Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    virusburst???? helppii helppii...

    Joo mun koneelle on jostakin tullut tuo "virusburst"
    ohjelma joka varottelee: "Critical system error!"
    jeesatkaa miten se poistetaan...

    Tässä loki:

    Logfile of HijackThis v1.99.1
    Scan saved at 17:59:50, on 15.9.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Sygate\SPF\smc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\WINDOWS\System32\CTSvcCDA.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.exe
    C:\Program Files\Media-Codec\isamonitor.exe
    C:\Program Files\Media-Codec\pmsngr.exe
    C:\WINDOWS\system32\sstray.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
    C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\Program Files\Media-Codec\isamini.exe
    E:\DaemonTools\daemon.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    E:\iTunes\iTunesHelper.exe
    C:\Program Files\Media-Codec\pmmon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    E:\Program Files\Counter-Strike\Steam.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
    C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
    C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
    C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
    C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
    C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Tino\Työpöytä\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://elisa.net/paketti/haku.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jippii.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.searchv.com/w/search.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
    F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
    O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
    O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\Media-Codec\isaddon.dll
    O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
    O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
    O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Protection Bar - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - C:\Program Files\Media-Codec\iesplugin.dll
    O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
    O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
    O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
    O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
    O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
    O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
    O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
    O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
    O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
    O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
    O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
    O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
    O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
    O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
    O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
    O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
    O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
    O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
    O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
    O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
    O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
    O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
    O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
    O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
    O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
    O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
    O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
    O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
    O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
    O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
    O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
    O4 - HKLM\..\Run: [eDonkey2000] D:\eDonkey2000\eDonkey2000.exe -t
    O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
    O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
    O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
    O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\DaemonTools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [iTunesHelper] "E:\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
    O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O4 - Global Startup: Image Transfer.lnk = ?
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
    O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb001YYFI_ZNfox000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
    O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
    O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
    O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
    O9 - Extra button: X-Diver - {CE5D2BAD-61A3-46FA-BB22-E5BA59DE26B3} - C:\WINDOWS\System32\CUWIN32.EXE (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
    O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
    O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
    O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
    O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O21 - SSODL: astrogeology - {2be26361-58a2-4836-be57-b838f02fec3f} - C:\WINDOWS\system32\qxfgcg.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
    O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
    O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)
    271352
    Äänestä

    Muut lukivat myös

    Vastaukset 27

    Vanhimmat

    Lataa smitfraudfix:

    http://siri.urz.free.fr/Fix/SmitfraudFix.zip

    Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:

    Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
    Valitse optio 1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
    Postita tämän tekstitiedoston sisältö viestiketjuusi.

    HUOM! Jotkut virus ohjelmat tunnistavat Smitfraudfix.exe:n haittaohjelmaksi, jos virusohjelma valittaa kun yrität ladata pakettia, ota se pois käytöstä siksi aikaa.

    Äänestä

    Scan done at 18:13:29,76, pe 15.09.2006
    Run from C:\Documents and Settings\Tino\Ty”p”yt„\SmitfraudFix
    OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
    Fix ran in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    C:\WINDOWS\azesearch.bmp FOUND !
    C:\WINDOWS\country.exe FOUND !
    C:\WINDOWS\kl1.exe FOUND !
    C:\WINDOWS\loadadv728.exe FOUND !
    C:\WINDOWS\ms1.exe FOUND !
    C:\WINDOWS\secure32.html FOUND !
    C:\WINDOWS\tool1.exe FOUND !
    C:\WINDOWS\tool2.exe FOUND !
    C:\WINDOWS\tool3.exe FOUND !
    C:\WINDOWS\tool4.exe FOUND !
    C:\WINDOWS\tool5.exe FOUND !
    C:\WINDOWS\toolbar.exe FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    C:\WINDOWS\system32\paytime.exe FOUND !
    C:\WINDOWS\system32\qxfgcg.dll FOUND !
    C:\WINDOWS\system32\shell386.exe FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Tino\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Tino\Suosikit


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    C:\Program Files\Media-Codec\ FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Nykyinen kotisivu"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "{2be26361-58a2-4836-be57-b838f02fec3f}"="astrogeology"

    [HKEY_CLASSES_ROOT\CLSID\{2be26361-58a2-4836-be57-b838f02fec3f}\InProcServer32]
    @="C:\WINDOWS\system32\qxfgcg.dll"

    [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2be26361-58a2-4836-be57-b838f02fec3f}\InProcServer32]
    @="C:\WINDOWS\system32\qxfgcg.dll"



    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End

    Äänestä

    • Printtaa ohjeet ulos.

      Käynnistä koneesi vikasietotilaan.

      Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
      Valitse optio 2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.

      Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.

      Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".

      Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
      Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi ja liitä tämän raportin tulokset vastaukseesi.
      Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.
      Lähetä myös uusi HJT logi.

      Äänestä

    • fix it kirjoitti:

      Printtaa ohjeet ulos.

      Käynnistä koneesi vikasietotilaan.

      Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
      Valitse optio 2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.

      Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.

      Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".

      Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
      Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi ja liitä tämän raportin tulokset vastaukseesi.
      Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.
      Lähetä myös uusi HJT logi.

      Kiitos, tuo virusburst katosi nyt.
      Tässä vielä loki:

      SmitFraudFix v2.88

      Scan done at 18:43:03,29, pe 15.09.2006
      Run from C:\Documents and Settings\Tino\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      Fix ran in safe mode

      »»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{2be26361-58a2-4836-be57-b838f02fec3f}"="astrogeology"

      [HKEY_CLASSES_ROOT\CLSID\{2be26361-58a2-4836-be57-b838f02fec3f}\InProcServer32]
      @="C:\WINDOWS\system32\qxfgcg.dll"

      [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2be26361-58a2-4836-be57-b838f02fec3f}\InProcServer32]
      @="C:\WINDOWS\system32\qxfgcg.dll"


      »»»»»»»»»»»»»»»»»»»»»»»» Killing process


      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

      GenericRenosFix by S!Ri

      C:\WINDOWS\system32\qxfgcg.dll -> Hoax.Win32.Renos.gen.d
      C:\WINDOWS\system32\qxfgcg.dll -> Deleted


      »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

      C:\WINDOWS\azesearch.bmp Deleted
      C:\WINDOWS\country.exe Deleted
      C:\WINDOWS\kl1.exe Deleted
      C:\WINDOWS\loadadv728.exe Deleted
      C:\WINDOWS\ms1.exe Deleted
      C:\WINDOWS\secure32.html Deleted
      C:\WINDOWS\tool1.exe Deleted
      C:\WINDOWS\tool2.exe Deleted
      C:\WINDOWS\tool3.exe Deleted
      C:\WINDOWS\tool4.exe Deleted
      C:\WINDOWS\tool5.exe Deleted
      C:\WINDOWS\toolbar.exe Deleted
      C:\WINDOWS\system32\paytime.exe Deleted
      C:\WINDOWS\system32\shell386.exe Deleted
      C:\Program Files\Media-Codec\ Deleted

      »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


      »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

      Registry Cleaning done.

