-23 266343]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
    R2 WMIService;ePower Service; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2007-06-13 167936]
    R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-05-17 386560]
    R3 FSAUA;F-Secure Automatic Update Agent; C:\Program Files\F-Secure Internet Security\FSAUA\program\fsaua.exe [2007-05-25 457584]
    R3 FSDFWD;F-Secure Anti-Virus Firewall Daemon; C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe [2007-05-25 453488]
    R3 iPod Service;iPod-palvelu; C:\Program Files\iPod\bin\iPodService.exe [2008-03-30 504104]
    S2 gupdate1c98f731dfe1e70;Google-päivityspalvelu (gupdate1c98f731dfe1e70); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-15 133104]
    S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-01 183280]
    S3 fsssvc;Windows Live -perheturva; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
    S4 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []

    -----------------EOF-----------------



    SystemLook v1.0 by jpshortstuff (22.05.09)
    Log created at 12:57 on 12/08/2009 by Järjestelmänvalvoja2 (Administrator - Elevation successful)

    ========== regfind ==========

    Searching for "Zwangi"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zwangi]
    [HKEY_USERS\S-1-5-21-2720350341-3534642408-2642988695-1003\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zwangi]

    Searching for "zwangi117"
    No data found.

    ========== dir ==========

    C:\WINDOWS\system32\drivers\etc - Parameters: "/s"

    ---Files---
    HOSTS --a--- 610636 bytes [07:08 27/07/2009] [11:29 10/08/2009]
    License.txt --a--- 794 bytes [22:12 05/09/2007] [11:29 10/08/2009]
    lmhosts.sam --a--- 3683 bytes [06:38 02/11/2006] [21:41 18/09/2006]
    mvps.bat --a--- 1615 bytes [02:07 24/12/2008] [11:29 10/08/2009]
    networks --a--- 407 bytes [10:23 02/11/2006] [21:41 18/09/2006]
    PrivacyPolicy.txt --a--- 1384 bytes [20:58 18/07/2009] [11:29 10/08/2009]
    protocol --a--- 1358 bytes [10:23 02/11/2006] [21:41 18/09/2006]
    readme.txt --a--- 6293 bytes [20:56 18/07/2009] [11:29 10/08/2009]
    services --a--- 17244 bytes [10:23 02/11/2006] [21:41 18/09/2006]

    No folders found.

    C:\ProgramData\Zwangi - Unable to find folder.

    C:\Program Files\Zwangi - Unable to find folder.

    -=End Of File=-
     
    Blu_ray32, 12.08.2009
    #28
  10. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    Ei annakaan toisella kerralla kuin toisen, mutta
    molemmat logit löytyy => C:\rsit\info.txt hakemistosta
    Lähetä se info.txt sieltä.
    .
     
    kalminen, 12.08.2009
    #29
  11. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    info.txt logfile of random's system information tool 1.06 2009-08-12 13:05:13

