koneeni netti ja muutenkin hidastelee,niin tässä hijack logi kertokaa onko tässä jtn mikä pitäisi poistaa!ja että onko jotain virheitä?
Logfile of HijackThis v1.99.1
Scan saved at 13:28:41, on 3.11.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\msasvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\PROGRA~1\DAEMON~1\daemon.exe
C:\WINNT\two.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ipwins\ipwins.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\prsx64.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\svchost.exe
C:\PROGRA~1\COMMON~1\{7CE1E~1\Update.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\PROGRA~1\WINDOW~2\wmplayer.exe
C:\WINNT\prsx64.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Executive Software\Diskeeper\DfrgNTFS.exe
C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
C:\HJT\HIJACK~1.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [explorer] C:\WINNT\two.exe
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKLM\..\RunServices: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TacticalOpsSetup.exe] C:\DOCUME~1\JRJEST~1\OMATTI~1\IMUPAI~1\DOWNLO~1\TACTIC~1.EXE /r
O4 - HKCU\..\Run: [WinMedia] C:\TOQPKQ~1.EXE
O4 - HKCU\..\Run: [System] C:\WINNT\prsx64.exe
O4 - HKCU\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
O20 - AppInit_DLLs: C:\WINNT\system32\tmp_fk.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINNT\system32\msasvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Logfile of HijackThis v1.99.1
Scan saved at 13:28:41, on 3.11.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\msasvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\PROGRA~1\DAEMON~1\daemon.exe
C:\WINNT\two.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ipwins\ipwins.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\prsx64.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\svchost.exe
C:\PROGRA~1\COMMON~1\{7CE1E~1\Update.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\PROGRA~1\WINDOW~2\wmplayer.exe
C:\WINNT\prsx64.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Executive Software\Diskeeper\DfrgNTFS.exe
C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
C:\HJT\HIJACK~1.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [explorer] C:\WINNT\two.exe
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKLM\..\RunServices: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TacticalOpsSetup.exe] C:\DOCUME~1\JRJEST~1\OMATTI~1\IMUPAI~1\DOWNLO~1\TACTIC~1.EXE /r
O4 - HKCU\..\Run: [WinMedia] C:\TOQPKQ~1.EXE
O4 - HKCU\..\Run: [System] C:\WINNT\prsx64.exe
O4 - HKCU\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
O20 - AppInit_DLLs: C:\WINNT\system32\tmp_fk.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINNT\system32\msasvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Vastaukset 27
Vanhimmat
Tällä microsoftin ilmaisella suomenkielisellä ohjelmalla saat koneesi kuntoon ja nopeutumaan.
http://safety.live.com/site/fi-FI/default.htm
mut ei toimi mun käyttöjärjestelmän kans :/
kun kone vain hidastuu ja hidastuu.. en tiedä mikä on?
Ohje AVG Anti-Spyware 7.5:n käyttöön
Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis työkalun toimintaa.
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Lataa AVG Anti-Spyware 7.5 http://www.ewido.net/en/download/ ja tallenna ohjelma työpöydällesi.
* Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
* Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
* Käynnistä AVG Anti-Spyware.
* Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
* Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
* Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
* Sitten "Reports" valikon alta:
o Laita täppi kohtaan "Automatically generate report after every scan"
o Ota täppi pois kohdasta"Only if threats were found"
* Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
* "Resident shield is", muuta tila active:sta inactive:ksi
* Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan, Ohje!
HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
* Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
* Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
* Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
* Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
* Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
* Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
* Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
* Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.
laita uusi hjt-loki myös
teen tämän jutun ja pistän uuden hjt-lokin sitten
Logfile of HijackThis v1.99.1
Scan saved at 15:33:10, on 5.11.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\DAEMON~1\daemon.exe
C:\PROGRA~1\ipwins\ipwins.exe
C:\PROGRA~1\COMMON~1\{7CE1E~1\Update.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe
C:\WINNT\system32\services.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\HJT\HIJACK~1.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TacticalOpsSetup.exe] C:\DOCUME~1\JRJEST~1\OMATTI~1\IMUPAI~1\DOWNLO~1\TACTIC~1.EXE /r
O4 - HKCU\..\Run: [WinMedia] C:\TOQPKQ~1.EXE
O4 - HKCU\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
O20 - AppInit_DLLs: C:\WINNT\system32\tmp_fk.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINNT\system32\msasvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
***********************************************
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
Created at: 15:27:09 5.11.2006
Scan result:
HKLM\SOFTWARE\Classes\WinStatX.Installer -> Adware.WinTaskAd : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WinStatX.Installer\CLSID -> Adware.WinTaskAd : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\Cache\79DED70Bd01 -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\WINNT\prsx64.exe -> Backdoor.Ciadoor.13 : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\Y4M7UE7E\xragcmwgm[1].txt -> Backdoor.Pakes : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\Y4M7UE7E\dltmjg[1].txt -> Downloader.Small.ctf : Cleaned with backup (quarantined).
C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[148] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[244] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[256] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[408] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[436] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[484] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
[572] C:\WINNT\system32\tmp_fk.dll -> Downloader.Small.cyn : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\Y4M7UE7E\install[1].mp3 -> Dropper.PurityScan.ah : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\two.exe -> Dropper.PurityScan.ah : Cleaned with backup (quarantined).
C:\Program Files\MSN Messenger\two.exe -> Dropper.PurityScan.ah : Cleaned with backup (quarantined).
C:\WINNT\system32\two.exe -> Dropper.PurityScan.ah : Cleaned with backup (quarantined).
C:\WINNT\two.exe -> Dropper.PurityScan.ah : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\installer.exe -> Dropper.PurityScan.q : Cleaned with backup (quarantined).
C:\WINNT\system32\trz22.tmp -> Logger.Goldun.mb : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\WHA3K92Z\speedtest2[1].dll -> Not-A-Virus.Downloader.Win32.InsTool.a : Cleaned with backup (quarantined).
C:\WINNT\Downloaded Program Files\speedtest2.dll -> Not-A-Virus.Downloader.Win32.InsTool.a : Cleaned with backup (quarantined).
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\AKFFN0YH\uyhnkgq[1].htm -> Proxy.Wopla.ac : Cleaned with backup (quarantined).
C:\WINNT\system32\ntio256.sys -> Rootkit.Agent.cf : Cleaned with backup (quarantined).
:mozilla.168:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.208:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\Cookies\järjestelmänvalvouja@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.139:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.140:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.160:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.161:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.174:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.175:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.176:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.178:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.180:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.224:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.225:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.117:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.118:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\Cookies\järjestelmänvalvouja@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.144:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\Cookies\järjestelmänvalvoja@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.183:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.211:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.212:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.203:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.204:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.205:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.206:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.238:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.239:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.169:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.12:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\Cookies\järjestelmänvalvouja@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.147:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.339:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.237:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.123:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.124:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.126:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.16:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.272:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.287:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.141:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.233:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.267:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.22:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.23:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.24:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.25:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.26:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.27:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\Cookies\järjestelmänvalvouja@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.185:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.142:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.148:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.149:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.150:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.213:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.214:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.242:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.243:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.100:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.101:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.102:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.246:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.121:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.193:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.194:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.240:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.241:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.177:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.179:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.181:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\x5228drs.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\AKFFN0YH\ltbeoud[1].txt -> Trojan.Sinowal.bh : Cleaned with backup (quarantined).
