Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Siin olis...

    Siis eihän tuota ohjelmaa tarvinnut edes asentaa niinkuin jollain sivulla oli asennus ohjeet?

    No siinä olis logi:

    Logfile of HijackThis v1.99.1
    Scan saved at 15:59:56, on 12.8.2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Turnpike\Inverse\ARMon32a.exe
    C:\Norman\bin\ZLH.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI Control

    Panel\atiptaxx.exe
    C:\Program Files\MSN

    Apps\Updater\01.03.0000.1005\fi\msnappau.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Dude\Winamp\winampa.exe
    C:\quicktime\qttask.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\windir32.exe
    C:\WINDOWS\etb\pokapoka63.exe
    C:\Logitech\Profiler\lwemon.exe
    C:\dude\half-life\steam.exe
    C:\WINDOWS\system32\windir32.exe
    C:\Program Files\Samsung\Digimax Viewer

    2.1\STImgBrowser.exe
    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
    C:\Dude\MouseWare\system\em_exec.exe
    C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
    C:\Norman\bin\ZANDA.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Norman\Nvc\BIN\NIP.EXE
    C:\NORMAN\Nvc\BIN\nvcoas.exe
    C:\Norman\bin\NJEEVES.EXE
    C:\NORMAN\Nvc\BIN\nipsvc.exe
    C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    C:\WINDOWS\System32\alg.exe
    C:\Norman\Nvc\bin\cclaw.exe
    C:\Dude\firefox.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\System32\wbem\wmiprvse.exe
    C:\Documents and

    Settings\esiasennettu\Työpöytä\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Page_URL = http://saunalahti.fi
    R0 - HKLM\Software\Microsoft\Internet

    Explorer\Search,SearchAssistant = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local

    Page =
    R1 -

    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet

    Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet

    Explorer\Toolbar,LinksFolderName = Linkit
    O4 - HKLM\..\Run: [NeroCheck]

    C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [AccessRampMonitor]

    C:\Turnpike\Inverse\ARMon32a.exe
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE

    /LOAD /SPLASH
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI

    Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN

    Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program

    Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
    O4 - HKLM\..\Run: [QuickTime Task]

    "C:\quicktime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program

    Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common

    Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Microsoft Windows DLL Services

    Configuration] windir32.exe
    O4 - HKLM\..\Run: [System service62]

    C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\Run: [System service63]

    C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services

    Configuration] windir32.exe
    O4 - HKCU\..\Run: [Start WingMan Profiler]

    "C:\Logitech\Profiler\lwemon.exe" /noui
    O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe"

    -silent
    O4 - HKCU\..\Run: [Microsoft Windows DLL Services

    Configuration] windir32.exe
    O4 - HKCU\..\Run: [LDM] \Program\
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
    O4 - Global Startup: InterVideo WinCinema Manager.lnk =

    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
    O4 - Global Startup: Microsoft Office.lnk = C:\Program

    Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Symantec Fax Starter Edition Port.lnk

    = C:\Program Files\Microsoft

    Office\Office\1035\OLFSNT40.EXE
    O9 - Extra button: (no name) -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: (no name) -

    {85d1f590-48f4-11d9-9669-0800200c9a66} -

    %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online

    Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -

    %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC}

    (MessengerStatsClient Class) -

    http://messenger.zone.msn.com/binary/MessengerStatsPAClien

    t.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows

    Genuine Advantage Validation Tool) -

    http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}

    (Symantec AntiVirus scanner) -

    http://security.symantec.com/sscv6/SharedContent/vc/bin/Av

    Sniff.cab
    O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2}

    (EARTPatchX Class) -

    http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}

    (BDSCANONLINE Control) -

    http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5}

    (Symantec RuFSI Utility Class) -

    http://security.symantec.com/sscv6/SharedContent/common/bi

    n/cabsa.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}

    (MsnMessengerSetupDownloadControl Class) -

    http://messenger.msn.com/download/msnmessengersetupdownloa

    der.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592}

    (ZoneIntro Class) -

    http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643}

    (ZoneChess Object) -

    http://messenger.zone.msn.com/binary/Chess.cab31267.cab
    O18 - Protocol: bw 0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw 0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 -

    {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Dude\Desktop

    Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: Ati HotKey Poller - Unknown owner -

    C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner -

    C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: C-DillaSrv - C-Dilla Ltd -

    C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
    O23 - Service: Norman API-hooking helper (NipSvc) -

    Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
    O23 - Service: Norman NJeeves - Unknown owner -

    C:\Norman\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Unknown owner -

    C:\Norman\bin\ZANDA.EXE
    O23 - Service: Norman Virus Control on-access component

    (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler

    (NVCScheduler) - Norman Data Defense Systems -

    C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: TuneUp WinStyler Theme Service

    (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program

    Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
    18760
    Äänestä

    Muut lukivat myös

    Vastaukset 18

    Vanhimmat

    C:\Documents and

    Settings\esiasennettu\Työpöytä\HijackThis.exe

    tee oma kansio esim näin. C:\HJT\HijackThis.exe
    ja tee scannaus juuri sieltä.

    Äänestä

    • Logfile of HijackThis v1.99.1
      Scan saved at 19:40:29, on 12.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\system32\windir32.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\bin\NJEEVES.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\Nvc\bin\cclaw.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Startup: PowerReg Scheduler.exe
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O18 - Protocol: bw+0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Dude\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Äänestä

    • alkaja kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 19:40:29, on 12.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\system32\windir32.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\bin\NJEEVES.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\Nvc\bin\cclaw.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Startup: PowerReg Scheduler.exe
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O18 - Protocol: bw+0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Dude\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Piilotiedostot näkyviin,ohje tuolla

      http://www.xtra.co.nz/help/0,,4155-1916458,00.html

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
      O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - Startup: PowerReg Scheduler.exe

      kaikki 018 rivit

      Käynnistä sitte vikasietotilassa ja poista

      C:\WINDOWS\system32\windir32.exe

      C:\WINDOWS\etb\ < kansio

      Käynnistä sitte normaalisti ja uus logi.

      Äänestä

    • Juu kirjoitti:

      Piilotiedostot näkyviin,ohje tuolla

      http://www.xtra.co.nz/help/0,,4155-1916458,00.html

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
      O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
      O4 - Startup: PowerReg Scheduler.exe

      kaikki 018 rivit

      Käynnistä sitte vikasietotilassa ja poista

      C:\WINDOWS\system32\windir32.exe

      C:\WINDOWS\etb\ < kansio

      Käynnistä sitte normaalisti ja uus logi.

      tein kaikki muut paitsi tuota
      C:\WINDOWS\etb\ < kansio tiedostoa en löytänyt vaikka etsin.

      Äänestä

    • alkaja kirjoitti:

      tein kaikki muut paitsi tuota
      C:\WINDOWS\etb\ < kansio tiedostoa en löytänyt vaikka etsin.

      Pistä piilotiedostot näkyviin ja sitte kato jos näkyy se kansio älä käytä Etsi toimintoo

      http://www.xtra.co.nz/help/0,,4155-1916458,00.html

      Löyty tai ei niin käynnistä kone uudestaan ja uus logi

      Äänestä

    • alkaja kirjoitti:

      tein kaikki muut paitsi tuota
      C:\WINDOWS\etb\ < kansio tiedostoa en löytänyt vaikka etsin.

      nin selviää.

      Äänestä

    • Mutta kirjoitti:

      nin selviää.

      Logfile of HijackThis v1.99.1
      Scan saved at 21:08:03, on 12.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\etb\pokapoka62.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Äänestä

    • alkaja kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 21:08:03, on 12.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\etb\pokapoka62.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Piilotiedostot näkyviin,ohje tuolla

      http://www.xtra.co.nz/help/0,,4155-1916458,00.html

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Käynnistä sitte vikasietotilassa ja poista tuo kansio

      C:\WINDOWS\etb\ <

      Älä käytä Etsi toimintoo vaan kato sinne Windows kansioon ja poista tuo etb kansio sieltä.

      Äänestä

    • Juu kirjoitti:

      Piilotiedostot näkyviin,ohje tuolla

      http://www.xtra.co.nz/help/0,,4155-1916458,00.html

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Käynnistä sitte vikasietotilassa ja poista tuo kansio

      C:\WINDOWS\etb\ <

      Älä käytä Etsi toimintoo vaan kato sinne Windows kansioon ja poista tuo etb kansio sieltä.

      eikös ne piilotetut kansiot saada näkyviin näin: oma tietokone ---> tökalut ----------> kansion asetukset----------> näytä -----> ja sieltä kohdasta piilotetut tiedostot ja kansiot että näytä piilotetut tiedostot ja kansiot?. tuollain ainakin saa näkyviin niitä..,

      ei löytynyt vieläkään tuota: C:\WINDOWS\etb\ <

      ja sitte kun on vaikka netissä niin sivu menee välillä harmaaksi.. niinkuin jokin toinen ohjelma käynnistyisi vaikkei tee mitään...

      mutta tuossa tuo logi jälleen:

      Logfile of HijackThis v1.99.1
      Scan saved at 22:09:20, on 12.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\etb\pokapoka62.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Dude\firefox.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe


      niin ja koneella on myös ollut MSGSND joku homma joka toimii mesessä lähettäen niitä viestejä, en tiedä tekeekö se vielä niin.... ku en oo kokeillu..

      mutta KIITOS jo näistäkin neuvoista!

      Äänestä

    • alkaja kirjoitti:

      eikös ne piilotetut kansiot saada näkyviin näin: oma tietokone ---> tökalut ----------> kansion asetukset----------> näytä -----> ja sieltä kohdasta piilotetut tiedostot ja kansiot että näytä piilotetut tiedostot ja kansiot?. tuollain ainakin saa näkyviin niitä..,

      ei löytynyt vieläkään tuota: C:\WINDOWS\etb\ <

      ja sitte kun on vaikka netissä niin sivu menee välillä harmaaksi.. niinkuin jokin toinen ohjelma käynnistyisi vaikkei tee mitään...

      mutta tuossa tuo logi jälleen:

      Logfile of HijackThis v1.99.1
      Scan saved at 22:09:20, on 12.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\etb\pokapoka62.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Dude\firefox.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe


      niin ja koneella on myös ollut MSGSND joku homma joka toimii mesessä lähettäen niitä viestejä, en tiedä tekeekö se vielä niin.... ku en oo kokeillu..

      mutta KIITOS jo näistäkin neuvoista!

      No kumma että sitä kansioo ei löydy,tehään sitte näin.

      Merkkaa ja Fix:saa nuo

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


      Käynnistä sitte vikasietotilassa ja poista

      pokapoka63.exe

      Käynnistä sitte normaalisti ja uus logi.

      Äänestä

    • Juu kirjoitti:

      No kumma että sitä kansioo ei löydy,tehään sitte näin.

      Merkkaa ja Fix:saa nuo

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka62.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


      Käynnistä sitte vikasietotilassa ja poista

      pokapoka63.exe

      Käynnistä sitte normaalisti ja uus logi.

      juu sain nyt sen etb kansion näkyviin,

      tossa uus logi:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:58:03, on 13.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\etb\pokapoka62.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Dude\firefox.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\System32\wbem\wmiprvse.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Äänestä

    • alkaja kirjoitti:

      juu sain nyt sen etb kansion näkyviin,

      tossa uus logi:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:58:03, on 13.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\WINDOWS\etb\pokapoka62.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Dude\firefox.exe
      C:\WINDOWS\etb\pokapoka63.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\System32\wbem\wmiprvse.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      > sain nyt sen etb kansion näkyviin <

      No poista se ja sitte käynnistä kone uudestan ja uus logi.

      Äänestä

    • Juu kirjoitti:

      > sain nyt sen etb kansion näkyviin <

      No poista se ja sitte käynnistä kone uudestan ja uus logi.

      Logfile of HijackThis v1.99.1
      Scan saved at 13:16:48, on 13.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\System32\wbem\wmiprvse.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Äänestä

    • alkaja kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 13:16:48, on 13.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Turnpike\Inverse\ARMon32a.exe
      C:\Norman\bin\ZLH.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Dude\Winamp\winampa.exe
      C:\quicktime\qttask.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Logitech\Profiler\lwemon.exe
      C:\dude\half-life\steam.exe
      C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      C:\Dude\MouseWare\system\em_exec.exe
      C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      C:\Norman\bin\ZANDA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\bin\NJEEVES.EXE
      C:\NORMAN\Nvc\BIN\nipsvc.exe
      C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      C:\NORMAN\Nvc\BIN\nvcoas.exe
      C:\WINDOWS\System32\alg.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\System32\wbem\wmiprvse.exe
      C:\HJT\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://saunalahti.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AccessRampMonitor] C:\Turnpike\Inverse\ARMon32a.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Logitech\Profiler\lwemon.exe" /noui
      O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe" -silent
      O4 - HKCU\..\Run: [LDM] \Program\
      O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

      Sait pois sen,hyvä niin.
      Merkkaa ja Fix:saa

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Sitte on ok.