    ======Uninstall list======

    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Automatic Update Agent"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GateKeeper Interface"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Gemini"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Help"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure HIPS"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Localization API"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Pegasus Engine"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
    -->"C:\Program Files\F-Secure Internet Security\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Uninstall"
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{31403E22-2FDB-452F-AE9E-20854633226D}\Setup.exe" -uninst
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\setup.exe" -uninstall
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\setup.exe" -uninstall
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\setup.exe" -uninstall
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B804C424-B66D-447A-84BD-C6B88C392C3A}\setup.exe" -uninstall
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\setup.exe" -uninstall
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040B-0000-0000000FF1CE} /uninstall {E2697EE8-D953-4482-8A30-D6A4D07DE5FB}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040B-0000-0000000FF1CE} /uninstall {E2697EE8-D953-4482-8A30-D6A4D07DE5FB}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040B-0000-0000000FF1CE} /uninstall {E2697EE8-D953-4482-8A30-D6A4D07DE5FB}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040B-0000-0000000FF1CE} /uninstall {F14C929B-E0E6-4EB5-8BFD-FC71AAC7D39C}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-041D-0000-0000000FF1CE} /uninstall {A8626CEF-CB0A-4BC2-8F51-210A43B6158D}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040B-0000-0000000FF1CE} /uninstall {E8865B68-C2A1-4B9D-BBA7-782E8FC2E52F}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040B-0000-0000000FF1CE} /uninstall {E2697EE8-D953-4482-8A30-D6A4D07DE5FB}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
    Abashera-->MsiExec.exe /I{A3EC00E2-71F8-11D7-B1B5-0010A70489ED}
    Acer Arcade Deluxe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\setup.exe" -uninstall
    Acer Crystal Eye webcam-->C:\Program Files\InstallShield Installation Information\{4BB1DCED-84D3-47F9-B718-5947E904593E}\setup.exe -runfromtemp -l0x0009 -removeonly
    Acer Crystal Eye webcam-->C:\Program Files\InstallShield Installation Information\{DD1DED37-2486-4F56-8F89-56AA814003F5}\setup.exe -runfromtemp -l0x0009 -removeonly
    Acer eAudio Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57265292-228A-41FA-9AEC-4620CBCC2739}\Setup.exe" -uninstall
    Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDSnstHelper.exe -Operation UNINSTALL
    Acer eLock Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}\setup.exe" -l0xb -removeonly
    Acer Empowering Technology-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0xb -removeonly
    Acer eNet Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C06554A1-2C1E-4D20-B613-EE62C79927CC}\setup.exe" -l0xb -removeonly
    Acer ePower Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\setup.exe" -l0xb -removeonly
    Acer ePresentation Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF839132-BD43-4056-ACBF-4377F4A88E2A}\setup.exe" -l0x9 -removeonly
    Acer eSettings Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE65A9A0-9686-45C6-9098-3C9543A412F0}\setup.exe" -l0xb -removeonly
    Acer GridVista-->C:\Windows\UnInst32.exe GridV.UNI
    Acer Mobility Center Plug-In-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11316260-6666-467B-AC34-183FCB5D4335}\setup.exe" -l0x9 -removeonly
    Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
    Acer Tour-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94389919-B0AA-4882-9BE8-9F0B004ECA35}\setup.exe" -l0x9 -removeonly
    Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
    Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Reader 8.1.2-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}
    Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log
    ALPS Touch Pad Driver-->C:\Program Files\Apoint2K\Uninstap.exe ADDREMOVE
    Apple Mobile Device Support -tuki-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    Automaattiset valikot (Windows Live Toolbar)-->MsiExec.exe /X{B01DC672-EA23-4FF8-BA22-F622AAF00EAD}
    Big Kahuna Reef 2-->"C:\Program Files\Acer GameZone\Big Kahuna Reef 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Big Kahuna Reef 2\install.log"
    Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
    Cake Mania-->"C:\Program Files\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania\install.log"
    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
    Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
    Dynasty-->"C:\Program Files\Acer GameZone\Dynasty\Uninstall.exe" "C:\Program Files\Acer GameZone\Dynasty\install.log"
    F-Secure Internet Security 2008-->"C:\Program Files\F-Secure Internet Security\FSGUI\PostInstall.exe" /tUnInstall
    Galapago-->"C:\Program Files\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files\Acer GameZone\Galapago\install.log"
    Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
    Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
    Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    Google Updater-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
    greenstreet Picture Browser-->C:\Windows\IsUninst.exe -f"C:\Program Files\greenstreet\UnPicb.isu
    HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118\UIU32m.exe -U -Ic:\Release\Foxconn\51338\AcrZUn32z.inf
    HideWin 1.0.0.1-->"C:\Program Files\HideWin\SETUP\setup.exe" /u
    HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
    iTunes-->MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}
    J2SE Runtime Environment 5.0 Update 12-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150120}
    Java(TM) 6 Update 14-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
    Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
    Korostuksen katselu (Windows Live Toolbar)-->MsiExec.exe /X{90E65178-09D9-44DB-9506-361FD59B731B}
    Launch Manager-->C:\Windows\UnInst32.exe LManager.UNI
    Liikkuva laajakaista-->"C:\Program Files\InstallShield Installation Information\{93D34EE3-99B3-4DB1-8B0A-0A657466F90D}\setup.exe" -runfromtemp -l0x000b -removeonly
    Logitech Gaming Software-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9242864-2841-4ADE-86E0-8F90F91B04DD}\setup.exe" -l0xb
    Luxor 2-->"C:\Program Files\Acer GameZone\Luxor 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Luxor 2\install.log"
    Microangelo Toolset 6-->MsiExec.exe /I{71414EC2-0684-4A15-A85A-E0E259D117AF}
    Microsoft .NET Framework 3.5 Language Pack SP1 - fin-->MsiExec.exe /I{E369A040-E812-37B3-A5B9-311E5579FAC3}
    Microsoft .NET Framework 3.5 SP1:n kielitukipaketti - FI-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fin\setup.exe
    Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    Microsoft Flight Simulator X: Acceleration-->C:\Windows\system32\msiexec.exe /qb /l*vx "%TEMP%\FlightSimUninstall.log" /uninstall {A9729B90-D37B-4A69-B66A-7436AC1F7274}
    Microsoft Flight Simulator X: Acceleration-->MsiExec.exe /I{A9729B90-D37B-4A69-B66A-7436AC1F7274}
    Microsoft Flight Simulator X-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{9527A496-5DF9-412A-ADC7-168BA5379CA6}
    Microsoft Office Excel MUI (Finnish) 2007-->MsiExec.exe /X{90120000-0016-040B-0000-0000000FF1CE}
    Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
    Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
    Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
    Microsoft Office OneNote MUI (Finnish) 2007-->MsiExec.exe /X{90120000-00A1-040B-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (Finnish) 2007-->MsiExec.exe /X{90120000-0018-040B-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (Finnish) 2007-->MsiExec.exe /X{90120000-001F-040B-0000-0000000FF1CE}
    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
    Microsoft Office Proof (Swedish) 2007-->MsiExec.exe /X{90120000-001F-041D-0000-0000000FF1CE}
    Microsoft Office Proofing (Finnish) 2007-->MsiExec.exe /X{90120000-002C-040B-0000-0000000FF1CE}
    Microsoft Office Shared MUI (Finnish) 2007-->MsiExec.exe /X{90120000-006E-040B-0000-0000000FF1CE}
    Microsoft Office Word MUI (Finnish) 2007-->MsiExec.exe /X{90120000-001B-040B-0000-0000000FF1CE}
    Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
    Microsoft Works-->MsiExec.exe /I{6495D83E-3A5B-4674-A17F-3A6DDCDC0F89}
    Mobile Connect-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EAAC5FD-E209-4856-8C49-D4EA40F85032}\setup.exe" -l0x9 -removeonly
    Mozilla Firefox (2.0.0.14)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
    Mystery Case Files - Prime Suspects-->"C:\Program Files\Acer GameZone\Mystery Case Files - Prime Suspects\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files - Prime Suspects\install.log"
    Mystery Case Files Ravenhearst-->"C:\Program Files\Acer GameZone\Mystery Case Files Ravenhearst\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files Ravenhearst\install.log"
    Nokia Connectivity Cable Driver-->MsiExec.exe /I{82427977-8776-4087-90CA-9F65174D3C4D}
    Nokia PC Suite-->C:\ProgramData\Installations\{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}\Nokia_PC_Suite_7_1_18_0_fin_web[1].exe
    Nokia PC Suite-->MsiExec.exe /I{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}