C:\WINNT\system32\msasvc.exe -> Trojan.Sinowal.bh : Cleaned with backup (quarantined).
::Report end
Että,kerros sitten mitä nyt pitää tehdä?
kannattaa googlata ja katsoa mitä nuo vihulaiset on tehneet, onko varastaneet salasanoja
Lataa SmitfraudFix (c) S!Ri http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:
Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
Valitse optio #1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
Postita tämän tekstitiedoston sisältö viestiketjuusi.
Huomaa : process.exe filun tunnistaa jotkut Anti-virus ohjelmat (AntiVir, Dr.Web, Kaspersky) "Haittakaluna"; se ei ole virus, vaan ohjelma joka pysäyttää prosesseja. A/V ohjelmat eivät pysty tunnistamaan hyvän ja pahan käytön tälläisten ohjelmian väliltä, silloin ne saattavat varoittaa käyttäjää.
Etsi lisää/poista sovelluksesta PuritySCAN By OIN, OuterInfo, OIN tai ohjelma jolla samantapainen nimi , ja poista sen asennus.
Käynnistä uudelleen ja poista tämä hakemisto, jos löytyy
C:\Program Files\PurityScan
jatkoo tuossa alla.
Jos ohjelmaa ei löydy, lataa ja aja tämä
Uninstaller http://www.outerinfo.com/OiUninstaller.exe
Käynnistä uudelleen ja poista tämä hakemisto:
C:\Program Files\PurityScan
scannaa hjt:llä merkkaa paina Fix checked
O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
O4 - HKCU\..\Run: [WinMedia] C:\TOQPKQ~1.EXE
laita sitten uusi hjt-loki
tekstitiedosto..SmitFraudFix v2.119
Scan done at 17:58:02,41, su 05.11.2006
Run from C:\Documents and Settings\J„rjestelm„nvalvoja\Ty”p”yt„\SmitfraudFix
OS: Microsoft Windows 2000 [Versio 5.00.2195] - Windows_NT
Fix run in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\J„rjestelm„nvalvoja
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\J„rjestelm„nvalvoja\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\JRJEST~1\Suosikit
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Nykyinen kotisivu"
tuo loki
niin että mitäs sitten?
Logfile of HijackThis v1.99.1
Scan saved at 18:06:42, on 5.11.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\DAEMON~1\daemon.exe
C:\PROGRA~1\ipwins\ipwins.exe
C:\PROGRA~1\COMMON~1\{7CE1E~1\Update.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe
C:\WINNT\system32\services.exe
C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
C:\PROGRA~1\WINDOW~2\wmplayer.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\WINNT\system32\cmd.exe
C:\HJT\HIJACK~1.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
O3 - Toolbar: (no name) - {C004DEC2-2623-438e-9CA2-C9043AB28508} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TacticalOpsSetup.exe] C:\DOCUME~1\JRJEST~1\OMATTI~1\IMUPAI~1\DOWNLO~1\TACTIC~1.EXE /r
O4 - HKCU\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O4 - HKCU\..\Run: [WinMedia] C:\TOQPKQ~1.EXE
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
O20 - AppInit_DLLs: C:\WINNT\system32\tmp_fk.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINNT\system32\msasvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
jos ei loöydy niin se ajoon
SmitFraudFix v2.119
Scan done at 18:09:45,39, su 05.11.2006
Run from C:\Documents and Settings\J„rjestelm„nvalvoja\Ty”p”yt„\SmitfraudFix
OS: Microsoft Windows 2000 [Versio 5.00.2195] - Windows_NT
Fix run in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINNT\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\J„rjestelm„nvalvoja
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\J„rjestelm„nvalvoja\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\JRJEST~1\Suosikit
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Nykyinen kotisivu"
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\WINNT\\system32\\tmp_fk.dll"
»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32
»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
mitä sitten?
Printtaa ohjeet ulos.
Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi.
Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
Valitse optio #2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.
Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.
Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".
Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi & liitä tämän raportin tulokset vastaukseesi.
Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.
niin jatketaan sitten huomenna.
lisää poista sovelutuksesta
Mene ohjauspaneliin ja siellä lisää/poista sovellus-kohtaan. Poista seuraavien ohjelmien asennus:
Oin
Yazzle by Oin
Purityscan by Oin
Snowballwars by Oin
tai mikä tahansa ohjelma, jossa on Oin tai Outerinfo
Zolero
Tizzletalk
MediaTickets
Cowabanga
scannaa hjt:llä merkkaa paina fix checked
O3 - Toolbar: (no name) - {C004DEC2-2623-438e-9CA2-C9043AB28508} - (no file)
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
mene vikasietotilaan
poista kansio
C:\Program Files\--> ipwins
niin saisinko lisää neuvoja?
SmitFraudFix v2.119
Scan done at 11:06:25,00, ti 07.11.2006
Run from C:\Documents and Settings\J„rjestelm„nvalvoja\Ty”p”yt„\SmitfraudFix
OS: Microsoft Windows 2000 [Versio 5.00.2195] - Windows_NT
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files
»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
Registry Cleaning done.
»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
******************************************************
Tue Nov 07 10:40:28 2006 => **********************************************************
Tue Nov 07 10:40:28 2006 => eScan AntiVirus Toolkit Utility.
Tue Nov 07 10:40:28 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Tue Nov 07 10:40:28 2006 => **********************************************************
Tue Nov 07 10:40:28 2006 => Version 4.4.7
Tue Nov 07 10:40:28 2006 => Log File: C:\KASPER~1\mwav.log
Tue Nov 07 10:40:28 2006 => Latest Date of files inside MWAV: 18 Sep 2006 19:31:02.
Tue Nov 07 10:40:32 2006 => AV Library Loaded...
Tue Nov 07 10:40:32 2006 => Scanning File C:\KASPER~1\kavss.exe
Tue Nov 07 10:40:32 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Tue Nov 07 10:40:32 2006 => Scanning File C:\KASPER~1\kavss.dll
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\kavssi.dll
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\ipc.dll
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\main.avi
Tue Nov 07 10:40:33 2006 => Scanning File C:\KASPER~1\virus.avi
Tue Nov 07 10:40:33 2006 => Virus Database Date: 2006/09/18
Tue Nov 07 10:40:33 2006 => Virus Database Count: 224509
Tue Nov 07 10:40:56 2006 => AV Library Unloaded (3)...
Tue Nov 07 10:49:48 2006 => **********************************************************
Tue Nov 07 10:49:48 2006 => eScan AntiVirus Toolkit Utility.
Tue Nov 07 10:49:48 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Tue Nov 07 10:49:48 2006 => **********************************************************
Tue Nov 07 10:49:48 2006 => Version 4.4.7
Tue Nov 07 10:49:48 2006 => Log File: C:\KASPER~1\mwav.log
Tue Nov 07 10:49:48 2006 => Latest Date of files inside MWAV: 07 Nov 2006 10:38:16.
Tue Nov 07 10:49:52 2006 => AV Library Loaded...