      »»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» End




      Ja tässä toinen:


      Logfile of HijackThis v1.99.1
      Scan saved at 18:52:46, on 15.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      E:\DaemonTools\daemon.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      E:\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\Documents and Settings\Tino\Työpöytä\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
      O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
      O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [eDonkey2000] D:\eDonkey2000\eDonkey2000.exe -t
      O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
      O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
      O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
      O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\DaemonTools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [iTunesHelper] "E:\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Image Transfer.lnk = ?
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb001YYFI_ZNfox000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O9 - Extra button: X-Diver - {CE5D2BAD-61A3-46FA-BB22-E5BA59DE26B3} - C:\WINDOWS\System32\CUWIN32.EXE (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Äänestä

    • tinotinotino kirjoitti:

      Kiitos, tuo virusburst katosi nyt.
      Tässä vielä loki:

      SmitFraudFix v2.88

      Scan done at 18:43:03,29, pe 15.09.2006
      Run from C:\Documents and Settings\Tino\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      Fix ran in safe mode

      »»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{2be26361-58a2-4836-be57-b838f02fec3f}"="astrogeology"

      [HKEY_CLASSES_ROOT\CLSID\{2be26361-58a2-4836-be57-b838f02fec3f}\InProcServer32]
      @="C:\WINDOWS\system32\qxfgcg.dll"

      [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2be26361-58a2-4836-be57-b838f02fec3f}\InProcServer32]
      @="C:\WINDOWS\system32\qxfgcg.dll"


      »»»»»»»»»»»»»»»»»»»»»»»» Killing process


      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

      GenericRenosFix by S!Ri

      C:\WINDOWS\system32\qxfgcg.dll -> Hoax.Win32.Renos.gen.d
      C:\WINDOWS\system32\qxfgcg.dll -> Deleted


      »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

      C:\WINDOWS\azesearch.bmp Deleted
      C:\WINDOWS\country.exe Deleted
      C:\WINDOWS\kl1.exe Deleted
      C:\WINDOWS\loadadv728.exe Deleted
      C:\WINDOWS\ms1.exe Deleted
      C:\WINDOWS\secure32.html Deleted
      C:\WINDOWS\tool1.exe Deleted
      C:\WINDOWS\tool2.exe Deleted
      C:\WINDOWS\tool3.exe Deleted
      C:\WINDOWS\tool4.exe Deleted
      C:\WINDOWS\tool5.exe Deleted
      C:\WINDOWS\toolbar.exe Deleted
      C:\WINDOWS\system32\paytime.exe Deleted
      C:\WINDOWS\system32\shell386.exe Deleted
      C:\Program Files\Media-Codec\ Deleted

      »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


      »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

      Registry Cleaning done.

      »»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» End




      Ja tässä toinen:


      Logfile of HijackThis v1.99.1
      Scan saved at 18:52:46, on 15.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      E:\DaemonTools\daemon.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      E:\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\Documents and Settings\Tino\Työpöytä\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
      O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
      O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [eDonkey2000] D:\eDonkey2000\eDonkey2000.exe -t
      O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
      O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
      O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
      O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\DaemonTools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [iTunesHelper] "E:\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Image Transfer.lnk = ?
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb001YYFI_ZNfox000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O9 - Extra button: X-Diver - {CE5D2BAD-61A3-46FA-BB22-E5BA59DE26B3} - C:\WINDOWS\System32\CUWIN32.EXE (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Sitten löytyy vielä.

      fixaa nämä:

      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
      O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
      O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
      O4 - HKLM\..\Run: [eDonkey2000] D:\eDonkey2000\eDonkey2000.exe -t
      O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
      O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
      O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
      O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb001YYFI_ZNfox000
      O9 - Extra button: X-Diver - {CE5D2BAD-61A3-46FA-BB22-E5BA59DE26B3} - C:\WINDOWS\System32\CUWIN32.EXE (HKCU)

      Näitä voit sammutella pois valitsemalla käynnistä, suorita, kirjoita msconfig, käynnistys välilehti ja ruksit näiden eestä pois:

      -daemon.exe
      -qttask.exe
      -iTunesHelper.exe
      -NeroCheck.exe
      -ctfmon.exe
      -LDMConf.exe

      Tee nuo ja lähetä sen jälkeen uus hjt logi, muut saa auttaa loppuun kun tuolla on muutamia juttuja joista en uskalla sanoo juuta enkä jaata.

      Ennen kun skannaat uudestaan niin vaihda tuo hijackthis exe --> skanner.exe:si.

      Äänestä

    • fix it kirjoitti:

      Sitten löytyy vielä.

      fixaa nämä:

      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
      O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
      O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
      O4 - HKLM\..\Run: [eDonkey2000] D:\eDonkey2000\eDonkey2000.exe -t
      O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
      O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
      O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
      O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb001YYFI_ZNfox000
      O9 - Extra button: X-Diver - {CE5D2BAD-61A3-46FA-BB22-E5BA59DE26B3} - C:\WINDOWS\System32\CUWIN32.EXE (HKCU)

      Näitä voit sammutella pois valitsemalla käynnistä, suorita, kirjoita msconfig, käynnistys välilehti ja ruksit näiden eestä pois:

      -daemon.exe
      -qttask.exe
      -iTunesHelper.exe
      -NeroCheck.exe
      -ctfmon.exe
      -LDMConf.exe

      Tee nuo ja lähetä sen jälkeen uus hjt logi, muut saa auttaa loppuun kun tuolla on muutamia juttuja joista en uskalla sanoo juuta enkä jaata.

      Ennen kun skannaat uudestaan niin vaihda tuo hijackthis exe --> skanner.exe:si.

      Kiitos tosi paljon jo nyt, etenkin käynnistys nopeutui erittäin paljon ja muutamat error ikkunat lähtivät pois. Tässä uusi hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 21:35:00, on 15.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
      O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Image Transfer.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Äänestä

    • tinotinotino kirjoitti:

      Kiitos tosi paljon jo nyt, etenkin käynnistys nopeutui erittäin paljon ja muutamat error ikkunat lähtivät pois. Tässä uusi hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 21:35:00, on 15.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
      O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Image Transfer.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      skannaa koneesi ewidolla ja escan ohjelmalla, ohjeet löydät palstalta hakukoneella

      Äänestä

    • tinotinotino kirjoitti:

      Kiitos tosi paljon jo nyt, etenkin käynnistys nopeutui erittäin paljon ja muutamat error ikkunat lähtivät pois. Tässä uusi hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 21:35:00, on 15.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
      O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Image Transfer.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Lataa viimeisin Ad-Aware SE-versio täältä (Jos sinulla on jo Ad-Aware asennettu, varmista että se on viimeisin versio 1.0.6)

      http://www.download.com/3000-2144-10045910.html

      Jos se EI ole versio 1.0.6, poista nykyinen versiosi Lisää/Poista- sovelluksen kautta ja deletoi kansio: C:\Program Files\Lavasoft sekä tyhjennä roskakori. Lopulta asenna linkistä tuo viimeisin versio.

      Avaa Ad-Aware SE ja käynnistä WebUpdate-toiminto. (Klikkaa maapallo-kuvakketta, klikkaa "connect", klikkaa "OK", klikkaa "Finish".)


      Lataa Lavasoftin VX2 Puhdistaja-plug-in

      http://www.lavasoftusa.com/software/addons/vx2cleaner.shtml


      * Asenna VX2 Cleaner
      * Käynnistä Ad-Aware SE
      * Mene valikkoon nimeltä "Plug-ins"
      * Valitse VX2 Cleaner-plug-in ja klikkaa "Run Tool" (Ennen kuin ajat VX2 Cleanerin, varmista että muut Anti-virus- & Anti-spyware- ohjelmat ovat poissa päältä.)
      * Klikkaa "OK" kun kysytään haluatko ajaa tämän työkalun
      * Jos koneesi ei ole saanut tartuntaa, klikkaa "Close".

      Jos koneesi on saanut tartunnan;


      * Valitse "Clean"
      * Käynnistä uudelleen.
      * Skannaa koneesi Ad-Awarella;

      Tee asetukset näin:


      * Mene Ad-Awaren määritysikkunaan
      * Valitse General > Safety & Settings: Rastita (vihreäksi) kaikki kolme.
      * Klikkaa Tweak > Cleaning Engine > Poista rastitus "Always try to unload modules before deletion".

      Klikkaa "Proceed"
      Klikkaa "Scan Now"
      Rastita valinta "Search for negligible risk entries"
      Rastita valinta "Search for low-risk threats"
      Aja skanneri käyttämällä Full Scan (Perform full system scan) moodia.
      Kun skannaus on valmis, valitse "Next".
      Skannaus tuloksissa, valitse "Scan Summary" välilehti.
      Rastita boxi jokaisen löydetyn rivin viereen, poistoa varten.
      Klikkaa "Next", klikkaa "OK".