    Nokia Software Updater-->MsiExec.exe /X{7169FA93-66C2-43BD-86E0-CD332A686B29}
    Norton 360-->MsiExec.exe /I{63A6E9A9-A190-46D4-9430-2DB28654AFD8}
    NTI Backup NOW! 4.7-->"C:\Program Files\InstallShield Installation Information\{67ADE9AF-5CD9-4089-8825-55DE4B366799}\setup.exe" -removeonly
    NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1035 CDM7
    NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
    Ohjelman Microsoft Office Excel 2007 Help päivitys (KB963678)-->msiexec /package {90120000-0016-040B-0000-0000000FF1CE} /uninstall {2C35886E-A67C-494A-8E1C-C6B4E415BBDD}
    Ohjelman Microsoft Office Powerpoint 2007 Help päivitys (KB963669)-->msiexec /package {90120000-0018-040B-0000-0000000FF1CE} /uninstall {BD88D384-046E-4E6F-A48B-BC3757C01BA5}
    Ohjelman Microsoft Office Word 2007 Help päivitys (KB963665)-->msiexec /package {90120000-001B-040B-0000-0000000FF1CE} /uninstall {3D728445-D30E-4E78-BCC6-722FE68CB22B}
    OpenOffice.org 2.0-->MsiExec.exe /I{B08C64E2-67B9-4B14-AE57-C05E30B082A1}
    PC Connectivity Solution-->MsiExec.exe /I{D848D140-41C3-4A53-86D8-E866A100B4CD}
    PowerProducer 3.72-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.EXE" -uninstall
    Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
    RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0xb anything
    SafeClean Utilities 3.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Ministars Software\SafeClean Utilities\Uninst.isu" -c"C:\Program Files\Ministars Software\SafeClean Utilities\SetupDLL.dll"
    Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
    Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
    Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
    Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
    Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
    Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
    Security Update for Visio 2007 (KB947590)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
    SpywareBlaster 4.2-->"C:\Program Files\SpywareBlaster\unins000.exe"
    Star Defender 3-->"C:\Program Files\Acer GameZone\Star Defender 3\Uninstall.exe" "C:\Program Files\Acer GameZone\Star Defender 3\install.log"
    SwiftKit-->C:\Program Files\SwiftKit\Uninstall.exe
    System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
    Taitopeli-Screen 1.8.1-->C:\Program Files\Taitopeli-Screen\uninst.exe
    Treasures of the Deep-->"C:\Program Files\Acer GameZone\Treasures of the Deep\Uninstall.exe" "C:\Program Files\Acer GameZone\Treasures of the Deep\install.log"
    Uninstall 1.0.0.1-->"C:\Program Files\Common Files\DVDVideoSoft\unins000.exe"
    Uninstall Manager-->C:\Windows\umunins.exe
    Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
    VC 9.0 Runtime-->MsiExec.exe /I{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
    Windows Live Call-->MsiExec.exe /I{9C87F6BB-75E4-4F35-8353-F5E295264E98}
    Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
    Windows Live Messenger-->MsiExec.exe /X{79329446-9BBD-46CE-9D73-AD907BFEFBF4}
    Windows Live Movie Maker Beta-->MsiExec.exe /X{56D00946-61C2-473C-B865-D80DAE4953AF}
    Windows Live -perheturva-->MsiExec.exe /X{C0DD0204-D625-4467-A6DD-981D2BE8CD22}
    Windows Live Sync-->MsiExec.exe /X{49A6888F-C49A-4F9E-84CA-EE1449268E0B}
    Windows Live Toolbar-->MsiExec.exe /X{F5A0AA6B-8FCA-4F18-91A7-C4C6FC45FBEC}
    Windows Live Toolbarin laajennus (Windows Live Toolbar)-->MsiExec.exe /X{E3D1082C-6A34-46BC-88AD-2775C8035FB5}
    Windows Live Writer-->MsiExec.exe /X{4674D305-81B0-4788-9C3F-1EFFE82629E6}
    Windows Liven asennustyökalu-->C:\Program Files\Windows Live\Installer\wlarp.exe
    Windows Liven asennustyökalu-->MsiExec.exe /I{4A51E32B-2EAD-44A0-AC41-9B27025AD892}
    Windows Liven kirjautumisavustaja-->MsiExec.exe /I{A1D39316-5F04-44B2-B90B-7834A794D285}
    Windows Liven lataustyökalu-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
    Windows Liven sähköposti-->MsiExec.exe /I{A4140A4C-C58D-4A77-9C5C-002F063C6CF1}
    Windows Liven valokuvavalikoima-->MsiExec.exe /X{3E0E735A-9796-4570-B802-E776FB945929}
    Windowsin ohjainpaketti - Nokia Modem (10/27/2008 3.9)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\Windows\System32\DriverStore\FileRepository\nokia_bluetooth.inf_544c8e16\nokia_bluetooth.inf
    Windowsin ohjainpaketti - Nokia Modem (10/27/2008 7.01.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\Windows\System32\DriverStore\FileRepository\nokbtmdm.inf_0e4dd4bb\nokbtmdm.inf
    Windowsin ohjainpaketti - Nokia pccsmcfd (08/22/2008 7.0.0.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf
    Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
    Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
    Zuma Deluxe-->"C:\Program Files\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files\Acer GameZone\Zuma Deluxe\install.log"

    =====HijackThis Backups=====

    O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM') [2009-08-10]
    O4 - S-1-5-21-2720350341-3534642408-2642988695-1000 Startup: OneNoten sisällysluettelo.onetoc2 (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe [2009-08-10]
    O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user') [2009-08-10]
    O4 - HKLM\..\Run: [Skytel] Skytel.exe [2009-08-10]
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe [2009-08-10]
    O4 - HKUS\S-1-5-21-2720350341-3534642408-2642988695-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O4 - S-1-5-21-2720350341-3534642408-2642988695-1000 Startup: OneNote 2007 -näyttöleikkeet ja Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-08-10]
    O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe [2009-08-10]
    O4 - HKUS\S-1-5-21-2720350341-3534642408-2642988695-1000\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O4 - HKUS\S-1-5-21-2720350341-3534642408-2642988695-1000\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe [2009-08-10]
    O4 - HKUS\S-1-5-21-2720350341-3534642408-2642988695-1000\..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"http://www.miniclip.com/games/kickboxing/en/" (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2009-08-10]
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu') [2009-08-10]
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab [2009-08-10]
    O13 - Gopher Prefix: [2009-08-10]
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) [2009-08-10]
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" [2009-08-10]
    O4 - HKUS\S-1-5-21-2720350341-3534642408-2642988695-1000\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Apire 5520G-502G25Mi') [2009-08-10]
    O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab [2009-08-10]

    ======Hosts File======

    127.0.0.1 localhost
    127.0.0.1 fr.a2dfp.net
    127.0.0.1 m.fr.a2dfp.net
    127.0.0.1 ad.a8.net
    127.0.0.1 asy.a8ww.net
    127.0.0.1 acezip.net #[SiteAdvisor.acezip.net]
    127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
    127.0.0.1 phpadsnew.abac.com
    127.0.0.1 a.abnad.net
    127.0.0.1 b.abnad.net

    ======Security center information======

    AV: F-Secure Internet Security 2008 8.00
    FW: F-Secure Internet Security 2008 8.00
    AS: Windows Defender
    AS: F-Secure Internet Security 2008 8.00

    ======System event log======

    Computer Name: Apire5520G-5-PC
    Event Code: 19
    Message: Korjattu laitteistovirhe.

    Virheen lähde: Korjattu koneen tarkistus

    Virheen tyyppi: Muistihierarkiavirhe

    Kelvollinen suoritintunnus: Kyllä
    Suoritintunnus: 0x1
    Paikan numero: 2
    Tapahtuman tyyppi: Yleiset
    Suorittimen osallistuminen: -
    Pyynnön tyyppi: Etsi
    Muisti/IO: -
    Muistihierarkian taso: Taso 2
    Aikakatkaisu: -
    Record Number: 161634
    Source Name: Microsoft-Windows-WHEA-Logger
    Time Written: 20090812095402.517000-000
    Event Type: Varoitus
    User: NT-HALLINTA\Paikallinen palvelu

    Computer Name: Apire5520G-5-PC
    Event Code: 20003
    Message: Ohjaimien hallinta on viimeistellyt ohjaimen tunnel lisäysprosessin (laite-esiintymätunnus ROOT\*ISATAP\0018). Tila: 0.
    Record Number: 161635
    Source Name: Microsoft-Windows-User-PnP
    Time Written: 20090812095402.878000-000
    Event Type: Tietoja
    User: NT-HALLINTA\SYSTEM

    Computer Name: Apire5520G-5-PC
    Event Code: 20003
    Message: Ohjaimien hallinta on viimeistellyt ohjaimen tunnel lisäysprosessin (laite-esiintymätunnus ROOT\*6TO4MP\0012). Tila: 0.
    Record Number: 161636
    Source Name: Microsoft-Windows-User-PnP
    Time Written: 20090812095423.575000-000
    Event Type: Tietoja
    User: NT-HALLINTA\SYSTEM

    Computer Name: Apire5520G-5-PC
    Event Code: 7036
    Message: Palvelu Windowsin moduulien asennusohjelma on tilassa käynnissä.
    Record Number: 161637
    Source Name: Service Control Manager
    Time Written: 20090812095455.000000-000
    Event Type: Tietoja
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 7036
    Message: Palvelu Windowsin moduulien asennusohjelma on tilassa pysäytetty.
    Record Number: 161638
    Source Name: Service Control Manager
    Time Written: 20090812100502.000000-000
    Event Type: Tietoja
    User:

    =====Application event log=====

    Computer Name: Apire5520G-5-PC
    Event Code: 20224
    Message: CoID={7C617CA7-2986-40D4-9A82-F9903761C44D}: Käyttäjä Apire5520G-5-PC\Apire 5520G-502G25Mi muodosti etäkäyttöpalvelinlinkin.
    Record Number: 66233
    Source Name: RasClient
    Time Written: 20090812095355.000000-000
    Event Type: Tietoja
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 20225
    Message: CoID={7C617CA7-2986-40D4-9A82-F9903761C44D}: Käyttäjä Apire5520G-5-PC\Apire 5520G-502G25Mi on valinnut etäkäyttöpalvelimen yhteyden HUAWEI3G.saunalahti1 numeron ja yhteys on muodostettu. Yhteysparametrit:
    TunnelIpAddress = 85.76.204.56
    TunnelIpv6Address = None
    Dial-in User = .
    Record Number: 66234
    Source Name: RasClient
    Time Written: 20090812095359.000000-000
    Event Type: Tietoja
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 1
    Message: Certificate Services -asiakas on käynnistetty.
    Record Number: 66235
    Source Name: Microsoft-Windows-CertificateServicesClient
    Time Written: 20090812095420.025000-000
    Event Type: Tietoja
    User: NT-HALLINTA\SYSTEM

    Computer Name: Apire5520G-5-PC
    Event Code: 103
    Message: 2 2009-08-12 13:04:58+03:00 apire5520g-5-pc Apire5520G-5-PC\Apire 5520G-502G25Mi Message from F-Secure Anti-Virus on
    Scanning of \DEVICE\HARDDISKVOLUME2\WINDOWS\SYSTEM32\DRIVERS\ELXSTOR.SYS was aborted due to exceeded scanning time limit. The file may be in use or reading it was too slow (e.g. network connection was under stress).

    Record Number: 66236
    Source Name: Message from F-Secure Anti-Virus on
    Time Written: 20090812100458.000000-000
    Event Type: Virhe
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 5
    Message: Unsupported service control request (see data below)
    Record Number: 66237
    Source Name: LightScribeService
    Time Written: 20090812100511.000000-000
    Event Type: Tietoja
    User:

    =====Security event log=====

    Computer Name: Apire5520G-5-PC
    Event Code: 5038
    Message: Koodin aitouden tarkistustoiminto määritti, että tiedoston näköistiedoston hajautusarvo ei ole kelvollinen. Tiedosto voi olla vaurioitunut luvattomien muutosten vuoksi, tai levylaite voi olla viallinen.

    Tiedostonimi: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
    Record Number: 51341
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090812100506.645000-000
    Event Type: Valvontavirhe
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 5038
    Message: Koodin aitouden tarkistustoiminto määritti, että tiedoston näköistiedoston hajautusarvo ei ole kelvollinen. Tiedosto voi olla vaurioitunut luvattomien muutosten vuoksi, tai levylaite voi olla viallinen.

    Tiedostonimi: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
    Record Number: 51342
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090812100506.707400-000
    Event Type: Valvontavirhe
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 5038
    Message: Koodin aitouden tarkistustoiminto määritti, että tiedoston näköistiedoston hajautusarvo ei ole kelvollinen. Tiedosto voi olla vaurioitunut luvattomien muutosten vuoksi, tai levylaite voi olla viallinen.

    Tiedostonimi: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
    Record Number: 51343
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090812100506.769800-000
    Event Type: Valvontavirhe
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 5038
    Message: Koodin aitouden tarkistustoiminto määritti, että tiedoston näköistiedoston hajautusarvo ei ole kelvollinen. Tiedosto voi olla vaurioitunut luvattomien muutosten vuoksi, tai levylaite voi olla viallinen.

    Tiedostonimi: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
    Record Number: 51344
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090812100506.816600-000
    Event Type: Valvontavirhe
    User:

    Computer Name: Apire5520G-5-PC
    Event Code: 5038
    Message: Koodin aitouden tarkistustoiminto määritti, että tiedoston näköistiedoston hajautusarvo ei ole kelvollinen. Tiedosto voi olla vaurioitunut luvattomien muutosten vuoksi, tai levylaite voi olla viallinen.

    Tiedostonimi: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
    Record Number: 51345
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090812100506.879000-000
    Event Type: Valvontavirhe
    User:

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    "PROCESSOR_ARCHITECTURE"=x86
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "USERNAME"=SYSTEM
    "windir"=%SystemRoot%
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 104 Stepping 1, AuthenticAMD
    "PROCESSOR_REVISION"=6801
    "NUMBER_OF_PROCESSORS"=2

    -----------------EOF-----------------
     
    Blu_ray32, 12.08.2009
    #30
  12. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    Ota ensin rekisteristä näin varmuuskopio:

    Alapalkista > Käynnistä > Suorita -> regedit -> ok.
    Klikkaa hiirellä omatietokone rivi aktiiviseksi.
    Sitten Tiedosto -> Vie. Kirjoita sille Rekisteri Tiedoston nimi ja
    Tallennus Kohde sarakkeeseen valitset (C:) juureen. Vientialueeseen "täppi" kohtaan kaikki.
    Poistu Regeditistä.

    Sitten tallenna tämä alla oleva tekstinpätkä nimellä fix.reg Notepad muistiossa
    työpöydälle (tallennusmuoto kaikki tiedostot)

    Koodi:
    Windows Registry Editor Version 5.00 

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zwangi] 
[-HKEY_USERS\S-1-5-21-2720350341-3534642408-2642988695-1003\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zwangi]
    Tuplaklikkaa työpöydällä fix.reg ja paina kyllä ja ok.

    Käynnistä kone uudelleen.

    Jokohan Zwagi nyt lakkasi kummittelemasta ???
    .
     
    kalminen, 12.08.2009
    #31
  13. Blu_ray32

    Blu_ray32 Member

    Liittynyt:
    08.08.2009
    Viestejä:
    18
    Kiitokset:
    0
    Pisteet:
    11
    Ite en ainakaan löydä Zwangista mitään.
    Pistän vielä hjT login tänne?
     
    Blu_ray32, 12.08.2009
    #32
Sivu 2 / 2

Jaa tämä sivu