Tue Nov 07 10:49:52 2006 => Scanning File C:\KASPER~1\kavss.exe
Tue Nov 07 10:49:52 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Tue Nov 07 10:49:52 2006 => Scanning File C:\KASPER~1\kavss.dll
Tue Nov 07 10:49:52 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Tue Nov 07 10:49:53 2006 => Scanning File C:\KASPER~1\kavssi.dll
Tue Nov 07 10:49:53 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Tue Nov 07 10:49:53 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Tue Nov 07 10:49:53 2006 => Scanning File C:\KASPER~1\ipc.dll
Tue Nov 07 10:49:53 2006 => Scanning File C:\KASPER~1\main.avi
Tue Nov 07 10:49:53 2006 => Scanning File C:\KASPER~1\virus.avi
Tue Nov 07 10:49:53 2006 => Virus Database Date: 2006/11/07
Tue Nov 07 10:49:53 2006 => Virus Database Count: 238782
Tue Nov 07 10:50:05 2006 => AV Library Unloaded (3)...
Tue Nov 07 11:21:04 2006 => **********************************************************
Tue Nov 07 11:21:04 2006 => eScan AntiVirus Toolkit Utility.
Tue Nov 07 11:21:04 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Tue Nov 07 11:21:04 2006 => **********************************************************
Tue Nov 07 11:21:04 2006 => Version 4.4.7
Tue Nov 07 11:21:04 2006 => Log File: C:\KASPER~1\mwav.log
Tue Nov 07 11:21:07 2006 => Latest Date of files inside MWAV: 07 Nov 2006 10:38:16.
Tue Nov 07 11:21:14 2006 => AV Library Loaded...
Tue Nov 07 11:21:14 2006 => Scanning File C:\KASPER~1\kavss.exe
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\kavss.dll
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\kavssi.dll
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\ipc.dll
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\main.avi
Tue Nov 07 11:21:15 2006 => Scanning File C:\KASPER~1\virus.avi
Tue Nov 07 11:21:16 2006 => Virus Database Date: 2006/11/07
Tue Nov 07 11:21:16 2006 => Virus Database Count: 238782
Tue Nov 07 11:21:41 2006 => **********************************************************
Tue Nov 07 11:21:41 2006 => eScan AntiVirus Toolkit Utility.
Tue Nov 07 11:21:41 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Tue Nov 07 11:21:41 2006 =>
Tue Nov 07 11:21:41 2006 => Support: [email protected]
Tue Nov 07 11:21:41 2006 => Web: http://www.mwti.net
Tue Nov 07 11:21:41 2006 => **********************************************************
Tue Nov 07 11:21:41 2006 => Version 4.4.7
Tue Nov 07 11:21:41 2006 => Log File: C:\KASPER~1\mwav.log
Tue Nov 07 11:21:41 2006 => Latest Date of files inside MWAV: 07 Nov 2006 10:38:16.
Tue Nov 07 11:21:41 2006 => Options Selected by User:
Tue Nov 07 11:21:41 2006 => Memory Check: Enabled
Tue Nov 07 11:21:41 2006 => Registry Check: Enabled
Tue Nov 07 11:21:41 2006 => StartUp Folder Check: Enabled
Tue Nov 07 11:21:41 2006 => System Folder Check: Enabled
Tue Nov 07 11:21:41 2006 => System Area Check: Disabled
Tue Nov 07 11:21:41 2006 => Services Check: Enabled
Tue Nov 07 11:21:41 2006 => Drive Check Option Disabled
Tue Nov 07 11:21:41 2006 => Scanning Type: Scan And Clean
Tue Nov 07 11:21:41 2006 => Folder Check: Disabled
Tue Nov 07 11:21:41 2006 => ***** Scanning Memory Files *****
Tue Nov 07 11:21:41 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:41 2006 => Scanning File C:\WINNT\system32\lsass.exe
Tue Nov 07 11:21:41 2006 => Scanning File C:\WINNT\system32\svchost.exe
Tue Nov 07 11:21:41 2006 => Scanning File C:\WINNT\System32\WBEM\WinMgmt.exe
Tue Nov 07 11:21:41 2006 => Scanning File C:\WINNT\Explorer.EXE
Tue Nov 07 11:21:41 2006 => Scanning File C:\Kaspersky\mwavscan.com
Tue Nov 07 11:21:42 2006 => Scanning File C:\Kaspersky\kavss.exe
Tue Nov 07 11:21:42 2006 => ***** Scanning Registry Files *****
Tue Nov 07 11:21:42 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\system32\NETSHELL.dll
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\system32\webcheck.dll
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\system32\stobject.dll
Tue Nov 07 11:21:42 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Tue Nov 07 11:21:42 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\Explorer.exe
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\system32\userinit.exe
Tue Nov 07 11:21:42 2006 => Scanning HKCU\Control Panel\Desktop
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\system32\ssmarque.scr
Tue Nov 07 11:21:42 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Tue Nov 07 11:21:42 2006 => Scanning File C:\WINNT\system32\RUNDLL32.EXE
Tue Nov 07 11:21:43 2006 => Scanning File C:\WINNT\system32\mobsync.exe
Tue Nov 07 11:21:43 2006 => Scanning File C:\PROGRA~1\DAEMON~1\daemon.exe
Tue Nov 07 11:21:43 2006 => Scanning File C:\WINNT\system32\RUNDLL32.EXE
Tue Nov 07 11:21:43 2006 => *** File C:\PROGRA~1\Sygate\SPF\smc.exe having Size Restriction ***
Tue Nov 07 11:21:43 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe [**]
Tue Nov 07 11:21:43 2006 => ERROR!!! Invalid Entry _mzu_zlope01 = C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe. Removing it.
Tue Nov 07 11:21:43 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Tue Nov 07 11:21:43 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Tue Nov 07 11:21:43 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Tue Nov 07 11:21:43 2006 => ERROR!!! Invalid Entry _mzu_zlope01 = C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe. Removing it.
Tue Nov 07 11:21:43 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Tue Nov 07 11:21:43 2006 => *** File C:\PROGRA~1\MSNMES~1\msnmsgr.exe having Size Restriction ***
Tue Nov 07 11:21:43 2006 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe [**]
Tue Nov 07 11:21:43 2006 => ERROR!!! Invalid Entry TacticalOpsSetup.exe = C:\DOCUME~1\JRJEST~1\OMATTI~1\IMUPAI~1\DOWNLO~1\TACTIC~1.EXE /r. Removing it.
