Logfile of HijackThis v1.98.2
Scan saved at 21:09:21, on 8.9.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Tools_\Nero 6\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
D:\WINDOWS\system32\cisvc.exe
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
D:\WINDOWS\Explorer.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\FSGK32.EXE
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\GEARSec.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMB32.EXE
F:\tools_1\Spring Cleaning\InsMonService.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FCH32.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FAMEH32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsrw.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
D:\WINDOWS\system32\nutsrv4.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\PGPsdkServ.exe
F:\utilit\NetAnttila\Bin\scServer.exe
D:\WINDOWS\System32\snmp.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\userdump.exe
D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
D:\WINDOWS\system32\xcommsvr.exe
D:\Program Files\Common Files\Microsoft Shared\DirectX Extensions\DXDebugService.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsav32.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
D:\Program Files\Logitech\ImageStudio\LogiTray.exe
D:\WINDOWS\system32\MMTray.exe
D:\WINDOWS\system32\MMTray2k.exe
D:\WINDOWS\system32\MMTrayLSI.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE
D:\WINDOWS\TBPanel.exe
D:\Program Files\Logitech\ImageStudio\LowLight.exe
F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe
D:\WINDOWS\system32\NILaunch.exe
D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Windows Defender\MSASCui.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\web\PGP for Windows XP\PGPtray.exe
D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\WINDOWS\System32\dllhost.exe
F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\tools_1\SONERA~1\ANTI-S~1\fsaw.exe
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\fsguidll.exe
F:\Text ja stuff\lotus\smartctr\smartctr.exe
D:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
D:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
F:\tekstiä\lotus\wordpro97\ltsstart.exe
F:\TOOLS_2\File-Ex 3\FileEx.exe
F:\utilit\totalcmd 6.5\TOTALCMD.EXE
F:\photo\Thumbs6\Thumbs.exe
D:\WINDOWS\System32\svchost.exe
D:\Documents and Settings\xxxxx zzzzzz\Työpöytä\Tools\Adware Spam Virus\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe
O1 - Hosts: AmsServer
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\tekstiä\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F1EEFAC-6AF1-40D3-960E-39D55CEAEA47} - D:\WINDOWS\system32\dswave32.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - H:\TOOLS\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: AspStudio BHO - {6F6D1BD2-9270-4e9e-B491-0287F418B5AB} - F:\programming\tools\AspStudio\AspDebugerBHO.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - D:\PROGRA~1\MORPHE~1\MORPHE~1.DLL
O3 - Toolbar: Net Snippets - {67970B26-F57D-4455-8262-81C3AE3B8B5E} - D:\web\NETSNI~1\NetSnip.dll
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - H:\TOOLS\Netcraft Toolbar\nctb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - f:\utilit\steganos internet anonym pro 7\siapro7iep.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: Download - {777D0B4C-75C9-4874-ABFF-80B4BE8DC532} - H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll
O3 - Toolbar: RSS Feeds Toolbar - {4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E} - H:\työ-kakut\explorer add-ins\RSS Feeds Toolbar\RSS.dll
O3 - Toolbar: Cooxie - {DC99E960-6594-45e3-9D5D-141D825B8096} - H:\työ-kakut\explorer add-ins\Cooxie Toolbar\PrvcBand.dll
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Seram Web - {CC17CB93-633F-407d-98F8-25DE790608BD} - H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] D:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure Manager] "F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "F:\tools_1\Sonera Internet Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [News Service] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Net-It Launcher] D:\WINDOWS\system32\NILaunch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [Home Theater SchSvr] "D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\photo\quicktime 7.02\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\tekstiä\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ClamWin] "H:\työ-kakut\ANTI ad-ware\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [USBToolTip] "D:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Lotus SmartCenter.lnk = F:\Text ja stuff\lotus\smartctr\smartctr.exe
O4 - Startup: Lotus SuiteStart.lnk = F:\Text ja stuff\lotus\smartctr\suitest.exe
O4 - Startup: Lotus QuickStart.lnk = ?
O4 - Startup: Lotus Organizer EasyClip.lnk = F:\Text ja stuff\lotus\organize\easyclip.exe
O4 - Startup: File-Ex.lnk = F:\TOOLS_2\File-Ex 3\FileEx.exe
O4 - Startup: VisionGS.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PGPtray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\MS Progs\Microsoft Office\xp\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Service Manager.lnk = D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Sonera Tietoturva.lnk = F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Estä tämä kohoikkuna - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google-haku - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Käännä englanninkielinen sana - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &NeoTrace It! - H:\TOOLS\NEOTRA~1\NTXcontext.htm
O8 - Extra context menu item: Add To Net Snippets - D:\web\NETSNI~1\Res\Clipper.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm
O8 - Extra context menu item: Linkit taaksepäin - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: Muutavalikkoa - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Työkalupalkki - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Samankaltaisia sivuja - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Save To Gallery - res://H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll/DownloadToGallery.htm
O8 - Extra context menu item: Tallenna lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Täytä lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Käännä - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATETEXT.HTM
O8 - Extra context menu item: Käännä sana - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATESMARTWORD.HTM
O8 - Extra context menu item: Käännä sivu - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATEWEBPAGE.HTM
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra button: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Tallenna - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Tallenna lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Snippets - {7130DF06-BBC1-4e16-83D4-1F875E65B695} - D:\web\NETSNI~1\NetSnip.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Työkalupalkki - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MSPROG~1\MICROS~2\2003ST~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra 'Tools' menuitem: &Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra button: Locate - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra 'Tools' menuitem: Locate Using Visual WhoIs 2004 - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - f:\photo\IrfanView375\Ebay\Ebay.htm
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - H:\TOOLS\NEOTRA~1\NTXtoolbar.htm (file missing) (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://www.sf-anytime.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E581F2C0-9293-11D0-B132-00A0249C49D7} (Net-It jDoc PrintGraphics) - file://C:\Ohjelmatiedostot\Net-It Now! Starter Edition\jDoc\jDocPrtm.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\Software\..\Telephony: DomainName = windowsxp
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = windowsxp
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll (file missing)
O18 - Protocol: ezpp - {810403FA-E82E-11D5-8AAB-0010A404A3DE} - D:\WINDOWS\system32\EZTOOL~1.DLL
O18 - Protocol: ezstor - {6344A3A0-96A7-11D4-88CC-000000000000} - D:\WINDOWS\system32\VIEWERS\ezspp.dll
O18 - Protocol: hspp - {8D32BA61-D15B-11D4-894B-000000000000} - (no file)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
Scan saved at 21:09:21, on 8.9.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Tools_\Nero 6\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
D:\WINDOWS\system32\cisvc.exe
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
D:\WINDOWS\Explorer.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\FSGK32.EXE
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\GEARSec.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMB32.EXE
F:\tools_1\Spring Cleaning\InsMonService.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FCH32.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FAMEH32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsrw.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
D:\WINDOWS\system32\nutsrv4.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\PGPsdkServ.exe
F:\utilit\NetAnttila\Bin\scServer.exe
D:\WINDOWS\System32\snmp.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\userdump.exe
D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
D:\WINDOWS\system32\xcommsvr.exe
D:\Program Files\Common Files\Microsoft Shared\DirectX Extensions\DXDebugService.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsav32.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
D:\Program Files\Logitech\ImageStudio\LogiTray.exe
D:\WINDOWS\system32\MMTray.exe
D:\WINDOWS\system32\MMTray2k.exe
D:\WINDOWS\system32\MMTrayLSI.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE
D:\WINDOWS\TBPanel.exe
D:\Program Files\Logitech\ImageStudio\LowLight.exe
F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe
D:\WINDOWS\system32\NILaunch.exe
D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Windows Defender\MSASCui.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\web\PGP for Windows XP\PGPtray.exe
D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\WINDOWS\System32\dllhost.exe
F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\tools_1\SONERA~1\ANTI-S~1\fsaw.exe
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\fsguidll.exe
F:\Text ja stuff\lotus\smartctr\smartctr.exe
D:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
D:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
F:\tekstiä\lotus\wordpro97\ltsstart.exe
F:\TOOLS_2\File-Ex 3\FileEx.exe
F:\utilit\totalcmd 6.5\TOTALCMD.EXE
F:\photo\Thumbs6\Thumbs.exe
D:\WINDOWS\System32\svchost.exe
D:\Documents and Settings\xxxxx zzzzzz\Työpöytä\Tools\Adware Spam Virus\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe
O1 - Hosts: AmsServer
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\tekstiä\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F1EEFAC-6AF1-40D3-960E-39D55CEAEA47} - D:\WINDOWS\system32\dswave32.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - H:\TOOLS\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: AspStudio BHO - {6F6D1BD2-9270-4e9e-B491-0287F418B5AB} - F:\programming\tools\AspStudio\AspDebugerBHO.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - D:\PROGRA~1\MORPHE~1\MORPHE~1.DLL
O3 - Toolbar: Net Snippets - {67970B26-F57D-4455-8262-81C3AE3B8B5E} - D:\web\NETSNI~1\NetSnip.dll
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - H:\TOOLS\Netcraft Toolbar\nctb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - f:\utilit\steganos internet anonym pro 7\siapro7iep.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: Download - {777D0B4C-75C9-4874-ABFF-80B4BE8DC532} - H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll
O3 - Toolbar: RSS Feeds Toolbar - {4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E} - H:\työ-kakut\explorer add-ins\RSS Feeds Toolbar\RSS.dll
O3 - Toolbar: Cooxie - {DC99E960-6594-45e3-9D5D-141D825B8096} - H:\työ-kakut\explorer add-ins\Cooxie Toolbar\PrvcBand.dll
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Seram Web - {CC17CB93-633F-407d-98F8-25DE790608BD} - H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] D:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure Manager] "F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "F:\tools_1\Sonera Internet Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [News Service] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Net-It Launcher] D:\WINDOWS\system32\NILaunch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [Home Theater SchSvr] "D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\photo\quicktime 7.02\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\tekstiä\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ClamWin] "H:\työ-kakut\ANTI ad-ware\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [USBToolTip] "D:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Lotus SmartCenter.lnk = F:\Text ja stuff\lotus\smartctr\smartctr.exe
O4 - Startup: Lotus SuiteStart.lnk = F:\Text ja stuff\lotus\smartctr\suitest.exe
O4 - Startup: Lotus QuickStart.lnk = ?
O4 - Startup: Lotus Organizer EasyClip.lnk = F:\Text ja stuff\lotus\organize\easyclip.exe
O4 - Startup: File-Ex.lnk = F:\TOOLS_2\File-Ex 3\FileEx.exe
O4 - Startup: VisionGS.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PGPtray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\MS Progs\Microsoft Office\xp\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Service Manager.lnk = D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Sonera Tietoturva.lnk = F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Estä tämä kohoikkuna - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google-haku - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Käännä englanninkielinen sana - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &NeoTrace It! - H:\TOOLS\NEOTRA~1\NTXcontext.htm
O8 - Extra context menu item: Add To Net Snippets - D:\web\NETSNI~1\Res\Clipper.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm
O8 - Extra context menu item: Linkit taaksepäin - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: Muutavalikkoa - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Työkalupalkki - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Samankaltaisia sivuja - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Save To Gallery - res://H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll/DownloadToGallery.htm
O8 - Extra context menu item: Tallenna lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Täytä lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Käännä - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATETEXT.HTM
O8 - Extra context menu item: Käännä sana - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATESMARTWORD.HTM
O8 - Extra context menu item: Käännä sivu - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATEWEBPAGE.HTM
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra button: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Tallenna - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Tallenna lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Snippets - {7130DF06-BBC1-4e16-83D4-1F875E65B695} - D:\web\NETSNI~1\NetSnip.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Työkalupalkki - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MSPROG~1\MICROS~2\2003ST~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra 'Tools' menuitem: &Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra button: Locate - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra 'Tools' menuitem: Locate Using Visual WhoIs 2004 - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - f:\photo\IrfanView375\Ebay\Ebay.htm
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - H:\TOOLS\NEOTRA~1\NTXtoolbar.htm (file missing) (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://www.sf-anytime.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E581F2C0-9293-11D0-B132-00A0249C49D7} (Net-It jDoc PrintGraphics) - file://C:\Ohjelmatiedostot\Net-It Now! Starter Edition\jDoc\jDocPrtm.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\Software\..\Telephony: DomainName = windowsxp
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = windowsxp
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll (file missing)
O18 - Protocol: ezpp - {810403FA-E82E-11D5-8AAB-0010A404A3DE} - D:\WINDOWS\system32\EZTOOL~1.DLL
O18 - Protocol: ezstor - {6344A3A0-96A7-11D4-88CC-000000000000} - D:\WINDOWS\system32\VIEWERS\ezspp.dll
O18 - Protocol: hspp - {8D32BA61-D15B-11D4-894B-000000000000} - (no file)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
Vastaukset 4
Vanhimmat
uus logi tolla versiolla
http://koti.mbnet.fi/pattaya1/HijackThis.exe
Logfile of HijackThis v1.99.1
Scan saved at 16:51:57, on 9.9.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Tools_\Nero 6\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
D:\WINDOWS\system32\cisvc.exe
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
D:\WINDOWS\Explorer.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\FSGK32.EXE
F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\GEARSec.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSMB32.EXE
F:\tools_1\Spring Cleaning\InsMonService.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FCH32.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FAMEH32.EXE
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsrw.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
D:\WINDOWS\system32\nutsrv4.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\PGPsdkServ.exe
F:\utilit\NetAnttila\Bin\scServer.exe
D:\WINDOWS\System32\snmp.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\userdump.exe
D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
D:\WINDOWS\system32\xcommsvr.exe
D:\Program Files\Common Files\Microsoft Shared\DirectX Extensions\DXDebugService.exe
F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsav32.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
D:\Program Files\Logitech\ImageStudio\LogiTray.exe
D:\WINDOWS\system32\MMTray.exe
D:\WINDOWS\system32\MMTray2k.exe
D:\WINDOWS\system32\MMTrayLSI.exe
F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE
D:\WINDOWS\TBPanel.exe
D:\Program Files\Logitech\ImageStudio\LowLight.exe
F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe
D:\WINDOWS\system32\NILaunch.exe
D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Windows Defender\MSASCui.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\web\PGP for Windows XP\PGPtray.exe
D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\WINDOWS\System32\dllhost.exe
F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\tools_1\SONERA~1\ANTI-S~1\fsaw.exe
D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
F:\tools_1\Sonera Internet Tietoturva\FSGUI\fsguidll.exe
F:\Text ja stuff\lotus\smartctr\smartctr.exe
D:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
D:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
F:\tekstiä\lotus\wordpro97\ltsstart.exe
F:\TOOLS_2\File-Ex 3\FileEx.exe
F:\utilit\totalcmd 6.5\TOTALCMD.EXE
F:\photo\Thumbs6\Thumbs.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
C:\Downloads\AD-SPY protection\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe
O1 - Hosts: AmsServer
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\tekstiä\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F1EEFAC-6AF1-40D3-960E-39D55CEAEA47} - D:\WINDOWS\system32\dswave32.dll
O2 - BHO: AspStudio BHO - {6F6D1BD2-9270-4e9e-B491-0287F418B5AB} - F:\programming\tools\AspStudio\AspDebugerBHO.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - D:\PROGRA~1\MORPHE~1\MORPHE~1.DLL
O3 - Toolbar: Net Snippets - {67970B26-F57D-4455-8262-81C3AE3B8B5E} - D:\web\NETSNI~1\NetSnip.dll
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - H:\TOOLS\Netcraft Toolbar\nctb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - f:\utilit\steganos internet anonym pro 7\siapro7iep.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - H:\työ-kakut\Sekal työkal\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: Download - {777D0B4C-75C9-4874-ABFF-80B4BE8DC532} - H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll
O3 - Toolbar: RSS Feeds Toolbar - {4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E} - H:\työ-kakut\explorer add-ins\RSS Feeds Toolbar\RSS.dll
O3 - Toolbar: Cooxie - {DC99E960-6594-45e3-9D5D-141D825B8096} - H:\työ-kakut\explorer add-ins\Cooxie Toolbar\PrvcBand.dll
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Seram Web - {CC17CB93-633F-407d-98F8-25DE790608BD} - H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] D:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [MMTray] MMTray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure Manager] "F:\tools_1\Sonera Internet Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "F:\tools_1\Sonera Internet Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\tekstiä\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [News Service] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Net-It Launcher] D:\WINDOWS\system32\NILaunch.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [Home Theater SchSvr] "D:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\photo\quicktime 7.02\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "F:\tools_1\Sonera Internet Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\tekstiä\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ClamWin] "H:\työ-kakut\ANTI ad-ware\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [USBToolTip] "D:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Lotus SmartCenter.lnk = F:\Text ja stuff\lotus\smartctr\smartctr.exe
O4 - Startup: Lotus SuiteStart.lnk = F:\Text ja stuff\lotus\smartctr\suitest.exe
O4 - Startup: Lotus QuickStart.lnk = ?
O4 - Startup: Lotus Organizer EasyClip.lnk = F:\Text ja stuff\lotus\organize\easyclip.exe
O4 - Startup: File-Ex.lnk = F:\TOOLS_2\File-Ex 3\FileEx.exe
O4 - Startup: VisionGS.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PGPtray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = F:\MS Progs\Microsoft Office\xp\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Service Manager.lnk = D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Sonera Tietoturva.lnk = F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\Program\fspex.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Estä tämä kohoikkuna - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google-haku - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Käännä englanninkielinen sana - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Add To Net Snippets - D:\web\NETSNI~1\Res\Clipper.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://F:\tekstiä\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm
O8 - Extra context menu item: Linkit taaksepäin - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: Muutavalikkoa - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Työkalupalkki - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Samankaltaisia sivuja - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Save To Gallery - res://H:\työ-kakut\explorer add-ins\rss feeds tbaar\IEBand2.dll/DownloadToGallery.htm
O8 - Extra context menu item: Tallenna lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Täytä lomakkeet - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Käännä - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATETEXT.HTM
O8 - Extra context menu item: Käännä sana - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATESMARTWORD.HTM
O8 - Extra context menu item: Käännä sivu - Seram Web - res://H:\työ-kakut\explorer add-ins\Sunda Systems\Seram Web\webtra2.dll/TRANSLATEWEBPAGE.HTM
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\programming\Java\jre1.5.0.06\bin\ssv.dll
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - D:\Program Files\Morpheus Toolbar\morpheustoolbar.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - F:\tools_1\Sonera Internet Tietoturva\Anti-Spyware\ieshield.dll
O9 - Extra button: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Täytä lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Tallenna - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Tallenna lomakkeet - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Snippets - {7130DF06-BBC1-4e16-83D4-1F875E65B695} - D:\web\NETSNI~1\NetSnip.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Työkalupalkki - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MSPROG~1\MICROS~2\2003ST~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra 'Tools' menuitem: &Magic Nettrace - {92848C13-5482-49CB-B31C-CA8D74EFF508} - H:\TOOLS\Magic NetTrace\MTIE.exe
O9 - Extra button: Locate - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra 'Tools' menuitem: Locate Using Visual WhoIs 2004 - {B6F776D7-C231-11D4-8158-005004ADEFCA} - F:\TOOLS_2\Visual WhoIs 2004\srstools.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - f:\photo\IrfanView375\Ebay\Ebay.htm
O9 - Extra button: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O9 - Extra 'Tools' menuitem: Edit with XML Spy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - D:\Program Files\Altova\XMLSPY2004 Enterprise Complete\spy.htm (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://www.sf-anytime.com
O15 - Trusted Zone: *.sf-anytime.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E581F2C0-9293-11D0-B132-00A0249C49D7} (Net-It jDoc PrintGraphics) - file://C:\Ohjelmatiedostot\Net-It Now! Starter Edition\jDoc\jDocPrtm.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\Software\..\Telephony: DomainName = windowsxp
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = windowsxp
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = windowsxp
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: ezpp - {810403FA-E82E-11D5-8AAB-0010A404A3DE} - D:\WINDOWS\system32\EZTOOL~1.DLL
O18 - Protocol: ezstor - {6344A3A0-96A7-11D4-88CC-000000000000} - D:\WINDOWS\system32\VIEWERS\ezspp.dll
O18 - Protocol: hspp - {8D32BA61-D15B-11D4-894B-000000000000} - (no file)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O23 - Service: Sun One Administration Server 5.2 (admin52-serv) - Unknown owner - F:/Sstudio/DirectoryServer5.2/bin/https/bin/ns-httpd.exe (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ActiveXperts Network Monitor (AxsNmSvc) - Unknown owner - H:\TOOLS\Network Monitor\Server\AxsNmSvc.exe
O23 - Service: Sonera Tietoturva (BackWeb Client - 4436233) - Sonera Tietoturva - F:\tools_1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
O23 - Service: DiamondCS Process Guard Service v3.000 (DCSPGSRV) - DiamondCS - H:\TOOLS\ProcessGuard\dcsuserprot.exe
O23 - Service: DriverStudio Remote Control - Unknown owner - D:\Program Files\Compuware\Common\Bin\DSRSvc.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\tools_1\Sonera Internet Tietoturva\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - F:\tools_1\Sonera Internet Tietoturva\backweb\4436233\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\tools_1\Sonera Internet Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - F:\tools_1\Sonera Internet Tietoturva\Common\FSMA32.EXE
O23 - Service: GEARSecurity - GEAR Software - D:\WINDOWS\System32\GEARSec.exe
O23 - Service: Sun ONE Web Server 6.1 Administration Server (https-admserv61) - Unknown owner - F:\Sstudio\WebServer6.1\bin\https\bin\webservd-wdog.exe (file missing)
O23 - Service: Sun ONE Web Server 6.1 (https-p42400.windowsxp) (https-p42400.windowsxp) - Unknown owner - F:\Sstudio\WebServer6.1\bin\https\bin\webservd-wdog.exe (file missing)
O23 - Service: InterBase 7.5 Guardian gds_db (IBG_gds_db) - Borland Software Corporation - F:\programming\Borland\InterBase7.5\bin\ibguard.exe
O23 - Service: InterBase 7.5 Server gds_db (IBS_gds_db) - Borland Software Corporation - F:\programming\Borland\InterBase7.5\bin\ibserver.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - D:\Tools_\Nero 6\InCD\InCDsrv.exe
O23 - Service: InsMonService - Unknown owner - F:\tools_1\Spring Cleaning\InsMonService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSSQL$PINNACLESYS - Unknown owner - D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe (file missing)
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - D:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Unknown owner - F:\tools_1\Norton\Internet Security Professional 2004\Norton AntiVirus\navapsvc.exe (file missing)
O23 - Service: Norton Ghost - Symantec Corporation - c:\Program Files\norton ghost 9\Agent\PQV2iSvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Unknown owner - F:\tools_1\Norton\Internet Security Professional 2004\Norton AntiVirus\AdvTools\NPROTECT.EXE (file missing)
O23 - Service: NuTCRACKER Service (NuTCRACKERService) - DataFocus, Inc. - D:\WINDOWS\system32\nutsrv4.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCCPFW - VSO Software - (no file)
O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation - D:\WINDOWS\System32\PGPsdkServ.exe
O23 - Service: PnPService - Unknown owner - C:\HCT\PnPService.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: scNetAnttila - Unknown owner - F:\utilit\NetAnttila\Bin\scServer.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sun ONE Directory Server 5.2 (p42400) (slapd-p42400) - Unknown owner - F:\Sstudio\DirectoryServer5.2/bin/slapd/server/ns-slapd.exe (file missing)
O23 - Service: SmartTrace - Unknown owner - f:\programming\SmartTrace\SmartTrace.exe (file missing)
O23 - Service: SQLAgent$PINNACLESYS - Unknown owner - D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE (file missing)
O23 - Service: Sun App Server 7 Admin Server (domain1:admin-server) (SunAppServer7.0.0_01-domain1_admin-server) - Unknown owner - F:/Sstudio/AppServer7/bin/appservd-wdog.exe (file missing)
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - (no file)
O23 - Service: TrueTime DE System Performance Service (X9TTsvc) - Compuware Corporation - NuMega Lab - D:\Program Files\Compuware\DriverWorkbench\TTPerfSvc.exe
O23 - Service: BullGuard XComm (XCOMM) - Softwin - D:\WINDOWS\system32\xcommsvr.exe
kannattaisi ensin poistaa turhat softat niin olisi lokikin lyhempi.
pyöritätkö jotain serveriä
tartu silmään mitään ,mutta turhia käynnistyviä ohjelmia voit sammutta mielen mukaan msconfig kautta.