      Äänestä

    • Juu kirjoitti:

      Sait pois sen,hyvä niin.
      Merkkaa ja Fix:saa

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Sitte on ok.

      juu, KIITOS!

      Äänestä

    • Juu kirjoitti:

      Sait pois sen,hyvä niin.
      Merkkaa ja Fix:saa

      O4 - HKLM\..\Run: [System service62] C:\WINDOWS\etb\pokapoka63.exe
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Sitte on ok.

      tuossa kuitenkin vielä eScan alaikkuna:

      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\131540_1612_1800_252_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\3146150_2412_1796_2448_63.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\393552_1612_1800_3784_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\459318_1660_1784_1360_63.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\655778_1648_2500_2512_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\66648_3108_1800_484_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temporary Internet Files\Content.IE5\CZMRE5IP\pokapoka63[1].exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Työpöytä\BitTorrent-4.0.2.exe tagged as not-a-virus:RiskTool.Win32.Processor.1001. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Työpöytä\BitTorrent-5.0.2.exe tagged as not-a-virus:RiskTool.Win32.Processor.1001. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Työpöytä\paskaa\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\Dude\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\Dude\plugins\NPMyWebS.dll tagged as not-a-virus:AdWare.ToolBar.MyWebSearch.i. No Action Taken.
      File C:\Program Files\BitTorrent\uninstall.exe tagged as not-a-virus:RiskTool.Win32.Processor.1001. No Action Taken.

      onko noissa jotain vikaa?

      Äänestä

    • alkaja kirjoitti:

      tuossa kuitenkin vielä eScan alaikkuna:

      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\131540_1612_1800_252_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\3146150_2412_1796_2448_63.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\393552_1612_1800_3784_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\459318_1660_1784_1360_63.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\655778_1648_2500_2512_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temp\66648_3108_1800_484_62.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Local Settings\Temporary Internet Files\Content.IE5\CZMRE5IP\pokapoka63[1].exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Työpöytä\BitTorrent-4.0.2.exe tagged as not-a-virus:RiskTool.Win32.Processor.1001. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Työpöytä\BitTorrent-5.0.2.exe tagged as not-a-virus:RiskTool.Win32.Processor.1001. No Action Taken.
      File C:\Documents and Settings\esiasennettu\Työpöytä\paskaa\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\Dude\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\Dude\plugins\NPMyWebS.dll tagged as not-a-virus:AdWare.ToolBar.MyWebSearch.i. No Action Taken.
      File C:\Program Files\BitTorrent\uninstall.exe tagged as not-a-virus:RiskTool.Win32.Processor.1001. No Action Taken.

      onko noissa jotain vikaa?

      Kirjota Suorita kohtaan cleanmgr ja Ok
      Merkkaa sieltä nuo ja putsaa pois ne

      Temporary Files
      Temporary Internet Files
      Recycle Bin

      Sitte poista tuo

      C:\Dude\plugins\NPMyWebS.dll

      Äänestä

    • Juu kirjoitti:

      Kirjota Suorita kohtaan cleanmgr ja Ok
      Merkkaa sieltä nuo ja putsaa pois ne

      Temporary Files
      Temporary Internet Files
      Recycle Bin

      Sitte poista tuo

      C:\Dude\plugins\NPMyWebS.dll

      joo kyl kone on toiminu paremmin, mutta joskus kun käynnistää koneen niin tulee että palvelin on varattu. sitte siinä on vaihtoehdot että vaihda ja uudelleen...
      mistäköhän tuo johtuu?
      ei niitä ole aina tullut, mutta kyllä kone silti ihan hyvin toimii...

      Äänestä

    Luetuimmat keskustelut

    Kommentoi aloitusta

    alkaja kirjoitti:

    Siis eihän tuota ohjelmaa tarvinnut edes asentaa niinkuin jollain sivulla oli asennus ohjeet?

    No siinä olis logi:

    Logfile of HijackThis v1.99.1
    Scan saved at 15:59:56, on 12.8.2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Turnpike\Inverse\ARMon32a.exe
    C:\Norman\bin\ZLH.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI Control

    Panel\atiptaxx.exe
    C:\Program Files\MSN

    Apps\Updater\01.03.0000.1005\fi\msnappau.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Dude\Winamp\winampa.exe
    C:\quicktime\qttask.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\windir32.exe
    C:\WINDOWS\etb\pokapoka63.exe
    C:\Logitech\Profiler\lwemon.exe
    C:\dude\half-life\steam.exe
    C:\WINDOWS\system32\windir32.exe
    C:\Program Files\Samsung\Digimax Viewer

    2.1\STImgBrowser.exe
    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    C:\Program Files\Microsoft Office\Office\1035\OLFSNT40.EXE
    C:\Dude\MouseWare\system\em_exec.exe
    C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
    C:\Norman\bin\ZANDA.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Norman\Nvc\BIN\NIP.EXE
    C:\NORMAN\Nvc\BIN\nvcoas.exe
    C:\Norman\bin\NJEEVES.EXE
    C:\NORMAN\Nvc\BIN\nipsvc.exe
    C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    C:\WINDOWS\System32\alg.exe
    C:\Norman\Nvc\bin\cclaw.exe
    C:\Dude\firefox.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\System32\wbem\wmiprvse.exe
    C:\Documents and

    Settings\esiasennettu\Työpöytä\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Page_URL = http://saunalahti.fi
    R0 - HKLM\Software\Microsoft\Internet

    Explorer\Search,SearchAssistant = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local

    Page =
    R1 -

    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet

    Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet

    Explorer\Toolbar,LinksFolderName = Linkit
    O4 - HKLM\..\Run: [NeroCheck]

    C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [AccessRampMonitor]

    C:\Turnpike\Inverse\ARMon32a.exe
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE

    /LOAD /SPLASH
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI

    Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN

    Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program

    Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Dude\Winamp\winampa.exe
    O4 - HKLM\..\Run: [QuickTime Task]

    "C:\quicktime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program

    Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common

    Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Microsoft Windows DLL Services

    Configuration] windir32.exe
    O4 - HKLM\..\Run: [System service62]

    C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\Run: [System service63]

    C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services

    Configuration] windir32.exe
    O4 - HKCU\..\Run: [Start WingMan Profiler]

    "C:\Logitech\Profiler\lwemon.exe" /noui
    O4 - HKCU\..\Run: [Steam] "c:\dude\half-life\steam.exe"

    -silent
    O4 - HKCU\..\Run: [Microsoft Windows DLL Services

    Configuration] windir32.exe
    O4 - HKCU\..\Run: [LDM] \Program\
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Global Startup: Digimax Viewer 2.1.lnk = ?
    O4 - Global Startup: InterVideo WinCinema Manager.lnk =

    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
    O4 - Global Startup: Microsoft Office.lnk = C:\Program

    Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Symantec Fax Starter Edition Port.lnk

    = C:\Program Files\Microsoft

    Office\Office\1035\OLFSNT40.EXE
    O9 - Extra button: (no name) -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: (no name) -

    {85d1f590-48f4-11d9-9669-0800200c9a66} -

    %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online

    Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -

    %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://saunalahti.fi
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC}

    (MessengerStatsClient Class) -

    http://messenger.zone.msn.com/binary/MessengerStatsPAClien

    t.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows

    Genuine Advantage Validation Tool) -

    http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}

    (Symantec AntiVirus scanner) -

    http://security.symantec.com/sscv6/SharedContent/vc/bin/Av

    Sniff.cab
    O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2}

    (EARTPatchX Class) -

    http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}

    (BDSCANONLINE Control) -

    http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5}

    (Symantec RuFSI Utility Class) -

    http://security.symantec.com/sscv6/SharedContent/common/bi

    n/cabsa.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}

    (MsnMessengerSetupDownloadControl Class) -

    http://messenger.msn.com/download/msnmessengersetupdownloa

    der.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592}

    (ZoneIntro Class) -

    http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643}

    (ZoneChess Object) -

    http://messenger.zone.msn.com/binary/Chess.cab31267.cab
    O18 - Protocol: bw 0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw 0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 -

    {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Dude\Desktop

    Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 -

    {521C1A92-45BC-4CB9-B8C8-4088527381E4} - C:\Dude\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: Ati HotKey Poller - Unknown owner -

    C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner -

    C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: C-DillaSrv - C-Dilla Ltd -

    C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
    O23 - Service: Norman API-hooking helper (NipSvc) -

    Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
    O23 - Service: Norman NJeeves - Unknown owner -

    C:\Norman\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Unknown owner -

    C:\Norman\bin\ZANDA.EXE
    O23 - Service: Norman Virus Control on-access component

    (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler

    (NVCScheduler) - Norman Data Defense Systems -

    C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: TuneUp WinStyler Theme Service

    (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program

    Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu