Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Minä tarvitsisin kovasti apua!

    Kaikki muut sain tehtyä mutta toi nolop kaatu aina kun sitä yritti käyttää.

    HIJACK
    Logfile of HijackThis v1.99.1
    Scan saved at 18:54:12, on 5.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Acer\eManager\anbmServ.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Launch Manager\LaunchAp.exe
    C:\Program Files\Launch Manager\PowerKey.exe
    C:\Program Files\Launch Manager\HotkeyApp.exe
    C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
    C:\Program Files\Launch Manager\CtrlVol.exe
    C:\Program Files\Launch Manager\OSDCtrl.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
    C:\Program Files\Launch Manager\Wbutton.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
    C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
    C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Arcade\PCMService.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
    C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
    C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
    C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
    C:\WINDOWS\explorer.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    C:\WINDOWS\msagent\AgentSvr.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\DOCUME~1\Kirsi\LOCALS~1\Temp\Tilapäinen kansio 2 hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFe tE8CXLiVTgqtukiAqs.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
    O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
    O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
    O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
    O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
    O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl ient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.ca b
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - AppInit_DLLs: MsgPlusLoader.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
    O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
    O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    ESCAN
    File C:\PROGRA~1\MINICL~1\MINICL~1.DLL tagged as not-a-virus:AdWare.Win32.MegaSearch.h. No Action Taken.
    File C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe tagged as not-a-virus:AdWare.Win32.Lop.m. No Action Taken.
    File C:\WINDOWS\NDNuninstall7_48.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\WINDOWS\system32\sqbfwhrs.exe tagged as not-a-virus:AdWare.Win32.HotBar.bq. No Action Taken.
    File C:\I386\¦-´¥EDOS.EX_ infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\system32\sqbfwhrs.exe tagged as not-a-virus:AdWare.Win32.HotBar.bq. No Action Taken.
    File C:\WINDOWS\NDNuninstall7_48.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\SLOW BAT.bk! tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\tons copy.bk! tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\Style defy.bk! tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\Style defy.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\tons copy.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\SLOW BAT.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\support build.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\blehdefy.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\Draw list.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\SOAP MEAL.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\firstchic.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\audio five.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\else junk.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\ExitAce.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\01 Rule.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\locks32.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\LocalService\Application Data\mpeg dale mode\warnmoreamok.exe tagged as not-a-virus:AdWare.Win32.Lop.m. No Action Taken.
    File C:\Documents and Settings\Kirsi\Työpöytä\NNuninstall.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\Documents and Settings\Kirsi\Application Data\mpeg dale mode\warnmoreamok.exe tagged as not-a-virus:AdWare.Win32.Lop.m. No Action Taken.
    File C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNowCrunch_InstallerInst.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
    File C:\Program Files\minicliptoolbar toolbar\minicliptoolbar.dll tagged as not-a-virus:AdWare.Win32.MegaSearch.h. No Action Taken.
    File C:\System Volume Information\_restore{4CA1FCC9-8A05-421B-B5B7-50DAE9EC9BAF}\RP524\A0039578.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\System Volume Information\_restore{4CA1FCC9-8A05-421B-B5B7-50DAE9EC9BAF}\RP517\A0039253.dll tagged as not-a-virus:AdWare.Win32.NewDotNet.i. No Action Taken.
    File D:\Omat tiedostot\Vastaanotetut tiedostot\WinWNC v3.3.7.zip tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
    File D:\Omat tiedostot\Omat kuvatiedostot\vastaanotettuja kuvia\WinWNC v3.3.7.zip tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
    Traces of "OpaServ" found and cleaned !!!

    New.net
    new.net regsitry key fix

    by noahdfear ©2006

    checking for new.net key

    new.net key present!

    Running new.net fix!

    new.net successfully removed!



    Mitäs sitten teen?
    Kiitoksia jo tässä vaiheessa vaivan näöstä :)
    14900
    Äänestä

    Muut lukivat myös

    Vastaukset 14

    Vanhimmat

    Tarkastan login, ja yritän palata asiaan mahdollisimman pian. Taitaa mennä huomisen aamupäivän puolelle :)

    Opiskelen, ja tarkistutan vastaukseni ensin virustorjunta.netin opettajilla, joten vastaamiseen menee jonkin aikaa.

    Äänestä

    Asenna uusi hijackthis-ohjelma tästä:

    http://koti.mbnet.fi/pattaya1/lataus/hijackthis_self.exe

    Lataa ja asenna, paina

    1.Unzip
    2.OK
    3.Close

    Klikkaa Do a system scan only, laita ruksi alla olevien rivien eteen. Sulje muut ikkunat,
    myös selain, ja paina Fix Checked

    O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
    O3 - Toolbar: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
    O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
    O20 - AppInit_DLLs: MsgPlusLoader.dll

    Piilotiedostot näkyviin
    # 1.Napsauta Käynnistä-painiketta ja valitse Ohjauspaneeli.
    # 2.Valitse "Kansion asetukset"
    # 3.Siirry" Näytä välilehdelle"
    # 4.Valitse Näytä-välilehden Piilotetut tiedostot ja kansiot
    -kohdassa" Näytä piilotetut tiedostot ja kansiot.

    Poista resurssienhallinnan kautta, jos löytyy

    C:\Program Files\minicliptoolbar toolbar

    Äänestä

    • [TRACE] Enumerating jobs and queues
      [TRACE] Activating job 'Scheduled scanning task.job'
      [TRACE] Printing all job properties

      ApplicationName: 'C:\PROGRA~1\SAUNAL~1\ANTI-V~1\fsav.exe'
      Parameters: ' /HARD /ARCHIVE /DISINF /SCHED /NOBREAK /REPORT=C:\PROGRA~1\SAUNAL~1\ANTI-V~1\report.txt '
      WorkingDirectory: 'C:\PROGRA~1\SAUNAL~1\ANTI-V~1'
      Comment: 'F-Secure Anti-Virus -ohjelman lisäämä tehtävä.'
      Creator: 'SYSTEM'
      Priority: NORMAL
      MaxRunTime: INFINITE
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 01/16/2007 9:00:00
      NextRun: 01/28/2007 9:00:00
      StartError: S_OK
      ExitCode: 0xc
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 01/27/2007
      EndDate: 00/00/0000
      StartTime: 09:00
      MinutesDuration: 0
      MinutesInterval: 0
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'BDCD1AC2924A819A.job'
      [TRACE] Printing all job properties

      ApplicationName: 'c:\docume~1\kirsi\applic~1\mpegda~1\Exit five glue.exe'
      Parameters: ''
      WorkingDirectory: ''
      Comment: ''
      Creator: 'Kirsi'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 05/24/2006 15:00:00
      NextRun: 01/28/2007 0:00:00
      StartError: 0x80070002
      ExitCode: 0
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 1
      SystemRequired = 0
      Hidden = 1
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 02/14/2001
      EndDate: 00/00/0000
      StartTime: 00:00
      MinutesDuration: 1440
      MinutesInterval: 60
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'AppleSoftwareUpdate.job'
      [TRACE] Printing all job properties

      ApplicationName: 'C:\Program Files\Apple Software Update\SoftwareUpdate.exe'
      Parameters: '-Task'
      WorkingDirectory: ''
      Comment: ''
      Creator: 'SYSTEM'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 00/00/0000 0:00:00
      NextRun: 01/29/2007 14:30:00
      StartError: SCHED_E_ACCOUNT_INFORMATION_NOT_SET
      ExitCode: 0
      Status: SCHED_S_TASK_HAS_NOT_RUN
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Weekly
      WeeksInterval: 1
      DaysOfTheWeek: .M.....
      StartDate: 11/05/2006
      EndDate: 00/00/0000
      StartTime: 14:30
      MinutesDuration: 0
      MinutesInterval: 0
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'Tarkistetaan Windows Live -työkalurivin päivitykset.job
      '
      [TRACE] Printing all job properties

      ApplicationName: 'C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE'
      Parameters: ''
      WorkingDirectory: ''
      Comment: ''
      Creator: 'Kirsi'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 11/14/2006 3:39:00
      NextRun: 01/28/2007 0:39:00
      StartError: SCHED_E_ACCOUNT_INFORMATION_NOT_SET
      ExitCode: 0
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 11/07/2006
      EndDate: 00/00/0000
      StartTime: 16:39
      MinutesDuration: 1440
      MinutesInterval: 60
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0







      Logfile of HijackThis v1.99.1
      Scan saved at 23:52:07, on 27.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\Program Files\iPod\bin\iPodService.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\WINDOWS\system32\cmd.exe
      C:\WINDOWS\system32\notepad.exe
      C:\DOCUME~1\Kirsi\LOCALS~1\Temp\Tilapäinen kansio 1 hijackthis.zip\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFetE8CXLiVTgqtukiAqs.htm
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      meniköhän tää edessinnepäin..olen ihan käsi näitten koneiden kans. Tämä tiedosto ei lähde millään tältä koneelta --> O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
      Kiitos taas kovasti.