      * Käynnistä koneesi uudelleen
      * Aja vielä toinen skannaus (Ad-Awarella ja VX2 Cleanerilla) varmistaaksesi, että kaikki pahat tiedostot on kadonnut koneeltasi.

      Lähetä uus Hijack logi ton jälkeen.

      Äänestä

    • Tässä siis eScan logi koko litania:

      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ABER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\AFID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALSR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALUPOJEJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ANUZSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\autoheal.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\BKZUPQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BMJKR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BOTSD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BSXIPKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUPWHYR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYFKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CBMZILIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CFUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\clicks.dll tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\CLQDKL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CTYVMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DCDEFOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DEZIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DGJATKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DIVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DKV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DQTOH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWTAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EBQBAJWR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EDSPEV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EFIVGVAT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EHEJKFGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ENIHWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EXKJER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FAVOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FCTKHGJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\fixit.exe tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\FKH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FSF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FWBYHAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GDEHWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GHYT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLGXIVQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GNQPIHUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPCTEJMZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPGR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXONKHAZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXSHCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HAREZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HCRYL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HITIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBATOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HUPIH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IMAGE.0LL infected by "Trojan-Downloader.Win32.WinShow.u" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\IRMHOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IVUVOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JGJMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JQLKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\juhgvnihe.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\WINDOWS\JUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JWBAFMN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KBENYTSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KHUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KJMFAV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KNKVUR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KXOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZQVYX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LADEXGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LGRYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LMVSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWPIB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWTKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MBUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\mc-110-12-0000234.exe infected by "Trojan-Downloader.NSIS.Agent.p" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\MDSRCZOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFEP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFMVYVUV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MLYZMDUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MNWJALIZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRGFCVSL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRQTKZOV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\mshp.dll infected by "Trojan-Downloader.Win32.WinShow.u" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\MTKXUNYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MVMNQRIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MZIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
      File C:\WINDOWS\NGJMP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMDGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMZIXQT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQDAXCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OBOPOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHEFEB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHKJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHUVIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OJINSLKP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ONQXOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OPOLEVAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ORMPUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OZOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PCNGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PIPCHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PKDUNOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\POP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PQP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUFIHER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUP.0XE infected by "Trojan-Downloader.Win32.VB.ca" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\PWJEZGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QBMZGRWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDWPIBCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QFEZUH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJCNEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJURIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJYFIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QNONGNKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QRKRCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QZORGV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCDIXMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZQR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZWP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBIV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBMHQTOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SJMNIFSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SNGZMXQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SPWH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SRKDIXAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SROZUNCP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SVCPROC.0XE infected by "Trojan.Win32.Stervis.c" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\SVCPROC.1XE infected by "Trojan.Win32.Stervis.e" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\SZGVYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TAFGL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TCDQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TML.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOBSZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TYTAVGB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UBEDMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHIF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHWFWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ULUHIVYD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UPUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\URQDSZUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UXUPSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFSN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFYF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VEDAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZEDIJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VMVUFCR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VSXQXQL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WFQVCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WRCZOZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVSVIFQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVWT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WZKDCJUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XAL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XCXMNWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XHRMY.0XE infected by "Trojan.Win32.SecondThought.aa" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\XIZIXOB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMBST.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOZWZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YNIZEVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YPOHEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\yryrtmv.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.c. No Action Taken.
      File C:\WINDOWS\YXCD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YZOJQBKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ZERUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zeta.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\ZGZCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZITOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZMH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zqtilid.exe.tmp tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZULIT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZYBMDEF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\system32\AFBIRPS.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\angelex.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\system32\ARSZLC.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\AWBIHP.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\AWNZDGR.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\azesearch4.ocx tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\BAFXZRA.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\BHOW.0XE infected by "Trojan.Win32.Agent.az" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\bitsprx2s.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\WINDOWS\system32\DKPXJIO.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\DRPMON.0LL infected by "Trojan.Win32.Agent.db" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\exdl.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exdl3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\iasada.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\javexulm.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\JKNCKJ.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\mqexdlm.srg tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mscb.dll tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\NDrv.dll tagged as not-a-virus:AdWare.Win32.PurityScan.s. No Action Taken.
      File C:\WINDOWS\system32\NEILGSX.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\netut80ex.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\NHNDEBH.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\OWIGCUK.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.1XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.2XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.3XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.4XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.5XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.6XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.7XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.8XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.9XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\psis80ex.ax tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\QEXOSKN.0XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\TAYSTV.0XE infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\TFTP1040.0 infected by "Net-Worm.Win32.Lovesan.a" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\UPOAFG.0XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\VLAEFT.0XE infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\XATZPWS.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-4fbc14ee-1a8f78e1.class infected by "Exploit.Java.ByteVerify" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-393d648-4a1ab212.class infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-488fe19e-486e2fa4.class infected by "Exploit.Java.ByteVerify" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-10ffa0b5-62f91bac.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-1c0a4658.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-7b4bbca9.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-5aefffee-659ad8dc.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\freemovies.jar-677d2343-2cbe971a.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-2a6a009e.zip infected by "Trojan-Downloader.Java.OpenStream.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv68.jar-158e9df4-651cd8bb.zip infected by "Trojan.Java.ClassLoader.h" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Local Settings\Temp\BZW\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\CQR\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\DFN\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\DQI\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\DQV\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\FEA\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\FNB\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\IBV\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\IUA\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\IUL\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\LEH\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\LIB\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\OFR\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\QRO\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\QVT\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\RVC\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\SFC\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\TFE\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\Tilapäinen kansio 2 wpeproalpha0_9a.zip\WPE PRO.0XE infected by "Sniffer.Win32.WpePro.a" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Tino\Local Settings\Temp\TSZ\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\VCD\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\VEH\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\VGE\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\WGR\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\WVG\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YDD\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YHD\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YUL\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YWI\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Omat tiedostot\firc\FIRC.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\321\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\321\SmitfraudFix.zip tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\backups\backup-20060915-213415-804.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\backups\backup-20060915-213415-925.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\ezstub.exe tagged as not-a-virus:AdWare.Win32.EZula.l. No Action Taken.
