...josko joku ehtisi katsomaan, onko koneella mitään ihmeellistä, kun tekee aika ajoin ihmeellisiä virheilmoituksia. E-scan ei kyllä löytänyt mitään. Onko muita ideoita "muokata" konetta uuteen uskoon? ;)
Logfile of HijackThis v1.99.1
Scan saved at 17:32:53, on 15.8.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\EASY ACCESS BUTTON SUPPORT\STARTEAK.EXE
C:\COMPAQ\EAKDRV\EAUSBKBD.EXE
C:\OHJELMATIEDOSTOT\YHTEISET TIEDOSTOT\ADAPTEC SHARED\CREATECD\CREATECD50.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\SYSTEM\LVCOMS.EXE
C:\OHJELMATIEDOSTOT\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\OHJELMATIEDOSTOT\GRISOFT\AVG FREE\AVGCC.EXE
C:\OHJELMATIEDOSTOT\GRISOFT\AVG FREE\AVGEMC.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\OHJELMATIEDOSTOT\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\SYSTEM\E_S5I0C1.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\OHJELMATIEDOSTOT\CREATIVE\MEDIASOURCE\DETECTOR\CTDETECT.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
D:\OMAT TIEDOSTOT\TERHI\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\OHJELMATIEDOSTOT\YHTEISET TIEDOSTOT\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\OHJELMATIEDOSTOT\EPSON\EPSON CARDMONITOR\EPSON CARDMONITOR1.2.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\OHJELMATIEDOSTOT\SYGATE\SPF\SMC.EXE
C:\OHJELMATIEDOSTOT\MOZILLA FIREFOX\FIREFOX.EXE
D:\OMAT TIEDOSTOT\TERHI\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3c00&lc=040b&s=search&ap=b204
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=2C01&lc=040b&s=search&ap=b204
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3c00&lc=040b&s=search&ap=b204
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\OHJELMATIEDOSTOT\EPSON\EPSON WEB-TO-PAGE\EPSON WEB-TO-PAGE.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\OMATTI~1\TERHI\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\OHJELMATIEDOSTOT\EPSON\EPSON WEB-TO-PAGE\EPSON WEB-TO-PAGE.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [WCOLOREAL] C:\Ohjelmatiedostot\COMPAQ\COLOREAL\COLOREAL.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Ohjelmatiedostot\Compaq\Digital Dashboard\CPQMLDET.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Ohjelmatiedostot\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Ohjelmatiedostot\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CreateCD50] "C:\Ohjelmatiedostot\Yhteiset tiedostot\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Ohjelmatiedostot\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LVComs] C:\WINDOWS\SYSTEM\LVComS.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Ohjelmatiedostot\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SmcService] C:\OHJELM~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\Run: [AVG7_CC] C:\OHJELM~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\OHJELM~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\OHJELM~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\SYSTEM\E_S5I0C1.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [SmcService] C:\OHJELMATIEDOSTOT\SYGATE\SPF\SMC.EXE
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - HKCU\..\Run: [Creative Detector] C:\Ohjelmatiedostot\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [Felix] C:\Program Files\ScreenMates\FELIX2.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\OMAT TIEDOSTOT\TERHI\SPYBOT - SEARCH & DESTROY\TeaTimer.exe
O4 - Startup: Works Kalenterin muistutukset.lnk = C:\Ohjelmatiedostot\Yhteiset tiedostot\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: EPSON CardMonitor.lnk = C:\Ohjelmatiedostot\epson\EPSON CardMonitor\EPSON CardMonitor1.2.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Palvelut - {A97E290C-110E-4CA9-81E5-83E256927706} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {92696FB8-5BF8-407C-9E65-FC18032DFEFC} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {D2231FD1-E5E8-473B-8E02-729627B07072} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O12 - Plugin for .mpg: C:\OHJELM~1\INTERN~1\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mov: C:\OHJELM~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: www.luukku.com
O15 - Trusted Zone: www6.luukku.com
O15 - Trusted Zone: *.NALLE PUH.pps
O15 - Trusted Zone: *.pandasoftware.fi
O15 - Trusted Zone: *.musicbrigade.com
O15 - Trusted Zone: *.mtv3.fi
O15 - Trusted Zone: *.pandasoftware.com
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
Logfile of HijackThis v1.99.1
Scan saved at 17:32:53, on 15.8.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\EASY ACCESS BUTTON SUPPORT\STARTEAK.EXE
C:\COMPAQ\EAKDRV\EAUSBKBD.EXE
C:\OHJELMATIEDOSTOT\YHTEISET TIEDOSTOT\ADAPTEC SHARED\CREATECD\CREATECD50.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\SYSTEM\LVCOMS.EXE
C:\OHJELMATIEDOSTOT\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\OHJELMATIEDOSTOT\GRISOFT\AVG FREE\AVGCC.EXE
C:\OHJELMATIEDOSTOT\GRISOFT\AVG FREE\AVGEMC.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\OHJELMATIEDOSTOT\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\SYSTEM\E_S5I0C1.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\OHJELMATIEDOSTOT\CREATIVE\MEDIASOURCE\DETECTOR\CTDETECT.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
D:\OMAT TIEDOSTOT\TERHI\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\OHJELMATIEDOSTOT\YHTEISET TIEDOSTOT\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\OHJELMATIEDOSTOT\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\OHJELMATIEDOSTOT\EPSON\EPSON CARDMONITOR\EPSON CARDMONITOR1.2.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\OHJELMATIEDOSTOT\SYGATE\SPF\SMC.EXE
C:\OHJELMATIEDOSTOT\MOZILLA FIREFOX\FIREFOX.EXE
D:\OMAT TIEDOSTOT\TERHI\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3c00&lc=040b&s=search&ap=b204
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=2C01&lc=040b&s=search&ap=b204
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3c00&lc=040b&s=search&ap=b204
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\OHJELMATIEDOSTOT\EPSON\EPSON WEB-TO-PAGE\EPSON WEB-TO-PAGE.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\OMATTI~1\TERHI\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\OHJELMATIEDOSTOT\EPSON\EPSON WEB-TO-PAGE\EPSON WEB-TO-PAGE.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [WCOLOREAL] C:\Ohjelmatiedostot\COMPAQ\COLOREAL\COLOREAL.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Ohjelmatiedostot\Compaq\Digital Dashboard\CPQMLDET.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Ohjelmatiedostot\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Ohjelmatiedostot\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CreateCD50] "C:\Ohjelmatiedostot\Yhteiset tiedostot\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Ohjelmatiedostot\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LVComs] C:\WINDOWS\SYSTEM\LVComS.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Ohjelmatiedostot\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SmcService] C:\OHJELM~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\Run: [AVG7_CC] C:\OHJELM~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\OHJELM~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\OHJELM~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\SYSTEM\E_S5I0C1.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [SmcService] C:\OHJELMATIEDOSTOT\SYGATE\SPF\SMC.EXE
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - HKCU\..\Run: [Creative Detector] C:\Ohjelmatiedostot\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [Felix] C:\Program Files\ScreenMates\FELIX2.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\OMAT TIEDOSTOT\TERHI\SPYBOT - SEARCH & DESTROY\TeaTimer.exe
O4 - Startup: Works Kalenterin muistutukset.lnk = C:\Ohjelmatiedostot\Yhteiset tiedostot\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: EPSON CardMonitor.lnk = C:\Ohjelmatiedostot\epson\EPSON CardMonitor\EPSON CardMonitor1.2.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Palvelut - {A97E290C-110E-4CA9-81E5-83E256927706} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {92696FB8-5BF8-407C-9E65-FC18032DFEFC} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {D2231FD1-E5E8-473B-8E02-729627B07072} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O12 - Plugin for .mpg: C:\OHJELM~1\INTERN~1\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mov: C:\OHJELM~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: www.luukku.com
O15 - Trusted Zone: www6.luukku.com
O15 - Trusted Zone: *.NALLE PUH.pps
O15 - Trusted Zone: *.pandasoftware.fi
O15 - Trusted Zone: *.musicbrigade.com
O15 - Trusted Zone: *.mtv3.fi
O15 - Trusted Zone: *.pandasoftware.com
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
Vastaukset 5
Vanhimmat
nää logissa mitään,mutta sulla on aika paljo käynnistyviä ohjelmia.
Googlaa noita ja sammuta turhia mielen mukaan autostartista.
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [WCOLOREAL] C:\Ohjelmatiedostot\COMPAQ\COLOREAL\COLOREAL.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Ohjelmatiedostot\Compaq\Digital Dashboard\CPQMLDET.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Ohjelmatiedostot\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Ohjelmatiedostot\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CreateCD50] "C:\Ohjelmatiedostot\Yhteiset tiedostot\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Ohjelmatiedostot\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LVComs] C:\WINDOWS\SYSTEM\LVComS.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Ohjelmatiedostot\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\SYSTEM\E_S5I0C1.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - HKCU\..\Run: [Creative Detector] C:\Ohjelmatiedostot\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [Felix] C:\Program Files\ScreenMates\FELIX2.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\OMAT TIEDOSTOT\TERHI\SPYBOT - SEARCH & DESTROY\TeaTimer.exe
O4 - Startup: Works Kalenterin muistutukset.lnk = C:\Ohjelmatiedostot\Yhteiset tiedostot\Microsoft Shared\Works Shared\wkcalrem.exe
Olen itsekin huomannut noiden ohjelmien paljouden, mutta en ole vielä uskaltautunut niitä sammuttelemaan. Nyt sen teen. Kiitokset kovasti!!!
Hei,
Käynnistyvistä ohjelmista, uskallanko poistaa
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Ohjelmatiedostot\ATI Technologies\ATI Control Panel\atiptaxx.exe
Msnappau
MSNAppau.exe
(Microsoft)
MSN Updater task which is installed with the recent versions of the MSN Toolbar (from mid 2004 onward). This seems to be a real-time updating task and it is not uncommon to find more than one instance of this task running. We do not know at this stage what exactly this task updates.
Recommendation :
First, note that on some PCs, particularly older PCs running Windows 98, and sometimes on Windows ME too, this task can sometimes prevent the PC from shutting down properly. That said, if you want to be able to use the MSN Toolbar without this updater task constantly running in the background, then do not even bother disabling this task on the Startups tab of The Ultimate Troubleshooter – it gets re-enabled at your next boot‑up !! The best way to disable this task is as follows (do it after having rebooted your PC into Safe Mode if it does not work in Normal Mode) :
1) Terminate MSNAPPAU on the Tasks tab of The Ultimate Troubleshooter (right-click and choose “Terminate this Task”).
2) Switch over to the Startups tab.
3) Right-click on it and choose Rename the file that this Startup points to.
Ati2evxx
Atievxx
Atipolab
ATI2evxx.exe
ATIevxx.exe
(ATI Technologies)
ATI External Event Utility EXE Module. Another background task which gets installed when you install ATI display drivers. Under Windows NT4/2000/XP/2003 the service registers as the “ATI Hotkey Poller” and further investigation shows that it is related to the handling of various ATI Hotkeys which bring up specific ATI utilities. Not only is this facility useless to 99.99% of users, but there is also no documentation anywhere on those ATI hotkeys !! Additionally some of our more inquisitive users have been able to prove that ATI2EVXX can sometimes be an incredible resource hog using up to 85% of CPU utilization !! Older versions of this background task show up as ATIPOLAB in the Task List.
Recommendation :
Disable on the Startups tab of The Ultimate Troubleshooter in Windows 95/98/ME. If you cannot find it on the Startups tab, then read about ATIPTAXX below and disable that task as it often is the task that starts ATI2EVXX. In Windows NT4/2000/XP, go to the Services tab of The Ultimate Troubleshooter, find the ATI Hotkey Poller service and set its Startup Mode to Disabled.
Atiptaxx
ATIPtaxx.exe
(ATI Technologies)
ATI Task Bar Icon. This is a System Tray icon which gets installed when you install the ATI drivers. All this icon does is enable you to bring up the Display Properties from the System Tray. Since the Display Properties can be invoked in many other ways, this icon simply adds to the clutter of the System Tray.
Recommendation :
Go into the Display Properties (Display icon in the Control Panel) and take the tick off the “Enable ATI Task Bar Icon” option. You will have to seek out this option as it is in different places for different ATI drivers. Typically, however, you need to go to the Settings tab, then click the ADVANCED button, and then find the option on one of the tabs that have the ATI icon as part of the tab name. Also, particularly with the recent drivers from ATI, once you have found that option you may find that the option is already unchecked but that the ATI icon is still showing in the System Tray. When that is the case, check the option, click APPLY, and then uncheck the option again and click APPLY again. Once you have unchecked that option, delete the “ATIptaxx.exe” line on the Startups tab of The Ultimate Troubleshooter – this will prevent ATIPTAXX starting at boot-up. Note, however, that ATIPTAXX will still get started automatically every time you call up Display Properties, but at least it will not start automatically at boot-up. If you want to totally disable ATIPTAXX from starting at any time, and you are familiar with editing the Windows Registry, then home in on the following registry key HKEY_LOCAL_MACHINE \ SOFTWARE \ ATI Technologies \ Desktop, then the sub-key NoAtipta and set it to 1 instead of its 0 default (our Thanks to the AnswersThatWork user who told us about this).
Löysin nimittäin tällaista tietoa http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
tällaisesta linkistä, enkä uskalla koskea niihin ilman lisäapua. Joskus on nimittäin ollut ongelmia, kun olen päivittänyt ajureita, että kone ei ole käynnistynyt kunnolla vähään aikaan, vaan on tullut erilaisia virheilmoituksia ja ilmeisesti vika on ollut juuri näissä. Nyt en löydä mistään virheilmoituskoodeja, joita silloin tuli.
Mitä teen, poistanko nuo vai annanko olla edelleen käynnistyvissä.
msn toolbar on tyhjänpäivän turha softa, jonka vois poistaa koko koneesta
noista linkeistä niitä tiedostoja yleensä siellä näkyy jos voi sammuttaa autostartista
http://www.castlecops.com/StartupList.html
http://www.bleepingcomputer.com/startups/