      Äänestä

    • Kipa kirjoitti:

      [TRACE] Enumerating jobs and queues
      [TRACE] Activating job 'Scheduled scanning task.job'
      [TRACE] Printing all job properties

      ApplicationName: 'C:\PROGRA~1\SAUNAL~1\ANTI-V~1\fsav.exe'
      Parameters: ' /HARD /ARCHIVE /DISINF /SCHED /NOBREAK /REPORT=C:\PROGRA~1\SAUNAL~1\ANTI-V~1\report.txt '
      WorkingDirectory: 'C:\PROGRA~1\SAUNAL~1\ANTI-V~1'
      Comment: 'F-Secure Anti-Virus -ohjelman lisäämä tehtävä.'
      Creator: 'SYSTEM'
      Priority: NORMAL
      MaxRunTime: INFINITE
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 01/16/2007 9:00:00
      NextRun: 01/28/2007 9:00:00
      StartError: S_OK
      ExitCode: 0xc
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 01/27/2007
      EndDate: 00/00/0000
      StartTime: 09:00
      MinutesDuration: 0
      MinutesInterval: 0
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'BDCD1AC2924A819A.job'
      [TRACE] Printing all job properties

      ApplicationName: 'c:\docume~1\kirsi\applic~1\mpegda~1\Exit five glue.exe'
      Parameters: ''
      WorkingDirectory: ''
      Comment: ''
      Creator: 'Kirsi'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 05/24/2006 15:00:00
      NextRun: 01/28/2007 0:00:00
      StartError: 0x80070002
      ExitCode: 0
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 1
      SystemRequired = 0
      Hidden = 1
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 02/14/2001
      EndDate: 00/00/0000
      StartTime: 00:00
      MinutesDuration: 1440
      MinutesInterval: 60
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'AppleSoftwareUpdate.job'
      [TRACE] Printing all job properties

      ApplicationName: 'C:\Program Files\Apple Software Update\SoftwareUpdate.exe'
      Parameters: '-Task'
      WorkingDirectory: ''
      Comment: ''
      Creator: 'SYSTEM'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 00/00/0000 0:00:00
      NextRun: 01/29/2007 14:30:00
      StartError: SCHED_E_ACCOUNT_INFORMATION_NOT_SET
      ExitCode: 0
      Status: SCHED_S_TASK_HAS_NOT_RUN
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Weekly
      WeeksInterval: 1
      DaysOfTheWeek: .M.....
      StartDate: 11/05/2006
      EndDate: 00/00/0000
      StartTime: 14:30
      MinutesDuration: 0
      MinutesInterval: 0
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'Tarkistetaan Windows Live -työkalurivin päivitykset.job
      '
      [TRACE] Printing all job properties

      ApplicationName: 'C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE'
      Parameters: ''
      WorkingDirectory: ''
      Comment: ''
      Creator: 'Kirsi'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 11/14/2006 3:39:00
      NextRun: 01/28/2007 0:39:00
      StartError: SCHED_E_ACCOUNT_INFORMATION_NOT_SET
      ExitCode: 0
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 11/07/2006
      EndDate: 00/00/0000
      StartTime: 16:39
      MinutesDuration: 1440
      MinutesInterval: 60
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0







      Logfile of HijackThis v1.99.1
      Scan saved at 23:52:07, on 27.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\Program Files\iPod\bin\iPodService.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\WINDOWS\system32\cmd.exe
      C:\WINDOWS\system32\notepad.exe
      C:\DOCUME~1\Kirsi\LOCALS~1\Temp\Tilapäinen kansio 1 hijackthis.zip\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFetE8CXLiVTgqtukiAqs.htm
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      meniköhän tää edessinnepäin..olen ihan käsi näitten koneiden kans. Tämä tiedosto ei lähde millään tältä koneelta --> O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
      Kiitos taas kovasti.

      Ok.Laitan hetken kuluttua lisää ohjeita.

      Äänestä

    • Kipa kirjoitti:

      [TRACE] Enumerating jobs and queues
      [TRACE] Activating job 'Scheduled scanning task.job'
      [TRACE] Printing all job properties

      ApplicationName: 'C:\PROGRA~1\SAUNAL~1\ANTI-V~1\fsav.exe'
      Parameters: ' /HARD /ARCHIVE /DISINF /SCHED /NOBREAK /REPORT=C:\PROGRA~1\SAUNAL~1\ANTI-V~1\report.txt '
      WorkingDirectory: 'C:\PROGRA~1\SAUNAL~1\ANTI-V~1'
      Comment: 'F-Secure Anti-Virus -ohjelman lisäämä tehtävä.'
      Creator: 'SYSTEM'
      Priority: NORMAL
      MaxRunTime: INFINITE
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 01/16/2007 9:00:00
      NextRun: 01/28/2007 9:00:00
      StartError: S_OK
      ExitCode: 0xc
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 01/27/2007
      EndDate: 00/00/0000
      StartTime: 09:00
      MinutesDuration: 0
      MinutesInterval: 0
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'BDCD1AC2924A819A.job'
      [TRACE] Printing all job properties

      ApplicationName: 'c:\docume~1\kirsi\applic~1\mpegda~1\Exit five glue.exe'
      Parameters: ''
      WorkingDirectory: ''
      Comment: ''
      Creator: 'Kirsi'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 05/24/2006 15:00:00
      NextRun: 01/28/2007 0:00:00
      StartError: 0x80070002
      ExitCode: 0
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 1
      SystemRequired = 0
      Hidden = 1
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 02/14/2001
      EndDate: 00/00/0000
      StartTime: 00:00
      MinutesDuration: 1440
      MinutesInterval: 60
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'AppleSoftwareUpdate.job'
      [TRACE] Printing all job properties

      ApplicationName: 'C:\Program Files\Apple Software Update\SoftwareUpdate.exe'
      Parameters: '-Task'
      WorkingDirectory: ''
      Comment: ''
      Creator: 'SYSTEM'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 00/00/0000 0:00:00
      NextRun: 01/29/2007 14:30:00
      StartError: SCHED_E_ACCOUNT_INFORMATION_NOT_SET
      ExitCode: 0
      Status: SCHED_S_TASK_HAS_NOT_RUN
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Weekly
      WeeksInterval: 1
      DaysOfTheWeek: .M.....
      StartDate: 11/05/2006
      EndDate: 00/00/0000
      StartTime: 14:30
      MinutesDuration: 0
      MinutesInterval: 0
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0


      [TRACE] Activating job 'Tarkistetaan Windows Live -työkalurivin päivitykset.job
      '
      [TRACE] Printing all job properties

      ApplicationName: 'C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE'
      Parameters: ''
      WorkingDirectory: ''
      Comment: ''
      Creator: 'Kirsi'
      Priority: NORMAL
      MaxRunTime: 259200000 (3d 0:00:00)
      IdleWait: 10
      IdleDeadline: 60
      MostRecentRun: 11/14/2006 3:39:00
      NextRun: 01/28/2007 0:39:00
      StartError: SCHED_E_ACCOUNT_INFORMATION_NOT_SET
      ExitCode: 0
      Status: SCHED_S_TASK_READY
      ScheduledWorkItem Flags:
      DeleteWhenDone = 0
      Suspend = 0
      StartOnlyIfIdle = 0
      KillOnIdleEnd = 0
      RestartOnIdleResume = 0
      DontStartIfOnBatteries = 0
      KillIfGoingOnBatteries = 0
      RunOnlyIfLoggedOn = 0
      SystemRequired = 0
      Hidden = 0
      TaskFlags: 0

      1 Trigger

      Trigger 0:
      Type: Daily
      DaysInterval: 1
      StartDate: 11/07/2006
      EndDate: 00/00/0000
      StartTime: 16:39
      MinutesDuration: 1440
      MinutesInterval: 60
      Flags:
      HasEndDate = 0
      KillAtDuration = 0
      Disabled = 0







      Logfile of HijackThis v1.99.1
      Scan saved at 23:52:07, on 27.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\Program Files\iPod\bin\iPodService.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\WINDOWS\system32\cmd.exe
      C:\WINDOWS\system32\notepad.exe
      C:\DOCUME~1\Kirsi\LOCALS~1\Temp\Tilapäinen kansio 1 hijackthis.zip\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFetE8CXLiVTgqtukiAqs.htm
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      meniköhän tää edessinnepäin..olen ihan käsi näitten koneiden kans. Tämä tiedosto ei lähde millään tältä koneelta --> O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
      Kiitos taas kovasti.

      Poista Ohjauspaneelin Lisää/poista sovelluksista

      WhenUSave, tai
      WhenU (jos löytyy)

      Kopioi alla oleva, tähtien välinen teksti, liitä se notepadiin,
      ja tallenna nimellä remjobs.bat työpöydälle.
      Valitse tallennusmuodoksi: Kaikki tiedostot.


      *
      @echo off
      cd C:\WINDOWS\Tasks
      attrib -r -s -h BDCD1AC2924A819A.job
      del BDCD1AC2924A819A.job
      exit
      *

      Tuplaklikkaa työpöydällä olevaa remjobs.battia

      ***
      Uusi hjt tästä:
      http://koti.mbnet.fi/pattaya1/lataus/hijackthis_self.exe

      Lataa ja asenna

      1.Unzip
      2.OK
      3.Close
      ***

      Tee uusi skannaus hjt:llä, klikkaa "Do a system scan only".
      Laita ruksi alla olevien rivien eteen, sitten sulje muut ikkunat ja selain, mutta ei hjt:tä, ja paina "Fix Checked"

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFe tE8CXLiVTgqtukiAqs.htm
      O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe

      Sitten: Käynnistä kone uudelleen.
      ***
      Seuraavana:

      1. Lataa http://download.bleepingcomputer.com/sUBs/combofix.exe tiedosto työpöydällesi.
      2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
      3. Kun työkalu on valmis, se tuottaa lokin (C:\Combofix.txt). Lähetä tämä loki viestiketjuusi.
      Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

      ***
      Ohje AVG Anti-Spyware 7.5:n käyttöön
      Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis työkalun toimintaa.

      Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

      Lataa http://www.ewido.net/en/download/

      AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.

      * Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
      * Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
      * Käynnistä AVG Anti-Spyware.
      * Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.

      o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.

      * Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
      * Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
      * Sitten "Reports" valikon alta:

      o Laita täppi kohtaan "Automatically generate report after every scan"
      o Ota täppi pois kohdasta"Only if threats were found"

      * Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
      * "Resident shield is", muuta tila active:sta inactive:ksi
      * Sulje ohjelma, ÄLÄ skannaa vielä.

      Käynnistä koneesi vikasietotilaan, Ohje: http://students.turkuai.fi/~aidata/?Ohjeita_ja_muuta_tietoa:Vikasietotila

      HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.

      * Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
      * Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
      * Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

      Kun skannaus on valmis:
      TÄRKEÄÄ : ÄLÄ KLIKKAA "Save Scan Report" ennen kuin klikkaat --> "Apply all Actions"
      * Varmistu, että Set all elements to: näyttää Quarantine, jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
      * Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"

      * Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
      * Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
      * Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

      Kysy, jos tulee ongelmia :)

      Lähetä C:\Combofix.txt, AVG:n raportti ja uusi hijack logi

      Äänestä

    • axa.doe kirjoitti:

      Poista Ohjauspaneelin Lisää/poista sovelluksista

      WhenUSave, tai
      WhenU (jos löytyy)

      Kopioi alla oleva, tähtien välinen teksti, liitä se notepadiin,
      ja tallenna nimellä remjobs.bat työpöydälle.
      Valitse tallennusmuodoksi: Kaikki tiedostot.