Tue Nov 07 11:21:43 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Tue Nov 07 11:21:43 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Tue Nov 07 11:21:43 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Tue Nov 07 11:21:43 2006 => Scanning HKCR\txtfile\shell\open\command
Tue Nov 07 11:21:43 2006 => Scanning HKCR\comfile\shell\open\command
Tue Nov 07 11:21:43 2006 => Scanning HKCR\exefile\shell\open\command
Tue Nov 07 11:21:43 2006 => Scanning File C:\WINNT\system32\msvcrt.exe
Tue Nov 07 11:21:44 2006 => Scanning HKCR\dllfile\shell\open\command
Tue Nov 07 11:21:44 2006 => Scanning HKCR\batfile\shell\open\command
Tue Nov 07 11:21:44 2006 => Scanning HKCR\piffile\shell\open\command
Tue Nov 07 11:21:44 2006 => Scanning HKCR\scrfile\shell\open\command
Tue Nov 07 11:21:44 2006 => Scanning HKCR\scrfile\shell\config\command
Tue Nov 07 11:21:44 2006 => Replacing Registry Value
Tue Nov 07 11:21:44 2006 => Scanning HKCR\regfile\shell\open\command
Tue Nov 07 11:21:44 2006 => ***** Scanning StartUp Folders *****
Tue Nov 07 11:21:44 2006 => ***** Scanning C:\Documents and Settings\Järjestelmänvalvoja\Käynnistä-valikko\Ohjelmat\Käynnistys Folder *****
Tue Nov 07 11:21:44 2006 => Scanning Folder: C:\Documents and Settings\Järjestelmänvalvoja\Käynnistä-valikko\Ohjelmat\Käynnistys\*.*
Tue Nov 07 11:21:44 2006 => ***** Scanning C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys Folder *****
Tue Nov 07 11:21:44 2006 => Scanning Folder: C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\*.*
Tue Nov 07 11:21:44 2006 => ***** Scanning Service Files *****
Tue Nov 07 11:21:44 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Tue Nov 07 11:21:44 2006 => Scanning File C:\WINNT\system32\DRIVERS\ACPI.sys
Tue Nov 07 11:21:44 2006 => Scanning File C:\WINNT\System32\drivers\afd.sys
Tue Nov 07 11:21:44 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:44 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:44 2006 => Scanning File C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
Tue Nov 07 11:21:45 2006 => Scanning File C:\WINNT\SYSTEM32\DRIVERS\ASWRDR.SYS
Tue Nov 07 11:21:45 2006 => Scanning File C:\PROGRA~1\ALWILS~1\Avast4\aswUpdSv.exe
Tue Nov 07 11:21:45 2006 => Scanning File C:\WINNT\system32\DRIVERS\asyncmac.sys
Tue Nov 07 11:21:45 2006 => Scanning File C:\WINNT\system32\DRIVERS\atapi.sys
Tue Nov 07 11:21:45 2006 => Scanning File C:\WINNT\system32\DRIVERS\atmarpc.sys
Tue Nov 07 11:21:45 2006 => Scanning File C:\WINNT\system32\DRIVERS\audstub.sys
Tue Nov 07 11:21:45 2006 => Scanning File C:\PROGRA~1\ALWILS~1\Avast4\ashServ.exe
Tue Nov 07 11:21:45 2006 => Scanning File C:\PROGRA~1\ALWILS~1\Avast4\ashMaiSv.exe
Tue Nov 07 11:21:46 2006 => Scanning File C:\PROGRA~1\ALWILS~1\Avast4\ashWebSv.exe
Tue Nov 07 11:21:46 2006 => Scanning File C:\PROGRA~1\GRISOFT\AVGANT~1.5\GUARD.SYS
Tue Nov 07 11:21:46 2006 => Scanning File C:\PROGRA~1\Grisoft\AVGANT~1.5\guard.exe
Tue Nov 07 11:21:46 2006 => Scanning File C:\WINNT\system32\DRIVERS\AvgAsCln.sys
Tue Nov 07 11:21:46 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:46 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\SYSTEM32\BUFADPT.SYS
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\DRIVERS\bwcdrv.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\DRIVERS\bcmwl5.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\DRIVERS\CCDECODE.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\DRIVERS\cdrom.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\System32\cisvc.exe
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\clipsrv.exe
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\DRIVERS\d347bus.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\Drivers\d347prt.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:47 2006 => Scanning File C:\WINNT\system32\DRIVERS\disk.sys
Tue Nov 07 11:21:47 2006 => Scanning File C:\PROGRA~1\EXECUT~1\DISKEE~2\DKSERV~1.EXE
Tue Nov 07 11:21:48 2006 => Scanning File C:\WINNT\System32\dmadmin.exe
Tue Nov 07 11:21:48 2006 => Scanning File C:\WINNT\system32\drivers\dmboot.sys
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\system32\drivers\dmio.sys
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\system32\drivers\dmload.sys
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\system32\drivers\DMusic.sys
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\SYSTEM32\ESSIDSET.SYS
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:49 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\faxsvc.exe
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\fdc.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\dlkfet5b.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\drivers\fltmgr.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\ftdisk.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\gameenum.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\msgpc.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\hidusb.sys
Tue Nov 07 11:21:50 2006 => Scanning File C:\WINNT\system32\DRIVERS\HPZid412.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\HPZipr12.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\HPZius12.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\i8042prt.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\ipfltdrv.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\ipinip.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\ipnat.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\ipsec.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\irenum.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\isapnp.sys
Tue Nov 07 11:21:51 2006 => ERROR!!! Invalid Entry \??\C:\DOCUME~1\JRJEST~1\LOCALS~1\Temp\jnv4_mib.sys in SYSTEM\CurrentControlSet\Services\jnv4_mib...
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\DRIVERS\kbdclass.sys
Tue Nov 07 11:21:51 2006 => Scanning File C:\WINNT\system32\drivers\kmixer.sys
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\System32\mnmsrvc.exe
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\system32\DRIVERS\mouclass.sys
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\system32\DRIVERS\mouhid.sys
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\system32\DRIVERS\MPE.sys
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\system32\DRIVERS\mrxsmb.sys
Tue Nov 07 11:21:52 2006 => ERROR!!! Invalid Entry C:\WINNT\system32\msasvc.exe in SYSTEM\CurrentControlSet\Services\MsaSvc...
Tue Nov 07 11:21:52 2006 => Scanning File C:\WINNT\System32\msdtc.exe
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\msiexec.exe
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\drivers\MSKSSRV.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\drivers\MSPCLOCK.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\drivers\MSPQM.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\drivers\MSTEE.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\DRIVERS\NABTSFEC.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\DRIVERS\ndistapi.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\DRIVERS\ndisuio.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\DRIVERS\ndiswan.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\DRIVERS\netbios.sys
Tue Nov 07 11:21:53 2006 => Scanning File C:\WINNT\system32\DRIVERS\netbt.sys
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\system32\netdde.exe
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\system32\netdde.exe
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\system32\drivers\netdtect.sys
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\System32\lsass.exe
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:54 2006 => ERROR!!! Invalid Entry \??\C:\WINNT\system32\ntio256.sys in SYSTEM\CurrentControlSet\Services\ntio256...
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\System32\lsass.exe
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:54 2006 => *** File C:\WINNT\system32\DRIVERS\nv4_mini.sys having Size Restriction ***
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\system32\DRIVERS\nv4_mini.sys [**]
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\system32\nvsvc32.exe
Tue Nov 07 11:21:54 2006 => Scanning File C:\WINNT\system32\DRIVERS\nwlnkflt.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\nwlnkfwd.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\parallel.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\parport.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\pci.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\pciide.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\HPZipm12.exe
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\System32\lsass.exe
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\raspptp.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\ptilink.sys
Tue Nov 07 11:21:55 2006 => Scanning File C:\WINNT\system32\DRIVERS\PxHelp20.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\DRIVERS\rasacd.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\DRIVERS\rasl2tp.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\DRIVERS\raspti.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\drivers\RCA.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\DRIVERS\rdbss.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\DRIVERS\redbook.sys
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\system32\regsvc.exe
Tue Nov 07 11:21:56 2006 => Scanning File C:\WINNT\System32\locator.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\system32\svchost.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\System32\rsvp.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\system32\lsass.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\System32\SCardSvr.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\System32\SCardSvr.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\system32\MSTask.exe
Tue Nov 07 11:21:57 2006 => Scanning File C:\WINNT\SYSTEM32\DRIVERS\SECDRV.SYS
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\svchost.exe
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\DRIVERS\serenum.sys
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\DRIVERS\serial.sys
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\DRIVERS\SLIP.sys
Tue Nov 07 11:21:58 2006 => *** File C:\PROGRA~1\Sygate\SPF\smc.exe having Size Restriction ***
Tue Nov 07 11:21:58 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe [**]
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\spoolsv.exe
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\Drivers\sptd.sys
Tue Nov 07 11:21:58 2006 => ERROR!!! ScanFile Fails...
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\DRIVERS\srv.sys
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\stisvc.exe
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\DRIVERS\StreamIP.sys
Tue Nov 07 11:21:58 2006 => Scanning File C:\WINNT\system32\DRIVERS\swenum.sys
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\drivers\swmidi.sys
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\drivers\sysaudio.sys
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\smlogsvc.exe
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\DRIVERS\tcpip.sys
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\Drivers\Teefer.sys
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\tlntsvr.exe
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\services.exe
Tue Nov 07 11:21:59 2006 => Scanning File C:\WINNT\system32\DRIVERS\uhcd.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\update.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\System32\ups.exe
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\usbhub.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\usbprint.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\usbscan.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\USBSTOR.SYS
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\System32\UtilMan.exe
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\System32\drivers\vga.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\viaagp.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\viaagp1.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\System32\Drivers\viausb.sys
Tue Nov 07 11:22:00 2006 => Scanning File C:\WINNT\system32\DRIVERS\viaide.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\system32\drivers\vinyl97.sys
Tue Nov 07 11:22:01 2006 => ERROR!!! Invalid Entry in SYSTEM\CurrentControlSet\Services\vsdatant...
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\System32\services.exe
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\system32\DRIVERS\wanarp.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\system32\drivers\wdmaud.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\SYSTEM32\Drivers\wg3n.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\SYSTEM32\Drivers\wg4n.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\SYSTEM32\Drivers\wg5n.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\SYSTEM32\Drivers\wg6n.sys
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\System32\WBEM\WinMgmt.exe
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\system32\Services.exe
Tue Nov 07 11:22:01 2006 => Scanning File C:\WINNT\SYSTEM32\DRIVERS\WPSDRVNT.SYS
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\system32\DRIVERS\WSTCODEC.SYS
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\system32\svchost.exe
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\System32\svchost.exe
Tue Nov 07 11:22:02 2006 => ***** Scanning System32 Folders *****
Tue Nov 07 11:22:02 2006 => Scanning C:\WINNT Directory
Tue Nov 07 11:22:02 2006 => Scanning Folder: C:\WINNT\*.*
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\Active Setup Log.txt [**]
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\Alppiruusu.bmp [**]
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\basecsp.log [**]
Tue Nov 07 11:22:02 2006 => Scanning File C:\WINNT\cc.exe
Tue Nov 07 11:22:04 2006 => File C:\WINNT\cc.exe infected by "Trojan.Win32.KillProc.p" Virus. Action Taken: File Deleted.
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\clock.avi [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\COM .log [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\comsetup.log [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\control.ini [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\Ctregrun.exe
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\daemon.dll
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\dahotfix.log [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\delttsul.exe
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\desktop.ini [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\DirectX.log [**]
Tue Nov 07 11:22:04 2006 => Scanning File C:\WINNT\discover.exe
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\eReg.dat [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\EventSystem.log [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\explorer.exe
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\explorer.scf [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\Filzip.ini [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\folder.htt
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\hh.exe
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\hpoins07.dat [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\hpomdl07.dat [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\Höyhenkuvio.bmp [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\ielog.txt [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\ieuninst.exe
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\iis5.log [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\imsins.BAK [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\imsins.log [**]
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\IsUn040b.exe
Tue Nov 07 11:22:05 2006 => Scanning File C:\WINNT\IsUninst.exe
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\jautoexp.dat [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\Kahvikuppi.bmp [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\Kalassa.bmp [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB329115.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB820888.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB822831.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB823182.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB823559.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB824105.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB825119.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB826232.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB828035.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB828741.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB828749.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB835732.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB837001.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB839645.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB840315.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB840987.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB841356.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB841533.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB841872.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB841873.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB842526.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB842773.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB867282-IE6SP1-20050127.163319.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB871250.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB873333.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB873339.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB883939-IE6SP1-20050428.125228.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB885250.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB885492.log [**]
Tue Nov 07 11:22:06 2006 => Scanning File C:\WINNT\KB885835.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB885836.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB888113.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB889293-IE6SP1-20041111.235619.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB890046.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB890047.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB890175.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB890859.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB890923-IE6SP1-20050225.103456.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB891711.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB891781.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB893066.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB893086.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB893756.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB893803v2.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB894320.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB896358.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB896422.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB896423.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB896424.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB896688-IE6SP1-20051004.130236.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB896727-IE6SP1-20050719.165959.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB897715-OE6SP1-20050503.210336.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB899587.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB899588.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB899589.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB900725.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB901017.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB901214.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB902400.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB904368.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB904706.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB905414.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB905495-IE6SP1-20050805.184113.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB905749.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB908519.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB908531.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB911280.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB911564.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB911567-OE6SP1-20060316.165634.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB912919.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB913580.log [**]
Tue Nov 07 11:22:07 2006 => Scanning File C:\WINNT\KB914388.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB914389.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB917008.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB917159.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB917422.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB917734.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB917736.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB917953.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB918899-IE6SP1-20060725.123917.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB920670.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB920683.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB920685.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB920958.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB921398.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB921883.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB922582.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB922616.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\KB925486-IE6SP1-20060918.120000.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\M [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\MDAC25SP3-KB911562-x86-FIN.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\mdm.ini [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\mmdet.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\ModemDet.txt [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\ModemLog_Standardimodeemi.txt [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\mozver.dat [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\msdfmap.ini [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\msmqprop.log [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\MSOClip.232 [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\MSOPrefs.232 [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\muninst.exe
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\NeroDigital.ini [**]
Tue Nov 07 11:22:08 2006 => Scanning File C:\WINNT\NOTEPAD.EXE
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\nsreg.dat [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\NSREX.INI [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\ntbtlog.txt [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\ocgen.log [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\ockodak.log [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\ODBC.INI [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\ODBCINST.INI [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\oeuninst.exe