      File C:\iMeshInst.exe infected by "Trojan.Win32.Agent.az" Virus. Action Taken: File Deleted.
      File C:\MemoryWatcher_b.exe infected by "Backdoor.Win32.VB.oq" Virus. Action Taken: File Renamed.
      File C:\msbbhook.dll tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\ncmyb.dll tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\Program Files\Common Files\updater\DELUPDAT.0XE infected by "Trojan-Downloader.Win32.Keenval" Virus. Action Taken: File Deleted.
      File C:\Program Files\Common Files\updater\SUI.0XE infected by "Trojan-Downloader.Win32.Keenval" Virus. Action Taken: File Deleted.
      File C:\Program Files\Common Files\updater\WUPDATER.0XE infected by "Trojan-Downloader.Win32.Keenval" Virus. Action Taken: File Deleted.
      File C:\Program Files\E2G\IeBHOs.dll tagged as not-a-virus:AdWare.Win32.BHO.h. No Action Taken.
      File C:\Program Files\Internet Explorer\NGGRGYOB.0XE infected by "Trojan-Downloader.Win32.WinShow.z" Virus. Action Taken: File Deleted.
      File C:\Program Files\Internet Explorer\SXVIZBYJ.0XE infected by "Trojan-Downloader.Win32.WinShow.z" Virus. Action Taken: File Deleted.
      File C:\Program Files\Internet Explorer\TWRLLBXT.0XE infected by "Trojan-Downloader.Win32.WinShow.z" Virus. Action Taken: File Deleted.
      File C:\Program Files\MemoryWatcher\WOWEX32.0XE infected by "Backdoor.Win32.VB.oq" Virus. Action Taken: File Renamed.
      File C:\Program Files\SEP\SEP.0LL infected by "Trojan.Win32.Septic.a" Virus. Action Taken: File Deleted.
      File C:\Program Files\WebSavingsfromEbates\WebSavingsfromEbates.exe tagged as not-a-virus:AdWare.Win32.HelpExpress. No Action Taken.
      File C:\Q230903.0XE infected by "Trojan-Downloader.Win32.WinShow.c" Virus. Action Taken: File Deleted.
      File C:\svchost.0xe infected by "Trojan-Downloader.Win32.Donn.a" Virus. Action Taken: File Deleted.
      File C:\TEMP\salm.exe tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ABER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\AFID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALSR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALUPOJEJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ANUZSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\autoheal.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\BKZUPQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BMJKR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BOTSD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BSXIPKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUPWHYR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYFKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CBMZILIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CFUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\clicks.dll tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\CLQDKL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CTYVMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DCDEFOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DEZIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DGJATKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DIVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DKV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Downloaded Program Files\MACONNECT.0LL infected by "Trojan-Downloader.Win32.IstBar.s" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\DQTOH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWTAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EBQBAJWR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EDSPEV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EFIVGVAT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EHEJKFGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ENIHWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EXKJER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FAVOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FCTKHGJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\fixit.exe tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\FKH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FSF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FWBYHAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GDEHWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GHYT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLGXIVQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GNQPIHUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPCTEJMZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPGR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXONKHAZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXSHCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HAREZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HCRYL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HITIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBATOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HUPIH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IRMHOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IVUVOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JGJMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JQLKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\juhgvnihe.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\WINDOWS\JUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JWBAFMN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KBENYTSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KHUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KJMFAV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KNKVUR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KXOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZQVYX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LADEXGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LGRYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LMVSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWPIB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWTKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MBUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MDSRCZOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFEP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFMVYVUV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MLYZMDUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MNWJALIZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRGFCVSL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRQTKZOV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MTKXUNYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MVMNQRIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MZIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
      File C:\WINDOWS\NGJMP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMDGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMZIXQT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQDAXCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OBOPOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHEFEB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHKJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHUVIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OJINSLKP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ONQXOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OPOLEVAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ORMPUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OZOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PCNGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PIPCHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PKDUNOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\POP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PQP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUFIHER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PWJEZGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QBMZGRWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDWPIBCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QFEZUH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJCNEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJURIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJYFIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QNONGNKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QRKRCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QZORGV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCDIXMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZQR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZWP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBIV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBMHQTOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SJMNIFSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SNGZMXQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SPWH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SRKDIXAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SROZUNCP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\system32\angelex.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\system32\azesearch4.ocx tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\bitsprx2s.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\WINDOWS\system32\dialersetup\VideoGirls_fi-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
      File C:\WINDOWS\system32\exdl.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exdl3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\iasada.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\javexulm.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mqexdlm.srg tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mscb.dll tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\NDrv.dll tagged as not-a-virus:AdWare.Win32.PurityScan.s. No Action Taken.
      File C:\WINDOWS\system32\netut80ex.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\psis80ex.ax tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\SZGVYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TAFGL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TCDQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\adm.exe tagged as not-a-virus:AdWare.Win32.Altnet.p. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\adm25.dll tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\adm4.dll tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\admdloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\admfdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.j. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\admprog.dll tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\bdedownloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\bdefdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dman25.dll tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dmanu4.cab tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dmfiles.cab tagged as not-a-virus:AdWare.Win32.Altnet.b. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\mysearch.cab tagged as not-a-virus:AdWare.Win32.MyWay.j. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmexe.cab tagged as not-a-virus:AdWare.Win32.Altnet.h. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmfiles.cab tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\Setup.exe tagged as not-a-virus:AdWare.Win32.Altnet.b. No Action Taken.
      File C:\WINDOWS\TML.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOBSZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TYTAVGB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UBEDMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHIF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHWFWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ULUHIVYD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UPUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\URQDSZUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UXUPSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFSN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFYF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VEDAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZEDIJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VMVUFCR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VSXQXQL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WFQVCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WRCZOZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVSVIFQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVWT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WZKDCJUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XAL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XCXMNWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XIZIXOB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMBST.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOZWZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YNIZEVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YPOHEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\yryrtmv.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.c. No Action Taken.
      File C:\WINDOWS\YXCD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YZOJQBKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ZERUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zeta.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\ZGZCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZITOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZMH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zqtilid.exe.tmp tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZULIT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZYBMDEF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File E:\Ohjelmia\FircXP.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken.
      File E:\Program Files\FIRC\FIRC.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken.