      *
      @echo off
      cd C:\WINDOWS\Tasks
      attrib -r -s -h BDCD1AC2924A819A.job
      del BDCD1AC2924A819A.job
      exit
      *

      Tuplaklikkaa työpöydällä olevaa remjobs.battia

      ***
      Uusi hjt tästä:
      http://koti.mbnet.fi/pattaya1/lataus/hijackthis_self.exe

      Lataa ja asenna

      1.Unzip
      2.OK
      3.Close
      ***

      Tee uusi skannaus hjt:llä, klikkaa "Do a system scan only".
      Laita ruksi alla olevien rivien eteen, sitten sulje muut ikkunat ja selain, mutta ei hjt:tä, ja paina "Fix Checked"

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFe tE8CXLiVTgqtukiAqs.htm
      O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe

      Sitten: Käynnistä kone uudelleen.
      ***
      Seuraavana:

      1. Lataa http://download.bleepingcomputer.com/sUBs/combofix.exe tiedosto työpöydällesi.
      2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
      3. Kun työkalu on valmis, se tuottaa lokin (C:\Combofix.txt). Lähetä tämä loki viestiketjuusi.
      Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

      ***
      Ohje AVG Anti-Spyware 7.5:n käyttöön
      Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis työkalun toimintaa.

      Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

      Lataa http://www.ewido.net/en/download/

      AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.

      * Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
      * Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
      * Käynnistä AVG Anti-Spyware.
      * Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.

      o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.

      * Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
      * Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
      * Sitten "Reports" valikon alta:

      o Laita täppi kohtaan "Automatically generate report after every scan"
      o Ota täppi pois kohdasta"Only if threats were found"

      * Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
      * "Resident shield is", muuta tila active:sta inactive:ksi
      * Sulje ohjelma, ÄLÄ skannaa vielä.

      Käynnistä koneesi vikasietotilaan, Ohje: http://students.turkuai.fi/~aidata/?Ohjeita_ja_muuta_tietoa:Vikasietotila

      HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.

      * Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
      * Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
      * Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

      Kun skannaus on valmis:
      TÄRKEÄÄ : ÄLÄ KLIKKAA "Save Scan Report" ennen kuin klikkaat --> "Apply all Actions"
      * Varmistu, että Set all elements to: näyttää Quarantine, jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
      * Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"

      * Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
      * Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
      * Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

      Kysy, jos tulee ongelmia :)

      Lähetä C:\Combofix.txt, AVG:n raportti ja uusi hijack logi

      "Kirsi" - 07-01-28 18:37:00 Service Pack 2
      ComboFix 07-01-25 - Running from: "C:\Documents and Settings\Kirsi\Ty”p”yt„"

      ((((((((((((((((((((((((((((((( Files Created from 2006-12-28 to 2007-01-28 ))))))))))))))))))))))))))))))))))


      2007-01-27 22:43      d--------   C:\HJT
      2007-01-23 17:46      d--------   C:\Program Files\iTunes
      2007-01-05 20:36      dr-------   C:\DOCUME~1\NETWOR~1\Suosikit
      2007-01-05 20:24   83,096   --a------   C:\WINDOWS\system32\SSSensor.dll
      2007-01-05 20:24   60,496   --a------   C:\WINDOWS\system32\drivers\Teefer.sys
      2007-01-05 20:24   21,075   --a------   C:\WINDOWS\system32\drivers\wpsdrvnt.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg6n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg5n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg4n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg3n.sys
      2007-01-05 20:24      d--------   C:\Program Files\Sygate
      2007-01-05 20:19      d--------   C:\DOCUME~1\Kirsi\Application Data\GetRightToGo
      2007-01-05 17:29      d--------   C:\Bases
      2007-01-05 17:27      d--------   C:\Kaspersky
      2007-01-05 17:03   530   --a------   C:\delete.bat


      (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


      2007-01-05 19:28   --------   d--------   C:\DOCUME~1\Kirsi\Application Data\mozilla
      2006-12-08 20:49   183808   --a-s----   C:\WINDOWS\ndnuninstall7_48.exe
      2006-12-08 20:25   --------   d--------   C:\DOCUME~1\Kirsi\Application Data\leadertech
      2006-11-12 17:44   30608   -ra------   C:\DOCUME~1\Kirsi\Application Data\nmm-metadata.db
      2006-11-07 21:03   6049280   ---------   C:\WINDOWS\system32\ieframe.dll
      2006-11-07 21:03   50688   ---------   C:\WINDOWS\system32\msfeedsbs.dll
      2006-11-07 21:03   458752   ---------   C:\WINDOWS\system32\msfeeds.dll
      2006-11-07 21:03   413696   --a------   C:\WINDOWS\system32\vbscript.dll
      2006-11-07 21:03   231424   --a------   C:\WINDOWS\system32\webcheck.dll
      2006-11-07 21:03   180736   ---------   C:\WINDOWS\system32\ieui.dll
      2006-11-07 21:03   156160   --a------   C:\WINDOWS\system32\msls31.dll
      2006-11-07 03:27   382976   --a------   C:\WINDOWS\system32\iedkcs32.dll
      2006-11-07 03:27   229376   --a------   C:\WINDOWS\system32\ieaksie.dll
      2006-11-07 03:26   71680   --a------   C:\WINDOWS\system32\admparse.dll
      2006-11-07 03:26   55296   --a------   C:\WINDOWS\system32\iesetup.dll
      2006-11-07 03:26   54784   --a------   C:\WINDOWS\system32\ie4uinit.exe
      2006-11-07 03:26   43008   --a------   C:\WINDOWS\system32\iernonce.dll
      2006-11-07 03:26   152064   --a------   C:\WINDOWS\system32\ieakeng.dll
      2006-11-07 03:26   13312   --a------   C:\WINDOWS\system32\ieudinit.exe
      2006-11-07 03:26   123904   --a------   C:\WINDOWS\system32\advpack.dll
      2006-11-07 03:25   161792   --a------   C:\WINDOWS\system32\ieakui.dll


      (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

      *Note* empty entries & legit default entries are not shown

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
      "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
      "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
      "PcSync"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
      "preload"="C:\\Windows\\RUNXMLPL.exe"
      "SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
      "SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
      "LaunchAp"="C:\\Program Files\\Launch Manager\\LaunchAp.exe"
      "PowerKey"="\"C:\\Program Files\\Launch Manager\\PowerKey.exe\""
      "LManager"="C:\\Program Files\\Launch Manager\\HotkeyApp.exe"
      "CtrlVol"="C:\\Program Files\\Launch Manager\\CtrlVol.exe"
      "LMgrOSD"="C:\\Program Files\\Launch Manager\\OSDCtrl.exe"
      "Wbutton"="\"C:\\Program Files\\Launch Manager\\Wbutton.exe\""
      "VTTrayp"="VTtrayp.exe"
      "VTTimer"="VTTimer.exe"
      "nwiz"="nwiz.exe /install"
      "AGRSMMSG"="AGRSMMSG.exe"
      "PCMService"="\"C:\\Program Files\\Arcade\\PCMService.exe\""
      "TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
      "F-Secure Manager"="\"C:\\Program Files\\Saunalahden Turvapaketti\\Common\\FSM32.EXE\" /splash"
      "F-Secure TNB"="\"C:\\Program Files\\Saunalahden Turvapaketti\\TNB\\TNBUtil.exe\" /CHECKALL /WAITFORSW"
      "F-Secure Startup Wizard"="\"C:\\Program Files\\Saunalahden Turvapaketti\\FSGUI\\FSSW.EXE\" /reboot"
      "News Service"="\"C:\\Program Files\\Saunalahden Turvapaketti\\FSGUI\\ispnews.exe\""
      "Lexmark X1100 Series"="\"C:\\Program Files\\Lexmark X1100 Series\\lxbkbmgr.exe\""
      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""
      "Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
      "PCSuiteTrayApplication"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -onlytray"
      "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
      "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
      "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
      "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
      "NoChange"="1"
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
      "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
      "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


      [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
      HTTPFilter   REG_MULTI_SZ    HTTPFilter\0\0
      LocalService   REG_MULTI_SZ    Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
      NetworkService   REG_MULTI_SZ    DnsCache\0\0
      DcomLaunch   REG_MULTI_SZ    DcomLaunch\0TermService\0\0
      rpcss   REG_MULTI_SZ    RpcSs\0\0
      imgsvc   REG_MULTI_SZ    StiSvc\0\0
      termsvcs   REG_MULTI_SZ    TermService\0\0
      WudfServiceGroup   REG_MULTI_SZ    WUDFSvc\0\0
      Usnsvc   REG_MULTI_SZ    usnsvc\0\0



      Contents of the 'Scheduled Tasks' folder
      C:\WINDOWS\tasks\Scheduled scanning task.job
      C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      C:\WINDOWS\tasks\Tarkistetaan Windows Live -ty”kalurivin p„ivitykset.job

      Completion time: 07-01-28 18:40:49

      ---------------------------------------------------------
      AVG Anti-Spyware - Scan Report
      ---------------------------------------------------------

      Created at:   21:07:29 28.1.2007

      Scan result:   



      C:\HJT\backups\backup-20070127-224606-788.dll -> Adware.MegaSearch : Cleaned with backup (quarantined).
      C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
      C:\Documents and Settings\Kirsi\Työpöytä\Samiel\NNuninstall.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
      C:\WINDOWS\NDNuninstall7_48.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
      HKU\S-1-5-21-867410997-3342235085-1385332573-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
      C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNowCrunch_InstallerInst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
      C:\WINDOWS\system32\sqbfwhrs.exe -> Dropper.HotBar.bq : Cleaned with backup (quarantined).
      :mozilla.10:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.11:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.12:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.13:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.14:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.15:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.16:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.17:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.18:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.19:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.20:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.21:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.22:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.23:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.24:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.25:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.26:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.27:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.28:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.29:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.30:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.31:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.32:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.33:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.34:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.35:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.36:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.37:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.38:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.39:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.652:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.9:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.504:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adbrite : Cleaned.
      :mozilla.922:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.923:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.924:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.925:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.926:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.927:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.73:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adtech : Cleaned.
      :mozilla.74:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adtech : Cleaned.
      :mozilla.200:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.201:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.202:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.203:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.204:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.205:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.1022:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adviva : Cleaned.
      :mozilla.873:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adviva : Cleaned.
      :mozilla.319:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Atdmt : Cleaned.
      :mozilla.494:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Belstat : Cleaned.
      :mozilla.495:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Belstat : Cleaned.
      :mozilla.314:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Bfast : Cleaned.
      :mozilla.735:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Bluestreak : Cleaned.
      :mozilla.562:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstbeacon : Cleaned.
      :mozilla.457:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.458:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.459:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.260:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.261:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.263:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.264:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.265:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.266:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.267:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.621:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Clickbank : Cleaned.
      :mozilla.468:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Com : Cleaned.
      :mozilla.196:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Coremetrics : Cleaned.
      :mozilla.70:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Doubleclick : Cleaned.
      :mozilla.197:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Etracker : Cleaned.
      :mozilla.1048:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Euroclick : Cleaned.
      :mozilla.899:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Euroclick : Cleaned.
      :mozilla.368:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.369:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.370:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.371:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.372:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.432:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.256:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.257:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.258:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.136:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.307:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.383:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.482:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.598:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.624:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.625:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.627:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.628:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.1020:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.347:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.348:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.349:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.530:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.531:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.739:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.762:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.871:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.92:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.535:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Masterstats : Cleaned.
      :mozilla.520:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Mediaplex : Cleaned.
      :mozilla.551:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.552:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.553:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.1051:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1052:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1053:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1054:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.902:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.903:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.904:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.905:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.839:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.840:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.841:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.988:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.989:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.990:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.316:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.317:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.318:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.321:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.322:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.323:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.324:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.413:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.414:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.415:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.416:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.417:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.418:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.419:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.420:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.421:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.422:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.423:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.405:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Revenue : Cleaned.
      :mozilla.406:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Revenue : Cleaned.
      :mozilla.789:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sexlist : Cleaned.
      :mozilla.790:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sexlist : Cleaned.
      :mozilla.523:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.524:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.583:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.584:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.765:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.142:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.143:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.144:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.145:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.146:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.147:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.148:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.149:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.150:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.151:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.152:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.153:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.154:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.155:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.156:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.157:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.158:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.159:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.160:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.161:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.162:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.163:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.164:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.165:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.166:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.167:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.168:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.169:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.170:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.171:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.172:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.173:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.174:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.175:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.176:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.177:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.178:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.179:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.180:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.181:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.182:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.183:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.184:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.185:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.186:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.187:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.188:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.189:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.480:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tacoda : Cleaned.
      :mozilla.481:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tacoda : Cleaned.
      :mozilla.537:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Targetnet : Cleaned.
      :mozilla.538:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Targetnet : Cleaned.
      :mozilla.100:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.101:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.102:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.103:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.104:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.105:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.106:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.107:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.108:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.109:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.110:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.111:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.112:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.96:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.97:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.98:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.99:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.919:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Trafic : Cleaned.
      :mozilla.438:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tribalfusion : Cleaned.
      :mozilla.928:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.929:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.930:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.71:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Webtrendslive : Cleaned.
      :mozilla.567:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yadro : Cleaned.
      :mozilla.568:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yadro : Cleaned.
      :mozilla.392:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.393:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.394:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.395:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.396:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.403:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.351:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.
      :mozilla.352:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.
      :mozilla.353:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.


      ::Report end








      Logfile of HijackThis v1.99.1
      Scan saved at 22:33:53, on 28.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Kirsi\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFetE8CXLiVTgqtukiAqs.htm
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe



      Ehkä meni jotenkin sinnepäin..kun en tiedä kauheesti mitää näist koneist :) no kiitos taasen kun autat tällaista tietämätöntä..
      WhenUSave tai WhenU ei ollut koneella tai ei ainakaan löytänyt ja en ole ihan varma menikö se AVG Anti-Spyware 7.5 oikein.. Kiitos kiitos kiitos kun autat

      Äänestä

    • Kipa kirjoitti:

      "Kirsi" - 07-01-28 18:37:00 Service Pack 2
      ComboFix 07-01-25 - Running from: "C:\Documents and Settings\Kirsi\Ty”p”yt„"

      ((((((((((((((((((((((((((((((( Files Created from 2006-12-28 to 2007-01-28 ))))))))))))))))))))))))))))))))))


      2007-01-27 22:43      d--------   C:\HJT
      2007-01-23 17:46      d--------   C:\Program Files\iTunes
      2007-01-05 20:36      dr-------   C:\DOCUME~1\NETWOR~1\Suosikit
      2007-01-05 20:24   83,096   --a------   C:\WINDOWS\system32\SSSensor.dll
      2007-01-05 20:24   60,496   --a------   C:\WINDOWS\system32\drivers\Teefer.sys
      2007-01-05 20:24   21,075   --a------   C:\WINDOWS\system32\drivers\wpsdrvnt.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg6n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg5n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg4n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg3n.sys
      2007-01-05 20:24      d--------   C:\Program Files\Sygate
      2007-01-05 20:19      d--------   C:\DOCUME~1\Kirsi\Application Data\GetRightToGo
      2007-01-05 17:29      d--------   C:\Bases
      2007-01-05 17:27      d--------   C:\Kaspersky
      2007-01-05 17:03   530   --a------   C:\delete.bat


      (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


      2007-01-05 19:28   --------   d--------   C:\DOCUME~1\Kirsi\Application Data\mozilla
      2006-12-08 20:49   183808   --a-s----   C:\WINDOWS\ndnuninstall7_48.exe
      2006-12-08 20:25   --------   d--------   C:\DOCUME~1\Kirsi\Application Data\leadertech
      2006-11-12 17:44   30608   -ra------   C:\DOCUME~1\Kirsi\Application Data\nmm-metadata.db
      2006-11-07 21:03   6049280   ---------   C:\WINDOWS\system32\ieframe.dll
      2006-11-07 21:03   50688   ---------   C:\WINDOWS\system32\msfeedsbs.dll
      2006-11-07 21:03   458752   ---------   C:\WINDOWS\system32\msfeeds.dll
      2006-11-07 21:03   413696   --a------   C:\WINDOWS\system32\vbscript.dll
      2006-11-07 21:03   231424   --a------   C:\WINDOWS\system32\webcheck.dll
      2006-11-07 21:03   180736   ---------   C:\WINDOWS\system32\ieui.dll
      2006-11-07 21:03   156160   --a------   C:\WINDOWS\system32\msls31.dll
      2006-11-07 03:27   382976   --a------   C:\WINDOWS\system32\iedkcs32.dll
      2006-11-07 03:27   229376   --a------   C:\WINDOWS\system32\ieaksie.dll
      2006-11-07 03:26   71680   --a------   C:\WINDOWS\system32\admparse.dll
      2006-11-07 03:26   55296   --a------   C:\WINDOWS\system32\iesetup.dll
      2006-11-07 03:26   54784   --a------   C:\WINDOWS\system32\ie4uinit.exe
      2006-11-07 03:26   43008   --a------   C:\WINDOWS\system32\iernonce.dll
      2006-11-07 03:26   152064   --a------   C:\WINDOWS\system32\ieakeng.dll
      2006-11-07 03:26   13312   --a------   C:\WINDOWS\system32\ieudinit.exe
      2006-11-07 03:26   123904   --a------   C:\WINDOWS\system32\advpack.dll
      2006-11-07 03:25   161792   --a------   C:\WINDOWS\system32\ieakui.dll


      (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

      *Note* empty entries & legit default entries are not shown

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
      "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
      "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
      "PcSync"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
      "preload"="C:\\Windows\\RUNXMLPL.exe"
      "SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
      "SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
      "LaunchAp"="C:\\Program Files\\Launch Manager\\LaunchAp.exe"
      "PowerKey"="\"C:\\Program Files\\Launch Manager\\PowerKey.exe\""
      "LManager"="C:\\Program Files\\Launch Manager\\HotkeyApp.exe"
      "CtrlVol"="C:\\Program Files\\Launch Manager\\CtrlVol.exe"
      "LMgrOSD"="C:\\Program Files\\Launch Manager\\OSDCtrl.exe"
      "Wbutton"="\"C:\\Program Files\\Launch Manager\\Wbutton.exe\""
      "VTTrayp"="VTtrayp.exe"
      "VTTimer"="VTTimer.exe"
      "nwiz"="nwiz.exe /install"
      "AGRSMMSG"="AGRSMMSG.exe"
      "PCMService"="\"C:\\Program Files\\Arcade\\PCMService.exe\""
      "TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
      "F-Secure Manager"="\"C:\\Program Files\\Saunalahden Turvapaketti\\Common\\FSM32.EXE\" /splash"
      "F-Secure TNB"="\"C:\\Program Files\\Saunalahden Turvapaketti\\TNB\\TNBUtil.exe\" /CHECKALL /WAITFORSW"
      "F-Secure Startup Wizard"="\"C:\\Program Files\\Saunalahden Turvapaketti\\FSGUI\\FSSW.EXE\" /reboot"
      "News Service"="\"C:\\Program Files\\Saunalahden Turvapaketti\\FSGUI\\ispnews.exe\""
      "Lexmark X1100 Series"="\"C:\\Program Files\\Lexmark X1100 Series\\lxbkbmgr.exe\""
      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""
      "Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
      "PCSuiteTrayApplication"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -onlytray"
      "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
      "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
      "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
      "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
      "NoChange"="1"
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
      "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
      "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


      [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
      HTTPFilter   REG_MULTI_SZ    HTTPFilter\0\0
      LocalService   REG_MULTI_SZ    Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
      NetworkService   REG_MULTI_SZ    DnsCache\0\0
      DcomLaunch   REG_MULTI_SZ    DcomLaunch\0TermService\0\0
      rpcss   REG_MULTI_SZ    RpcSs\0\0
      imgsvc   REG_MULTI_SZ    StiSvc\0\0
      termsvcs   REG_MULTI_SZ    TermService\0\0
      WudfServiceGroup   REG_MULTI_SZ    WUDFSvc\0\0
      Usnsvc   REG_MULTI_SZ    usnsvc\0\0



      Contents of the 'Scheduled Tasks' folder
      C:\WINDOWS\tasks\Scheduled scanning task.job
      C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      C:\WINDOWS\tasks\Tarkistetaan Windows Live -ty”kalurivin p„ivitykset.job

      Completion time: 07-01-28 18:40:49

      ---------------------------------------------------------
      AVG Anti-Spyware - Scan Report
      ---------------------------------------------------------

      Created at:   21:07:29 28.1.2007

      Scan result:   



      C:\HJT\backups\backup-20070127-224606-788.dll -> Adware.MegaSearch : Cleaned with backup (quarantined).
      C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
      C:\Documents and Settings\Kirsi\Työpöytä\Samiel\NNuninstall.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
      C:\WINDOWS\NDNuninstall7_48.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
      HKU\S-1-5-21-867410997-3342235085-1385332573-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
      C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNowCrunch_InstallerInst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
      C:\WINDOWS\system32\sqbfwhrs.exe -> Dropper.HotBar.bq : Cleaned with backup (quarantined).
      :mozilla.10:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.11:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.12:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.13:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.14:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.15:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.16:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.17:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.18:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.19:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.20:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.21:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.22:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.23:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.24:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.25:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.26:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.27:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.28:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.29:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.30:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.31:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.32:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.33:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.34:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.35:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.36:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.37:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.38:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.39:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.652:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.9:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.504:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adbrite : Cleaned.
      :mozilla.922:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.923:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.924:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.925:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.926:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.927:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.73:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adtech : Cleaned.
      :mozilla.74:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adtech : Cleaned.
      :mozilla.200:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.201:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.202:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.203:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.204:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.205:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.1022:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adviva : Cleaned.
      :mozilla.873:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adviva : Cleaned.
      :mozilla.319:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Atdmt : Cleaned.
      :mozilla.494:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Belstat : Cleaned.
      :mozilla.495:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Belstat : Cleaned.
      :mozilla.314:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Bfast : Cleaned.
      :mozilla.735:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Bluestreak : Cleaned.
      :mozilla.562:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstbeacon : Cleaned.
      :mozilla.457:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.458:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.459:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.260:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.261:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.263:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.264:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.265:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.266:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.267:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.621:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Clickbank : Cleaned.
      :mozilla.468:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Com : Cleaned.
      :mozilla.196:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Coremetrics : Cleaned.
      :mozilla.70:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Doubleclick : Cleaned.
      :mozilla.197:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Etracker : Cleaned.
      :mozilla.1048:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Euroclick : Cleaned.
      :mozilla.899:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Euroclick : Cleaned.
      :mozilla.368:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.369:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.370:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.371:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.372:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.432:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.256:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.257:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.258:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.136:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.307:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.383:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.482:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.598:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.624:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.625:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.627:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.628:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.1020:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.347:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.348:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.349:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.530:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.531:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.739:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.762:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.871:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.92:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.535:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Masterstats : Cleaned.
      :mozilla.520:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Mediaplex : Cleaned.
      :mozilla.551:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.552:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.553:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.1051:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1052:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1053:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1054:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.902:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.903:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.904:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.905:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.839:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.840:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.841:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.988:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.989:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.990:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.316:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.317:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.318:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.321:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.322:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.323:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.324:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.413:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.414:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.415:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.416:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.417:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.418:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.419:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.420:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.421:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.422:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.423:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.405:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Revenue : Cleaned.
      :mozilla.406:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Revenue : Cleaned.
      :mozilla.789:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sexlist : Cleaned.
      :mozilla.790:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sexlist : Cleaned.
      :mozilla.523:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.524:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.583:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.584:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.765:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.142:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.143:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.144:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.145:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.146:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.147:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.148:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.149:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.150:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.151:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.152:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.153:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.154:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.155:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.156:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.157:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.158:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.159:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.160:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.161:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.162:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.163:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.164:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.165:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.166:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.167:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.168:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.169:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.170:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.171:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.172:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.173:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.174:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.175:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.176:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.177:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.178:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.179:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.180:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.181:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.182:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.183:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.184:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.185:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.186:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.187:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.188:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.189:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.480:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tacoda : Cleaned.
      :mozilla.481:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tacoda : Cleaned.
      :mozilla.537:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Targetnet : Cleaned.
      :mozilla.538:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Targetnet : Cleaned.
      :mozilla.100:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.101:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.102:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.103:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.104:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.105:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.106:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.107:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.108:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.109:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.110:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.111:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.112:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.96:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.97:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.98:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.99:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.919:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Trafic : Cleaned.
      :mozilla.438:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tribalfusion : Cleaned.
      :mozilla.928:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.929:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.930:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.71:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Webtrendslive : Cleaned.
      :mozilla.567:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yadro : Cleaned.
      :mozilla.568:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yadro : Cleaned.
      :mozilla.392:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.393:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.394:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.395:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.396:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.403:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.351:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.
      :mozilla.352:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.
      :mozilla.353:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.


      ::Report end








      Logfile of HijackThis v1.99.1
      Scan saved at 22:33:53, on 28.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Kirsi\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFetE8CXLiVTgqtukiAqs.htm
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe



      Ehkä meni jotenkin sinnepäin..kun en tiedä kauheesti mitää näist koneist :) no kiitos taasen kun autat tällaista tietämätöntä..
      WhenUSave tai WhenU ei ollut koneella tai ei ainakaan löytänyt ja en ole ihan varma menikö se AVG Anti-Spyware 7.5 oikein.. Kiitos kiitos kiitos kun autat

      Onko Saunalahden Turvapaketissa palomuuri käytössä?
      Koneelle on ilmestynyt myös Sygaten muuri.

      Yksi riittää, muuten tulee ongelmia lisää. Poista tarvittaessa toinen käytöstä ja lähetä uusi hijacklogi.

      Laitan ohjeita lisää mahdollisimman pian.

      Äänestä

    • Kipa kirjoitti:

      "Kirsi" - 07-01-28 18:37:00 Service Pack 2
      ComboFix 07-01-25 - Running from: "C:\Documents and Settings\Kirsi\Ty”p”yt„"

      ((((((((((((((((((((((((((((((( Files Created from 2006-12-28 to 2007-01-28 ))))))))))))))))))))))))))))))))))


      2007-01-27 22:43      d--------   C:\HJT
      2007-01-23 17:46      d--------   C:\Program Files\iTunes
      2007-01-05 20:36      dr-------   C:\DOCUME~1\NETWOR~1\Suosikit
      2007-01-05 20:24   83,096   --a------   C:\WINDOWS\system32\SSSensor.dll
      2007-01-05 20:24   60,496   --a------   C:\WINDOWS\system32\drivers\Teefer.sys
      2007-01-05 20:24   21,075   --a------   C:\WINDOWS\system32\drivers\wpsdrvnt.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg6n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg5n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg4n.sys
      2007-01-05 20:24   14,568   --a------   C:\WINDOWS\system32\drivers\wg3n.sys
      2007-01-05 20:24      d--------   C:\Program Files\Sygate
      2007-01-05 20:19      d--------   C:\DOCUME~1\Kirsi\Application Data\GetRightToGo
      2007-01-05 17:29      d--------   C:\Bases
      2007-01-05 17:27      d--------   C:\Kaspersky
      2007-01-05 17:03   530   --a------   C:\delete.bat


      (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


      2007-01-05 19:28   --------   d--------   C:\DOCUME~1\Kirsi\Application Data\mozilla
      2006-12-08 20:49   183808   --a-s----   C:\WINDOWS\ndnuninstall7_48.exe
      2006-12-08 20:25   --------   d--------   C:\DOCUME~1\Kirsi\Application Data\leadertech
      2006-11-12 17:44   30608   -ra------   C:\DOCUME~1\Kirsi\Application Data\nmm-metadata.db
      2006-11-07 21:03   6049280   ---------   C:\WINDOWS\system32\ieframe.dll
      2006-11-07 21:03   50688   ---------   C:\WINDOWS\system32\msfeedsbs.dll
      2006-11-07 21:03   458752   ---------   C:\WINDOWS\system32\msfeeds.dll
      2006-11-07 21:03   413696   --a------   C:\WINDOWS\system32\vbscript.dll
      2006-11-07 21:03   231424   --a------   C:\WINDOWS\system32\webcheck.dll
      2006-11-07 21:03   180736   ---------   C:\WINDOWS\system32\ieui.dll
      2006-11-07 21:03   156160   --a------   C:\WINDOWS\system32\msls31.dll
      2006-11-07 03:27   382976   --a------   C:\WINDOWS\system32\iedkcs32.dll
      2006-11-07 03:27   229376   --a------   C:\WINDOWS\system32\ieaksie.dll
      2006-11-07 03:26   71680   --a------   C:\WINDOWS\system32\admparse.dll
      2006-11-07 03:26   55296   --a------   C:\WINDOWS\system32\iesetup.dll
      2006-11-07 03:26   54784   --a------   C:\WINDOWS\system32\ie4uinit.exe
      2006-11-07 03:26   43008   --a------   C:\WINDOWS\system32\iernonce.dll
      2006-11-07 03:26   152064   --a------   C:\WINDOWS\system32\ieakeng.dll
      2006-11-07 03:26   13312   --a------   C:\WINDOWS\system32\ieudinit.exe
      2006-11-07 03:26   123904   --a------   C:\WINDOWS\system32\advpack.dll
      2006-11-07 03:25   161792   --a------   C:\WINDOWS\system32\ieakui.dll


      (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

      *Note* empty entries & legit default entries are not shown

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
      "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
      "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
      "PcSync"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
      "preload"="C:\\Windows\\RUNXMLPL.exe"
      "SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
      "SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
      "LaunchAp"="C:\\Program Files\\Launch Manager\\LaunchAp.exe"
      "PowerKey"="\"C:\\Program Files\\Launch Manager\\PowerKey.exe\""
      "LManager"="C:\\Program Files\\Launch Manager\\HotkeyApp.exe"
      "CtrlVol"="C:\\Program Files\\Launch Manager\\CtrlVol.exe"
      "LMgrOSD"="C:\\Program Files\\Launch Manager\\OSDCtrl.exe"
      "Wbutton"="\"C:\\Program Files\\Launch Manager\\Wbutton.exe\""
      "VTTrayp"="VTtrayp.exe"
      "VTTimer"="VTTimer.exe"
      "nwiz"="nwiz.exe /install"
      "AGRSMMSG"="AGRSMMSG.exe"
      "PCMService"="\"C:\\Program Files\\Arcade\\PCMService.exe\""
      "TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
      "F-Secure Manager"="\"C:\\Program Files\\Saunalahden Turvapaketti\\Common\\FSM32.EXE\" /splash"
      "F-Secure TNB"="\"C:\\Program Files\\Saunalahden Turvapaketti\\TNB\\TNBUtil.exe\" /CHECKALL /WAITFORSW"
      "F-Secure Startup Wizard"="\"C:\\Program Files\\Saunalahden Turvapaketti\\FSGUI\\FSSW.EXE\" /reboot"
      "News Service"="\"C:\\Program Files\\Saunalahden Turvapaketti\\FSGUI\\ispnews.exe\""
      "Lexmark X1100 Series"="\"C:\\Program Files\\Lexmark X1100 Series\\lxbkbmgr.exe\""
      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""
      "Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
      "PCSuiteTrayApplication"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -onlytray"
      "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
      "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
      "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
      "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
      "NoChange"="1"
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
      "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
      "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


      [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
      HTTPFilter   REG_MULTI_SZ    HTTPFilter\0\0
      LocalService   REG_MULTI_SZ    Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
      NetworkService   REG_MULTI_SZ    DnsCache\0\0
      DcomLaunch   REG_MULTI_SZ    DcomLaunch\0TermService\0\0
      rpcss   REG_MULTI_SZ    RpcSs\0\0
      imgsvc   REG_MULTI_SZ    StiSvc\0\0
      termsvcs   REG_MULTI_SZ    TermService\0\0
      WudfServiceGroup   REG_MULTI_SZ    WUDFSvc\0\0
      Usnsvc   REG_MULTI_SZ    usnsvc\0\0



      Contents of the 'Scheduled Tasks' folder
      C:\WINDOWS\tasks\Scheduled scanning task.job
      C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      C:\WINDOWS\tasks\Tarkistetaan Windows Live -ty”kalurivin p„ivitykset.job

      Completion time: 07-01-28 18:40:49

      ---------------------------------------------------------
      AVG Anti-Spyware - Scan Report
      ---------------------------------------------------------

      Created at:   21:07:29 28.1.2007

      Scan result:   



      C:\HJT\backups\backup-20070127-224606-788.dll -> Adware.MegaSearch : Cleaned with backup (quarantined).
      C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
      C:\Documents and Settings\Kirsi\Työpöytä\Samiel\NNuninstall.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
      C:\WINDOWS\NDNuninstall7_48.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
      HKU\S-1-5-21-867410997-3342235085-1385332573-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
      C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNowCrunch_InstallerInst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
      C:\WINDOWS\system32\sqbfwhrs.exe -> Dropper.HotBar.bq : Cleaned with backup (quarantined).
      :mozilla.10:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.11:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.12:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.13:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.14:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.15:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.16:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.17:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.18:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.19:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.20:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.21:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.22:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.23:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.24:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.25:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.26:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.27:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.28:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.29:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.30:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.31:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.32:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.33:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.34:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.35:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.36:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.37:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.38:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.39:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.652:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.9:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.2o7 : Cleaned.
      :mozilla.504:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adbrite : Cleaned.
      :mozilla.922:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.923:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.924:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.925:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.926:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.927:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adserver : Cleaned.
      :mozilla.73:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adtech : Cleaned.
      :mozilla.74:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adtech : Cleaned.
      :mozilla.200:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.201:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.202:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.203:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.204:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.205:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Advertising : Cleaned.
      :mozilla.1022:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adviva : Cleaned.
      :mozilla.873:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Adviva : Cleaned.
      :mozilla.319:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Atdmt : Cleaned.
      :mozilla.494:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Belstat : Cleaned.
      :mozilla.495:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Belstat : Cleaned.
      :mozilla.314:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Bfast : Cleaned.
      :mozilla.735:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Bluestreak : Cleaned.
      :mozilla.562:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstbeacon : Cleaned.
      :mozilla.457:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.458:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.459:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Burstnet : Cleaned.
      :mozilla.260:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.261:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.263:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.264:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.265:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.266:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.267:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Casalemedia : Cleaned.
      :mozilla.621:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Clickbank : Cleaned.
      :mozilla.468:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Com : Cleaned.
      :mozilla.196:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Coremetrics : Cleaned.
      :mozilla.70:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Doubleclick : Cleaned.
      :mozilla.197:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Etracker : Cleaned.
      :mozilla.1048:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Euroclick : Cleaned.
      :mozilla.899:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Euroclick : Cleaned.
      :mozilla.368:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.369:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.370:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.371:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.372:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.432:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Falkag : Cleaned.
      :mozilla.256:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.257:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.258:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Fastclick : Cleaned.
      :mozilla.136:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.307:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.383:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.482:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.598:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.624:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.625:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.627:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.628:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Googleadservices : Cleaned.
      :mozilla.1020:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.347:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.348:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.349:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.530:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.531:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.739:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.762:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.871:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.92:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Hitbox : Cleaned.
      :mozilla.535:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Masterstats : Cleaned.
      :mozilla.520:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Mediaplex : Cleaned.
      :mozilla.551:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.552:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.553:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Overture : Cleaned.
      :mozilla.1051:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1052:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1053:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.1054:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.902:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.903:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.904:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.905:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Pointroll : Cleaned.
      :mozilla.839:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.840:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.841:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.988:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.989:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.990:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Qksrv : Cleaned.
      :mozilla.316:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.317:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.318:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Questionmarket : Cleaned.
      :mozilla.321:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.322:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.323:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.324:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Realmedia : Cleaned.
      :mozilla.413:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.414:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.415:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.416:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.417:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.418:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.419:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.420:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.421:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.422:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.423:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Reliablestats : Cleaned.
      :mozilla.405:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Revenue : Cleaned.
      :mozilla.406:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Revenue : Cleaned.
      :mozilla.789:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sexlist : Cleaned.
      :mozilla.790:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sexlist : Cleaned.
      :mozilla.523:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.524:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.583:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.584:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.765:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Sitestat : Cleaned.
      :mozilla.142:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.143:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.144:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.145:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.146:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.147:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.148:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.149:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.150:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.151:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.152:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.153:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.154:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.155:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.156:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.157:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.158:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.159:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.160:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.161:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.162:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.163:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.164:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.165:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.166:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.167:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.168:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.169:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.170:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.171:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.172:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.173:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.174:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.175:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.176:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.177:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.178:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.179:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.180:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.181:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.182:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.183:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.184:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.185:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.186:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.187:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.188:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.189:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Statcounter : Cleaned.
      :mozilla.480:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tacoda : Cleaned.
      :mozilla.481:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tacoda : Cleaned.
      :mozilla.537:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Targetnet : Cleaned.
      :mozilla.538:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Targetnet : Cleaned.
      :mozilla.100:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.101:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.102:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.103:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.104:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.105:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.106:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.107:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.108:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.109:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.110:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.111:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.112:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.96:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.97:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.98:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.99:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tradedoubler : Cleaned.
      :mozilla.919:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Trafic : Cleaned.
      :mozilla.438:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Tribalfusion : Cleaned.
      :mozilla.928:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.929:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.930:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Valuead : Cleaned.
      :mozilla.71:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Webtrendslive : Cleaned.
      :mozilla.567:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yadro : Cleaned.
      :mozilla.568:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yadro : Cleaned.
      :mozilla.392:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.393:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.394:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.395:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.396:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.403:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Yieldmanager : Cleaned.
      :mozilla.351:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.
      :mozilla.352:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.
      :mozilla.353:C:\FOUND.000\FILE0001.CHK -> TrackingCookie.Zedo : Cleaned.


      ::Report end








      Logfile of HijackThis v1.99.1
      Scan saved at 22:33:53, on 28.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Kirsi\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFetE8CXLiVTgqtukiAqs.htm
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe



      Ehkä meni jotenkin sinnepäin..kun en tiedä kauheesti mitää näist koneist :) no kiitos taasen kun autat tällaista tietämätöntä..
      WhenUSave tai WhenU ei ollut koneella tai ei ainakaan löytänyt ja en ole ihan varma menikö se AVG Anti-Spyware 7.5 oikein.. Kiitos kiitos kiitos kun autat

      Teepä vielä C:n juureen uusi kansio, nimeä se hjt:ksi, ja siirrä työpöydältä tuo HijackThis.exe ja backups-kansio sinne.

      ***
      Avaa AVG
      * klikkaa "Shield" kuvaketta ikkunan ylälaidassa
      * "Resident shield is", muuta tila active:sta --> inactive:ksi
      * Sulje ohjelma.

      ***
      Vikasietotilaan, ohje http://students.turkuai.fi/~aidata/?Ohjeita_ja_muuta_tietoa:Vikasietotila

      Tee siellä uusi skannaus hjt:llä, klikkaa Do a system scan only
      laita ruksi rivin eteen, sulje muut ikkunat ja selain, ei hjt:tä,
      ja paina Fix Checked


      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFe tE8CXLiVTgqtukiAqs.htm


      *Käynnistä kone uudelleen. Avautuu normaalitilaan.

      ***
      Piilotiedostot pois näkyvistä

      # 1.Napsauta Käynnistä-painiketta ja valitse Ohjauspaneeli.
      # 2.Valitse "Kansion asetukset"
      # 3.Siirry" Näytä välilehdelle"
      # 4.Valitse Näytä-välilehden Piilotetut tiedostot ja kansiot
      -kohdassa" Älä näytä piilotettuja.."

      ***

      Tyhjennä AVG:n karanteeni.
      *Avaa AVG/Infections/Quarantine
      *Valitse "Select all", ja klikkaa "Remove finally"
      Sulje AVG.

      ***
      Javan päivitys ja välimuistin tyhjennys


      1. Klikkaa Käynnistä > Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa.
      2. Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... )
      Niissä pitäisi olla seuraava kuva vieressä:
      3. Valitse kaikki entiset Java versiosi ja valitse Poista.
      4. Asenna uusin Java päivitys seuraavasta linkistä..
      5. Käynnistä kone uudelleen asennuksen jälkeen:

      http://java.sun.com/javase/downloads/index.jsp

      Rullaa alas kohteeseen Java Runtime Environment (JRE) 6

      Paina Download

      Ruksaa Accept, ota offline installation, tallenna vaikka työpöydälle ja asenna

      6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
      7. General Settings -osion alla, vedä liukusäädintä (Disk Space) pienemmälle, ja klikkaa Delete Files nappia.

      (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
      Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liusäädintä isommalle).

      8. Varmista että kaikki kaksi valintaa ovat rastitettuja:

      Applications and Applets

      Trace and Log Files

      Ok

      9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.
      Huomaa: Tämä poistaa kaikki ladatut sovellukset ja appletit VÄLIMUISTISTA.
      10. Klikkaa OK jättääksesi Java asetusikkunasi.

      Lähetä vielä uusi hijack logi

      Äänestä

    • axa.doe kirjoitti:

      Teepä vielä C:n juureen uusi kansio, nimeä se hjt:ksi, ja siirrä työpöydältä tuo HijackThis.exe ja backups-kansio sinne.

      ***
      Avaa AVG
      * klikkaa "Shield" kuvaketta ikkunan ylälaidassa
      * "Resident shield is", muuta tila active:sta --> inactive:ksi
      * Sulje ohjelma.

      ***
      Vikasietotilaan, ohje http://students.turkuai.fi/~aidata/?Ohjeita_ja_muuta_tietoa:Vikasietotila

      Tee siellä uusi skannaus hjt:llä, klikkaa Do a system scan only
      laita ruksi rivin eteen, sulje muut ikkunat ja selain, ei hjt:tä,
      ja paina Fix Checked


      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFe tE8CXLiVTgqtukiAqs.htm


      *Käynnistä kone uudelleen. Avautuu normaalitilaan.

      ***
      Piilotiedostot pois näkyvistä

      # 1.Napsauta Käynnistä-painiketta ja valitse Ohjauspaneeli.
      # 2.Valitse "Kansion asetukset"
      # 3.Siirry" Näytä välilehdelle"
      # 4.Valitse Näytä-välilehden Piilotetut tiedostot ja kansiot
      -kohdassa" Älä näytä piilotettuja.."

      ***

      Tyhjennä AVG:n karanteeni.
      *Avaa AVG/Infections/Quarantine
      *Valitse "Select all", ja klikkaa "Remove finally"
      Sulje AVG.

      ***
      Javan päivitys ja välimuistin tyhjennys


      1. Klikkaa Käynnistä > Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa.
      2. Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... )
      Niissä pitäisi olla seuraava kuva vieressä:
      3. Valitse kaikki entiset Java versiosi ja valitse Poista.
      4. Asenna uusin Java päivitys seuraavasta linkistä..
      5. Käynnistä kone uudelleen asennuksen jälkeen:

      http://java.sun.com/javase/downloads/index.jsp

      Rullaa alas kohteeseen Java Runtime Environment (JRE) 6

      Paina Download

      Ruksaa Accept, ota offline installation, tallenna vaikka työpöydälle ja asenna

      6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
      7. General Settings -osion alla, vedä liukusäädintä (Disk Space) pienemmälle, ja klikkaa Delete Files nappia.

      (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
      Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liusäädintä isommalle).

      8. Varmista että kaikki kaksi valintaa ovat rastitettuja:

      Applications and Applets

      Trace and Log Files

      Ok

      9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.
      Huomaa: Tämä poistaa kaikki ladatut sovellukset ja appletit VÄLIMUISTISTA.
      10. Klikkaa OK jättääksesi Java asetusikkunasi.

      Lähetä vielä uusi hijack logi

      Logfile of HijackThis v1.99.1
      Scan saved at 21:02:44, on 30.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\hjt\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe



      Ei ,mulla ole saunalahden palomuuria. Nyt on vaan toi Sygate Personal Firewall.
      Ainakin kone on ehkä vähän nopeutunut mutta en ymmärrä ku tää ei vieläkään päivitä itseään. Aina on lataavinaan mutta ei kuitenkaan päivitä tai on koko ajan 0%, jos ymmärrät..
      Miks mä en voi ymmärtää noin paljon näiden koneiden eteen..:(
      Ps. kiitoksia taas

      Äänestä

    • Kipa kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 21:02:44, on 30.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\hjt\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe



      Ei ,mulla ole saunalahden palomuuria. Nyt on vaan toi Sygate Personal Firewall.
      Ainakin kone on ehkä vähän nopeutunut mutta en ymmärrä ku tää ei vieläkään päivitä itseään. Aina on lataavinaan mutta ei kuitenkaan päivitä tai on koko ajan 0%, jos ymmärrät..
      Miks mä en voi ymmärtää noin paljon näiden koneiden eteen..:(
      Ps. kiitoksia taas

      Onko tuo "Tää" joka ei päivitä itseään, F-Secure vai Windows?

      Jos Windows, mene suoraan Käynnistä/Windows Update.
      Valitse Custom, ja odota, mitä päivityksiä on tarjolla. Klikkaa "Install Updates".
      Valitse Internet Explorerille ja Windows XP:lle osa, asenna ne ja käynnistä kone uudelleen.
      Sen jälkeen hakemaan lisää.

      Katso Ohjauspaneeli, että Automaattiset päivitykset ovat käytössä.
      Tarkista samalla Windows Firewall, että se on pois käytöstä.

      ***
      Vähennä turhia ohjelmia käynnistymästä koneen avaamisen yhteydessä:

      Tee uusi skannaus hjt:llä, klikkaa "Do a system scan only"
      laita ruksi rivien eteen, sulje muut sovellukset ja selain, ei hjt:tä,
      ja paina Fix Checked

      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

      Käynnistä kone uudellee
      ***

      Niin, kukapa näistä kaiken ymmärtäisi?

      Tutustumisen arvoinen paikka http://www.virustorjunta.net/modules.php?name=Forums vaatii rekisteröitymisen :)

      Seuraile esim. suomi24:n Apua aloittelijoille palstaa, ja http://keskustelu.suomi24.fi/show.fcgi?category=108&subcat=786
      Palomuurit, Tietoturva, Vakoiluohjelmat.. näistä oppii paljon pelkästään seuraamalla niitä.

      Mutta...Huom! Älä kokeile muille suunnattuja ohjeita omalla koneella.

      Lähetä vielä uusi hijack logi.

      Äänestä

    • axa.doe kirjoitti:

      Onko tuo "Tää" joka ei päivitä itseään, F-Secure vai Windows?

      Jos Windows, mene suoraan Käynnistä/Windows Update.
      Valitse Custom, ja odota, mitä päivityksiä on tarjolla. Klikkaa "Install Updates".
      Valitse Internet Explorerille ja Windows XP:lle osa, asenna ne ja käynnistä kone uudelleen.
      Sen jälkeen hakemaan lisää.

      Katso Ohjauspaneeli, että Automaattiset päivitykset ovat käytössä.
      Tarkista samalla Windows Firewall, että se on pois käytöstä.

      ***
      Vähennä turhia ohjelmia käynnistymästä koneen avaamisen yhteydessä:

      Tee uusi skannaus hjt:llä, klikkaa "Do a system scan only"
      laita ruksi rivien eteen, sulje muut sovellukset ja selain, ei hjt:tä,
      ja paina Fix Checked

      O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

      Käynnistä kone uudellee
      ***

      Niin, kukapa näistä kaiken ymmärtäisi?

      Tutustumisen arvoinen paikka http://www.virustorjunta.net/modules.php?name=Forums vaatii rekisteröitymisen :)

      Seuraile esim. suomi24:n Apua aloittelijoille palstaa, ja http://keskustelu.suomi24.fi/show.fcgi?category=108&subcat=786
      Palomuurit, Tietoturva, Vakoiluohjelmat.. näistä oppii paljon pelkästään seuraamalla niitä.

      Mutta...Huom! Älä kokeile muille suunnattuja ohjeita omalla koneella.

      Lähetä vielä uusi hijack logi.

      Logfile of HijackThis v1.99.1
      Scan saved at 14:21:32, on 3.2.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\hjt\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      Joo muut tein, mutta ei se päivitä niit Windowsin juttuja sielt(siis ongelma on windowsin päivitykset) . se lataa niitä mutta ne epäonnistuu koko ajan.en ymmärrä ja hermot menee.. :(
      Kiitos taas sinulle kovasti :)

      Äänestä

    • Kipa kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 14:21:32, on 3.2.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Acer\eManager\anbmServ.exe
      C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
      C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Launch Manager\LaunchAp.exe
      C:\Program Files\Launch Manager\PowerKey.exe
      C:\Program Files\Launch Manager\HotkeyApp.exe
      C:\Program Files\Launch Manager\CtrlVol.exe
      C:\Program Files\Launch Manager\OSDCtrl.exe
      C:\Program Files\Launch Manager\Wbutton.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\Arcade\PCMService.exe
      C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
      C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\hjt\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
      O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
      O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
      O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
      O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
      O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Documents and Settings\Kirsi\Työpöytä\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      Joo muut tein, mutta ei se päivitä niit Windowsin juttuja sielt(siis ongelma on windowsin päivitykset) . se lataa niitä mutta ne epäonnistuu koko ajan.en ymmärrä ja hermot menee.. :(
      Kiitos taas sinulle kovasti :)

      ovatko ne "Automatic (recommended) asennossa?

      ***
      Kävitkö kokeilemassa Windows Updaten kautta? Joko: klikkaa Käynnistä/Windows Update, tai

      Avaa selain, Tools/Windows Update. Odota hetki.
      Klikkaa Custom, ja High Priority: tarkista, mitä siellä on tarjolla. Jos päivityksiä on paljon, ota ensin vain kriittiset Windowsille ja Internet Explorerille Smile

      ***
      Käy täällä http://secunia.com/software_inspector/ Klikkaa Start, ruksi kohtaan "Enable thorough system inspection".

      Klikkaa taas Start ja odota tuloksia. Kerro mitä on punaisella Smile

      ***
      Onko sinulla Firefox koneella?

      Jos ei, niin lataa, asenna ja kokeile: http://www.mozilla.com/en-US/firefox/all.html

      Täältä voi hakea Firefoxilla päivityksiä:

      http://www.microsoft.com/downloads/Search.aspx?displaylang=fi

      ***
      Firefoxin nopeuttamisvinkkejä

      Keskustelufoorumi http://www.mozilla.fi/keskustelu/
      ***

      Voit poistaa työpöydälta lataamasi findlopin.
      ***
      Asenna vielä SpywareBlaster:

      http://koti.mbnet.fi/pattaya1/spywareblaster.htm

      Logi on kunnossa.

      Äänestä

    • axa.doe kirjoitti:

      ovatko ne "Automatic (recommended) asennossa?

      ***
      Kävitkö kokeilemassa Windows Updaten kautta? Joko: klikkaa Käynnistä/Windows Update, tai

      Avaa selain, Tools/Windows Update. Odota hetki.
      Klikkaa Custom, ja High Priority: tarkista, mitä siellä on tarjolla. Jos päivityksiä on paljon, ota ensin vain kriittiset Windowsille ja Internet Explorerille Smile

      ***
      Käy täällä http://secunia.com/software_inspector/ Klikkaa Start, ruksi kohtaan "Enable thorough system inspection".

      Klikkaa taas Start ja odota tuloksia. Kerro mitä on punaisella Smile

      ***
      Onko sinulla Firefox koneella?

      Jos ei, niin lataa, asenna ja kokeile: http://www.mozilla.com/en-US/firefox/all.html

      Täältä voi hakea Firefoxilla päivityksiä:

      http://www.microsoft.com/downloads/Search.aspx?displaylang=fi

      ***
      Firefoxin nopeuttamisvinkkejä

      Keskustelufoorumi http://www.mozilla.fi/keskustelu/
      ***

      Voit poistaa työpöydälta lataamasi findlopin.
      ***
      Asenna vielä SpywareBlaster:

      http://koti.mbnet.fi/pattaya1/spywareblaster.htm

      Logi on kunnossa.

      Ei suostu päivittämään windows updatesta. Jotkut sieltä sai yksittäisinä mutkan kautta, mutta ei kaikkia...
      Software Inspector punaisena näytti seuraavat
      Microsoft Internet Explorer 7.x 7.0.5730.11
      Macromedia Flash Player 8.x 8.0.22.0
      Sun Java JRE 1.5.x / 5.x 1.5.0.0

      Yritin niitä päivitellä, mutta siltikin näyttää noin.

      SpywareBlaster on asennettuna nytten

      Ja kun asensin Firefoxin niin aina kun sen avaa niin se muuuttaa näytön resoluution niin isoksi että pitää mennä katsomaan viereisestä huoneesta että saa selvän siitä. Pitää aina erikseen sen avattua muuttaa näytön reso takaisin... Eli miten sen voisin saada pysymään? Olisi niin kiva sitä käyttää mielummin kun tota IE:tä...

      Kiitoksi kärsivällisyydestänne ja avustanne


      Kipa

      Äänestä

    • Kipa kirjoitti:

      Ei suostu päivittämään windows updatesta. Jotkut sieltä sai yksittäisinä mutkan kautta, mutta ei kaikkia...
      Software Inspector punaisena näytti seuraavat
      Microsoft Internet Explorer 7.x 7.0.5730.11
      Macromedia Flash Player 8.x 8.0.22.0
      Sun Java JRE 1.5.x / 5.x 1.5.0.0

      Yritin niitä päivitellä, mutta siltikin näyttää noin.

      SpywareBlaster on asennettuna nytten

      Ja kun asensin Firefoxin niin aina kun sen avaa niin se muuuttaa näytön resoluution niin isoksi että pitää mennä katsomaan viereisestä huoneesta että saa selvän siitä. Pitää aina erikseen sen avattua muuttaa näytön reso takaisin... Eli miten sen voisin saada pysymään? Olisi niin kiva sitä käyttää mielummin kun tota IE:tä...

      Kiitoksi kärsivällisyydestänne ja avustanne


      Kipa

      "Käyttöjärjestelmän päivitykset kannattaa ladata Windows Update:sta, niin saat varmasti omaan koneensa soveltuvat päivitykset.
      Käyttöjärjestelmän päivityksen saatavuuden voit tarkistaa näin:
      *Avaa Internet Explorer
      *Työkalut
      *Windows Update
      *Mukautettu asennus, etsii kaikki sinun koneestasi puuttuvat käyttöjärjestelmän päivitykset.

      Huom.(Pika-Asennus etsii vain kriittisimmät tietoturvapäivitykset eli samat jotka automaattinen päivitysten
      ilmoitus/asennus toiminto ilmoittaa/asentaa."

      Tosin nuo päivitykset vaan jäävät junnaamaan. Eilen tuli ilmoitus päivityksistä, jotka pyysin lataamaan koneelle. Eipä tuo tyrkytellyt niitä kuitenkaan enää..Ne piti hakea itse Updatesta.

      ***

      "Software Inspector punaisena näytti seuraavat
      Microsoft Internet Explorer 7.x 7.0.5730.11"

      --Koneellasi on jo Internet Explorer v7.00 (7.00.5730.0011)

      Jos tämä on tyrkyllä automaattisten päivitysten mukana, jätä pois valinnasta valitsemalla "älä näytä tätä päivitystä enää", tai poista sen asennus ja asenna uudestaan.

      Muutoin jätä huomiotta Software Inspectorissa.

      "Macromedia Flash Player 8.x 8.0.22.0"

      --Uusin on Macromedia Flash Player 6.x   6.0.88.0.
      Jos ei sitä ole vielä asennettuna, asenna se samaisella sivulla olevasta linkistä työpöydälle ja aja se.

      Adobe Flash Player uusin on 9.x   9.0.28.0
      ***

      "Sun Java JRE 1.5.x / 5.x 1.5.0.0"

      --Kyseisen kohdan ruksista suurentamalla lisätietoa:
      "NOTE. Older versions of Sun Java are not removed from your system when downloading and installing new versions from Sun.
      Therefore, if you have the latest Sun Java version installed, then you should consider removing all older versions of Sun Java
      from your system. This can be done via "Add/Remove Programs" in the Microsoft Windows "Control Panel".
      If you are in doubt about removing older versions of Sun Java then please contact the vendor for assistance."

      --Katso näkyykö Lisää/poista sovelluksissa vanhempia java versioita enää. Jos näkyy niin poista, ellei näy, ei kannata välittää tuosta ilmoituksesta.

      --Logissasi näkyy viimeisin java C:\Program Files\Java\jre1.6.0\bin\ssv.dll.

      Mulla herjaa punaisella jotain vanhaa versiota, mutta näyttää alempana sivulla vihreää
      Sun Java JRE 1.6.x / 6.x 6.0.0.105, joka on asennettuna, ei muita.
      ***

      "Ja kun asensin Firefoxin niin aina kun sen avaa niin se muuuttaa näytön resoluution niin isoksi että pitää mennä katsomaan
      viereisestä huoneesta että saa selvän siitä. Pitää aina erikseen sen avattua muuttaa näytön reso takaisin... Eli miten sen
      voisin saada pysymään? Olisi niin kiva sitä käyttää mielummin kun tota IE:tä..."

      --Huonostihan tuo näkyy, jos kuvaruudun koko ei laajene mukana :D Todella hankalaa katsella selaimesta mitään toisesta huoneesta.

      Älä säädä näytön resoluutiosta. Kokeile säätää Foxia ctrl ja ctrl- näppäimillä.


      ***
      Viimeisin logi oli kuitenkin kunnossa. Aloita kokonaan uusi keskusteluketju, jos tulee vielä ongelmia. Tai, poikkea tuonne http://www.virustorjunta.net/modules.php?name=Forums :)

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    Kipa kirjoitti:

    Kaikki muut sain tehtyä mutta toi nolop kaatu aina kun sitä yritti käyttää.

    HIJACK
    Logfile of HijackThis v1.99.1
    Scan saved at 18:54:12, on 5.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Acer\eManager\anbmServ.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Launch Manager\LaunchAp.exe
    C:\Program Files\Launch Manager\PowerKey.exe
    C:\Program Files\Launch Manager\HotkeyApp.exe
    C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
    C:\Program Files\Launch Manager\CtrlVol.exe
    C:\Program Files\Launch Manager\OSDCtrl.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
    C:\Program Files\Launch Manager\Wbutton.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\FSGK32.EXE
    C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
    C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FSMB32.EXE
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fssm32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FCH32.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Arcade\PCMService.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsqh.exe
    C:\Program Files\Saunalahden Turvapaketti\Common\FAMEH32.EXE
    C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsrw.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsav32.exe
    C:\PROGRA~1\SAUNAL~1\ANTI-S~1\fsaw.exe
    C:\Program Files\Saunalahden Turvapaketti\FSGUI\fsguidll.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
    C:\WINDOWS\explorer.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    C:\WINDOWS\msagent\AgentSvr.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\DOCUME~1\Kirsi\LOCALS~1\Temp\Tilapäinen kansio 2 hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://zyxevjbmujjstoxdx.info/J9v2W0wJgVPN/shuMRJuDwaFe tE8CXLiVTgqtukiAqs.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
    O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
    O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
    O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
    O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
    O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Saunalahden Turvapaketti\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Saunalahden Turvapaketti\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\Saunalahden Turvapaketti\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [fork stupid] C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - Global Startup: Saunalahti Turvapaketti.lnk = C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\Program\fspex.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Saunalahden Turvapaketti\Anti-Spyware\ieshield.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl ient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.ca b
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - AppInit_DLLs: MsgPlusLoader.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
    O23 - Service: Saunalahti Turvapaketti (BackWeb Plug-in - 5006663) - Saunalahti Turvapaketti - C:\PROGRA~1\SAUNAL~1\backweb\5006663\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Saunalahden Turvapaketti\backweb\5006663\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\FWES\Program\fsdfwd.exe
    O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Saunalahden Turvapaketti\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    ESCAN
    File C:\PROGRA~1\MINICL~1\MINICL~1.DLL tagged as not-a-virus:AdWare.Win32.MegaSearch.h. No Action Taken.
    File C:\DOCUME~1\Kirsi\APPLIC~1\MPEGDA~1\warnmoreamok.exe tagged as not-a-virus:AdWare.Win32.Lop.m. No Action Taken.
    File C:\WINDOWS\NDNuninstall7_48.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\WINDOWS\system32\sqbfwhrs.exe tagged as not-a-virus:AdWare.Win32.HotBar.bq. No Action Taken.
    File C:\I386\¦-´¥EDOS.EX_ infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\system32\sqbfwhrs.exe tagged as not-a-virus:AdWare.Win32.HotBar.bq. No Action Taken.
    File C:\WINDOWS\NDNuninstall7_48.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\SLOW BAT.bk! tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\tons copy.bk! tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\Style defy.bk! tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\Style defy.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\tons copy.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\SLOW BAT.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\support build.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\blehdefy.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\Draw list.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\SOAP MEAL.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\firstchic.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\audio five.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\else junk.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\ExitAce.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\01 Rule.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\All Users\Application Data\BoltBendFaceMapi\locks32.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.
    File C:\Documents and Settings\LocalService\Application Data\mpeg dale mode\warnmoreamok.exe tagged as not-a-virus:AdWare.Win32.Lop.m. No Action Taken.
    File C:\Documents and Settings\Kirsi\Työpöytä\NNuninstall.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\Documents and Settings\Kirsi\Application Data\mpeg dale mode\warnmoreamok.exe tagged as not-a-virus:AdWare.Win32.Lop.m. No Action Taken.
    File C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNowCrunch_InstallerInst.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
    File C:\Program Files\minicliptoolbar toolbar\minicliptoolbar.dll tagged as not-a-virus:AdWare.Win32.MegaSearch.h. No Action Taken.
    File C:\System Volume Information\_restore{4CA1FCC9-8A05-421B-B5B7-50DAE9EC9BAF}\RP524\A0039578.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\System Volume Information\_restore{4CA1FCC9-8A05-421B-B5B7-50DAE9EC9BAF}\RP517\A0039253.dll tagged as not-a-virus:AdWare.Win32.NewDotNet.i. No Action Taken.
    File D:\Omat tiedostot\Vastaanotetut tiedostot\WinWNC v3.3.7.zip tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
    File D:\Omat tiedostot\Omat kuvatiedostot\vastaanotettuja kuvia\WinWNC v3.3.7.zip tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
    Traces of "OpaServ" found and cleaned !!!

    New.net
    new.net regsitry key fix

    by noahdfear ©2006

    checking for new.net key

    new.net key present!

    Running new.net fix!

    new.net successfully removed!



    Mitäs sitten teen?
    Kiitoksia jo tässä vaiheessa vaivan näöstä :)

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu