hijackthis logi

mie vaan

Logfile of HijackThis v1.99.1
Scan saved at 16:49:30, on 25.10.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\USB Disk Tool\USNDISKT.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Sktgt\Jqdecpi.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Documents and Settings\Jani\Työpöytä\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nantnvgelvulepjikpz.us/nk7KqJlHHbdvSF76mEXK5vGnQYRIx3tmRflpXCxXerjinvPsdvDrc/3Z/1oMFC_5.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {8D7F8FEF-937E-A550-086A-6D5F4B174CE6} - C:\DOCUME~1\Jani\APPLIC~1\mapibags\Vga Link.exe
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {D6BC7A49-0EA0-A108-5E53-76B98FC2D42A} - C:\DOCUME~1\Jani\APPLIC~1\mapibags\Vga Link.exe
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
O4 - HKLM\..\Run: [Readme 2 meta math] C:\Documents and Settings\All Users\Application Data\fast title readme 2\dartnoun.exe
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [Ftfvdo] C:\Program Files\Sktgt\Jqdecpi.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [fast 32 ref bend] C:\Documents and Settings\All Users\Application Data\biaspingfast32\Curb Locks.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Anti Debug] C:\DOCUME~1\Jani\APPLIC~1\GRIMFA~1\bind frag.exe
O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

19

903

    Vastaukset

    Anonyymi (Kirjaudu / Rekisteröidy)
    5000
    • mie vaan

      ELi onko tässä tässä jtn viruksia tjt...?

    • Juu

      Siirrä ensin se Hijackki omaan kansioon tonne
      C:\HjT\HijackThis.exe

      Merkkaa nuo sulje selain ja paina Fix checked

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nantnvgelvulepjikpz.us/nk7KqJlHHbdvSF76mEXK5vGnQYRIx3tmRflpXCxXerjinvPsdvDrc
      R3 - Default URLSearchHook is missing
      O2 - BHO: (no name) - {8D7F8FEF-937E-A550-086A-6D5F4B174CE6} - C:\DOCUME~1\Jani\APPLIC~1\mapibags\Vga Link.exe
      O2 - BHO: (no name) - {D6BC7A49-0EA0-A108-5E53-76B98FC2D42A} - C:\DOCUME~1\Jani\APPLIC~1\mapibags\Vga Link.exe
      O4 - HKLM\..\Run: [Readme 2 meta math] C:\Documents and Settings\All Users\Application Data\fast title readme 2\dartnoun.exe
      O4 - HKLM\..\Run: [Ftfvdo] C:\Program Files\Sktgt\Jqdecpi.exe
      O4 - HKLM\..\Run: [fast 32 ref bend] C:\Documents and Settings\All Users\Application Data\biaspingfast32\Curb Locks.exe
      O4 - HKCU\..\Run: [Anti Debug] C:\DOCUME~1\Jani\APPLIC~1\GRIMFA~1\bind frag.exe


      Käynnistä sitte viaksietotilassa ja piilotidostot näkyvillä poista

      C:\DOCUME~1\Jani\APPLIC~1\mapibags\ < kansio

      C:\Documents and Settings\All Users\Application Data\fast title readme 2\ < kansio

      C:\Program Files\Sktgt\ < kansio

      C:\Documents and Settings\All Users\Application Data\biaspingfast32\ < kansio

      C:\DOCUME~1\Jani\APPLIC~1\GRIMFA~1\ < kansio

      Älä käytä Etsi toimintoo vaan seuraa noita polkuja ku etit noita kansioita.
      Käynnistä sitte normaalisti ja uus logi.

      • nie vaa

        Logfile of HijackThis v1.99.1
        Scan saved at 18:43:39, on 25.10.2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\WINDOWS\System32\gearsec.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\SAVScan.exe
        C:\WINDOWS\System32\igfxtray.exe
        C:\WINDOWS\System32\hkcmd.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
        C:\WINDOWS\System32\hphmon05.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
        C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\USB Disk Tool\USNDISKT.EXE
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\WINDOWS\system32\wuauclt.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\HPQ\SHARED\HPQWMI.exe
        C:\Hjt\HijackThis.exe.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nantnvgelvulepjikpz.us/nk7KqJlHHbdvSF76mEXK5vGnQYRIx3tmRflpXCxXerjinvPsdvDrc/3Z/1oMFC_5.htm
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
        O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
        O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
        O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
        O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

        milt nyt näyttää


      • Juu
        nie vaa kirjoitti:

        Logfile of HijackThis v1.99.1
        Scan saved at 18:43:39, on 25.10.2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\WINDOWS\System32\gearsec.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\SAVScan.exe
        C:\WINDOWS\System32\igfxtray.exe
        C:\WINDOWS\System32\hkcmd.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
        C:\WINDOWS\System32\hphmon05.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
        C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\USB Disk Tool\USNDISKT.EXE
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\WINDOWS\system32\wuauclt.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\HPQ\SHARED\HPQWMI.exe
        C:\Hjt\HijackThis.exe.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nantnvgelvulepjikpz.us/nk7KqJlHHbdvSF76mEXK5vGnQYRIx3tmRflpXCxXerjinvPsdvDrc/3Z/1oMFC_5.htm
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
        O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
        O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
        O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
        O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

        milt nyt näyttää

        Merkkaa ja Fix:saa

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nantnvgelvulepjikpz.us/nk7KqJlHHbdvSF76mEXK5vGnQYRIx3tmRflpXCxXerjinvPsdvDrc/

        Käynnistä sitte kone uudestaan ja uus logi.


      • mie vaan
        Juu kirjoitti:

        Merkkaa ja Fix:saa

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nantnvgelvulepjikpz.us/nk7KqJlHHbdvSF76mEXK5vGnQYRIx3tmRflpXCxXerjinvPsdvDrc/

        Käynnistä sitte kone uudestaan ja uus logi.

        Logfile of HijackThis v1.99.1
        Scan saved at 19:24:44, on 25.10.2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\WINDOWS\System32\gearsec.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\SAVScan.exe
        C:\WINDOWS\System32\igfxtray.exe
        C:\WINDOWS\System32\hkcmd.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        C:\WINDOWS\System32\hphmon05.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
        C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\USB Disk Tool\USNDISKT.EXE
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\HPQ\SHARED\HPQWMI.exe
        C:\Hjt\HijackThis.exe.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
        O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
        O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
        O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
        O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


      • Juu
        mie vaan kirjoitti:

        Logfile of HijackThis v1.99.1
        Scan saved at 19:24:44, on 25.10.2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\WINDOWS\System32\gearsec.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\SAVScan.exe
        C:\WINDOWS\System32\igfxtray.exe
        C:\WINDOWS\System32\hkcmd.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        C:\WINDOWS\System32\hphmon05.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
        C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\USB Disk Tool\USNDISKT.EXE
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\HPQ\SHARED\HPQWMI.exe
        C:\Hjt\HijackThis.exe.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
        O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
        O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
        O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
        O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

        Logi on ok,mutta katotaas vielä tolla ku oli niin paljo Loppia koneella.

        Ota tuo ja pura se vaikka työpöydälle omaan kansioon.

        http://metallica.geekstogo.com/findlop.zip

        sitte avaa kansio ja tuplaklikkaa findlop.bat
        lähetä sen logi C:\findlop.txt


      • mie vaan
        Juu kirjoitti:

        Logi on ok,mutta katotaas vielä tolla ku oli niin paljo Loppia koneella.

        Ota tuo ja pura se vaikka työpöydälle omaan kansioon.

        http://metallica.geekstogo.com/findlop.zip

        sitte avaa kansio ja tuplaklikkaa findlop.bat
        lähetä sen logi C:\findlop.txt

        [TRACE] Enumerating jobs and queues
        [TRACE] Activating job '800166E892BB0914.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:00
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 10/20/2001
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'AEB26248918A12F0.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:09
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 02/10/1998
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'B261904491EE3D7C.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:09
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 02/25/2000
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'B49829459857D1F5.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:09
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 06/07/1996
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'Norton AntiVirus - Tarkista tietokone - Jani.job'
        [TRACE] Printing all job properties

        ApplicationName: 'C:\PROGRA~1\NORTON~1\Navw32.exe'
        Parameters: '/task:"C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Tasks\mycomp.sca"'
        WorkingDirectory: ''
        Comment: 'Tämä on Norton AntiVirus -ohjelman ajastettu tarkistustehtävä.'
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/14/2005 20:00:01
        NextRun: 10/28/2005 20:00:00
        StartError: S_OK
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 0
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Weekly
        WeeksInterval: 1
        DaysOfTheWeek: .....F.
        StartDate: 11/07/2004
        EndDate: 00/00/0000
        StartTime: 20:00
        MinutesDuration: 0
        MinutesInterval: 0
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'Symantec NetDetect.job'
        [TRACE] Printing all job properties

        ApplicationName: 'C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE'
        Parameters: ''
        WorkingDirectory: 'C:\Program Files\Symantec\LiveUpdate'
        Comment: 'Symantec NetDetect'
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/25/2005 19:33:00
        NextRun: 10/25/2005 23:33:00
        StartError: S_OK
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 0
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 10/25/2005
        EndDate: 00/00/0000
        StartTime: 23:33
        MinutesDuration: 1440
        MinutesInterval: 240
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


      • Juu
        mie vaan kirjoitti:

        [TRACE] Enumerating jobs and queues
        [TRACE] Activating job '800166E892BB0914.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:00
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 10/20/2001
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'AEB26248918A12F0.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:09
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 02/10/1998
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'B261904491EE3D7C.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:09
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 02/25/2000
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'B49829459857D1F5.job'
        [TRACE] Printing all job properties

        ApplicationName: 'c:\docume~1\jani\applic~1\grimfa~1\Sign eq wipe.exe'
        Parameters: ''
        WorkingDirectory: ''
        Comment: ''
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/20/2005 20:00:09
        NextRun: 10/25/2005 20:00:00
        StartError: 0x80070003
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 1
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 06/07/1996
        EndDate: 00/00/0000
        StartTime: 00:00
        MinutesDuration: 1440
        MinutesInterval: 60
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'Norton AntiVirus - Tarkista tietokone - Jani.job'
        [TRACE] Printing all job properties

        ApplicationName: 'C:\PROGRA~1\NORTON~1\Navw32.exe'
        Parameters: '/task:"C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Tasks\mycomp.sca"'
        WorkingDirectory: ''
        Comment: 'Tämä on Norton AntiVirus -ohjelman ajastettu tarkistustehtävä.'
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/14/2005 20:00:01
        NextRun: 10/28/2005 20:00:00
        StartError: S_OK
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 0
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Weekly
        WeeksInterval: 1
        DaysOfTheWeek: .....F.
        StartDate: 11/07/2004
        EndDate: 00/00/0000
        StartTime: 20:00
        MinutesDuration: 0
        MinutesInterval: 0
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0


        [TRACE] Activating job 'Symantec NetDetect.job'
        [TRACE] Printing all job properties

        ApplicationName: 'C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE'
        Parameters: ''
        WorkingDirectory: 'C:\Program Files\Symantec\LiveUpdate'
        Comment: 'Symantec NetDetect'
        Creator: 'Jani'
        Priority: NORMAL
        MaxRunTime: 259200000 (3d 0:00:00)
        IdleWait: 10
        IdleDeadline: 60
        MostRecentRun: 10/25/2005 19:33:00
        NextRun: 10/25/2005 23:33:00
        StartError: S_OK
        ExitCode: 0
        Status: SCHED_S_TASK_READY
        ScheduledWorkItem Flags:
        DeleteWhenDone = 0
        Suspend = 0
        StartOnlyIfIdle = 0
        KillOnIdleEnd = 0
        RestartOnIdleResume = 0
        DontStartIfOnBatteries = 0
        KillIfGoingOnBatteries = 0
        RunOnlyIfLoggedOn = 1
        SystemRequired = 0
        Hidden = 0
        TaskFlags: 0

        1 Trigger

        Trigger 0:
        Type: Daily
        DaysInterval: 1
        StartDate: 10/25/2005
        EndDate: 00/00/0000
        StartTime: 23:33
        MinutesDuration: 1440
        MinutesInterval: 240
        Flags:
        HasEndDate = 0
        KillAtDuration = 0
        Disabled = 0

        Ota tosta KillBox

        http://www.bleepingcomputer.com/files/spyware/KillBox.zip

        säästä ja pura se työpöydälle.
        Avaa ja täppi kohtaan Delete on Reboot
        Sitte kopioi kaikki rivit tosta alapuolelta yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.
        Sen jälkeen paina Delete (punanen jossa on valakonen X)
        Vastaa myöntävästi kysymyksiin ja jos kone ei itestään käynnisty uudestaan niin käynnistä se uudestaan.

        Sitte poista tuo kansio jos löytyy

        c:\docume~1\jani\applic~1\grimfa~1\ <

        Sen jälkeen on homma kunnossa.


      • mie vaa
        Juu kirjoitti:

        Ota tosta KillBox

        http://www.bleepingcomputer.com/files/spyware/KillBox.zip

        säästä ja pura se työpöydälle.
        Avaa ja täppi kohtaan Delete on Reboot
        Sitte kopioi kaikki rivit tosta alapuolelta yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.
        Sen jälkeen paina Delete (punanen jossa on valakonen X)
        Vastaa myöntävästi kysymyksiin ja jos kone ei itestään käynnisty uudestaan niin käynnistä se uudestaan.

        Sitte poista tuo kansio jos löytyy

        c:\docume~1\jani\applic~1\grimfa~1\ <

        Sen jälkeen on homma kunnossa.

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job ja siis miten


      • Juu
        mie vaa kirjoitti:

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job ja siis miten

        Ne menee automaattisesti sinne KillBoxsiin kun vaan teet ton ohjeen mukaan


        Avaa ja täppi kohtaan Delete on Reboot
        Sitte kopioi kaikki rivit tosta alapuolelta yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.
        Sen jälkeen paina Delete (punanen jossa on valakonen X)
        Vastaa myöntävästi kysymyksiin ja jos kone ei itestään käynnisty uudestaan niin käynnistä se uudestaan.

        Sitte poista tuo kansio jos löytyy

        c:\docume~1\jani\applic~1\grimfa~1\


      • mie vaan
        Juu kirjoitti:

        Ne menee automaattisesti sinne KillBoxsiin kun vaan teet ton ohjeen mukaan


        Avaa ja täppi kohtaan Delete on Reboot
        Sitte kopioi kaikki rivit tosta alapuolelta yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.
        Sen jälkeen paina Delete (punanen jossa on valakonen X)
        Vastaa myöntävästi kysymyksiin ja jos kone ei itestään käynnisty uudestaan niin käynnistä se uudestaan.

        Sitte poista tuo kansio jos löytyy

        c:\docume~1\jani\applic~1\grimfa~1\

        Mut minne ne kopioidaa??


      • Juu
        mie vaan kirjoitti:

        Mut minne ne kopioidaa??

        Kopioi kaikki rivit yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.

        Sitte ne kaikki on liitetty KillBoxiin


      • mie vaan
        Juu kirjoitti:

        Kopioi kaikki rivit yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.

        Sitte ne kaikki on liitetty KillBoxiin

        Mut mihin noi neljä rivii kopioidaan killbox:iin? oon himena blondi joo mutta kertoisitkos tarkemmin:)


      • mie vaa
        Juu kirjoitti:

        Kopioi kaikki rivit yhellä kertaa

        C:\WINDOWS\Tasks\800166E892BB0914.job
        C:\WINDOWS\Tasks\AEB26248918A12F0.job
        C:\WINDOWS\Tasks\B261904491EE3D7C.job
        C:\WINDOWS\Tasks\B49829459857D1F5.job

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.

        Sitte ne kaikki on liitetty KillBoxiin

        tohon full path of file to delete ala puolella vai`? siihe tulee kyl se sinisen sitte, mutta ei tuu ku yks..


      • Juu
        mie vaan kirjoitti:

        Mut mihin noi neljä rivii kopioidaan killbox:iin? oon himena blondi joo mutta kertoisitkos tarkemmin:)

        Siis tee vaan noin ku oot kopioinnu ne rivit

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.

        klikkaa File klikkaa Paste from Clipboard.

        Sitte ne rivit on KillBoxissa.
        ja sitte vaan jatkat ohjeiden mukaan


      • mie vaa
        Juu kirjoitti:

        Siis tee vaan noin ku oot kopioinnu ne rivit

        Sitte KillBoxsissa ylhäältä File > Paste from Clipboard.

        klikkaa File klikkaa Paste from Clipboard.

        Sitte ne rivit on KillBoxissa.
        ja sitte vaan jatkat ohjeiden mukaan

        Logfile of HijackThis v1.99.1
        Scan saved at 21:43:43, on 25.10.2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\WINDOWS\System32\gearsec.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\SAVScan.exe
        C:\WINDOWS\System32\igfxtray.exe
        C:\WINDOWS\System32\hkcmd.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        C:\WINDOWS\System32\hphmon05.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
        C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\USB Disk Tool\USNDISKT.EXE
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\HPQ\SHARED\HPQWMI.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Hjt\HijackThis.exe.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
        O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
        O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
        O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
        O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe




        jokos o kaikki ok?


      • Juu
        mie vaa kirjoitti:

        Logfile of HijackThis v1.99.1
        Scan saved at 21:43:43, on 25.10.2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\WINDOWS\System32\gearsec.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\SAVScan.exe
        C:\WINDOWS\System32\igfxtray.exe
        C:\WINDOWS\System32\hkcmd.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        C:\WINDOWS\System32\hphmon05.exe
        C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe
        C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\USB Disk Tool\USNDISKT.EXE
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\HPQ\SHARED\HPQWMI.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Hjt\HijackThis.exe.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=4945
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
        O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
        O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
        O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\A-Link\RoadRunner 32\CnxDslTb.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE
        O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - Startup: Product Registration.lnk = C:\games\Uusi kansio\Disc 1\ATR1.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: Gear Security Service -turvapalvelu (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
        O23 - Service: HP WMI Interface (hpqwmi) - Hewlett Packard Company - C:\Program Files\HPQ\SHARED\HPQWMI.exe
        O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe




        jokos o kaikki ok?

        Ei näy mitään.
        Joko se KillBox homma selvis ja onnistu?


      • mie vaa
        Juu kirjoitti:

        Ei näy mitään.
        Joko se KillBox homma selvis ja onnistu?

        Mut silti ku yrittää pelata pelei ni katkee iha alle puoles minuutis kaikki esim. carmageddon 2, sekä pirates peli ja se jälkee tulee ilmoitus, että windowa havainnut virhee ja tuote suljettavaa. ELi missä vika:(


      • Juu
        mie vaa kirjoitti:

        Mut silti ku yrittää pelata pelei ni katkee iha alle puoles minuutis kaikki esim. carmageddon 2, sekä pirates peli ja se jälkee tulee ilmoitus, että windowa havainnut virhee ja tuote suljettavaa. ELi missä vika:(

        No tohon en osaa vastata,että mistä johtuu.


    Ketjusta on poistettu 0 sääntöjenvastaista viestiä.

    Luetuimmat keskustelut

    1. Riikan kukkaronnyöri on umpisolmussa

      Kulutus ei lähde liikkeelle, koska kansalaiset eivät usko, että: – työpaikka säilyy – tulot eivät romahda – talous ei h
      Maailman menoa
      65
      4242
    2. Kuka paiskasi vauvan betoniin Oulussa?

      Nimi esiin.....
      Oulu
      67
      4241
    3. Jos vedetään mutkat suoraksi?

      Niin kumpaan ryhmään kuulut? A) Niihin, jotka menevät edellä ja tekevät? Vai B) Niihin, jotka kulkevat perässä ja ar
      Sinkut
      109
      2905
    4. Tanskan malli perustuu korkeaan ansioturvaan

      Ja vahvoihin työllisyys- ja kotoutumispalveluihin. Suomessa Riikka on leikannut juuri näitä: palkkatukea, työttömyysturv
      Maailman menoa
      58
      2796
    5. Epäily: Räppäri yritti tappaa vauvansa.

      https://www.mtvuutiset.fi/artikkeli/epaily-mies-yritti-tappaa-vauvansa/9300728 Tämä on erittäin järkyttävä teko täysin p
      Maailman menoa
      21
      2029
    6. Vain vasemmistolaiset ovat aitoja suomalaisia

      Esimerkiksi persut ovat ulkomaalaisen pääomasijoittajan edunvalvojia, eivät auta köyhiä suomalaisia.
      Maailman menoa
      55
      1992
    7. Anteeksipyyntöni

      Jätän tähän anteeksipyyntöni sinulle, koska en voi sanoa sitä missään muuallakaan. Pyydän anteeksi, jos purkamani tuska
      Järki ja tunteet
      15
      1679
    8. Miten must tuntuu

      et sä ajattelet mua just nyt
      Ikävä
      32
      1503
    9. Sydämeni valtiaalle

      En täältä aio asioita kysellä. Haluan tuoda tiedoksesi, että pohjimmiltani en ihmisiä tahdo satuttaa ja ajattelen muiden
      Ikävä
      109
      1353
    10. Kun et vain tajua että

      sua lähestytään feikkiprofiililla :D Hanki aivot :D m-n
      Ikävä
      180
      1281
    Aihe