mulla tuli eilen sellanen ongelma,että mulla pätkii tää verkkoyhteys..noin tunnin pysyy päällä ja sitten katkee verkkoyhteys ja kun koneen sammuttaa ja käynnistää uudelleen niin silloin taas pelaa normaalisti noin tunnin(suurinpiirtein) mulla normanin virusohjelma ja skannaus löysi 3 troijalaista,mutta kun niitä yrittää poistaa niin tulee vaan virheilmoitus,että "joku" on havainnut virheen ja tuote on suljettava ja sitte se lähetetäänkö virheraportti...niin muuten sillon se aina katkasee yhteyden ku toi teksti tulee et tuote suljettava...
mitenkäs toi logijuttu toimii
Nimetön
26929
0Äänestä
Muut lukivat myös
Odottaa vastausta
Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.
Vastaukset 26
Vanhimmat
äsken tuli että windows live messenger on havainnut virheen ja tuote on suljettava,mutta ei kuitenkaan tapahtunut mitään,eikä sulkenut messengerii...
troijan hevonen java/byteverify.d noita 3kpl ja troijan hevonen java/classloader.k noita 1kpl
se teksti on generic host process for win 32 services on havainnut virheen
toimi ohjeen mukaan ja laita logi tänne!!
http://koti.mbnet.fi/pattaya1/hijackthis.htm
Logfile of HijackThis v1.99.1
Scan saved at 13:06:58, on 13.8.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
C:\Norman\bin\ZANDA.EXE
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Norman\bin\NJEEVES.EXE
C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
C:\NORMAN\Nvc\BIN\nipsvc.exe
C:\NORMAN\Nvc\BIN\nvcoas.exe
C:\Norman\bin\ZLH.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\FreeRAM\FreeRAM XP Pro 1.40.exe
C:\WINDOWS\System32\LVComS.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Norman\Nvc\BIN\NIP.EXE
C:\Norman\Nvc\bin\cclaw.exe
C:\Norman\Npf\BIN\npfmsg2.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hijack\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [FreeRAM XP] "C:\FreeRAM\FreeRAM XP Pro 1.40.exe" -win
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://scan.safety.live.com/resource/download/scanner/wlscbase5059.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://217.152.196.254/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: F-Secure Internet Security 2004 (BackWeb Client - 4476822) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman Type-R - Unknown owner - C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
fiksaa tämä rivi
O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file)
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta.
Lataa http://www.ewido.net/en/download/ ja tallenna ohjelma työpöydällesi.
* Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
* Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
* Käynnistä Ewido Anti-Spyware.
* Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
* Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
* Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
* Sitten "Reports" valikon alta:
o Laita täppi kohtaan "Automatically generate report after every scan"
o Ota täppi pois kohdasta"Only if threats were found"
* Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan.
sammuta ja käynnistä
käynnistyksenyhteydessä naputtele F8
valitse nuoli näppäimellä vikasietotila
paina Enter ja uudelleen Enter OK
HUOM! Älä käytä muita ohjelmia Ewidon skannauksen aikana, tämä saattaa häiritä skannausta.
* Kun vikasietotilassa, käynnistä Ewido Anti-Spyware.
* Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
* Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
* Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
* Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
* Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
* Sulje ohjelma, käynnistä kone normaalisti ja lähetä Ewidon raportti viestiketjuusi.
tuon lisäksi normaalitilassa
Lataa tuolta
http://koti.mbnet.fi/pattaya1/escanmwav.htm
asenna, päivitä tapa2, laita täpit merkkauksien mukaan.
Scannaa
jos alaikkunaan virukset tulee jotain laita loki tänne.
kopioi se näin:
Käytä komentoa Ctrl A.
Kopioi rivit komennolla Ctrl C.
Liitä rivit komennolla Ctrl V.
scannaa hjt:lä merkkaa ja paina fix checked
O23 - Service: F-Secure Internet Security 2004 (BackWeb Client - 4476822) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE (file missing)
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe (file missing)
käynnistä > suorita kirjoita siihen ja paina ok
services.msc
etsi F-Secure Internet liityvät ja tuplaklikkaa niitä paina nappia seis ja alasvetovalikosta ei käytössä Käytä
sitten kun kaikki tehty niin paina ok
laita vielä uusi hjt-loki
Poista kansio vikasietotilassa
C:\Program Files\---> F-Secure Internet Security F-SECU~1
en oo kyl ihan varma tosta f securen poistamisesta eli miten se tapahtuu..
siis tossa vikasietotilassa
sammuta ja käynnistä
käynnistyksenyhteydessä naputtele F8
valitse nuoli näppäimellä vikasietotila
paina Enter ja uudelleen Enter OK
eli seuraat tuota polkua
C:\Program Files\---> F-Secure Internet Security F-SECU~1
miten tota polkuu seurataan kun se on käynnistynyt vikasietotilassa
miten tota polkuu seurataan kun se on käynnistynyt vikasietotilassa
Näyttäs olevan f-securee ja Normania koneella mikäs on käytössä?
käytössä..
---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------
Created at: 14:52:38 13.8.2006
Scan result:
HKU\S-1-5-21-1870521945-1128917516-4244896789-1006\Software\SCom -> Dialer.Generic : Cleaned with backup (quarantined).
C:\Documents and Settings\jande3\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\jande3\Cookies\jande3@advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
C:\Documents and Settings\jande3\Cookies\jande3@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
C:\Documents and Settings\jande3\Cookies\jande3@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
::Report end
Logfile of HijackThis v1.99.1
Scan saved at 15:17:14, on 13.8.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Norman\bin\ZLH.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\FreeRAM\FreeRAM XP Pro 1.40.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\System32\LVComS.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
C:\Norman\bin\ZANDA.EXE
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Norman\Nvc\BIN\NIP.EXE
C:\Norman\Npf\BIN\npfmsg2.exe
C:\Norman\bin\NJEEVES.EXE
C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
C:\NORMAN\Nvc\BIN\nipsvc.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\NORMAN\Nvc\BIN\nvcoas.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Norman\Nvc\bin\cclaw.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hijack\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [FreeRAM XP] "C:\FreeRAM\FreeRAM XP Pro 1.40.exe" -win
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://scan.safety.live.com/resource/download/scanner/wlscbase5059.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://217.152.196.254/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman Type-R - Unknown owner - C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
Poista kaikki javat lisää poista sovellutuksesta.
lataa tuolta uusi
http://www.java.com/en/download/index.jsp
sitten menet http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=fi
Päivittämään
Sun Aug 13 15:24:55 2006 => **********************************************************
Sun Aug 13 15:24:55 2006 => eScan AntiVirus Toolkit Utility.
Sun Aug 13 15:24:55 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Sun Aug 13 15:24:55 2006 => **********************************************************
Sun Aug 13 15:24:55 2006 => Version 4.4.7
Sun Aug 13 15:24:55 2006 => Log File: C:\KASPER~1\mwav.log
Sun Aug 13 15:24:56 2006 => Latest Date of files inside MWAV: 08 Jul 2006 00:36:22.
Sun Aug 13 15:24:59 2006 => AV Library Loaded...
Sun Aug 13 15:24:59 2006 => Scanning File C:\KASPER~1\kavss.exe
Sun Aug 13 15:24:59 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\kavss.dll
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\kavssi.dll
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\ipc.dll
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\main.avi
Sun Aug 13 15:25:00 2006 => Scanning File C:\KASPER~1\virus.avi
Sun Aug 13 15:25:00 2006 => Virus Database Date: 2006/07/08
Sun Aug 13 15:25:00 2006 => Virus Database Count: 205731
Sun Aug 13 15:27:10 2006 => AV Library Unloaded (3)...
Sun Aug 13 15:27:44 2006 => **********************************************************
Sun Aug 13 15:27:44 2006 => eScan AntiVirus Toolkit Utility.
Sun Aug 13 15:27:44 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Sun Aug 13 15:27:44 2006 => **********************************************************
Sun Aug 13 15:27:44 2006 => Version 4.4.7
Sun Aug 13 15:27:44 2006 => Log File: C:\KASPER~1\mwav.log
Sun Aug 13 15:27:44 2006 => Latest Date of files inside MWAV: 08 Jul 2006 00:36:22.
Sun Aug 13 15:27:47 2006 => AV Library Loaded...
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\kavss.exe
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\kavss.dll
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\kavssi.dll
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\ipc.dll
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\main.avi
Sun Aug 13 15:27:47 2006 => Scanning File C:\KASPER~1\virus.avi
Sun Aug 13 15:27:47 2006 => Virus Database Date: 2006/07/08
Sun Aug 13 15:27:47 2006 => Virus Database Count: 205731
Sun Aug 13 15:27:52 2006 => **********************************************************
Sun Aug 13 15:27:52 2006 => eScan AntiVirus Toolkit Utility.
Sun Aug 13 15:27:52 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Sun Aug 13 15:27:52 2006 =>
Sun Aug 13 15:27:52 2006 => Support: [email protected]
Sun Aug 13 15:27:52 2006 => Web: http://www.mwti.net
Sun Aug 13 15:27:52 2006 => **********************************************************
Sun Aug 13 15:27:52 2006 => Version 4.4.7
Sun Aug 13 15:27:52 2006 => Log File: C:\KASPER~1\mwav.log
Sun Aug 13 15:27:52 2006 => Latest Date of files inside MWAV: 08 Jul 2006 00:36:22.
Sun Aug 13 15:27:53 2006 => Options Selected by User:
Sun Aug 13 15:27:53 2006 => Memory Check: Enabled
Sun Aug 13 15:27:53 2006 => Registry Check: Enabled
Sun Aug 13 15:27:53 2006 => StartUp Folder Check: Enabled
Sun Aug 13 15:27:53 2006 => System Folder Check: Enabled
Sun Aug 13 15:27:53 2006 => System Area Check: Disabled
Sun Aug 13 15:27:53 2006 => Services Check: Enabled
Sun Aug 13 15:27:53 2006 => Drive Check Option Disabled
Sun Aug 13 15:27:53 2006 => Scanning Type: Scan And Clean
Sun Aug 13 15:27:53 2006 => Folder Check: Disabled
Sun Aug 13 15:27:53 2006 => ***** Scanning Memory Files *****
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\system32\services.exe
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Sun Aug 13 15:27:53 2006 => Scanning File C:\WINDOWS\Explorer.EXE
Sun Aug 13 15:27:53 2006 => Scanning File C:\Norman\bin\ZLH.EXE
Sun Aug 13 15:27:53 2006 => Scanning File C:\PROGRA~1\Logitech\Video\LogiTray.exe
Sun Aug 13 15:27:54 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0\bin\jusched.exe
Sun Aug 13 15:27:54 2006 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Sun Aug 13 15:27:54 2006 => Scanning File C:\PROGRA~1\EWIDOA~1.0\ewido.exe
Sun Aug 13 15:27:54 2006 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Sun Aug 13 15:27:54 2006 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe
Sun Aug 13 15:27:54 2006 => Scanning File C:\FreeRAM\FREERA~1.EXE
Sun Aug 13 15:27:55 2006 => Scanning File C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpohmr08.exe
Sun Aug 13 15:27:55 2006 => Scanning File C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpotdd01.exe
Sun Aug 13 15:27:55 2006 => Scanning File C:\PROGRA~1\INTERV~1\Common\Bin\WINCIN~1.EXE
Sun Aug 13 15:27:55 2006 => Scanning File C:\WINDOWS\System32\LVComS.exe
Sun Aug 13 15:27:55 2006 => Scanning File C:\WINDOWS\System32\alg.exe
Sun Aug 13 15:27:55 2006 => Scanning File C:\PROGRA~1\COMMON~1\EPSON\EBAPI\SAgent2.exe
Sun Aug 13 15:27:55 2006 => Scanning File C:\PROGRA~1\EWIDOA~1.0\guard.exe
Sun Aug 13 15:27:56 2006 => Scanning File C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
Sun Aug 13 15:27:56 2006 => Scanning File C:\Norman\bin\ZANDA.EXE
Sun Aug 13 15:27:56 2006 => Scanning File C:\WINDOWS\system32\slserv.exe
Sun Aug 13 15:27:56 2006 => Scanning File C:\PROGRA~1\ANALOG~1\SoundMAX\SMAgent.exe
Sun Aug 13 15:27:56 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:27:56 2006 => Scanning File C:\WINDOWS\system32\wdfmgr.exe
Sun Aug 13 15:27:56 2006 => Scanning File C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpoevm08.exe
Sun Aug 13 15:27:57 2006 => Scanning File C:\PROGRA~1\HEWLET~1\DIGITA~1\Bin\hpoSTS08.exe
Sun Aug 13 15:27:58 2006 => Scanning File C:\Norman\Nvc\BIN\NIP.EXE
Sun Aug 13 15:27:58 2006 => Scanning File C:\Norman\Npf\BIN\npfmsg2.exe
Sun Aug 13 15:27:58 2006 => Scanning File C:\Norman\bin\NJEEVES.EXE
Sun Aug 13 15:27:59 2006 => Scanning File C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
Sun Aug 13 15:28:00 2006 => Scanning File C:\NORMAN\Nvc\BIN\nipsvc.exe
Sun Aug 13 15:28:00 2006 => Scanning File C:\WINDOWS\System32\HPZipm12.exe
Sun Aug 13 15:28:00 2006 => Scanning File C:\NORMAN\Nvc\BIN\nvcoas.exe
Sun Aug 13 15:28:00 2006 => Scanning File C:\Norman\Nvc\bin\cclaw.exe
Sun Aug 13 15:28:01 2006 => Scanning File C:\WINDOWS\System32\wuauclt.exe
Sun Aug 13 15:28:01 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:01 2006 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe
Sun Aug 13 15:28:01 2006 => Scanning File C:\hijack\hijackthis\HijackThis.exe
Sun Aug 13 15:28:02 2006 => Scanning File C:\WINDOWS\System32\Notepad.exe
Sun Aug 13 15:28:02 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:02 2006 => Scanning File C:\Kaspersky\mwavscan.com
Sun Aug 13 15:28:03 2006 => Scanning File C:\Kaspersky\kavss.exe
Sun Aug 13 15:28:03 2006 => ***** Scanning Registry Files *****
Sun Aug 13 15:28:03 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Sun Aug 13 15:28:03 2006 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Sun Aug 13 15:28:03 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Sun Aug 13 15:28:03 2006 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Sun Aug 13 15:28:03 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Sun Aug 13 15:28:03 2006 => Scanning File C:\WINDOWS\System32\webcheck.dll
Sun Aug 13 15:28:04 2006 => Scanning File C:\WINDOWS\System32\stobject.dll
Sun Aug 13 15:28:04 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Sun Aug 13 15:28:04 2006 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Sun Aug 13 15:28:04 2006 => Scanning File C:\PROGRA~1\Adobe\ACROBA~3.0\ActiveX\ACROIE~1.DLL
Sun Aug 13 15:28:04 2006 => {53707962-6F74-2D53-2644-206D7942484F} = C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
Sun Aug 13 15:28:04 2006 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
Sun Aug 13 15:28:04 2006 => {9394EDE7-C8B5-483E-8773-474BF36AF6E4} = C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
Sun Aug 13 15:28:04 2006 => Scanning File C:\PROGRA~1\MSNAPP~1\ST\010300~1.100\en-xu\stmain.dll
Sun Aug 13 15:28:05 2006 => {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} = C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
Sun Aug 13 15:28:05 2006 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\MSNTOO~1\010250~1.102\fi\msntb.dll
Sun Aug 13 15:28:05 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Sun Aug 13 15:28:05 2006 => Scanning File C:\WINDOWS\explorer.exe
Sun Aug 13 15:28:05 2006 => Scanning File C:\WINDOWS\system32\userinit.exe
Sun Aug 13 15:28:05 2006 => Scanning HKCU\Control Panel\Desktop
Sun Aug 13 15:28:05 2006 => Scanning File C:\WINDOWS\System32\sstext3d.scr
Sun Aug 13 15:28:05 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Sun Aug 13 15:28:05 2006 => Scanning File C:\WINDOWS\system32\NeroCheck.exe
Sun Aug 13 15:28:06 2006 => Scanning File C:\Norman\bin\ZLH.EXE
Sun Aug 13 15:28:06 2006 => Scanning File C:\PROGRA~1\Logitech\Video\ISStart.exe
Sun Aug 13 15:28:07 2006 => Scanning File C:\PROGRA~1\Logitech\Video\LogiTray.exe
Sun Aug 13 15:28:07 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0\bin\jusched.exe
Sun Aug 13 15:28:07 2006 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Sun Aug 13 15:28:07 2006 => *** File C:\PROGRA~1\EWIDOA~1.0\ewido.exe having Size Restriction ***
Sun Aug 13 15:28:07 2006 => Scanning File C:\PROGRA~1\EWIDOA~1.0\ewido.exe [**]
Sun Aug 13 15:28:07 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Sun Aug 13 15:28:07 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Sun Aug 13 15:28:07 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Sun Aug 13 15:28:07 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Sun Aug 13 15:28:07 2006 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Sun Aug 13 15:28:07 2006 => *** File C:\PROGRA~1\MSNMES~1\msnmsgr.exe having Size Restriction ***
Sun Aug 13 15:28:07 2006 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe [**]
Sun Aug 13 15:28:07 2006 => *** File C:\FreeRAM\FREERA~1.EXE having Size Restriction ***
Sun Aug 13 15:28:07 2006 => Scanning File C:\FreeRAM\FREERA~1.EXE [**]
Sun Aug 13 15:28:07 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Sun Aug 13 15:28:07 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Sun Aug 13 15:28:07 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Sun Aug 13 15:28:07 2006 => Scanning HKCR\txtfile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning File C:\WINDOWS\system32\Notepad.exe
Sun Aug 13 15:28:07 2006 => Scanning HKCR\comfile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\exefile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\dllfile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\batfile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\piffile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\scrfile\shell\open\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\scrfile\shell\config\command
Sun Aug 13 15:28:07 2006 => Scanning HKCR\regfile\shell\open\command
Sun Aug 13 15:28:07 2006 => ***** Scanning StartUp Folders *****
Sun Aug 13 15:28:07 2006 => ***** Scanning C:\Documents and Settings\jande3\Käynnistä-valikko\Ohjelmat\Käynnistys Folder *****
Sun Aug 13 15:28:07 2006 => Scanning Folder: C:\Documents and Settings\jande3\Käynnistä-valikko\Ohjelmat\Käynnistys\*.*
Sun Aug 13 15:28:07 2006 => Scanning File C:\Documents and Settings\jande3\Käynnistä-valikko\Ohjelmat\Käynnistys\desktop.ini [**]
Sun Aug 13 15:28:07 2006 => ***** Scanning C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys Folder *****
Sun Aug 13 15:28:07 2006 => Scanning Folder: C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\*.*
Sun Aug 13 15:28:07 2006 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Adobe Reader Speed Launch.lnk
Sun Aug 13 15:28:07 2006 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\desktop.ini [**]
Sun Aug 13 15:28:07 2006 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\hp psc 1000 series.lnk
Sun Aug 13 15:28:07 2006 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\hpoddt01.exe.lnk
Sun Aug 13 15:28:07 2006 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\InterVideo WinCinema Manager.lnk
Sun Aug 13 15:28:08 2006 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Microsoft Office.lnk
Sun Aug 13 15:28:08 2006 => ***** Scanning Service Files *****
Sun Aug 13 15:28:08 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Sun Aug 13 15:28:08 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\61883.sys
Sun Aug 13 15:28:08 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPI.sys
Sun Aug 13 15:28:08 2006 => Scanning File C:\WINDOWS\System32\drivers\aeaudio.sys
Sun Aug 13 15:28:08 2006 => Scanning File C:\WINDOWS\System32\drivers\aec.sys
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\agp440.sys
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\alg.exe
Sun Aug 13 15:28:09 2006 => ERROR!!! Invalid Entry System32\DRIVERS\amgmwan.sys in SYSTEM\CurrentControlSet\Services\AMGM...
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\arp1394.sys
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\asyncmac.sys
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\atapi.sys
Sun Aug 13 15:28:09 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\atmarpc.sys
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\audstub.sys
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\avc.sys
Sun Aug 13 15:28:10 2006 => ERROR!!! Invalid Entry C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE in SYSTEM\CurrentControlSet\Services\BackWeb Client - 4476822...
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\CCDECODE.sys
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\cdrom.sys
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\system32\cisvc.exe
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\System32\dllhost.exe
Sun Aug 13 15:28:10 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:11 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:11 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\disk.sys
Sun Aug 13 15:28:11 2006 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Sun Aug 13 15:28:11 2006 => Scanning File C:\WINDOWS\System32\drivers\dmboot.sys
Sun Aug 13 15:28:11 2006 => Scanning File C:\WINDOWS\System32\drivers\dmio.sys
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\drivers\dmload.sys
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\drivers\DMusic.sys
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:12 2006 => ERROR!!! Invalid Entry \??\C:\WINDOWS\System32\dqoowitw.abr in SYSTEM\CurrentControlSet\Services\DQOOWITW...
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\drivers\drmkaud.sys
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\e100b325.sys
Sun Aug 13 15:28:12 2006 => Scanning File C:\PROGRA~1\COMMON~1\EPSON\EBAPI\SAgent2.exe
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:12 2006 => Scanning File C:\WINDOWS\system32\services.exe
Sun Aug 13 15:28:13 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:13 2006 => Scanning File C:\PROGRA~1\EWIDOA~1.0\GUARD.SYS
Sun Aug 13 15:28:13 2006 => Scanning File C:\PROGRA~1\EWIDOA~1.0\guard.exe
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\system32\fxssvc.exe
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\fdc.sys
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\flpydisk.sys
Sun Aug 13 15:28:14 2006 => ERROR!!! Invalid Entry "C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe" in SYSTEM\CurrentControlSet\Services\fsbwsys...
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ftdisk.sys
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\msgpc.sys
Sun Aug 13 15:28:14 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\HPZid412.sys
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\HPZipr12.sys
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\HPZius12.sys
Sun Aug 13 15:28:15 2006 => ERROR!!! Invalid Entry System32\Drivers\HTTP.sys in SYSTEM\CurrentControlSet\Services\HTTP...
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\i8042prt.sys
Sun Aug 13 15:28:15 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ialmnt5.sys
Sun Aug 13 15:28:16 2006 => Scanning File C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriverT.exe
Sun Aug 13 15:28:16 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\imapi.sys
Sun Aug 13 15:28:16 2006 => Scanning File C:\WINDOWS\System32\imapi.exe
Sun Aug 13 15:28:16 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\intelide.sys
Sun Aug 13 15:28:16 2006 => ERROR!!! Invalid Entry System32\DRIVERS\intelppm.sys in SYSTEM\CurrentControlSet\Services\intelppm...
Sun Aug 13 15:28:16 2006 => ERROR!!! Invalid Entry system32\drivers\ip6fw.sys in SYSTEM\CurrentControlSet\Services\ip6fw...
Sun Aug 13 15:28:16 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
Sun Aug 13 15:28:16 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ipinip.sys
Sun Aug 13 15:28:16 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ipnat.sys
Sun Aug 13 15:28:17 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ipsec.sys
Sun Aug 13 15:28:17 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\irenum.sys
Sun Aug 13 15:28:17 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\isapnp.sys
Sun Aug 13 15:28:17 2006 => ERROR!!! Invalid Entry System32\DRIVERS\TWInwana.sys in SYSTEM\CurrentControlSet\Services\itexadsla2...
Sun Aug 13 15:28:17 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\k600bus.sys
Sun Aug 13 15:28:17 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\k600mdfl.sys
Sun Aug 13 15:28:17 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\k600mdm.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\k600mgmt.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\k600obex.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdclass.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\drivers\kmixer.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\mouclass.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxdav.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\msdtc.exe
Sun Aug 13 15:28:18 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\msdv.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\msiexec.exe
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\drivers\MSKSSRV.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\drivers\MSPCLOCK.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\drivers\MSPQM.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\drivers\MSTEE.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys
Sun Aug 13 15:28:19 2006 => *** File C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys having Size Restriction ***
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [**]
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\NdisIP.sys
Sun Aug 13 15:28:19 2006 => Scanning File C:\NORMAN\NSE\BIN\NDISKIO.SYS
Sun Aug 13 15:28:19 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ndistapi.sys
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ndisuio.sys
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ndiswan.sys
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\netbios.sys
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\netbt.sys
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\system32\netdde.exe
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\system32\netdde.exe
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\lsass.exe
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:20 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\nic1394.sys
Sun Aug 13 15:28:20 2006 => Scanning File C:\NORMAN\Nvc\BIN\nipsvc.exe
Sun Aug 13 15:28:21 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:21 2006 => Scanning File C:\Norman\bin\NJEEVES.EXE
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\Nvc\BIN\NPFSVICE.EXE
Sun Aug 13 15:28:21 2006 => Scanning File C:\Norman\bin\ZANDA.EXE
Sun Aug 13 15:28:21 2006 => Scanning File C:\WINDOWS\System32\lsass.exe
Sun Aug 13 15:28:21 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:21 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\NVC\BIN\NVCFSR.SYS
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\NVC\BIN\NVCOAFL51.SYS
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\NVC\BIN\NVCOAFT51.SYS
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\NVC\BIN\NVCOARC51.SYS
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\Nvc\BIN\nvcoas.exe
Sun Aug 13 15:28:21 2006 => Scanning File C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
Sun Aug 13 15:28:21 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ohci1394.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\SOURCE~1\OSE.EXE
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\parport.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\pci.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\pciide.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\lv302af.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\drivers\pfc.sys
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\LV302AV.SYS
Sun Aug 13 15:28:22 2006 => Scanning File C:\WINDOWS\system32\services.exe
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\HPZipm12.exe
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\lsass.exe
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\raspptp.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\processr.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\psched.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ptilink.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\rasacd.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\rasl2tp.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\raspppoe.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\raspti.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\rdbss.sys
Sun Aug 13 15:28:23 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\system32\sessmgr.exe
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\RECAGENT.SYS
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\redbook.sys
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\System32\locator.exe
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:24 2006 => Scanning File C:\WINDOWS\System32\rsvp.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\system32\drivers\scsiport.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\secdrv.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\ser2pl.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\serenum.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\serial.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\SLIP.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\slntamr.sys
Sun Aug 13 15:28:25 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\Slnthal.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\system32\slserv.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\drivers\smwdm.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS
Sun Aug 13 15:28:26 2006 => Scanning File C:\PROGRA~1\ANALOG~1\SoundMAX\SMAgent.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\drivers\splitter.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\sr.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\srv.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\StreamIP.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\swenum.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\drivers\swmidi.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\dllhost.exe
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\System32\drivers\sysaudio.sys
Sun Aug 13 15:28:26 2006 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\tcpip.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\TDI_RD.SYS
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\termdd.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\system32\wdfmgr.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\update.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\ups.exe
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\drivers\usbaudio.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\usbccgp.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\usbehci.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\usbhub.sys
Sun Aug 13 15:28:27 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\usbprint.sys
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\usbscan.sys
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\usbuhci.sys
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\vssvc.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\wanarp.sys
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\drivers\wdmaud.sys
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Sun Aug 13 15:28:28 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Sun Aug 13 15:28:28 2006 => ***** Scanning System32 Folders *****
Sun Aug 13 15:28:28 2006 => Scanning C:\WINDOWS Directory
Sun Aug 13 15:28:28 2006 => Scanning Folder: C:\WINDOWS\*.*
Sun Aug 13 15:28:29 2006 => Scanning File C:\WINDOWS\0.log [**]
Sun Aug 13 15:28:29 2006 => Scanning File C:\WINDOWS\ActiveSkin.INI [**]
Sun Aug 13 15:28:30 2006 => Scanning File C:\WINDOWS\Adult_Chat.0xe
Sun Aug 13 15:28:30 2006 => File C:\WINDOWS\Adult_Chat.0xe infected by "Trojan.Win32.Dialer.g" Virus. Action Taken: File Deleted.
Sun Aug 13 15:28:30 2006 => Scanning File C:\WINDOWS\Alppiruusu.bmp [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\bootstat.dat [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\bwUnin-6.1.4.58-4476822L.exe
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\cdplayer.ini [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\clock.avi [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\comsetup.log [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\control.ini [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\desktop.ini [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\DSOSTOP.INI [**]
Sun Aug 13 15:28:31 2006 => Scanning File C:\WINDOWS\esba-4.0xe
Sun Aug 13 15:28:32 2006 => File C:\WINDOWS\esba-4.0xe infected by "Backdoor.Win32.Ruledor.e" Virus. Action Taken: File Renamed.
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\explorer.exe
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\explorer.scf [**]
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\FaxSetup.log [**]
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\hh.exe
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\hpoins01.dat [**]
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\hpoins01.dat.temp [**]
Sun Aug 13 15:28:32 2006 => Scanning File C:\WINDOWS\hpomdl01.dat [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\hpomdl01.dat.temp [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\hpqEmlsz.INI [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\Höyhenkuvio.bmp [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\ieuninst.exe
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\iis6.log [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\imsins.log [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\IsUninst.exe
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\jautoexp.dat [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\Kahvikuppi.bmp [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\Kalassa.bmp [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\KB911280.log [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\KB914388.log [**]
Sun Aug 13 15:28:33 2006 => Scanning File C:\WINDOWS\KB914389.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB914798.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB916281-IE6SP1-20060526.162249.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB917159.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB917344.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB917734.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB917953.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\KB918439-IE6SP1-20060530.145346.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\LVMMail.INI [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\mngui.INI [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\ModemLog_Smart Link 56K Modem.txt [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\ModemLog_Sony Ericsson 600i USB WMC Modem.txt [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\mozver.dat [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\msdfmap.ini [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\msgsocm.log [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\muninst.exe
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\NeroDigital.ini [**]
Sun Aug 13 15:28:34 2006 => Scanning File C:\WINDOWS\notepad.exe
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\NPFFILE.NDF_B [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\NPFFILE.PREV_BAK [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\nsreg.dat [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\ntdtcsetup.log [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\ocgen.log [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\ocmsn.log [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\ODBC.INI [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\ODBCINST.INI [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\oeuninst.exe
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\OpPrintServer.INI [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\pcconfig.dat [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\pcdlib32.dll
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\Pitsikuvio 16.bmp [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\Preeriatuuli.bmp [**]
Sun Aug 13 15:28:35 2006 => Scanning File C:\WINDOWS\Q330994.exe
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\QTFont.for
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\QTFont.qfn [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\regedit.exe
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\Saippuakuplat.bmp [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\Santa Fen stukko.bmp [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\SchedLgU.Txt [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\setdebug.exe
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\Setup1.exe
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\setupact.log [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\setupapi.log [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\setuperr.log [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\SIGVERIF.TXT [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\SK24APRO.ini [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\sl.lng [**]
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\slrundll.exe
Sun Aug 13 15:28:36 2006 => Scanning File C:\WINDOWS\SmCfg.exe
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\smdat32m.sys
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\smscfg.ini [**]
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\ST6UNST.EXE
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\Sti_Trace.log [**]
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\streamhlp.dll
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\SynCor.exe
Sun Aug 13 15:28:37 2006 => Scanning File C:\WINDOWS\SynthCoreA.Dll
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\system.ini [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\T30DebugLogFile.txt [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\TASKMAN.EXE
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\thxcfg.ini [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\tsoc.log [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\twain.dll
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\twain_32.dll
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\twunk_16.exe
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\twunk_32.exe
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\uninst.exe
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\uniq [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\UNNeroVision.cfg [**]
Sun Aug 13 15:28:38 2006 => *** File C:\WINDOWS\UNNeroVision.exe having Size Restriction ***
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\UNNeroVision.exe [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\unvise32.exe
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\updspapi.log [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\vb.ini [**]
Sun Aug 13 15:28:38 2006 => Scanning File C:\WINDOWS\vbaddin.ini [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\Viherkivi.bmp [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\Viuhkat.bmp [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\vmmreg32.dll
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\warhead.ini [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\wiadebug.log [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\wiaservc.log [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\win.ini [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\WindowsShell.Manifest [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\WindowsUpdate.log [**]
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\winhelp.exe
Sun Aug 13 15:28:39 2006 => Scanning File C:\WINDOWS\winhlp32.exe
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\WININIT.INI [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\winnt.bmp [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\winnt256.bmp [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\wmprfFIN.prx [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\WMSysPr9.prx [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\WMSysPrx.prx [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\Zapoteekki.bmp [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\_default.pif
Sun Aug 13 15:28:40 2006 => Scanning C:\WINDOWS\System32 Directory
Sun Aug 13 15:28:40 2006 => Scanning Folder: C:\WINDOWS\System32\*.*
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\System32\$ncsp$.inf
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\System32\$winnt$.inf
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\System32\12520437.cpx [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\System32\12520850.cpx [**]
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\System32\6to4svc.dll
Sun Aug 13 15:28:40 2006 => Scanning File C:\WINDOWS\System32\a3d.dll
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\aaaamon.dll
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\access.cpl
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\acctres.dll
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\accwiz.exe
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\acelpdec.ax
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\acledit.dll
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\aclui.dll
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\activeds.dll
Sun Aug 13 15:28:41 2006 => Scanning File C:\WINDOWS\System32\activeds.tlb
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\ActiveSkin.ocx
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\actmovie.exe
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\actxprxy.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\admparse.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\adptif.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\adsldp.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\adsldpc.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\adsmsext.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\adsnt.dll
Sun Aug 13 15:28:42 2006 => Scanning File C:\WINDOWS\System32\advapi32.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\advpack.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\ahui.exe
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\alg.exe
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\alrsvc.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\amcompat.tlb
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\amr_cpl.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\amstream.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\ansi.sys
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\apcups.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\append.exe
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\apphelp.dll
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\appwiz.cpl
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\arp.exe
Sun Aug 13 15:28:43 2006 => Scanning File C:\WINDOWS\System32\asctrls.ocx
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\asferror.dll
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\asfsipc.dll
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\asycfilt.dll
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\at.exe
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\ATHPRXY.DLL
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\ati2dvag.dll
Sun Aug 13 15:28:44 2006 => Scanning File C:\WINDOWS\System32\ati3d1ag.dll
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\ati3d2ag.dll
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\atiiiexx.dll
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\atkctrs.dll
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\atl.dll
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\ATL70.DLL
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\atl71.dll
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\atmadm.exe
Sun Aug 13 15:28:45 2006 => Scanning File C:\WINDOWS\System32\atmfd.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\atmlib.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\atmpvcno.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\atrace.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\attrib.exe
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\Audio3d.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\Audiodev.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\audiosrv.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\authz.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\autochk.exe
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\autoconv.exe
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\autodisc.dll
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\AUTOEXEC.NT [**]
Sun Aug 13 15:28:46 2006 => Scanning File C:\WINDOWS\System32\autofmt.exe
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\autolfn.exe
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avicap.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avicap32.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avifil32.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avifile.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\Aviprax.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avmeter.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avtapi.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\avwav.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\basesrv.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\batmeter.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\batt.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\bdaplgin.ax
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\bidispl.dll
Sun Aug 13 15:28:47 2006 => Scanning File C:\WINDOWS\System32\bios1.rom [**]
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bios4.rom [**]
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bitsprx2.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bitsprx3.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\blackbox.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bootok.exe
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bootvid.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bootvrfy.exe
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\bopomofo.uce [**]
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\browselc.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\browser.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\BROWSEUI.DLL
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\browsewm.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\cabinet.dll
Sun Aug 13 15:28:48 2006 => Scanning File C:\WINDOWS\System32\cabview.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\Cachex.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\cacls.exe
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\calc.exe
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\CamCpl.cpl
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\camocx.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\capesnpn.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\cards.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\catsrv.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\catsrvps.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\catsrvut.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\ccfgnt.dll
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\CDFVIEW.DLL
Sun Aug 13 15:28:49 2006 => Scanning File C:\WINDOWS\System32\cdm.dll
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\cdmodem.dll
Sun Aug 13 15:28:50 2006 => *** File C:\WINDOWS\System32\cdosys.dll having Size Restriction ***
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\cdosys.dll [**]
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\cdplayer.exe.manifest [**]
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\certcli.dll
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\certmgr.dll
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\certmgr.msc [**]
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\cewmdm.dll
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\cfgbkend.dll
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\cfgmgr32.dll
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\charmap.exe
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\chcp.com
Sun Aug 13 15:28:50 2006 => Scanning File C:\WINDOWS\System32\chkdsk.exe
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\chkntfs.exe
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\ciadmin.dll
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\ciadv.msc [**]
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\cic.dll
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\cidaemon.exe
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\ciodm.dll
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\cisvc.exe
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\ckcnv.exe
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\clb.dll
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\clbcatex.dll
Sun Aug 13 15:28:51 2006 => Scanning File C:\WINDOWS\System32\clbcatq.dll
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cleanmgr.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\CleanUp.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cliconf.chm [**]
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cliconfg.dll
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cliconfg.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cliconfg.rll
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\clipbrd.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\clipsrv.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\clspack.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\clusapi.dll
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cmcfg32.dll
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cmd.exe
Sun Aug 13 15:28:52 2006 => Scanning File C:\WINDOWS\System32\cmdial32.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmdl32.exe
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmmgr32.hlp [**]
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmmon32.exe
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmos.ram [**]
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmpbk32.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmprops.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmstp.exe
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cmutil.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cnbjmon.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cnetcfg.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\cnvfat.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\CnxDslWz.log [**]
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\coinst.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\colbact.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\comaddin.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\comcat.dll
Sun Aug 13 15:28:53 2006 => Scanning File C:\WINDOWS\System32\comctl32.dll
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\comctl32.ocx
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\comdlg32.dll
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\comdlg32.oca
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\comdlg32.ocx
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\comm.drv
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\command.com
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\commdlg.dll
Sun Aug 13 15:28:54 2006 => Scanning File C:\WINDOWS\System32\comp.exe
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\compact.exe
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\compatui.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\compmgmt.msc [**]
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\compobj.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\compstui.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\comrepl.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\comres.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\comsnap.dll
Sun Aug 13 15:28:55 2006 => *** File C:\WINDOWS\System32\comsvcs.dll having Size Restriction ***
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\comsvcs.dll [**]
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\comuid.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\CONFIG.NT [**]
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\confmsp.dll
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\conime.exe
Sun Aug 13 15:28:55 2006 => Scanning File C:\WINDOWS\System32\console.dll
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\control.exe
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\convert.exe
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\corpol.dll
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\country.sys
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\credui.dll
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\crtdll.dll
Sun Aug 13 15:28:56 2006 => Scanning File C:\WINDOWS\System32\crypt32.dll
Sun Aug 13 15:28:57 2006 => Scanning File C:\WINDOWS\System32\cryptdlg.dll
Sun Aug 13 15:28:57 2006 => Scanning File C:\WINDOWS\System32\cryptdll.dll
Sun Aug 13 15:28:57 2006 => Scanning File C:\WINDOWS\System32\cryptext.dll
Sun Aug 13 15:28:57 2006 => Scanning File C:\WINDOWS\System32\cryptnet.dll
Sun Aug 13 15:28:57 2006 => Scanning File C:\WINDOWS\System32\cryptsvc.dll
Sun Aug 13 15:28:57 2006 => Scanning File C:\WINDOWS\System32\cryptui.dll
Sun Aug 13 15:28:58 2006 => Scanning File C:\WINDOWS\System32\cscdll.dll
Sun Aug 13 15:28:58 2006 => Scanning File C:\WINDOWS\System32\cscript.exe
Sun Aug 13 15:28:58 2006 => Scanning File C:\WINDOWS\System32\cscui.dll
Sun Aug 13 15:28:58 2006 => Scanning File C:\WINDOWS\System32\csrsrv.dll
Sun Aug 13 15:28:58 2006 => Scanning File C:\WINDOWS\System32\csrss.exe
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\csseqchk.dll
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\Ctl3d.dll
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\ctl3d32.dll
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\ctl3dv2.dll
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\ctype.nls [**]
Sun Aug 13 15:28:59 2006 => Scanning File C:\WINDOWS\System32\c_037.nls [**]
Sun Aug 13 15:29:00 2006 => Scanning File C:\WINDOWS\System32\c_10000.nls [**]
Sun Aug 13 15:29:00 2006 => Scanning File C:\WINDOWS\System32\c_10006.nls [**]
Sun Aug 13 15:29:00 2006 => Scanning File C:\WINDOWS\System32\c_10007.nls [**]
Sun Aug 13 15:29:00 2006 => Scanning File C:\WINDOWS\System32\c_10010.nls [**]
Sun Aug 13 15:29:00 2006 => Scanning File C:\WINDOWS\System32\c_10017.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_10029.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_10079.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_10081.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_10082.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_1026.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_1250.nls [**]
Sun Aug 13 15:29:01 2006 => Scanning File C:\WINDOWS\System32\c_1251.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1252.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1253.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1254.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1255.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1256.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1257.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_1258.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_20127.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_20261.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_20866.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_20905.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_21866.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_28591.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_28592.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\c_28593.nls [**]
Sun Aug 13 15:29:02 2006 => Scanning File C:\WINDOWS\System32\C_28594.NLS [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\C_28595.NLS [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\C_28597.NLS [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_28598.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_28599.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_28603.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_28605.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_437.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_500.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_737.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_775.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_850.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_852.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_855.nls [**]
Sun Aug 13 15:29:03 2006 => Scanning File C:\WINDOWS\System32\c_857.nls [**]
Sun Aug 13 15:29:04 2006 => Scanning File C:\WINDOWS\System32\c_860.nls [**]
Sun Aug 13 15:29:04 2006 => Scanning File C:\WINDOWS\System32\c_861.nls [**]
Sun Aug 13 15:29:04 2006 => Scanning File C:\WINDOWS\System32\c_863.nls [**]
Sun Aug 13 15:29:04 2006 => Scanning File C:\WINDOWS\System32\c_865.nls [**]
Sun Aug 13 15:29:04 2006 => Scanning File C:\WINDOWS\System32\c_866.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_869.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_874.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_875.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_932.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_936.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_949.nls [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\c_950.nls [**]
Sun Aug 13 15:29:05 2006 => *** File C:\WINDOWS\System32\d3d8.dll having Size Restriction ***
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\d3d8.dll [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\d3d8thk.dll
Sun Aug 13 15:29:05 2006 => *** File C:\WINDOWS\System32\d3d9.dll having Size Restriction ***
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\d3d9.dll [**]
Sun Aug 13 15:29:05 2006 => Scanning File C:\WINDOWS\System32\d3dim.dll
Sun Aug 13 15:29:06 2006 => Scanning File C:\WINDOWS\System32\d3dim700.dll
Sun Aug 13 15:29:07 2006 => Scanning File C:\WINDOWS\System32\d3dpmesh.dll
Sun Aug 13 15:29:07 2006 => Scanning File C:\WINDOWS\System32\d3dramp.dll
Sun Aug 13 15:29:07 2006 => Scanning File C:\WINDOWS\System32\d3drm.dll
Sun Aug 13 15:29:08 2006 => Scanning File C:\WINDOWS\System32\d3dxof.dll
Sun Aug 13 15:29:08 2006 => Scanning File C:\WINDOWS\System32\DANIM.DLL
Sun Aug 13 15:29:08 2006 => Scanning File C:\WINDOWS\System32\dataclen.dll
Sun Aug 13 15:29:08 2006 => Scanning File C:\WINDOWS\System32\datime.dll
Sun Aug 13 15:29:08 2006 => Scanning File C:\WINDOWS\System32\davclnt.dll
Sun Aug 13 15:29:09 2006 =>
mitäs siinä alimassa oli.
toinen oli visiin deletoitu ja toinen nimetty uudestaan
eli olisi tuo ok.
toinen deleted ja toinen renamed
että poistan siis manuaalisesti"käsin"kaikki javaohjelmat??lisää poista sovelluksesta
sitten otat sen uuden koneelle.
latasin sen uuden
koneessa ?
vieläkin,mutta nyt katos äänet...avaa äänenvoimakkuus valikon niin tulee aktiivisia mikserilaitteita ei ole???