Joo eli kone alko yhtäkkiä hidasteleen ihan sikana.
Fixasin jo hjt:llä yhen örkin mutta löytyisköhän niitä lisää. Hidastaakohan toi F-Secure mun konetta. Ihmettelen kyllä jos hidastaa ku silti suhkot tehokas kone.
Logfile of HijackThis v1.99.1
Scan saved at 15:28:33, on 26.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\system32\CTHELPER.EXE
G:\Program Files\Common Files\Real\Update_OB\realsched.exe
G:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
G:\Program Files\DAEMON Tools\daemon.exe
G:\Program Files\Microsoft IntelliType Pro\itype.exe
G:\Program Files\Microsoft IntelliPoint\ipoint.exe
G:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
G:\Program Files\F-Secure\Common\FSM32.EXE
G:\WINDOWS\system32\ctfmon.exe
G:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
G:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
G:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
G:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
G:\Program Files\F-Secure\Anti-Virus\fssm32.exe
G:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
G:\Program Files\F-Secure\Common\FSMA32.EXE
G:\Program Files\F-Secure\Common\FSMB32.EXE
G:\Program Files\F-Secure\Common\FCH32.EXE
G:\WINDOWS\System32\tcpsvcs.exe
G:\Program Files\F-Secure\Common\FAMEH32.EXE
G:\Program Files\F-Secure\Anti-Virus\fsqh.exe
G:\Program Files\F-Secure\Anti-Virus\fsrw.exe
G:\Program Files\F-Secure\Common\FNRB32.EXE
G:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
G:\Program Files\F-Secure\Common\FIH32.EXE
G:\Program Files\F-Secure\Anti-Virus\fsav32.exe
G:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
G:\Program Files\F-Secure\FSGUI\fsguidll.exe
G:\Program Files\Mozilla Firefox\firefox.exe
G:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] G:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] G:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "G:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "G:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "G:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [itype] "G:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "G:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [F-Secure Manager] "G:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "G:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKCU\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = G:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - G:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://G:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - G:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - G:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://ftp.hp.com/pub/automatic/player/isetupML.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2EE6C9C8-E644-4D4E-862F-81D813158D1D}: NameServer = 213.139.190.3 212.50.131.153
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - G:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - G:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - G:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - G:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - G:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - G:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - G:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
Fixasin jo hjt:llä yhen örkin mutta löytyisköhän niitä lisää. Hidastaakohan toi F-Secure mun konetta. Ihmettelen kyllä jos hidastaa ku silti suhkot tehokas kone.
Logfile of HijackThis v1.99.1
Scan saved at 15:28:33, on 26.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\system32\CTHELPER.EXE
G:\Program Files\Common Files\Real\Update_OB\realsched.exe
G:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
G:\Program Files\DAEMON Tools\daemon.exe
G:\Program Files\Microsoft IntelliType Pro\itype.exe
G:\Program Files\Microsoft IntelliPoint\ipoint.exe
G:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
G:\Program Files\F-Secure\Common\FSM32.EXE
G:\WINDOWS\system32\ctfmon.exe
G:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
G:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
G:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
G:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
G:\Program Files\F-Secure\Anti-Virus\fssm32.exe
G:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
G:\Program Files\F-Secure\Common\FSMA32.EXE
G:\Program Files\F-Secure\Common\FSMB32.EXE
G:\Program Files\F-Secure\Common\FCH32.EXE
G:\WINDOWS\System32\tcpsvcs.exe
G:\Program Files\F-Secure\Common\FAMEH32.EXE
G:\Program Files\F-Secure\Anti-Virus\fsqh.exe
G:\Program Files\F-Secure\Anti-Virus\fsrw.exe
G:\Program Files\F-Secure\Common\FNRB32.EXE
G:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
G:\Program Files\F-Secure\Common\FIH32.EXE
G:\Program Files\F-Secure\Anti-Virus\fsav32.exe
G:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
G:\Program Files\F-Secure\FSGUI\fsguidll.exe
G:\Program Files\Mozilla Firefox\firefox.exe
G:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] G:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] G:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "G:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "G:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "G:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [itype] "G:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "G:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [F-Secure Manager] "G:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "G:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKCU\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = G:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - G:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://G:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - G:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - G:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://ftp.hp.com/pub/automatic/player/isetupML.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2EE6C9C8-E644-4D4E-862F-81D813158D1D}: NameServer = 213.139.190.3 212.50.131.153
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - G:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - G:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - G:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - G:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - G:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - G:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - G:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
Vastaukset 4
Vanhimmat
spypotter
eli.O17 - HKLM\System\CCS\Services\Tcpip\..\{2EE6C9C8-E644-4D4E-862F-81D813158D1D}: NameServer = 213.139.190.3 212.50.131.153
ainakin mun mielestä tutki asiaa
http://keskustelu.afterdawn.com/thread_view.cfm/264999
odottele että joku asiantuntija tarkistaa vielä.
(sori)?
mutta javan vois päivittää.illanjatkoja ja odottele muita vastauksia.
silmään