HiJackThis helppiä...

1. Lataa combofix.exe tiedosto työpöydällesi.

http://download.bleepingcomputer.com/sUBs/combofix.exe

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
Pistä myös uus Hijack logi.

täs tulee... Start Time= to 03.08.2006 18:31:10,07
Running from: C:\Documents and Settings\HP_Omistaja\Ty”p”yt„

((((((((((((((((((((((((((((((((((((((((((((( Look2Me's Log ))))))))))))))))))))))))))))))))))))))))))))))))))


HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wzcnotif


* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


REGISTRY ENTRIES REMOVED:

[HKEY_CLASSES_ROOT\clsid\{19406E29-D63F-4DF4-9A3C-F758C534F858}]
@=""

[HKEY_CLASSES_ROOT\clsid\{19406E29-D63F-4DF4-9A3C-F758C534F858}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\clsid\{19406E29-D63F-4DF4-9A3C-F758C534F858}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\clsid\{19406E29-D63F-4DF4-9A3C-F758C534F858}\InprocServer32]
@="C:\\WINDOWS\\system32\\mriavi32.dll"
"ThreadingModel"="Apartment"

Granting sedebugprivilege to Järjestelmänvalvojat ... successful


(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\drsmartload2.dat
C:\WINDOWS\newname.dat
C:\WINDOWS\keyboard1.dat


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-08-03 17:48:40 1167 ( A.... ) "C:\WINDOWS\system32\nby831a9.sys"
2006-08-03 17:48:40 1167 ( A.... ) "C:\WINDOWS\system32\nby831a9.sys"
2006-08-03 16:46:32 34 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\RGVUWDKH.log"
2006-08-03 16:46:30 94080 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\ezplay.sys"
2006-08-03 16:46:30 81920 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\ezpinst.exe"
2006-08-03 16:46:30 7172 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\ezplay.cat"
2006-08-03 16:46:30 1104 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\RGVUWDKH.inf"
2006-08-03 16:46:30 125 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\RGVUWDKH.ini"
2006-08-03 16:46:30 34 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\pcouffin.log"
2006-08-03 16:46:24 47360 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\pcouffin.sys"
2006-08-03 16:46:24 7176 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\pcouffin.cat"
2006-08-03 16:46:24 1144 ( A.... ) "C:\Documents and Settings\HP_Omistaja\Application Data\pcouffin.inf"
2006-08-03 16:46:24 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Vso"
2006-08-03 16:45:24 ( .D... ) "C:\Program Files\Blindwrite 6.0"
2006-08-03 15:04:12 ( .D... ) "C:\Program Files\AntiVir PersonalEdition Classic"
2006-08-03 15:03:26 ( .D... ) "C:\Program Files\Antivir"
2006-08-03 14:45:14 61952 ( A.... ) "C:\WINDOWS\system32\nby831a9.dll"
2006-08-03 14:45:02 29696 ( A.... ) "C:\WINDOWS\system32\w0304be4.dll"
2006-08-03 14:44:50 ( .D... ) "C:\Program Files\Common Files\wzfi"
2006-07-02 15:48:54 ( .D... ) "C:\Program Files\Common Files\GTK"
2006-06-28 18:29:12 ( .D... ) "C:\Program Files\Samsung"
2006-06-27 22:16:16 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Google"
2006-06-25 23:10:00 ( .D... ) "C:\Program Files\Gimp"
2006-06-22 03:11:34 253952 ( ..... ) "C:\WINDOWS\Setup1.exe"
2006-06-22 03:11:32 74752 ( A.... ) "C:\WINDOWS\ST6UNST.EXE"
2006-06-21 16:00:28 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Nokia Multimedia Player"
2006-06-21 15:58:42 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Datalayer"
2006-06-21 15:57:20 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Nokia"
2006-06-21 15:55:58 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\PC Suite"
2006-06-21 15:55:28 ( .D... ) "C:\Program Files\Nokia"
2006-06-21 15:55:28 ( .D... ) "C:\Program Files\Common Files\PCSuite"
2006-06-21 15:55:28 ( .D... ) "C:\Program Files\Common Files\Nokia"
2006-06-14 01:18:00 ( .D... ) "C:\Program Files\audio-mp3-converter"
2006-06-13 23:31:00 ( .D... ) "C:\Program Files\fraps"
2006-06-13 19:21:36 ( .D... ) "C:\Program Files\SLD CODEC PACK 1.5.3"
2006-06-13 19:21:22 ( .D... ) "C:\Program Files\ffdshow"
2006-06-13 19:21:10 262894 ( A.... ) "C:\WINDOWS\IPUI_DivXG400.exe"
2006-06-09 11:00:38 ( .D... ) "C:\Program Files\BitComet"
2006-06-09 10:46:06 ( .D... ) "C:\Program Files\Bit comet"
2006-06-07 16:17:18 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Sonic"
2006-06-07 16:16:32 ( .D... ) "C:\Documents and Settings\HP_Omistaja\Application Data\Leadertech"
2006-06-06 18:50:50 43520 ( A.... ) "C:\WINDOWS\system32\CmdLineExt03.dll"
2006-06-02 11:06:50 57384 ( A.... ) "C:\WINDOWS\system32\avsda.dll"
2006-05-20 22:18:56 1890 ( A.SH. ) "C:\WINDOWS\system32\KGyGaAvL.sys"
2006-05-20 22:18:56 56 ( ..SHR ) "C:\WINDOWS\system32\373D4C1E42.sys"
2006-05-10 12:59:06 353912 ( A.... ) "C:\WINDOWS\system32\sfrem01.exe"


