voisko joku

Logfile of HijackThis v1.98.2
Scan saved at 21:09:21, on 8.9.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Tools_\Nero 6\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
D:\WINDOWS\system32\cisvc.exe
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
D:\WINDOWS\Explorer.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\FSGK32.EXE
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\GEARSec.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMB32.EXE
F:\tools_1\Spring Cleaning\InsMonService.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FCH32.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FAMEH32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsrw.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
D:\WINDOWS\system32\nutsrv4.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\PGPsdkServ.exe
F:\utilit\NetAnttila\Bin\scServer.exe
D:\WINDOWS\System32\snmp.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\userdump.exe
D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
D:\WINDOWS\system32\xcommsvr.exe
D:\Program Files\Common Files\Microsoft Shared\DirectX Extensions\DXDebugService.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsav32.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
D:\Program Files\Logitech\ImageStudio\LogiTray.exe
D:\WINDOWS\system32\MMTray.exe
D:\WINDOWS\system32\MMTray2k.exe
D:\WINDOWS\system32\MMTrayLSI.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE
D:\WINDOWS\TBPanel.exe
D:\Program Files\Logitech\ImageStudio\LowLight.exe
F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe
D:\WINDOWS\system32\NILaunch.exe
D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Windows Defender\MSASCui.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\web\PGP for Windows XP\PGPtray.exe
D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\WINDOWS\System32\dllhost.exe
F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\tools_1\SONERA~1\ANTI-S~1\fsaw.exe
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\fsguidll.exe
F:\Text ja stuff\lotus\smartctr\smartctr.exe
D:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
D:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
F:\tekstiä\lotus\wordpro97\ltsstart.exe
F:\TOOLS_2\File-Ex 3\FileEx.exe
F:\utilit\totalcmd 6.5\TOTALCMD.EXE
F:\photo\Thumbs6\Thumbs.exe
D:\WINDOWS\System32\svchost.exe
D:\Documents and Settings\xxxxx zzzzzz\Työpöytä\Tools\Adware Spam Virus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe
O1 - Hosts: AmsServer
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\tekstiä\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F1EEFAC-6AF1-40D3-960E-39D55CEAEA47} - D:\WINDOWS\system32\dswave32.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - H:\TOOLS\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: AspStudio BHO - {6F6D1BD2-9270-4e9e-B491-0287F418B5AB} - F:\programming\tools\AspStudio\AspDebugerBHO.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - D:\PROGRA~1\MORPHE~1\MORPHE~1.DLL
O3 - Toolbar: Net Snippets - {67970B26-F57D-4455-8262-81C3AE3B8B5E} - D:\web\NETSNI~1\NetSnip.dll
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - H:\TOOLS\Netcraft Toolbar\nctb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - f:\utilit\steganos internet anonym pro 7\siapro7iep.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: Download - {777D0B4C-75C9-4874-ABFF-80B4BE8DC532} - H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll
O3 - Toolbar: RSS Feeds Toolbar - {4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E} - H:\työ-kakut\explorer add-ins\RSS Feeds Toolbar\RSS.dll
O3 - Toolbar: Cooxie - {DC99E960-6594-45e3-9D5D-141D825B8096} - H:\työ-kakut\explorer add-ins\Cooxie Toolbar\PrvcBand.dll
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Seram Web - {CC17CB93-633F-407d-98F8-25DE790608BD} - H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] D:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure Manager] "F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "F:\tools_1\Sonera Internet Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [News Service] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Net-It Launcher] D:\WINDOWS\system32\NILaunch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [Home Theater SchSvr] "D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\photo\quicktime 7.02\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\tekstiä\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ClamWin] "H:\työ-kakut\ANTI ad-ware\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [USBToolTip] "D:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Lotus SmartCenter.lnk = F:\Text ja stuff\lotus\smartctr\smartctr.exe
O4 - Startup: Lotus SuiteStart.lnk = F:\Text ja stuff\lotus\smartctr\suitest.exe
O4 - Startup: Lotus QuickStart.lnk = ?
O4 - Startup: Lotus Organizer EasyClip.lnk = F:\Text ja stuff\lotus\organize\easyclip.exe
O4 - Startup: File-Ex.lnk = F:\TOOLS_2\File-Ex 3\FileEx.exe
O4 - Startup: VisionGS.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PGPtray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\MS Progs\Microsoft Office\xp\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Service Manager.lnk = D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Sonera Tietoturva.lnk = F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Estä tämä kohoikkuna - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google-haku - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Käännä englanninkielinen sana - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &NeoTrace It! - H:\TOOLS\NEOTRA~1\NTXcontext.htm
O8 - Extra context menu item: Add To Net Snippets - D:\web\NETSNI~1\Res\Clipper.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm
O8 - Extra context menu item: Linkit taaksepäin - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: Muutavalikkoa - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Työkalupalkki - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Samankaltaisia sivuja - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Save To Gallery - res://H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll/DownloadToGallery.htm
O8 - Extra context menu item: Tallenna lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Täytä lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Käännä - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATETEXT.HTM
O8 - Extra context menu item: Käännä sana - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATESMARTWORD.HTM
O8 - Extra context menu item: Käännä sivu - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATEWEBPAGE.HTM
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra button: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Tallenna - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Tallenna lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Snippets - {7130DF06-BBC1-4e16-83D4-1F875E65B695} - D:\web\NETSNI~1\NetSnip.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Työkalupalkki - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MSPROG~1\MICROS~2\2003ST~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra 'Tools' menuitem: &Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra button: Locate - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra 'Tools' menuitem: Locate Using Visual WhoIs 2004 - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - f:\photo\IrfanView375\Ebay\Ebay.htm
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - H:\TOOLS\NEOTRA~1\NTXtoolbar.htm (file missing) (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://www.sf-anytime.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E581F2C0-9293-11D0-B132-00A0249C49D7} (Net-It jDoc PrintGraphics) - file://C:\Ohjelmatiedostot\Net-It Now! Starter Edition\jDoc\jDocPrtm.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\Software\..\Telephony: DomainName = windowsxp
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = windowsxp
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll (file missing)
O18 - Protocol: ezpp - {810403FA-E82E-11D5-8AAB-0010A404A3DE} - D:\WINDOWS\system32\EZTOOL~1.DLL
O18 - Protocol: ezstor - {6344A3A0-96A7-11D4-88CC-000000000000} - D:\WINDOWS\system32\VIEWERS\ezspp.dll
O18 - Protocol: hspp - {8D32BA61-D15B-11D4-894B-000000000000} - (no file)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
4339
Äänestä

Muut lukivat myös

Vastaukset 4

Vanhimmat

Logfile of HijackThis v1.99.1
Scan saved at 16:51:57, on 9.9.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Tools_\Nero 6\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
D:\WINDOWS\system32\cisvc.exe
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
D:\WINDOWS\Explorer.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\FSGK32.EXE
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\GEARSec.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMB32.EXE
F:\tools_1\Spring Cleaning\InsMonService.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FCH32.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FAMEH32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsrw.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
D:\WINDOWS\system32\nutsrv4.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\PGPsdkServ.exe
F:\utilit\NetAnttila\Bin\scServer.exe
D:\WINDOWS\System32\snmp.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\userdump.exe
D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
D:\WINDOWS\system32\xcommsvr.exe
D:\Program Files\Common Files\Microsoft Shared\DirectX Extensions\DXDebugService.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsav32.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
D:\Program Files\Logitech\ImageStudio\LogiTray.exe
D:\WINDOWS\system32\MMTray.exe
D:\WINDOWS\system32\MMTray2k.exe
D:\WINDOWS\system32\MMTrayLSI.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE
D:\WINDOWS\TBPanel.exe
D:\Program Files\Logitech\ImageStudio\LowLight.exe
F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe
D:\WINDOWS\system32\NILaunch.exe
D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Windows Defender\MSASCui.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\web\PGP for Windows XP\PGPtray.exe
D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\WINDOWS\System32\dllhost.exe
F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\tools_1\SONERA~1\ANTI-S~1\fsaw.exe
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\fsguidll.exe
F:\Text ja stuff\lotus\smartctr\smartctr.exe
D:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
D:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
F:\tekstiä\lotus\wordpro97\ltsstart.exe
F:\TOOLS_2\File-Ex 3\FileEx.exe
F:\utilit\totalcmd 6.5\TOTALCMD.EXE
F:\photo\Thumbs6\Thumbs.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
C:\Downloads\AD-SPY protection\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe
O1 - Hosts: AmsServer
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\tekstiä\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F1EEFAC-6AF1-40D3-960E-39D55CEAEA47} - D:\WINDOWS\system32\dswave32.dll
O2 - BHO: AspStudio BHO - {6F6D1BD2-9270-4e9e-B491-0287F418B5AB} - F:\programming\tools\AspStudio\AspDebugerBHO.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - D:\PROGRA~1\MORPHE~1\MORPHE~1.DLL
O3 - Toolbar: Net Snippets - {67970B26-F57D-4455-8262-81C3AE3B8B5E} - D:\web\NETSNI~1\NetSnip.dll
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - H:\TOOLS\Netcraft Toolbar\nctb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - f:\utilit\steganos internet anonym pro 7\siapro7iep.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: Download - {777D0B4C-75C9-4874-ABFF-80B4BE8DC532} - H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll
O3 - Toolbar: RSS Feeds Toolbar - {4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E} - H:\työ-kakut\explorer add-ins\RSS Feeds Toolbar\RSS.dll
O3 - Toolbar: Cooxie - {DC99E960-6594-45e3-9D5D-141D825B8096} - H:\työ-kakut\explorer add-ins\Cooxie Toolbar\PrvcBand.dll
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Seram Web - {CC17CB93-633F-407d-98F8-25DE790608BD} - H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] D:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure Manager] "F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "F:\tools_1\Sonera Internet Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [News Service] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Net-It Launcher] D:\WINDOWS\system32\NILaunch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [Home Theater SchSvr] "D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\photo\quicktime 7.02\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\tekstiä\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ClamWin] "H:\työ-kakut\ANTI ad-ware\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [USBToolTip] "D:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Lotus SmartCenter.lnk = F:\Text ja stuff\lotus\smartctr\smartctr.exe
O4 - Startup: Lotus SuiteStart.lnk = F:\Text ja stuff\lotus\smartctr\suitest.exe
O4 - Startup: Lotus QuickStart.lnk = ?
O4 - Startup: Lotus Organizer EasyClip.lnk = F:\Text ja stuff\lotus\organize\easyclip.exe
O4 - Startup: File-Ex.lnk = F:\TOOLS_2\File-Ex 3\FileEx.exe
O4 - Startup: VisionGS.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PGPtray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\MS Progs\Microsoft Office\xp\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Service Manager.lnk = D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Sonera Tietoturva.lnk = F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Estä tämä kohoikkuna - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google-haku - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Käännä englanninkielinen sana - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Add To Net Snippets - D:\web\NETSNI~1\Res\Clipper.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm
O8 - Extra context menu item: Linkit taaksepäin - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: Muutavalikkoa - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Työkalupalkki - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Samankaltaisia sivuja - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Save To Gallery - res://H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll/DownloadToGallery.htm
O8 - Extra context menu item: Tallenna lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Täytä lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Käännä - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATETEXT.HTM
O8 - Extra context menu item: Käännä sana - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATESMARTWORD.HTM
O8 - Extra context menu item: Käännä sivu - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATEWEBPAGE.HTM
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra button: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Tallenna - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Tallenna lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Snippets - {7130DF06-BBC1-4e16-83D4-1F875E65B695} - D:\web\NETSNI~1\NetSnip.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Työkalupalkki - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MSPROG~1\MICROS~2\2003ST~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra 'Tools' menuitem: &Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra button: Locate - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra 'Tools' menuitem: Locate Using Visual WhoIs 2004 - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - f:\photo\IrfanView375\Ebay\Ebay.htm
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://www.sf-anytime.com
O15 - Trusted Zone: *.sf-anytime.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E581F2C0-9293-11D0-B132-00A0249C49D7} (Net-It jDoc PrintGraphics) - file://C:\Ohjelmatiedostot\Net-It Now! Starter Edition\jDoc\jDocPrtm.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\Software\..\Telephony: DomainName = windowsxp
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = windowsxp
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: ezpp - {810403FA-E82E-11D5-8AAB-0010A404A3DE} - D:\WINDOWS\system32\EZTOOL~1.DLL
O18 - Protocol: ezstor - {6344A3A0-96A7-11D4-88CC-000000000000} - D:\WINDOWS\system32\VIEWERS\ezspp.dll
O18 - Protocol: hspp - {8D32BA61-D15B-11D4-894B-000000000000} - (no file)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O23 - Service: Sun One Administration Server 5.2 (admin52-serv) - Unknown owner - F:/Sstudio/DirectoryServer5.2/bin/https/bin/ns-httpd.exe (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ActiveXperts Network Monitor (AxsNmSvc) - Unknown owner - H:\TOOLS\Network Monitor\Server\AxsNmSvc.exe
O23 - Service: Sonera Tietoturva (BackWeb Client - 4436233) - Sonera Tietoturva - F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
O23 - Service: DiamondCS Process Guard Service v3.000 (DCSPGSRV) - DiamondCS - H:\TOOLS\ProcessGuard\dcsuserprot.exe
O23 - Service: DriverStudio Remote Control - Unknown owner - D:\Program Files\Compuware\Common\Bin\DSRSvc.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
O23 - Service: GEARSecurity - GEAR Software - D:\WINDOWS\System32\GEARSec.exe
O23 - Service: Sun ONE Web Server 6.1 Administration Server (https-admserv61) - Unknown owner - F:\Sstudio\WebServer6.1\bin\https\bin\webservd-wdog.exe (file missing)
O23 - Service: Sun ONE Web Server 6.1 (https-p42400.windowsxp) (https-p42400.windowsxp) - Unknown owner - F:\Sstudio\WebServer6.1\bin\https\bin\webservd-wdog.exe (file missing)
O23 - Service: InterBase 7.5 Guardian gds_db (IBG_gds_db) - Borland Software Corporation - F:\programming\Borland\InterBase7.5\bin\ibguard.exe
O23 - Service: InterBase 7.5 Server gds_db (IBS_gds_db) - Borland Software Corporation - F:\programming\Borland\InterBase7.5\bin\ibserver.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - D:\Tools_\Nero 6\InCD\InCDsrv.exe
O23 - Service: InsMonService - Unknown owner - F:\tools_1\Spring Cleaning\InsMonService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSSQL$PINNACLESYS - Unknown owner - D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe (file missing)
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - D:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Unknown owner - F:\tools_1\Norton\Internet Security Professional 2004\Norton AntiVirus\navapsvc.exe (file missing)
O23 - Service: Norton Ghost - Symantec Corporation - c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Unknown owner - F:\tools_1\Norton\Internet Security Professional 2004\Norton AntiVirus\AdvTools\NPROTECT.EXE (file missing)
O23 - Service: NuTCRACKER Service (NuTCRACKERService) - DataFocus, Inc. - D:\WINDOWS\system32\nutsrv4.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCCPFW - VSO Software - (no file)
O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation - D:\WINDOWS\System32\PGPsdkServ.exe
O23 - Service: PnPService - Unknown owner - C:\HCT\PnPService.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: scNetAnttila - Unknown owner - F:\utilit\NetAnttila\Bin\scServer.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sun ONE Directory Server 5.2 (p42400) (slapd-p42400) - Unknown owner - F:\Sstudio\DirectoryServer5.2/bin/slapd/server/ns-slapd.exe (file missing)
O23 - Service: SmartTrace - Unknown owner - f:\programming\SmartTrace\SmartTrace.exe (file missing)
O23 - Service: SQLAgent$PINNACLESYS - Unknown owner - D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE (file missing)
O23 - Service: Sun App Server 7 Admin Server (domain1:admin-server) (SunAppServer7.0.0_01-domain1_admin-server) - Unknown owner - F:/Sstudio/AppServer7/bin/appservd-wdog.exe (file missing)
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - (no file)
O23 - Service: TrueTime DE System Performance Service (X9TTsvc) - Compuware Corporation - NuMega Lab - D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
O23 - Service: BullGuard XComm (XCOMM) - Softwin - D:\WINDOWS\system32\xcommsvr.exe

Äänestä
  • kannattaisi ensin poistaa turhat softat niin olisi lokikin lyhempi.

    pyöritätkö jotain serveriä

    Äänestä

  • tartu silmään mitään ,mutta turhia käynnistyviä ohjelmia voit sammutta mielen mukaan msconfig kautta.

    Äänestä

Kommentoi aloitusta


viittii vilkasta kirjoitti:

Logfile of HijackThis v1.98.2
Scan saved at 21:09:21, on 8.9.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Tools_\Nero 6\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
D:\WINDOWS\system32\cisvc.exe
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
D:\WINDOWS\Explorer.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\FSGK32.EXE
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\GEARSec.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMB32.EXE
F:\tools_1\Spring Cleaning\InsMonService.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FCH32.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FAMEH32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsrw.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
D:\WINDOWS\system32\nutsrv4.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\PGPsdkServ.exe
F:\utilit\NetAnttila\Bin\scServer.exe
D:\WINDOWS\System32\snmp.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\userdump.exe
D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
D:\WINDOWS\system32\xcommsvr.exe
D:\Program Files\Common Files\Microsoft Shared\DirectX Extensions\DXDebugService.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsav32.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
D:\Program Files\Logitech\ImageStudio\LogiTray.exe
D:\WINDOWS\system32\MMTray.exe
D:\WINDOWS\system32\MMTray2k.exe
D:\WINDOWS\system32\MMTrayLSI.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE
D:\WINDOWS\TBPanel.exe
D:\Program Files\Logitech\ImageStudio\LowLight.exe
F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe
D:\WINDOWS\system32\NILaunch.exe
D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Windows Defender\MSASCui.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\web\PGP for Windows XP\PGPtray.exe
D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\WINDOWS\System32\dllhost.exe
F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\tools_1\SONERA~1\ANTI-S~1\fsaw.exe
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\fsguidll.exe
F:\Text ja stuff\lotus\smartctr\smartctr.exe
D:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
D:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
F:\tekstiä\lotus\wordpro97\ltsstart.exe
F:\TOOLS_2\File-Ex 3\FileEx.exe
F:\utilit\totalcmd 6.5\TOTALCMD.EXE
F:\photo\Thumbs6\Thumbs.exe
D:\WINDOWS\System32\svchost.exe
D:\Documents and Settings\xxxxx zzzzzz\Työpöytä\Tools\Adware Spam Virus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe
O1 - Hosts: AmsServer
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\tekstiä\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F1EEFAC-6AF1-40D3-960E-39D55CEAEA47} - D:\WINDOWS\system32\dswave32.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - H:\TOOLS\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: AspStudio BHO - {6F6D1BD2-9270-4e9e-B491-0287F418B5AB} - F:\programming\tools\AspStudio\AspDebugerBHO.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - D:\PROGRA~1\MORPHE~1\MORPHE~1.DLL
O3 - Toolbar: Net Snippets - {67970B26-F57D-4455-8262-81C3AE3B8B5E} - D:\web\NETSNI~1\NetSnip.dll
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - H:\TOOLS\Netcraft Toolbar\nctb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - f:\utilit\steganos internet anonym pro 7\siapro7iep.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: Download - {777D0B4C-75C9-4874-ABFF-80B4BE8DC532} - H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll
O3 - Toolbar: RSS Feeds Toolbar - {4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E} - H:\työ-kakut\explorer add-ins\RSS Feeds Toolbar\RSS.dll
O3 - Toolbar: Cooxie - {DC99E960-6594-45e3-9D5D-141D825B8096} - H:\työ-kakut\explorer add-ins\Cooxie Toolbar\PrvcBand.dll
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Seram Web - {CC17CB93-633F-407d-98F8-25DE790608BD} - H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] D:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure Manager] "F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "F:\tools_1\Sonera Internet Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [News Service] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Net-It Launcher] D:\WINDOWS\system32\NILaunch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [Home Theater SchSvr] "D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\photo\quicktime 7.02\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\tekstiä\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ClamWin] "H:\työ-kakut\ANTI ad-ware\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [USBToolTip] "D:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Lotus SmartCenter.lnk = F:\Text ja stuff\lotus\smartctr\smartctr.exe
O4 - Startup: Lotus SuiteStart.lnk = F:\Text ja stuff\lotus\smartctr\suitest.exe
O4 - Startup: Lotus QuickStart.lnk = ?
O4 - Startup: Lotus Organizer EasyClip.lnk = F:\Text ja stuff\lotus\organize\easyclip.exe
O4 - Startup: File-Ex.lnk = F:\TOOLS_2\File-Ex 3\FileEx.exe
O4 - Startup: VisionGS.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PGPtray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\MS Progs\Microsoft Office\xp\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Service Manager.lnk = D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Sonera Tietoturva.lnk = F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Estä tämä kohoikkuna - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google-haku - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Käännä englanninkielinen sana - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &NeoTrace It! - H:\TOOLS\NEOTRA~1\NTXcontext.htm
O8 - Extra context menu item: Add To Net Snippets - D:\web\NETSNI~1\Res\Clipper.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm
O8 - Extra context menu item: Linkit taaksepäin - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: Muutavalikkoa - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Työkalupalkki - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Samankaltaisia sivuja - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Save To Gallery - res://H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll/DownloadToGallery.htm
O8 - Extra context menu item: Tallenna lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Täytä lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Käännä - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATETEXT.HTM
O8 - Extra context menu item: Käännä sana - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATESMARTWORD.HTM
O8 - Extra context menu item: Käännä sivu - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATEWEBPAGE.HTM
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra button: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Tallenna - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Tallenna lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Snippets - {7130DF06-BBC1-4e16-83D4-1F875E65B695} - D:\web\NETSNI~1\NetSnip.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Työkalupalkki - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MSPROG~1\MICROS~2\2003ST~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra 'Tools' menuitem: &Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra button: Locate - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra 'Tools' menuitem: Locate Using Visual WhoIs 2004 - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - f:\photo\IrfanView375\Ebay\Ebay.htm
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - H:\TOOLS\NEOTRA~1\NTXtoolbar.htm (file missing) (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://www.sf-anytime.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E581F2C0-9293-11D0-B132-00A0249C49D7} (Net-It jDoc PrintGraphics) - file://C:\Ohjelmatiedostot\Net-It Now! Starter Edition\jDoc\jDocPrtm.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\Software\..\Telephony: DomainName = windowsxp
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = windowsxp
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll (file missing)
O18 - Protocol: ezpp - {810403FA-E82E-11D5-8AAB-0010A404A3DE} - D:\WINDOWS\system32\EZTOOL~1.DLL
O18 - Protocol: ezstor - {6344A3A0-96A7-11D4-88CC-000000000000} - D:\WINDOWS\system32\VIEWERS\ezspp.dll
O18 - Protocol: hspp - {8D32BA61-D15B-11D4-894B-000000000000} - (no file)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

Anonyymi
5000

Ilmoita asiaton sisältö

  • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

  • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

  • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

  • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

  • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

  • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

Jaa keskustelu