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\OEWABLog.txt [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\pavsig.txt [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Pitsikuvio 16.bmp [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Preeriatuuli.bmp [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Q818043.log [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Q828026.log [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\regedit.exe
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Saippuakuplat.bmp [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Santa Fen stukko.bmp [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\SchedLgU.Txt [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\SET38.tmp [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\SET74.tmp [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\setdebug.exe
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\setup.inf
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\Setup.log [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\setup.rpt [**]
Tue Nov 07 11:22:09 2006 => Scanning File C:\WINNT\setupact.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\setupapi.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\setuperr.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\setuplog.txt [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\sptsupd.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\spupdsvc.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\Sti_Trace.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\svcpack.log [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\system.ini [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\TASKMAN.EXE
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\TO-Watcher Setup Log.txt [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\TO-Watcher Uninstall Log.txt [**]
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\twain.dll
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\twain_32.dll
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\Twunk_16.dll
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\twunk_16.exe
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\Twunk_32.dll
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\twunk_32.exe
Tue Nov 07 11:22:10 2006 => Scanning File C:\WINNT\UN800001.EXE
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\UN800001.INI [**]
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\UN800101.EXE
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\UN800101.INI [**]
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\uneng.exe
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\UninstallFirefox.exe
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\UpdateRollupPack.log [**]
Tue Nov 07 11:22:11 2006 => Scanning File C:\WINNT\updcustom.dll.log [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\updspapi.log [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\upwizun.exe
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\vb.ini [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\vbaddin.ini [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\vgxuninst.exe
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\Viherkivi.bmp [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\Viuhkat.bmp [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\vminst.log [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\vmmreg32.dll
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\welcome.exe
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\welcome.ini [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\win.ini [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\winamp.ini [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\Windows Update.log [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\WindowsUpdate.log [**]
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\winhelp.exe
Tue Nov 07 11:22:12 2006 => Scanning File C:\WINNT\winhlp32.exe
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\winnt.bmp [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\winnt256.bmp [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\winrep.exe
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\wmsetup.log [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\WMSysPr9.prx [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\Zapoteekki.bmp [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\_default.pif
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\? [**]
Tue Nov 07 11:22:13 2006 => Scanning C:\WINNT\system32 Directory
Tue Nov 07 11:22:13 2006 => Scanning Folder: C:\WINNT\system32\*.*
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\system32\$winnt$.inf
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\system32\12520437.cpx [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\system32\12520850.cpx [**]
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\system32\aaaamon.dll
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\system32\access.cpl
Tue Nov 07 11:22:13 2006 => Scanning File C:\WINNT\system32\acctres.dll
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\accwiz.exe
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\acelpdec.ax
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\acledit.dll
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\aclui.dll
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\acsetupc.dll
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\acsmib.dll
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\activeds.dll
Tue Nov 07 11:22:14 2006 => Scanning File C:\WINNT\system32\activeds.tlb
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\actmovie.exe
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\actskin4.ocx
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\actxprxy.dll
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\admparse.dll
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\adptif.dll
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\adsldp.dll
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\adsldpc.dll
Tue Nov 07 11:22:15 2006 => Scanning File C:\WINNT\system32\adsmsext.dll
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\adsnds.dll
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\adsnt.dll
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\adsnw.dll
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\ADVAPI32.DLL
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\advpack.dll
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\alrsvc.dll
Tue Nov 07 11:22:16 2006 => Scanning File C:\WINNT\system32\amcompat.tlb
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\amstream.dll
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\ansi.sys
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\apcups.dll
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\append.exe
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\appmgmts.dll
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\appmgr.dll
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\appwiz.cpl
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\arp.exe
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\asctrls.ocx
Tue Nov 07 11:22:17 2006 => Scanning File C:\WINNT\system32\asferror.dll
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\asfsipc.dll
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\asinst.cfg [**]
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\aswBoot.exe
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\ASYCFILT.DLL
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\at.exe
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\atkctrs.dll
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\atl.dll
Tue Nov 07 11:22:18 2006 => Scanning File C:\WINNT\system32\atl71.dll
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\atmadm.exe
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\atmfd.dll
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\atmlib.dll
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\attrib.exe
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\authz.dll
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\AUTOCHK.EXE
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\AUTOCONV.EXE
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\AUTOEXEC.NT [**]
Tue Nov 07 11:22:19 2006 => Scanning File C:\WINNT\system32\AutoFAT.exe
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\autofmt.exe
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\autolfn.exe
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\AutoNTFS.exe
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\AVASTSS.scr
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\avicap.dll
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\avicap32.dll
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\avifil32.dll
Tue Nov 07 11:22:20 2006 => Scanning File C:\WINNT\system32\avifile.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\avmeter.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\avtapi.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\avwav.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\axaltocm.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\basecsp.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\basenote.cov [**]
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\BASESRV.DLL
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\batmeter.dll
Tue Nov 07 11:22:21 2006 => Scanning File C:\WINNT\system32\batt.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bcsprsrc.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bdaplgin.ax
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bios1.rom [**]
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bios4.rom [**]
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\BitCometRes.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bitsprx2.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bitsprx3.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\blackbox.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bootok.exe
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bootvid.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bootvrfy.exe
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\bopomofo.uce [**]
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\br549.dll
Tue Nov 07 11:22:22 2006 => Scanning File C:\WINNT\system32\browselc.dll
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\browser.dll
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\BROWSEUI.DLL
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\browsewm.dll
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\BUFADPT.SYS
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\BWCINST.DLL
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\cabinet.dll
Tue Nov 07 11:22:23 2006 => Scanning File C:\WINNT\system32\cabview.dll
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\CACLS.EXE
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\calc.exe
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\capesnpn.dll
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\cards.dll
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\catsrv.dll
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\catsrvps.dll
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\catsrvut.dll
Tue Nov 07 11:22:24 2006 => Scanning File C:\WINNT\system32\ccfgnt.dll
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\CDFVIEW.DLL
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\cdm.dll
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\cdonts.dll
Tue Nov 07 11:22:25 2006 => *** File C:\WINNT\system32\cdosys.dll having Size Restriction ***
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\cdosys.dll [**]
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\cdplayer.exe
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\cdral.dll
Tue Nov 07 11:22:25 2006 => Scanning File C:\WINNT\system32\cdrtc.dll
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\certcli.dll
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\certmgr.dll
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\certmgr.msc [**]
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\CEWMDM.dll
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\cfgmgr32.dll
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\charmap.exe
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\chcp.com
Tue Nov 07 11:22:26 2006 => Scanning File C:\WINNT\system32\CHKDSK.EXE
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\CHKNTFS.EXE
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\ciadmin.dll
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\ciadv.msc [**]
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\cic.dll
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\cidaemon.exe
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\ciodm.dll
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\cipher.exe
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\cisvc.exe
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\ckcnv.exe
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\clb.dll
Tue Nov 07 11:22:27 2006 => Scanning File C:\WINNT\system32\clbcatex.dll
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\clbcatq.dll
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\cleanmgr.exe
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\cliconf.hlp [**]
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\cliconfg.dll
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\cliconfg.exe
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\clipbrd.exe
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\clipsrv.exe
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\clspack.exe
Tue Nov 07 11:22:28 2006 => Scanning File C:\WINNT\system32\CLUSAPI.DLL
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\CLUSTER.EXE
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmcfg32.dll
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\CMD.EXE
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmdial32.dll
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmdl32.exe
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmmgr32.exe
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmmgr32.hlp [**]
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmmon32.exe
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmnquery.dll
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmos.ram [**]
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmpbk32.dll
Tue Nov 07 11:22:29 2006 => Scanning File C:\WINNT\system32\cmprops.dll
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\cmstp.exe
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\cmutil.dll
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\cnbjmon.dll
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\cnetcfg.dll
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\CNVFAT.DLL
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\colbact.dll
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\comaddin.dll
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\COMCAT.DLL
Tue Nov 07 11:22:30 2006 => Scanning File C:\WINNT\system32\comclust.exe
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\comctl32.dll
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\COMDLG32.DLL
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\comdlg32.oca
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\comdlg32.ocx
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\comm.drv
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\command.com
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\commdlg.dll
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\comp.exe
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\compact.exe
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\compmgmt.msc [**]
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\compobj.dll
Tue Nov 07 11:22:31 2006 => Scanning File C:\WINNT\system32\compstui.dll
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\comrepl.dll
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\comsnap.dll
Tue Nov 07 11:22:32 2006 => *** File C:\WINNT\system32\comsvcs.dll having Size Restriction ***
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\comsvcs.dll [**]
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\comuid.dll
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\CONFIG.NT [**]
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\confmsp.dll
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\conime.exe
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\console.dll
Tue Nov 07 11:22:32 2006 => Scanning File C:\WINNT\system32\control.exe
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\CONVERT.EXE
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\corpol.dll
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\country.sys
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\crtdll.dll
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\CRYPT32.DLL
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\CRYPTDLG.DLL
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\cryptdll.dll
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\cryptext.dll
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\CRYPTNET.DLL
Tue Nov 07 11:22:33 2006 => Scanning File C:\WINNT\system32\cryptsvc.dll
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\CRYPTUI.DLL
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\cscdll.dll
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\cscript.exe
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\cscui.dll
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\CSRSRV.DLL
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\CSRSS.EXE
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\csseqchk.dll
Tue Nov 07 11:22:34 2006 => Scanning File C:\WINNT\system32\ctl3d32.dll
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\ctl3dv2.dll
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\ctype.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_037.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_10000.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_10079.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1026.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1250.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1251.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1252.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1253.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1254.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1255.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1256.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1257.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_1258.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_20127.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_20261.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_20866.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_20905.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_21866.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_28591.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_28592.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_28593.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_28598.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_28605.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_437.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_500.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_775.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_850.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_860.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_861.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_863.nls [**]
Tue Nov 07 11:22:35 2006 => Scanning File C:\WINNT\system32\c_865.nls [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\c_874.nls [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\c_932.nls [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\c_936.nls [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\c_949.nls [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\c_950.nls [**]
Tue Nov 07 11:22:36 2006 => *** File C:\WINNT\system32\d3d8.dll having Size Restriction ***
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3d8.dll [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3d8thk.dll
Tue Nov 07 11:22:36 2006 => *** File C:\WINNT\system32\d3d9.dll having Size Restriction ***
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3d9.dll [**]
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3dim.dll
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3dim700.dll
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3dpmesh.dll
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3dramp.dll
Tue Nov 07 11:22:36 2006 => Scanning File C:\WINNT\system32\d3dref.dll
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\d3drm.dll
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\d3dxof.dll
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\DANIM.DLL
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\dataclen.dll
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\datime.dll
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\daxctle.ocx
Tue Nov 07 11:22:37 2006 => Scanning File C:\WINNT\system32\dbghelp.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dbmsadsn.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dbmsrpcn.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dbmssocn.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dbmsspxn.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dbmsvinn.dLL
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dbnmpntw.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\dciman32.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\DCOMCNFG.EXE
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\DComExt.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\ddeml.dll
Tue Nov 07 11:22:38 2006 => Scanning File C:\WINNT\system32\ddeshare.exe
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\ddmprxy.exe
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\ddraw.dll
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\ddrawex.dll
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\debug.exe
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\DESK.CPL
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\deskadp.dll
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\deskmon.dll
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\deskperf.dll
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\desktop.ini [**]
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\devenum.dll
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\devmgmt.msc [**]
Tue Nov 07 11:22:39 2006 => Scanning File C:\WINNT\system32\devmgr.dll
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfrg.msc [**]
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfrgfat.exe
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfrgntfs.exe
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfrgres.dll
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfrgsnap.dll
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfrgui.dll
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dfsshlex.dll
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dgrpsetu.dll
Tue Nov 07 11:22:40 2006 => Scanning File C:\WINNT\system32\dgsetup.dll
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\DHCPCSVC.DLL
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\dhcpmon.dll
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\DHCPSAPI.DLL
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\diactfrm.dll
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\diantz.exe
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\digest.dll
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\dimap.dll
Tue Nov 07 11:22:41 2006 => Scanning File C:\WINNT\system32\dinput.dll
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\dinput8.dll
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\DISKCOMP.COM
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\DISKCOPY.COM
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\diskcopy.dll
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\diskmgmt.msc [**]
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\diskperf.exe
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\dispex.dll
Tue Nov 07 11:22:42 2006 => Scanning File C:\WINNT\system32\DivX.dll
Tue Nov 07 11:22:44 2006 => Scanning File C:\WINNT\system32\divxdec.ax
Tue Nov 07 11:22:44 2006 => Scanning File C:\WI
miltäs se nyt näyttää.
Logfile of HijackThis v1.99.1
Scan saved at 16:07:51, on 7.11.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\DAEMON~1\daemon.exe
C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe
C:\PROGRA~1\COMMON~1\{7CE1E~1\Update.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
C:\PROGRA~1\WINDOW~2\wmplayer.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\HJT\HIJACK~1.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
O20 - AppInit_DLLs: C:\WINNT\system32\tmp_fk.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINNT\system32\msasvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
scannaa hjt:llä merkkaa paina Fix checked
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
O4 - HKCU\..\Run: [_mzu_zlope01] C:\WINNT\system32\_zsk_mzu_zlope01]Z`_ATV[QVCEHMJZ.exe
1. Lataa combofix.exe http://download.bleepingcomputer.com/sUBs/combofix.exe
tiedosto työpöydällesi.
2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
sori että on kestänyt,en ole päässyt koneellepariin viikkoon..,. joten tässä se combofix loki..
*********************************************
J„rjestelm„nvalvoja - ma 20.11.2006 19:51:26,39 Service Pack 4
ComboFix 06.11.19 - Running from: "C:\Documents and Settings\J„rjestelm„nvalvoja\Ty”p”yt„"
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Program Files\Inetget2
C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}
C:\Program Files\Common Files\{7CE1E27F-02EE-1035-0526-001018990166}
((((((((((((((((((((((((((((((( Files Created from 2006-10-20 to 2006-11-20 ))))))))))))))))))))))))))))))))))
2006-11-20 19:34 50,405 --a------ C:\WINNT\system32\tsstop.exe
2006-11-20 19:34 44,501 --a------ C:\WINNT\system32\tskscd.exe
2006-11-07 10:41 d-------- C:\Bases
2006-11-07 10:40 d-------- C:\Kaspersky
2006-11-05 17:58 1,870 --a------ C:\WINNT\system32\tmp.reg
2006-11-05 17:57 53,248 --a------ C:\WINNT\system32\Process.exe
2006-11-05 17:57 40,960 --a------ C:\WINNT\system32\swsc.exe
2006-11-05 17:57 288,417 --a------ C:\WINNT\system32\SrchSTS.exe
2006-11-05 17:57 135,168 --a------ C:\WINNT\system32\swreg.exe
2006-11-05 14:30 3,968 --a------ C:\WINNT\system32\drivers\AvgAsCln.sys
2006-11-05 14:30 d-------- C:\Program Files\Grisoft
2006-11-03 12:42 d-------- C:\Program Files\Messenger
2006-11-03 12:31 d-------- C:\HJT
2006-11-03 12:27 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01UIZQGEDCNDPXIGOL.exe
2006-11-03 11:49 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01[^QEP[IDVPOA`CZO.exe
2006-11-03 11:48 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01RWNYEAVDIW^`QKRF.exe
2006-11-03 11:34 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01`C[`CBKQYWMGZFJC.exe
2006-11-03 11:33 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01JKAN`AXF^[OTFAGQ.exe
2006-11-03 11:32 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01]P^JYQFAY]QLOJCF.exe
2006-11-03 11:29 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01CZ[Q]L`M]Y]EHN`S.exe
2006-11-03 11:27 9,291 --a------ C:\WINNT\system32\loadadv455.exe
2006-11-03 11:25 42,592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01XOUKT`JKUKFHKRDL.exe
2006-11-03 11:25 10,437 -r-h----- C:\WINNT\system32\tmp_3d0.exe
2006-11-03 11:14 18,716 --a------ C:\WINNT\system32\msvcrt.exe
2006-11-02 20:41 3,072 -r-hs---- C:\toqpkqo749718.exe
2006-11-02 20:40 9,291 --a------ C:\Documents and Settings\J„rjestelm„nvalvoja\loadadv455.exe
2006-11-02 20:40 115,642 --a------ C:\Documents and Settings\J„rjestelm„nvalvoja\ee.exe
2006-11-02 16:10 115,642 --a------ C:\Documents and Settings\J„rjestelm„nvalvoja\cc.exe
2006-10-27 13:01 83,096 --a------ C:\WINNT\system32\SSSensor.dll
2006-10-27 13:01 60,496 --a------ C:\WINNT\system32\drivers\Teefer.sys
2006-10-27 13:01 21,075 --a------ C:\WINNT\system32\drivers\wpsdrvnt.sys
2006-10-27 13:01 14,568 --a------ C:\WINNT\system32\drivers\wg6n.sys
2006-10-27 13:01 14,568 --a------ C:\WINNT\system32\drivers\wg5n.sys
2006-10-27 13:01 14,568 --a------ C:\WINNT\system32\drivers\wg4n.sys
2006-10-27 13:01 14,568 --a------ C:\WINNT\system32\drivers\wg3n.sys
2006-10-27 13:01 d-------- C:\Program Files\Sygate
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-11-20 19:59 -------- d-a------ C:\Program Files\Common Files
2006-11-19 16:23 -------- d-------- C:\Program Files\Common Files\System
2006-11-14 12:13 2560 --a------ C:\WINNT\system32\BitCometRes.dll
2006-11-11 10:56 -------- d-------- C:\Program Files\Outlook Express
2006-11-10 15:27 -------- d-------- C:\Program Files\Mozilla Firefox
2006-11-05 15:26 -------- d-------- C:\Program Files\MSN Messenger
2006-11-03 11:49 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01[^QEP[IDVPOA`CZO.exe
2006-11-03 11:48 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01RWNYEAVDIW^`QKRF.exe
2006-11-03 11:34 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01`C[`CBKQYWMGZFJC.exe
2006-11-03 11:33 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01JKAN`AXF^[OTFAGQ.exe
2006-11-03 11:32 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01]P^JYQFAY]QLOJCF.exe
2006-11-03 11:29 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01CZ[Q]L`M]Y]EHN`S.exe
2006-11-03 11:25 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01XOUKT`JKUKFHKRDL.exe
2006-11-03 11:25 42592 --a------ C:\WINNT\system32\_zsk_mzu_zlope01UIZQGEDCNDPXIGOL.exe
2006-10-27 13:01 -------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2006-10-24 16:29 -------- d-------- C:\Program Files\DAEMON Tools
2006-10-23 18:30 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-10-18 13:27 -------- d-------- C:\Program Files\GameSpy
2006-10-18 13:16 -------- d-------- C:\Program Files\GameSpy3D
2006-10-18 12:19 -------- d-------- C:\Program Files\Infogrames
2006-10-18 12:03 611064 --a------ C:\WINNT\system32\drivers\sptd.sys
2006-10-17 09:18 -------- d-------- C:\Program Files\Atari-Infogrames
2006-10-11 18:02 -------- d-------- C:\Program Files\Tactical Ops Assault on Terror
2006-10-09 17:04 -------- d-------- C:\Documents and Settings\J„rjestelm„nvalvoja\Application Data\MSNInstaller
2006-10-08 14:29 -------- d-------- C:\Program Files\GameSpy Arcade
2006-10-06 17:13 -------- d-------- C:\Program Files\Windows Media Player
2006-10-06 16:44 -------- d-------- C:\Program Files\D-Link
2006-10-06 16:44 -------- d-------- C:\Program Files\Common Files\InstallShield
2006-10-06 16:37 -------- d-------- C:\Program Files\Common Files\Services
2006-10-04 16:20 -------- d-a------ C:\Program Files\Common Files\Microsoft Shared
2006-09-26 12:19 -------- d-------- C:\Documents and Settings\J„rjestelm„nvalvoja\Application Data\Creative
2006-09-25 17:45 666240 --a------ C:\WINNT\system32\aswBoot.exe
2006-09-25 17:40 87424 --a------ C:\WINNT\system32\drivers\aswmon2.sys
2006-09-25 17:40 85952 --a------ C:\WINNT\system32\drivers\aswmon.sys
2006-09-25 17:39 36176 --a------ C:\WINNT\system32\drivers\aswTdi.sys
2006-09-25 17:39 16352 --a------ C:\WINNT\system32\drivers\aswRdr.sys
2006-09-25 17:37 90112 --a------ C:\WINNT\system32\AVASTSS.scr
2006-09-25 17:37 24560 --a------ C:\WINNT\system32\drivers\aavmker4.sys
2006-09-13 08:31 1714112 --a------ C:\WINNT\system32\NTKRNLPA.EXE
2006-09-13 08:31 1691456 --a------ C:\WINNT\system32\NTOSKRNL.EXE
2006-08-25 05:47 129784 --------- C:\WINNT\system32\pxafs.dll
2006-08-25 05:47 115880 --------- C:\WINNT\system32\pxinsi64.exe
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINNT\\system32\\NvCpl.dll,NvStartup"
"Synchronization Manager"="mobsync.exe /logon"
"DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"Tweak UI"="RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp"
"SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
"!AVG Anti-Spyware"="\"C:\\PROGRA~1\\Grisoft\\AVGANT~1.5\\avgas.exe\" /minimized"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000003
"Settings"=dword:00000001
"GeneralFlags"=dword:00000000
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"="C:\\Program Files\\Internet Explorer\\Connection Wizard\\icwconn1.exe /desktop"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=hex:95,00,00,00
"CDRAutoRun"=dword:00000000
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000095
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"Network.ConnectionTray"="{7007ACCF-3202-11D1-AAD2-00805FC1270E}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
backup-20061110-165826-601
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
backup-20061110-165826-215
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
backup-20061107-103129-450
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
backup-20061107-103129-744
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
backup-20061107-103129-827
O3 - Toolbar: (no name) - {C004DEC2-2623-438e-9CA2-C9043AB28508} - (no file)
backup-20061105-180608-798
O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
backup-20061105-180608-578
O4 - HKCU\..\Run: [WinMedia] C:\TOQPKQ~1.EXE
backup-20061105-180608-317
O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{3CE1E27F-02EE-1035-0526-001018990166}\888Bar.dll
Completion time: Mon 2006-11-20 19:59:42.58
C:\ComboFix.txt ... 06-11-20 19:59