(((((((((((((((((((((((((((((((((((((( Files Created - Last 30days )))))))))))))))))))))))))))))))))))))))))))


2006-08-03   17:46   62ÿ672      C:\WINDOWS\system32\xinput1_1.dll
2006-08-03   17:46   229ÿ584      C:\WINDOWS\system32\xactengine2_1.dll
2006-08-03   17:45   230ÿ096      C:\WINDOWS\system32\xactengine2_0.dll
2006-08-03   17:45   2ÿ388ÿ176      C:\WINDOWS\system32\d3dx9_30.dll
2006-08-03   17:45   2ÿ337ÿ488      C:\WINDOWS\system32\d3dx9_25.dll
2006-08-03   17:45   2ÿ332ÿ368      C:\WINDOWS\system32\d3dx9_29.dll
2006-08-03   17:45   2ÿ323ÿ664      C:\WINDOWS\system32\d3dx9_28.dll
2006-08-03   17:45   2ÿ222ÿ800      C:\WINDOWS\system32\d3dx9_24.dll
2006-08-03   17:45   14ÿ032      C:\WINDOWS\system32\x3daudio1_0.dll
2006-08-03   15:04   57ÿ384      C:\WINDOWS\system32\avsda.dll
2006-08-03   14:45   61ÿ952      C:\WINDOWS\system32\nby831a9.dll
2006-08-03   14:45   29ÿ696      C:\WINDOWS\system32\w0304be4.dll
2006-08-03   14:45   1ÿ167      C:\WINDOWS\system32\nby831a9.sys
2006-08-03   00:34   78ÿ848      C:\WINDOWS\system32\INLOADER.DLL
2006-08-03   00:34   298ÿ496      C:\WINDOWS\uninst.exe
2006-08-01   19:37   1ÿ699ÿ840      C:\WINDOWS\fargus.scr
2006-07-25   09:33   438ÿ272      C:\WINDOWS\system32\vp6vfw.dll
2006-07-02   13:46   61ÿ136      C:\WINDOWS\system32\xinput9_1_0.dll
2006-07-02   13:46   2ÿ319ÿ568      C:\WINDOWS\system32\d3dx9_27.dll
2006-06-22   03:11   74ÿ752      C:\WINDOWS\ST6UNST.EXE
2006-06-22   03:11   253ÿ952      C:\WINDOWS\Setup1.exe


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /installquiet /keeploaded /nodetect"
"HPHUPD08"="c:\\Program Files\\HP\\Digital Imaging\\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\\hphupd08.exe"
"Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
"ccApp"="\"c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"PS2"="C:\\WINDOWS\\system32\\ps2.exe"
"HP Software Update"=hex(2):43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,\
48,50,5c,48,50,20,53,6f,66,74,77,61,72,65,20,55,70,64,61,74,65,5c,48,50,77,\
75,53,63,68,64,32,2e,65,78,65,00
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
"PWRISOVM.EXE"="C:\\Program Files\\PowerISO\\PWRISOVM.EXE"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"Amazing3DAquariumWallpaper"=""
"EleFunAnimatedWallpaper"="\"C:\\Program Files\\taustat\\Amazing Waterfall.exe\" DO_NOT_START"
"PCSuiteTrayApplication"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -onlytray"
"nby831a9"="RUNDLL32.EXE w0304be4.dll,n 002831a70000000a0304be4"
"avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"PcSync"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex]
"flags"=dword:00000008

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex\000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000000

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system



Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Norton AntiVirus - Tarkista tietokone - HP_Omistaja.job
C:\WINDOWS\tasks\Symantec NetDetect.job
C:\WINDOWS\tasks\XoftSpy.job

Completion time: to 03.08.2006 18:32:41,12
ComboFix ver 06.07.15/28 - This logfile is located at C:\ComboFix.txt

ja sit viel tää: Logfile of HijackThis v1.99.1
Scan saved at 18:36:29, on 3.8.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EleFunAnimatedWallpaper] "C:\Program Files\taustat\Amazing Waterfall.exe" DO_NOT_START
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [nby831a9] RUNDLL32.EXE w0304be4.dll,n 002831a70000000a0304be4
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe