Ylimääräistä tässä logissa?

Dmn- kirjoitti:

Kiitoksia tuhannesti jo etukäteen.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\gekbnxt.exe
C:\PROGRA~1\INTERN~2\inetmgr.exe
C:\WINDOWS\System32\SQsky.exe
C:\WINDOWS\DHUpdt.exe
C:\WINDOWS\dhbrwsr.exe
C:\Program Files\NaviSearch\bin\nls.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\WINDOWS\system32\rtrtplr\igyrlaq.exe
C:\PROGRA~1\COMMON~1\tsa\tsl.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\lhvuiq\msspa.exe
C:\PROGRA~1\INTERN~2\inetsvc.exe
C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
C:\WINDOWS\system32\tartpub.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\PROGRA~1\PRESAR~1\Presario\XPHWWRP4\plugin\bin\pchbutton.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Documents and Settings\Omistaja\Application Data\uhj?.exe
C:\WINDOWS\system32\thsghhqm.exe
C:\WINDOWS\system32\t2etiff.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\WinTools\WSup.exe
C:\WINDOWS\system32\tpslaup\yskj.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\WINDOWS\system32\HPZipm12.exe
c:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\CxtPls\CxtPls.exe
C:\WINDOWS\dhsvr.exe
C:\DOCUME~1\Omistaja\LOCALS~1\Temp\APL\aurareco.exe
C:\DOCUME~1\Omistaja\LOCALS~1\Temp\stmtreco.exe
c:\windows\system32\ehcrfb.exe
C:\WINDOWS\explorer.exe
C:\Program Files\BullsEye Network\bin\adx.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Omistaja\Työpöytä\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.eniro.fi/
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\plg0\cxtpls.dll
O2 - BHO: Browser - {046D6EA4-15E3-4b27-8010-45BD78A9219E} - C:\PROGRA~1\INTERN~2\inetkw.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2633C470-3340-59E9-C3C2-F73DBC1FE2AB} - C:\WINDOWS\Zvgzmezw.dll
O2 - BHO: WhistleHlprObj Class - {27557cf1-a237-496d-8c8f-08f3844c6a8b} - C:\Program Files\WhistleSoftware\WselServices\WhistleHelper.dll (file missing)
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: CB UrlCatcher Class - {CE188402-6EE7-4022-8868-AB25173A3E14} - C:\WINDOWS\system32\mscb.dll
O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [hpsysconf1] C:\WINDOWS\System32\gekbnxt.exe
O4 - HKLM\..\Run: [nssysconf] C:\WINDOWS\System32\oheyuwv.exe
O4 - HKLM\..\Run: [li01f948] rundll32.exe C:\WINDOWS\System32\li01f948.dll,EnableRunDLL32
O4 - HKLM\..\Run: [iel2cde8] rundll32.exe C:\WINDOWS\System32\iel2cde8.dll,EnableRunDLL32
O4 - HKLM\..\Run: [icdd7ee6] rundll32.exe C:\WINDOWS\System32\icdd7ee6.dll,EnableRunDLL32
O4 - HKLM\..\Run: [inetmgr] C:\PROGRA~1\INTERN~2\inetmgr.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [SQInstall] C:\WINDOWS\System32\SQsky.exe
O4 - HKLM\..\Run: [WebRebates0] "C:\Program Files\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [towfezv] C:\WINDOWS\Lbczxs.exe
O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
O4 - HKLM\..\Run: [NaviSearch] C:\Program Files\NaviSearch\bin\nls.exe
O4 - HKLM\..\Run: [wzyuv] C:\WINDOWS\system32\gkrajo.exe
O4 - HKLM\..\Run: [ztmp] C:\WINDOWS\system32\fpytkie.exe
O4 - HKLM\..\Run: [riwhzg] C:\WINDOWS\system32\uyys.exe
O4 - HKLM\..\Run: [rjpq] C:\WINDOWS\system32\huidcc.exe
O4 - HKLM\..\Run: [iuirfni] C:\WINDOWS\system32\blojshc.exe
O4 - HKLM\..\Run: [syksk] C:\WINDOWS\system32\whzm.exe
O4 - HKLM\..\Run: [uobbu] C:\WINDOWS\system32\biitgq.exe
O4 - HKLM\..\Run: [oqniiwhn] C:\WINDOWS\system32\lvrsjwt.exe
O4 - HKLM\..\Run: [tgxmgf] C:\WINDOWS\system32\wexpfvbp.exe
O4 - HKLM\..\Run: [afikz] C:\WINDOWS\system32\pryzn.exe
O4 - HKLM\..\Run: [hylk] C:\WINDOWS\system32\hlpgjpj.exe
O4 - HKLM\..\Run: [yskj] C:\WINDOWS\system32\tpslaup\yskj.exe
O4 - HKLM\..\Run: [hmkcs] C:\WINDOWS\system32\wksw.exe
O4 - HKLM\..\Run: [gybo] C:\WINDOWS\system32\wdvkidl.exe
O4 - HKLM\..\Run: [ypbcdyqc] C:\WINDOWS\system32\brgvr.exe
O4 - HKLM\..\Run: [kvlajzma] C:\WINDOWS\system32\lulgssir.exe
O4 - HKLM\..\Run: [asdm] C:\WINDOWS\system32\mgnlsfht.exe
O4 - HKLM\..\Run: [vorq] C:\WINDOWS\system32\lyio.exe
O4 - HKLM\..\Run: [zunoax] C:\WINDOWS\system32\ipgk.exe
O4 - HKLM\..\Run: [zwzcmie] C:\WINDOWS\system32\wjyej.exe
O4 - HKLM\..\Run: [svaocu] C:\WINDOWS\system32\hnzv.exe
O4 - HKLM\..\Run: [dvigym] C:\WINDOWS\system32\hrjkswij.exe
O4 - HKLM\..\Run: [expzvde] C:\WINDOWS\system32\wowz.exe
O4 - HKLM\..\Run: [fwquotd] C:\WINDOWS\system32\mvqyk.exe
O4 - HKLM\..\Run: [codf] C:\WINDOWS\system32\ffhur.exe
O4 - HKLM\..\Run: [xxsoij] C:\WINDOWS\system32\vcmrau.exe
O4 - HKLM\..\Run: [hjyz] C:\WINDOWS\system32\pzxubfi.exe
O4 - HKLM\..\Run: [yrmsy] C:\WINDOWS\system32\ivtj.exe
O4 - HKLM\..\Run: [hboplit] C:\WINDOWS\system32\dsemaj.exe
O4 - HKLM\..\Run: [hkstom] C:\WINDOWS\system32\cmwxcvm.exe
O4 - HKLM\..\Run: [avskyqan] C:\WINDOWS\system32\fgbhdn.exe
O4 - HKLM\..\Run: [tbsxypcr] C:\WINDOWS\system32\fjufflm.exe
O4 - HKLM\..\Run: [jautnpa] C:\WINDOWS\system32\chsazos.exe
O4 - HKLM\..\Run: [vhtii] C:\WINDOWS\system32\nrsfc.exe
O4 - HKLM\..\Run: [twurzms] C:\WINDOWS\system32\xeaegmx.exe
O4 - HKLM\..\Run: [kfimx] C:\WINDOWS\system32\gkzvgi.exe
O4 - HKLM\..\Run: [qialivx] C:\WINDOWS\system32\ovrx.exe
O4 - HKLM\..\Run: [crkhkqnd] C:\WINDOWS\system32\ejpnr.exe
O4 - HKLM\..\Run: [uxuazx] C:\WINDOWS\system32\rgiytxx.exe
O4 - HKLM\..\Run: [iotfd] C:\WINDOWS\system32\bdpus.exe
O4 - HKLM\..\Run: [jybelpqf] C:\WINDOWS\system32\bvtu.exe
O4 - HKLM\..\Run: [oxjq] C:\WINDOWS\system32\jutcsax.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [satmat] C:\WINDOWS\satmat.exe
O4 - HKLM\..\Run: [igyrlaq] C:\WINDOWS\system32\rtrtplr\igyrlaq.exe
O4 - HKLM\..\Run: [Tsl] C:\PROGRA~1\COMMON~1\tsa\tsl.exe
O4 - HKLM\..\Run: [farmmext] C:\WINDOWS\farmmext.exe
O4 - HKLM\..\Run: [msspa] C:\WINDOWS\system32\lhvuiq\msspa.exe
O4 - HKLM\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
O4 - HKLM\..\Run: [EbatesMoeMoneyMaker0] "C:\Program Files\Ebates_MoeMoneyMaker\EbatesMoeMoneyMaker0.exe"
O4 - HKLM\..\Run: [7s7g3sj] tartpub.exe
O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [zzzHPSETUP] E:\Setup.exe \RESET
O4 - HKLM\..\Run: [orfphuk] c:\windows\system32\ehcrfb.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\PRESAR~1\Presario\XPHWWRP4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [MyDailyHoroscope] C:\PROGRA~1\MYDAIL~1\MYDAIL~1.EXE
O4 - HKCU\..\Run: [Nrlr] C:\Documents and Settings\Omistaja\Application Data\uhj?.exe
O4 - HKCU\..\Run: [JavaUpdate0.07] C:\WINDOWS\system32\thsghhqm.exe
O4 - HKCU\..\Run: [MBomRiHtP] t2etiff.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Whistle - {220E39C3-B081-4719-AB1A-9A884DCBD05C} - C:\Program Files\WhistleSoftware\WselServices\webband.dll (file missing)
O16 - DPF: {00000000-DCCD-0704-0B53-2C8830E9FAEC} (IELoaderCtl Class) - http://install.questnet.de/soft/ieloader.cab
O16 - DPF: {6211AC26-A1B4-422A-AC52-1E70B7D24465} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/nl/filesharingctrl.cab
O16 - DPF: {99E79790-2B09-11D6-8C73-0800460222F0} - http://www.andlotsmore.com/plug/install.cab
O16 - DPF: {9DBAFCCF-592F-FFFF-FFFF-00608CEC297B} - http://advert.screensavers4free.net/free/3006/3006.exe
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
O23 - Service: yskjtpslaup - Unknown owner - C:\WINDOWS\system32\tpslaup\yskj.exe

kirjoitti:

Anonyymi

Kirjoita kommentti

5000

Lähetä