      Äänestä

    • tinotinotino kirjoitti:

      Tässä siis eScan logi koko litania:

      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ABER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\AFID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALSR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALUPOJEJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ANUZSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\autoheal.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\BKZUPQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BMJKR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BOTSD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BSXIPKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUPWHYR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYFKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CBMZILIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CFUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\clicks.dll tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\CLQDKL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CTYVMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DCDEFOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DEZIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DGJATKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DIVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DKV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DQTOH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWTAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EBQBAJWR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EDSPEV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EFIVGVAT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EHEJKFGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ENIHWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EXKJER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FAVOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FCTKHGJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\fixit.exe tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\FKH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FSF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FWBYHAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GDEHWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GHYT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLGXIVQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GNQPIHUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPCTEJMZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPGR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXONKHAZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXSHCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HAREZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HCRYL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HITIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBATOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HUPIH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IMAGE.0LL infected by "Trojan-Downloader.Win32.WinShow.u" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\IRMHOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IVUVOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JGJMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JQLKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\juhgvnihe.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\WINDOWS\JUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JWBAFMN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KBENYTSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KHUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KJMFAV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KNKVUR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KXOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZQVYX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LADEXGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LGRYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LMVSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWPIB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWTKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MBUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\mc-110-12-0000234.exe infected by "Trojan-Downloader.NSIS.Agent.p" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\MDSRCZOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFEP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFMVYVUV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MLYZMDUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MNWJALIZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRGFCVSL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRQTKZOV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\mshp.dll infected by "Trojan-Downloader.Win32.WinShow.u" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\MTKXUNYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MVMNQRIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MZIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
      File C:\WINDOWS\NGJMP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMDGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMZIXQT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQDAXCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OBOPOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHEFEB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHKJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHUVIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OJINSLKP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ONQXOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OPOLEVAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ORMPUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OZOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PCNGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PIPCHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PKDUNOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\POP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PQP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUFIHER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUP.0XE infected by "Trojan-Downloader.Win32.VB.ca" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\PWJEZGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QBMZGRWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDWPIBCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QFEZUH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJCNEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJURIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJYFIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QNONGNKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QRKRCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QZORGV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCDIXMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZQR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZWP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBIV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBMHQTOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SJMNIFSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SNGZMXQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SPWH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SRKDIXAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SROZUNCP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SVCPROC.0XE infected by "Trojan.Win32.Stervis.c" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\SVCPROC.1XE infected by "Trojan.Win32.Stervis.e" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\SZGVYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TAFGL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TCDQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TML.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOBSZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TYTAVGB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UBEDMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHIF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHWFWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ULUHIVYD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UPUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\URQDSZUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UXUPSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFSN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFYF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VEDAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZEDIJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VMVUFCR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VSXQXQL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WFQVCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WRCZOZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVSVIFQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVWT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WZKDCJUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XAL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XCXMNWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XHRMY.0XE infected by "Trojan.Win32.SecondThought.aa" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\XIZIXOB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMBST.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOZWZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YNIZEVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YPOHEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\yryrtmv.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.c. No Action Taken.
      File C:\WINDOWS\YXCD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YZOJQBKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ZERUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zeta.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\ZGZCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZITOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZMH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zqtilid.exe.tmp tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZULIT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZYBMDEF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\system32\AFBIRPS.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\angelex.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\system32\ARSZLC.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\AWBIHP.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\AWNZDGR.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\azesearch4.ocx tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\BAFXZRA.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\BHOW.0XE infected by "Trojan.Win32.Agent.az" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\bitsprx2s.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\WINDOWS\system32\DKPXJIO.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\DRPMON.0LL infected by "Trojan.Win32.Agent.db" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\exdl.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exdl3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\iasada.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\javexulm.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\JKNCKJ.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\mqexdlm.srg tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mscb.dll tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\NDrv.dll tagged as not-a-virus:AdWare.Win32.PurityScan.s. No Action Taken.
      File C:\WINDOWS\system32\NEILGSX.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\netut80ex.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\NHNDEBH.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\OWIGCUK.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.1XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.2XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.3XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.4XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.5XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.6XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.7XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.8XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.9XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\psis80ex.ax tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\QEXOSKN.0XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\TAYSTV.0XE infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\TFTP1040.0 infected by "Net-Worm.Win32.Lovesan.a" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\UPOAFG.0XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\VLAEFT.0XE infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\XATZPWS.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-4fbc14ee-1a8f78e1.class infected by "Exploit.Java.ByteVerify" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-393d648-4a1ab212.class infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-488fe19e-486e2fa4.class infected by "Exploit.Java.ByteVerify" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-10ffa0b5-62f91bac.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-1c0a4658.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-7b4bbca9.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-5aefffee-659ad8dc.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\freemovies.jar-677d2343-2cbe971a.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-2a6a009e.zip infected by "Trojan-Downloader.Java.OpenStream.c" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv68.jar-158e9df4-651cd8bb.zip infected by "Trojan.Java.ClassLoader.h" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Tino\Local Settings\Temp\BZW\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\CQR\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\DFN\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\DQI\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\DQV\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\FEA\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\FNB\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\IBV\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\IUA\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\IUL\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\LEH\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\LIB\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\OFR\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\QRO\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\QVT\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\RVC\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\SFC\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\TFE\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\Tilapäinen kansio 2 wpeproalpha0_9a.zip\WPE PRO.0XE infected by "Sniffer.Win32.WpePro.a" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Tino\Local Settings\Temp\TSZ\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\VCD\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\VEH\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\VGE\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\WGR\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\WVG\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YDD\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YHD\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YUL\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Local Settings\Temp\YWI\aurareco.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\Documents and Settings\Tino\Omat tiedostot\firc\FIRC.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\321\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\321\SmitfraudFix.zip tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\backups\backup-20060915-213415-804.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\Documents and Settings\Tino\Työpöytä\backups\backup-20060915-213415-925.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\ezstub.exe tagged as not-a-virus:AdWare.Win32.EZula.l. No Action Taken.
      File C:\iMeshInst.exe infected by "Trojan.Win32.Agent.az" Virus. Action Taken: File Deleted.
      File C:\MemoryWatcher_b.exe infected by "Backdoor.Win32.VB.oq" Virus. Action Taken: File Renamed.
      File C:\msbbhook.dll tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\ncmyb.dll tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\Program Files\Common Files\updater\DELUPDAT.0XE infected by "Trojan-Downloader.Win32.Keenval" Virus. Action Taken: File Deleted.
      File C:\Program Files\Common Files\updater\SUI.0XE infected by "Trojan-Downloader.Win32.Keenval" Virus. Action Taken: File Deleted.
      File C:\Program Files\Common Files\updater\WUPDATER.0XE infected by "Trojan-Downloader.Win32.Keenval" Virus. Action Taken: File Deleted.
      File C:\Program Files\E2G\IeBHOs.dll tagged as not-a-virus:AdWare.Win32.BHO.h. No Action Taken.
      File C:\Program Files\Internet Explorer\NGGRGYOB.0XE infected by "Trojan-Downloader.Win32.WinShow.z" Virus. Action Taken: File Deleted.
      File C:\Program Files\Internet Explorer\SXVIZBYJ.0XE infected by "Trojan-Downloader.Win32.WinShow.z" Virus. Action Taken: File Deleted.
      File C:\Program Files\Internet Explorer\TWRLLBXT.0XE infected by "Trojan-Downloader.Win32.WinShow.z" Virus. Action Taken: File Deleted.
      File C:\Program Files\MemoryWatcher\WOWEX32.0XE infected by "Backdoor.Win32.VB.oq" Virus. Action Taken: File Renamed.
      File C:\Program Files\SEP\SEP.0LL infected by "Trojan.Win32.Septic.a" Virus. Action Taken: File Deleted.
      File C:\Program Files\WebSavingsfromEbates\WebSavingsfromEbates.exe tagged as not-a-virus:AdWare.Win32.HelpExpress. No Action Taken.
      File C:\Q230903.0XE infected by "Trojan-Downloader.Win32.WinShow.c" Virus. Action Taken: File Deleted.
      File C:\svchost.0xe infected by "Trojan-Downloader.Win32.Donn.a" Virus. Action Taken: File Deleted.
      File C:\TEMP\salm.exe tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ABER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\AFID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALSR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALUPOJEJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ANUZSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\autoheal.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\BKZUPQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BMJKR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BOTSD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BSXIPKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUPWHYR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYFKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CBMZILIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CFUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\clicks.dll tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\CLQDKL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CTYVMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DCDEFOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DEZIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DGJATKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DIVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DKV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Downloaded Program Files\MACONNECT.0LL infected by "Trojan-Downloader.Win32.IstBar.s" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\DQTOH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWTAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EBQBAJWR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EDSPEV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EFIVGVAT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EHEJKFGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ENIHWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EXKJER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FAVOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FCTKHGJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\fixit.exe tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\FKH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FSF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FWBYHAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GDEHWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GHYT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLGXIVQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GNQPIHUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPCTEJMZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPGR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXONKHAZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXSHCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HAREZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HCRYL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HITIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBATOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HUPIH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IRMHOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IVUVOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JGJMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JQLKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\juhgvnihe.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\WINDOWS\JUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JWBAFMN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KBENYTSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KHUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KJMFAV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KNKVUR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KXOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZQVYX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LADEXGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LGRYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LMVSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWPIB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWTKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MBUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MDSRCZOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFEP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFMVYVUV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MLYZMDUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MNWJALIZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRGFCVSL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRQTKZOV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MTKXUNYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MVMNQRIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MZIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
      File C:\WINDOWS\NGJMP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMDGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMZIXQT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQDAXCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OBOPOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHEFEB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHKJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHUVIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OJINSLKP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ONQXOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OPOLEVAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ORMPUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OZOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PCNGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PIPCHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PKDUNOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\POP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PQP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUFIHER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PWJEZGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QBMZGRWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDWPIBCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QFEZUH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJCNEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJURIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJYFIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QNONGNKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QRKRCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QZORGV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCDIXMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZQR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZWP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBIV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBMHQTOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SJMNIFSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SNGZMXQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SPWH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SRKDIXAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SROZUNCP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\system32\angelex.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\system32\azesearch4.ocx tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\bitsprx2s.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\WINDOWS\system32\dialersetup\VideoGirls_fi-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
      File C:\WINDOWS\system32\exdl.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exdl3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\iasada.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\javexulm.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mqexdlm.srg tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mscb.dll tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\NDrv.dll tagged as not-a-virus:AdWare.Win32.PurityScan.s. No Action Taken.
      File C:\WINDOWS\system32\netut80ex.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\psis80ex.ax tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\SZGVYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TAFGL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TCDQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\adm.exe tagged as not-a-virus:AdWare.Win32.Altnet.p. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\adm25.dll tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\adm4.dll tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\admdloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\admfdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.j. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\admprog.dll tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\bdedownloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\bdefdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dman25.dll tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dmanu4.cab tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dmfiles.cab tagged as not-a-virus:AdWare.Win32.Altnet.b. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\mysearch.cab tagged as not-a-virus:AdWare.Win32.MyWay.j. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmexe.cab tagged as not-a-virus:AdWare.Win32.Altnet.h. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmfiles.cab tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\Setup.exe tagged as not-a-virus:AdWare.Win32.Altnet.b. No Action Taken.
      File C:\WINDOWS\TML.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOBSZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TYTAVGB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UBEDMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHIF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHWFWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ULUHIVYD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UPUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\URQDSZUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UXUPSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFSN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFYF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VEDAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZEDIJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VMVUFCR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VSXQXQL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WFQVCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WRCZOZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVSVIFQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVWT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WZKDCJUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XAL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XCXMNWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XIZIXOB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMBST.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOZWZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YNIZEVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YPOHEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\yryrtmv.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.c. No Action Taken.
      File C:\WINDOWS\YXCD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YZOJQBKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ZERUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zeta.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\ZGZCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZITOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZMH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zqtilid.exe.tmp tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZULIT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZYBMDEF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File E:\Ohjelmia\FircXP.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken.
      File E:\Program Files\FIRC\FIRC.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken.

      Tässä tuo escanin jälkeen otettu hjt logi:

      Logfile of HijackThis v1.99.1
      Scan saved at 0:07:12, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Äänestä

    • tinotinotino kirjoitti:

      Tässä tuo escanin jälkeen otettu hjt logi:

      Logfile of HijackThis v1.99.1
      Scan saved at 0:07:12, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      lisää poista sovellutuksesta

      Logitech Desktop Messenger

      Äänestä

    löytyiskö tosta viellä jotain jota ei pitäis olla

    Äänestä

    • Siellä on aika paljonkin kaikkee paskaa vielä, ja kaikista ei löydy mitään tietoa ees netistä, vaikka siitä vois päätellä että ne on turhia mutta antaa jonkun tietävämmän kertoo enempi.

      Käy tää ja skannaa kone vielä sillä:

      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      Muista päivittää ensin, ohjeet löytyy tuolta sivulta, päivitys tapa 2.

      Kun oot skannannu eScanilla niin lähetä tuo eScanin logi ja uus hjt logi.

      Äänestä

    • fix it kirjoitti:

      Siellä on aika paljonkin kaikkee paskaa vielä, ja kaikista ei löydy mitään tietoa ees netistä, vaikka siitä vois päätellä että ne on turhia mutta antaa jonkun tietävämmän kertoo enempi.

      Käy tää ja skannaa kone vielä sillä:

      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      Muista päivittää ensin, ohjeet löytyy tuolta sivulta, päivitys tapa 2.

      Kun oot skannannu eScanilla niin lähetä tuo eScanin logi ja uus hjt logi.

      aattelin pistää vähän "väliaikatietoja" kun tossa skannauksessa tuntuu kestävän:

      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ABER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\AFID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALSR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ALUPOJEJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ANUZSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\autoheal.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\BKZUPQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BMJKR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BOTSD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BSXIPKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUPWHYR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\BYFKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CBMZILIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CFUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\clicks.dll tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\CLQDKL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\CTYVMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DCDEFOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DEZIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DGJATKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DIVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DKV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DQTOH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\DWTAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EBQBAJWR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EDSPEV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EFIVGVAT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EHEJKFGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ENIHWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\EXKJER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FAVOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FCTKHGJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\fixit.exe tagged as not-a-virus:AdWare.Win32.Midadle.e. No Action Taken.
      File C:\WINDOWS\FKH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FSF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\FWBYHAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GDEHWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GHYT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLGXIVQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GLID.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GNQPIHUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPCTEJMZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GPGR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXONKHAZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\GXSHCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HAREZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HCRYL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HITIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBATOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HQBMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\HUPIH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IMAGE.0LL infected by "Trojan-Downloader.Win32.WinShow.u" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\IRMHOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IVUVOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\IXQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JGJMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JQLKD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\juhgvnihe.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.a. No Action Taken.
      File C:\WINDOWS\JUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\JWBAFMN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KBENYTSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KHUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KJMFAV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KNKVUR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KXOX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZQVYX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\KZYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LADEXGD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LGRYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LMVSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWPIB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\LWTKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MBUJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\mc-110-12-0000234.exe infected by "Trojan-Downloader.NSIS.Agent.p" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\MDSRCZOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFEP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MFMVYVUV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHMT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MLYZMDUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MNWJALIZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRGFCVSL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MRQTKZOV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\mshp.dll infected by "Trojan-Downloader.Win32.WinShow.u" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\MTKXUNYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MVMNQRIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\MZIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
      File C:\WINDOWS\NGJMP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMDGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NMZIXQT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQDAXCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\NQX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OBOPOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHEFEB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHKJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OHUVIL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OJINSLKP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ONQXOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OPOLEVAX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ORMPUB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\OZOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PCNGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PIPCHYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PKDUNOR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\POP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PQP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUFIHER.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PUP.0XE infected by "Trojan-Downloader.Win32.VB.ca" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\PWJEZGP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\PYP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QBMZGRWV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QDWPIBCJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QFEZUH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJCNEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJURIX.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QJYFIN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QNONGNKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QRKRCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\QZORGV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCDIXMF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZQR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\RQZWP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBIV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SBMHQTOJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SJMNIFSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SNGZMXQZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SPWH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SRKDIXAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SROZUNCP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\SVCPROC.0XE infected by "Trojan.Win32.Stervis.c" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\SVCPROC.1XE infected by "Trojan.Win32.Stervis.e" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\SZGVYJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TAFGL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TCDQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TML.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOBSZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TOF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TSP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\TYTAVGB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UBEDMV.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHIF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UHWFWL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ULUHIVYD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UPUZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\URQDSZUL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\UXUPSH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFSN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VCFYF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VEDAH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZEDIJ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VIZYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VMVUFCR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\VSXQXQL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WFQVCL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WRCZOZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVSVIFQH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WVWT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\WZKDCJUP.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XAL.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XCXMNWF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XHRMY.0XE infected by "Trojan.Win32.SecondThought.aa" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\XIZIXOB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMBST.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XMR.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XOZWZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\XYB.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YNIZEVKF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YPOHEH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\yryrtmv.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.c. No Action Taken.
      File C:\WINDOWS\YXCD.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\YZOJQBKT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\Zepybrxe.dll tagged as not-a-virus:AdWare.Win32.SearchBand.a. No Action Taken.
      File C:\WINDOWS\ZERUN.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zeta.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\ZGZCZ.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZITOT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZMH.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\zqtilid.exe.tmp tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZULIT.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\ZYBMDEF.0XE tagged as not-a-virus:AdWare.Win32.180Solutions. No Action Taken.
      File C:\WINDOWS\system32\AFBIRPS.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\angelex.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.n. No Action Taken.
      File C:\WINDOWS\system32\ARSZLC.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\AWBIHP.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\AWNZDGR.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\azesearch4.ocx tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\BAFXZRA.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\BHOW.0XE infected by "Trojan.Win32.Agent.az" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\bitsprx2s.dll tagged as not-a-virus:AdWare.Win32.MoneyGainer.b. No Action Taken.
      File C:\WINDOWS\system32\DKPXJIO.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\DRPMON.0LL infected by "Trojan.Win32.Agent.db" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\exdl.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exdl3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\exul3.exe tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\iasada.dll tagged as not-a-virus:AdWare.Win32.AzSearch.b. No Action Taken.
      File C:\WINDOWS\system32\javexulm.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\JKNCKJ.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\mqexdlm.srg tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\mscb.dll tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\NDrv.dll tagged as not-a-virus:AdWare.Win32.PurityScan.s. No Action Taken.
      File C:\WINDOWS\system32\NEILGSX.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\netut80ex.vxd tagged as not-a-virus:AdWare.Win32.BargainBuddy.q. No Action Taken.
      File C:\WINDOWS\system32\NHNDEBH.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\OWIGCUK.0XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.1XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.2XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.3XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.4XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.5XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.6XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.7XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.8XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\POLLER.9XE infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\psis80ex.ax tagged as not-a-virus:AdWare.Win32.BargainBuddy.l. No Action Taken.
      File C:\WINDOWS\system32\QEXOSKN.0XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\TAYSTV.0XE infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\TFTP1040.0 infected by "Net-Worm.Win32.Lovesan.a" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\UPOAFG.0XE infected by "Trojan.Win32.Agent.gp" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\VLAEFT.0XE infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\XATZPWS.0XE infected by "Trojan.Win32.Agent.cp" Virus. Action Taken: File Deleted.

      Äänestä

    Sitten ookos tehnyt *nimimerkki zipp* mukaan annetut ohjeet jos et ole tehnyt niin tee se myös.

    Äänestä

    • teen parhaillaan tuota skannausta ad-awarella

      Äänestä

    • tinotinotino kirjoitti:

      teen parhaillaan tuota skannausta ad-awarella

      laita sitten uusi hjt -loki

      Äänestä

    • Poistelen vain kirjoitti:

      laita sitten uusi hjt -loki

      Ad-Awaren jälkeen otettu hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:21:39, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: LavasoftStartupCleaner - C:\WINDOWS\vx2cleaner.dlx (file missing)
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Äänestä

    • tinotinotino kirjoitti:

      Ad-Awaren jälkeen otettu hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:21:39, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: LavasoftStartupCleaner - C:\WINDOWS\vx2cleaner.dlx (file missing)
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Nyt näyttää jo paremmalta, mutta vielä tämä:

      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Valitse käynnistä -> suorita -> kirjoita: services.msc ->ok

      Etsi listalta tuo palvelun nimi(jos löytyy), tuplaklikkaa, paina seis ja valitse käynnistymistavaksi "ei käytössä".

      Käynnistä hijackthis> delete an NT service , kopioi > liitä (palvelun nimi) ja klikkaa OK

      Tämä lista ihmetyttää edelleen, ja mitään tietoja noista ei löydy.

      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe

      Äänestä

    • tinotinotino kirjoitti:

      Ad-Awaren jälkeen otettu hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:21:39, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: LavasoftStartupCleaner - C:\WINDOWS\vx2cleaner.dlx (file missing)
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Siirrä ens se Hijackki omaan kansioon tonne
      C:\HjT\HijackThis.exe

      Merkkaa nuo sulje selain ja paina Fix checked

      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab


      Käynnistä sitte kone vikasietotilassa.

      Kirjota\ kopioi Suorita kenttään nuo rivit ja ok molempien perään

      sc stop SvcProc
      sc delete SvcProc

      sitte poista

      C:\ncmyb.dll
      C:\msbbhook.dll
      C:\ezstub.exe
      C:\WINDOWS\Zepybrxe.dll
      C:\WINDOWS\autoheal.exe
      C:\WINDOWS\clicks.dll
      C:\WINDOWS\fixit.exe
      C:\WINDOWS\zeta.exe
      C:\WINDOWS\zqtilid.exe
      C:\WINDOWS\system32\angelex.exe
      C:\WINDOWS\system32\azesearch4.ocx
      C:\WINDOWS\system32\bitsprx2s.dll
      C:\WINDOWS\system32\exdl.exe
      C:\WINDOWS\system32\exdl3.exe
      C:\WINDOWS\system32\exul.exe
      C:\WINDOWS\system32\exul3.exe
      C:\WINDOWS\system32\iasada.dll
      C:\WINDOWS\system32\javexulm.vxd
      C:\WINDOWS\system32\mqexdlm.srg
      C:\WINDOWS\system32\mscb.dll
      C:\WINDOWS\system32\NDrv.dll
      C:\WINDOWS\system32\netut80ex.vxd
      C:\WINDOWS\system32\psis80ex.ax
      C:\WINDOWS\juhgvnihe.exe
      C:\WINDOWS\svcproc.exe
      C:\WINDOWS\system32\bitsprx2s.dll

      C:\Program Files\E2G\ < kansio
      C:\WINDOWS\system32\dialersetup\ < kansio
      C:\Program Files\WebSavingsfromEbates\ < kansio

      Tyhjennä myös kaikki Tempit.

      käynnistä normaalisti ja uus logi.

      Äänestä

    • tinotinotino kirjoitti:

      Ad-Awaren jälkeen otettu hjt:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:21:39, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Tino\Työpöytä\scanner.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: LavasoftStartupCleaner - C:\WINDOWS\vx2cleaner.dlx (file missing)
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

      Lataa http://www.funkytoad.com/download/hoster.zip

      * Pura Hoster sopivaan kansioon, kuten C:\Hoster
      * Aja Hoster.exe sen uudesta kansiosta
      * Klikkaa "Make Hosts Writable?" oikeassa yläkulmassa (jos toiminnassa)
      * Klikkaa "Restore Original Hosts" ja sitten klikkaa OK
      * Sulje Hoster

      Äänestä

    • zipp kirjoitti:

      Siirrä ens se Hijackki omaan kansioon tonne
      C:\HjT\HijackThis.exe

      Merkkaa nuo sulje selain ja paina Fix checked

      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
      O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
      O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
      O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
      O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
      O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
      O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
      O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
      O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
      O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
      O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
      O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
      O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab


      Käynnistä sitte kone vikasietotilassa.

      Kirjota\ kopioi Suorita kenttään nuo rivit ja ok molempien perään

      sc stop SvcProc
      sc delete SvcProc

      sitte poista

      C:\ncmyb.dll
      C:\msbbhook.dll
      C:\ezstub.exe
      C:\WINDOWS\Zepybrxe.dll
      C:\WINDOWS\autoheal.exe
      C:\WINDOWS\clicks.dll
      C:\WINDOWS\fixit.exe
      C:\WINDOWS\zeta.exe
      C:\WINDOWS\zqtilid.exe
      C:\WINDOWS\system32\angelex.exe
      C:\WINDOWS\system32\azesearch4.ocx
      C:\WINDOWS\system32\bitsprx2s.dll
      C:\WINDOWS\system32\exdl.exe
      C:\WINDOWS\system32\exdl3.exe
      C:\WINDOWS\system32\exul.exe
      C:\WINDOWS\system32\exul3.exe
      C:\WINDOWS\system32\iasada.dll
      C:\WINDOWS\system32\javexulm.vxd
      C:\WINDOWS\system32\mqexdlm.srg
      C:\WINDOWS\system32\mscb.dll
      C:\WINDOWS\system32\NDrv.dll
      C:\WINDOWS\system32\netut80ex.vxd
      C:\WINDOWS\system32\psis80ex.ax
      C:\WINDOWS\juhgvnihe.exe
      C:\WINDOWS\svcproc.exe
      C:\WINDOWS\system32\bitsprx2s.dll

      C:\Program Files\E2G\ < kansio
      C:\WINDOWS\system32\dialersetup\ < kansio
      C:\Program Files\WebSavingsfromEbates\ < kansio

      Tyhjennä myös kaikki Tempit.

      käynnistä normaalisti ja uus logi.

      Hmm.. nyt tuli muistikatkos.. miten poistan nuo tiedostot?

      Äänestä

    • tinotinotino kirjoitti:

      Hmm.. nyt tuli muistikatkos.. miten poistan nuo tiedostot?

      vaikka Etsi toimintoo ja sitte klikkaa sitä ja delete

      Äänestä

    • zipp kirjoitti:

      vaikka Etsi toimintoo ja sitte klikkaa sitä ja delete

      Ei löydy noita tiedostoja etsi- tai suorita-toiminnoilla

      Äänestä

    • tinotinotino kirjoitti:

      Ei löydy noita tiedostoja etsi- tai suorita-toiminnoilla

      kyllä login mukaan olla koneella,pistä piilotiedostot näkyviin ja sitte etsi ja kato myös käsipelillä.
      Esim tuo,niin kato C:\Windows kansioon jos siellä näkyy tuo autoheal.exe

      C:\WINDOWS\autoheal.exe

      Äänestä

    • zipp kirjoitti:

      kyllä login mukaan olla koneella,pistä piilotiedostot näkyviin ja sitte etsi ja kato myös käsipelillä.
      Esim tuo,niin kato C:\Windows kansioon jos siellä näkyy tuo autoheal.exe

      C:\WINDOWS\autoheal.exe

      otin uuden hjt:n onkohan tää jotenkin muuttunut nyt...

      Logfile of HijackThis v1.99.1
      Scan saved at 15:51:34, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Hjt\HijackThis.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: LavasoftStartupCleaner - C:\WINDOWS\vx2cleaner.dlx (file missing)
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      Äänestä

    • tinotinotino kirjoitti:

      otin uuden hjt:n onkohan tää jotenkin muuttunut nyt...

      Logfile of HijackThis v1.99.1
      Scan saved at 15:51:34, on 16.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\WINDOWS\System32\CTSvcCDA.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\sstray.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
      C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
      C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
      C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Hjt\HijackThis.exe.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
      O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
      O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
      O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
      O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
      O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
      O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: LavasoftStartupCleaner - C:\WINDOWS\vx2cleaner.dlx (file missing)
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
      O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      Fixsaa vielä nuo

      R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
      O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab


      sitte logi on ok ja päivitä Java löytyy ohjauspaneelista

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    tinotinotino kirjoitti:

    Joo mun koneelle on jostakin tullut tuo "virusburst"
    ohjelma joka varottelee: "Critical system error!"
    jeesatkaa miten se poistetaan...

    Tässä loki:

    Logfile of HijackThis v1.99.1
    Scan saved at 17:59:50, on 15.9.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Sygate\SPF\smc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\WINDOWS\System32\CTSvcCDA.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.exe
    C:\Program Files\Media-Codec\isamonitor.exe
    C:\Program Files\Media-Codec\pmsngr.exe
    C:\WINDOWS\system32\sstray.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
    C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\Program Files\Media-Codec\isamini.exe
    E:\DaemonTools\daemon.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    E:\iTunes\iTunesHelper.exe
    C:\Program Files\Media-Codec\pmmon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    E:\Program Files\Counter-Strike\Steam.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\Nokia\PC Suite for Nokia 3660\connmngmntbox.exe
    C:\Program Files\Nokia\PC Suite for Nokia 3660\ectaskscheduler.exe
    C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
    C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
    C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
    C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Tino\Työpöytä\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://elisa.net/paketti/haku.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jippii.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.searchv.com/w/search.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: (no name) - {CC8C8F4F-F2E8-404B-A43D-5CC57876A008} - (no file)
    F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
    O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
    O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\Media-Codec\isaddon.dll
    O2 - BHO: (no name) - {35612DE4-AE91-25CB-1726-B7231374EBC6} - C:\WINDOWS\Zepybrxe.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dll (file missing)
    O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
    O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Protection Bar - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - C:\Program Files\Media-Codec\iesplugin.dll
    O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
    O4 - HKLM\..\Run: [System Service] C:\WINDOWS\System32\msrexe.exe
    O4 - HKLM\..\Run: [obopot] C:\WINDOWS\obopot.exe
    O4 - HKLM\..\Run: [vqRWY] C:\docume~1\niko\locals~1\temp\vqRWY.exe
    O4 - HKLM\..\Run: [vofaxkf] C:\WINDOWS\vofaxkf.exe
    O4 - HKLM\..\Run: [hqbmf] C:\WINDOWS\hqbmf.exe
    O4 - HKLM\..\Run: [jwbafmn] C:\WINDOWS\jwbafmn.exe
    O4 - HKLM\..\Run: [ladexgd] C:\WINDOWS\ladexgd.exe
    O4 - HKLM\..\Run: [rcdixmf] C:\WINDOWS\rcdixmf.exe
    O4 - HKLM\..\Run: [fwbyhah] C:\WINDOWS\fwbyhah.exe
    O4 - HKLM\..\Run: [pwjezgp] C:\WINDOWS\pwjezgp.exe
    O4 - HKLM\..\Run: [WebSavingsfromEbates] javaw -cp "C:\Program Files\WebSavingsfromEbates\System\Code" Main lp: "C:\Program Files\WebSavingsfromEbates"
    O4 - HKLM\..\Run: [dgjatkt] C:\WINDOWS\dgjatkt.exe
    O4 - HKLM\..\Run: [pkdunor] C:\WINDOWS\pkdunor.exe
    O4 - HKLM\..\Run: [hqbator] C:\WINDOWS\hqbator.exe
    O4 - HKLM\..\Run: [nqdaxcj] C:\WINDOWS\nqdaxcj.exe
    O4 - HKLM\..\Run: [vsxqxql] C:\WINDOWS\vsxqxql.exe
    O4 - HKLM\..\Run: [xcxmnwf] C:\WINDOWS\xcxmnwf.exe
    O4 - HKLM\..\Run: [bsxipkd] C:\WINDOWS\bsxipkd.exe
    O4 - HKLM\..\Run: [dcdefoj] C:\WINDOWS\dcdefoj.exe
    O4 - HKLM\..\Run: [tytavgb] C:\WINDOWS\tytavgb.exe
    O4 - HKLM\..\Run: [nmzixqt] C:\WINDOWS\nmzixqt.exe
    O4 - HKLM\..\Run: [pipchyb] C:\WINDOWS\pipchyb.exe
    O4 - HKLM\..\Run: [bkzupqh] C:\WINDOWS\bkzupqh.exe
    O4 - HKLM\..\Run: [bupwhyr] C:\WINDOWS\bupwhyr.exe
    O4 - HKLM\..\Run: [vmvufcr] C:\WINDOWS\vmvufcr.exe
    O4 - HKLM\..\Run: [zybmdef] C:\WINDOWS\zybmdef.exe
    O4 - HKLM\..\Run: [i] C:\documents and settings\niko\local settings\temp\i.exe
    O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
    O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [xtn9] C:\documents and settings\niko\local settings\temp\xtn9.exe
    O4 - HKLM\..\Run: [1USdOLycB] C:\documents and settings\niko\local settings\temp\1USdOLycB.exe
    O4 - HKLM\..\Run: [eDonkey2000] D:\eDonkey2000\eDonkey2000.exe -t
    O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
    O4 - HKLM\..\Run: [CashBack] C:\Program Files\CashBack\bin\cashback.exe
    O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
    O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [qchrydr] C:\WINDOWS\system32\taystv.exe r
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\DaemonTools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [iTunesHelper] "E:\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [X-Diver] C:\WINDOWS\System32\CUWIN32.EXE -n
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [Steam] "E:\Program Files\Counter-Strike\Steam.exe" -silent
    O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O4 - Global Startup: Image Transfer.lnk = ?
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
    O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb001YYFI_ZNfox000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
    O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: SMS-viesti - {0D570F33-20A5-42C3-98FF-D2D03208878A} - http://sms.kolumbus.fi/ (file missing) (HKCU)
    O9 - Extra button: Palvelut - {A7EB63DC-EB97-4713-8CAA-F564CA444361} - http://service.kolumbus.fi/ (file missing) (HKCU)
    O9 - Extra button: Tuki - {B1E58CAC-8E14-43C6-BD18-1FCB537AB0DB} - http://tuki.elisa.net/ (file missing) (HKCU)
    O9 - Extra button: X-Diver - {CE5D2BAD-61A3-46FA-BB22-E5BA59DE26B3} - C:\WINDOWS\System32\CUWIN32.EXE (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c6.cab
    O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/060005c6515160c97905/netzip/RdxIE601.cab
    O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab
    O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://http.gamezone.tukati.com/tukati/1.7.20.20/tukati.cab
    O18 - Protocol: bw 0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw 0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {2109D125-95AE-4CE0-AD52-161EBAD1A3F1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O21 - SSODL: astrogeology - {2be26361-58a2-4836-be57-b838f02fec3f} - C:\WINDOWS\system32\qxfgcg.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
    O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
    O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu