Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    HJT loki kone hidastelee

    Logfile of HijackThis v1.99.1
    Scan saved at 14:21:09, on 24.7.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Skanneri.exe.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?linkid=677
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37570.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    9749
    Äänestä

    Muut lukivat myös

    Vastaukset 9

    Vanhimmat

    • File C:\Documents and Settings\GSA\Application Data\Flag plan\vmwadevm.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.

      Äänestä

    • kun tämän vaan kirjoitti:

      File C:\Documents and Settings\GSA\Application Data\Flag plan\vmwadevm.exe tagged as not-a-virus:AdWare.Win32.Lop.bb. No Action Taken.

      Lataa NoLop työpöydällesi yhdestä seuraavista linkeistä...
      http://www.spywareedge.net/nolop/NoLop.exe
      http://www.spywaretimes.com/Tools/download/21/chk,ed0778d88843ca2625ab6208a197bcc5/
      http://www.thespykiller.co.uk/forum/index.php?action=tpmod;dl=item16

      1.Sulje kaikki ohjelmat, koska tämä vaihe vaatii uudelleenkäynnistyksen
      2.Tuplaklikkaa NoLop.exe ajaaksesi sen
      3.Klikkaa nappulaa "Search and Destroy"

      4, Kun skannaus on valmis, sinua pyydetään käynnistämään kone uudestaan, jos infektio löytyy. Klikkaa OK
      5. Klikkaa "REBOOT"-painiketta.
      6. NoLopin pitäisi antaa viesti. Jos ei, tuplaklikkaa ohjelmaa ja se valmistuu. Lähetä C:\NoLop.log-tiedoston sisältö uuden HijackThis-lokin kera.
      -- Jos saat seuraavan virheen, "mscomctl.ocx or one of its dependencies are not correctly registered," lataamscomctl.ocx http://www.boletrice.com/downloads/mscomctl.ocx
      ja tallenna se system32-hakemistoosi (yleensä c:\Windows\system32). Tämän jälkeen aja ohjelma uudestaan.

      Äänestä

    • Poistelen vain kirjoitti:

      Lataa NoLop työpöydällesi yhdestä seuraavista linkeistä...
      http://www.spywareedge.net/nolop/NoLop.exe
      http://www.spywaretimes.com/Tools/download/21/chk,ed0778d88843ca2625ab6208a197bcc5/
      http://www.thespykiller.co.uk/forum/index.php?action=tpmod;dl=item16

      1.Sulje kaikki ohjelmat, koska tämä vaihe vaatii uudelleenkäynnistyksen
      2.Tuplaklikkaa NoLop.exe ajaaksesi sen
      3.Klikkaa nappulaa "Search and Destroy"

      4, Kun skannaus on valmis, sinua pyydetään käynnistämään kone uudestaan, jos infektio löytyy. Klikkaa OK
      5. Klikkaa "REBOOT"-painiketta.
      6. NoLopin pitäisi antaa viesti. Jos ei, tuplaklikkaa ohjelmaa ja se valmistuu. Lähetä C:\NoLop.log-tiedoston sisältö uuden HijackThis-lokin kera.
      -- Jos saat seuraavan virheen, "mscomctl.ocx or one of its dependencies are not correctly registered," lataamscomctl.ocx http://www.boletrice.com/downloads/mscomctl.ocx
      ja tallenna se system32-hakemistoosi (yleensä c:\Windows\system32). Tämän jälkeen aja ohjelma uudestaan.

      Latasin ohjelman ja ajoin mut se ei löytänyt mitään, se ei anna klikata sitä reboot nappia. Vaan sepä ei vissiin annakaan klikata sitä ellei löydy mitään, näin käsitin?
      Mitään se ei löytänyt outo homma

      Äänestä

    • lop ohjelman kirjoitti:

      Latasin ohjelman ja ajoin mut se ei löytänyt mitään, se ei anna klikata sitä reboot nappia. Vaan sepä ei vissiin annakaan klikata sitä ellei löydy mitään, näin käsitin?
      Mitään se ei löytänyt outo homma

      sulla on toi avg:n anti-spyware koneella niin päivitä se ja aja se vikasiedossa.

      Äänestä

    • Poistelen vain kirjoitti:

      sulla on toi avg:n anti-spyware koneella niin päivitä se ja aja se vikasiedossa.

      Jostain syystä se ei tallentanu lokia vaikka pistin normaalisti apply all actions jne.

      Se kyllä löys sieltä jotain, pistän käsityönä tähän ne mitä löyty

      Threat Risk

      Downloader.Small High
      TrackingCookie.Burstnet Medium
      TrackinCookie.Realmedia Medium
      TrackinCookie.Yieldmanager Medium
      TrackinCookie.Revsci Medium
      TrackinCookie.Serving-sys Medium
      TrackinCookie.Adbrite Medium
      TrackinCookie.Statcounter Medium
      TrackinCookie.Imrworldwide Medium
      TrackinCookie.Statistik-gallup Medium

      Eli nuo yhteesä 25 infektoitunutta oli, jokusen kerran joku noista kekseistä useamma kerran jossain

      Äänestä

    • ja löysi se yhen pahan kirjoitti:

      Jostain syystä se ei tallentanu lokia vaikka pistin normaalisti apply all actions jne.

      Se kyllä löys sieltä jotain, pistän käsityönä tähän ne mitä löyty

      Threat Risk

      Downloader.Small High
      TrackingCookie.Burstnet Medium
      TrackinCookie.Realmedia Medium
      TrackinCookie.Yieldmanager Medium
      TrackinCookie.Revsci Medium
      TrackinCookie.Serving-sys Medium
      TrackinCookie.Adbrite Medium
      TrackinCookie.Statcounter Medium
      TrackinCookie.Imrworldwide Medium
      TrackinCookie.Statistik-gallup Medium

      Eli nuo yhteesä 25 infektoitunutta oli, jokusen kerran joku noista kekseistä useamma kerran jossain

      tuolla vielä sitten vain surfailua netissä :D

      • Lataa Dr.Web CureIt työpöydälle:
      ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
      •
      [*]Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan
      [*]Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan.
      [*]Kun scan on valmis, merkkaa asemat, jotka haluat scannata.
      [*]Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu.
      [*]Klikaa vihreää nuolta oikealla ja scan alkaa.
      [*]Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston.
      [*]Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä:

      http://users.telenet.be/bluepatchy/miekiemoes/images/check.gif

      [*]Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa:

      http://users.telenet.be/bluepatchy/miekiemoes/images/move.gif

      Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon.
      [*]Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list
      [*]Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv
      [*]Sulje Dr.Web Cureit.
      [*]Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä.
      [*]Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.

      Äänestä

    • Poistelen vain kirjoitti:

      tuolla vielä sitten vain surfailua netissä :D

      • Lataa Dr.Web CureIt työpöydälle:
      ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
      •
      [*]Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan
      [*]Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan.
      [*]Kun scan on valmis, merkkaa asemat, jotka haluat scannata.
      [*]Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu.
      [*]Klikaa vihreää nuolta oikealla ja scan alkaa.
      [*]Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston.
      [*]Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä:

      http://users.telenet.be/bluepatchy/miekiemoes/images/check.gif

      [*]Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa:

      http://users.telenet.be/bluepatchy/miekiemoes/images/move.gif

      Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon.
      [*]Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list
      [*]Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv
      [*]Sulje Dr.Web Cureit.
      [*]Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä.
      [*]Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.

      =============================================================================
      Dr.Web(R) Scanner for Windows v4.33.2 (4.33.2.10067)
      Copyright (c) Igor Daniloff, 1992-2006
      Log generated on: 2007-07-25, 18:50:09 [Matti]
      Command-line: "C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cureit.exe" /lng /ini:cureit_XP.ini
      Operating system:Windows XP Home Edition x86 (Build 2600), Service Pack 2
      =============================================================================
      Engine version: 4.33 (4.33.5.10110)
      Engine API version: 2.01
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwtoday.cdb - 898 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43397.cdb - 3389 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43396.cdb - 4255 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43395.cdb - 1566 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43394.cdb - 3970 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43393.cdb - 2628 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43392.cdb - 1869 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43391.cdb - 4089 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43390.cdb - 2323 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43389.cdb - 1300 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43388.cdb - 2421 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43387.cdb - 1529 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43386.cdb - 1303 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43385.cdb - 1396 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43384.cdb - 2530 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43383.cdb - 3927 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43382.cdb - 1811 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43381.cdb - 1262 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43380.cdb - 906 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43379.cdb - 1485 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43378.cdb - 2545 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43377.cdb - 1030 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43376.cdb - 1390 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43375.cdb - 1633 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43374.cdb - 2090 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43373.cdb - 1252 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43372.cdb - 1289 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43371.cdb - 2370 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43370.cdb - 2022 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43369.cdb - 687 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43368.cdb - 1099 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43367.cdb - 1834 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43366.cdb - 4015 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43365.cdb - 1342 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43364.cdb - 1335 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43363.cdb - 1152 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43362.cdb - 1006 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43361.cdb - 878 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43360.cdb - 988 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43359.cdb - 1205 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43358.cdb - 1139 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43357.cdb - 1302 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43356.cdb - 1332 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43355.cdb - 2456 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43354.cdb - 1283 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43353.cdb - 795 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43352.cdb - 2016 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43351.cdb - 941 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43350.cdb - 1020 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43349.cdb - 1008 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43348.cdb - 1096 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43347.cdb - 707 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43346.cdb - 1428 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43345.cdb - 1358 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43344.cdb - 694 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43343.cdb - 1186 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43342.cdb - 744 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43341.cdb - 841 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43340.cdb - 822 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43339.cdb - 1071 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43338.cdb - 989 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43337.cdb - 855 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43336.cdb - 1297 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43335.cdb - 1195 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43334.cdb - 900 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43333.cdb - 1381 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43332.cdb - 1340 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43331.cdb - 2735 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43330.cdb - 2078 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43329.cdb - 2490 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43328.cdb - 743 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43327.cdb - 958 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43326.cdb - 793 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43325.cdb - 713 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43324.cdb - 655 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43323.cdb - 655 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43322.cdb - 778 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43321.cdb - 846 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43320.cdb - 808 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43319.cdb - 764 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43318.cdb - 838 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43317.cdb - 363 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43316.cdb - 730 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43315.cdb - 627 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43314.cdb - 824 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43313.cdb - 842 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43312.cdb - 830 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43311.cdb - 862 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43310.cdb - 853 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43309.cdb - 733 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43308.cdb - 708 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43307.cdb - 839 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43306.cdb - 930 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43305.cdb - 759 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43304.cdb - 721 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43303.cdb - 638 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43302.cdb - 806 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43301.cdb - 504 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43300.cdb - 24 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwebase.cdb - 78674 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwrtoday.cdb - 50 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwr43302.cdb - 576 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwr43301.cdb - 697 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwrisky.cdb - 1271 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwntoday.cdb - 19 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43310.cdb - 764 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43309.cdb - 774 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43308.cdb - 838 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43307.cdb - 854 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43306.cdb - 781 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43305.cdb - 752 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43304.cdb - 793 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43303.cdb - 766 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43302.cdb - 850 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43301.cdb - 772 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwnasty.cdb - 4867 virus records
      Total virus records: 229760
      Key file: C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cureit.key
      License key number: 0010092936
      Registered to: Dr.Web CureIt Project
      License key activates: 2007-02-05
      License key expires: 2010-02-11

      -----------------------------------------------------------------------------
      Scan statistics
      -----------------------------------------------------------------------------
      Objects scanned: 0
      Infected objects found: 0
      Objects with modifications found: 0
      Suspicious objects found: 0
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 0
      Objects ignored: 0
      Scan speed: 0 Kb/s
      Scan time: 00:00:00
      -----------------------------------------------------------------------------

      [Scan path] c:\documents and settings\all users\käynnistä-valikko\ohjelmat\käynnistys\desktop.ini
      [Scan path] c:\documents and settings\matti\käynnistä-valikko\ohjelmat\käynnistys\desktop.ini
      [Scan path] c:\documents and settings\matti\local settings\temp\rarsfx0\_start.exe
      [Scan path] c:\documents and settings\matti\local settings\temp\rarsfx0\cureit.exe
      [Scan path] c:\documents and settings\matti\työpöytä\drweb-cureit.exe
      [Scan path] c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
      [Scan path] c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
      [Scan path] c:\program files\adobe\acrobat 7.0\reader\adobeupdatemanager.exe
      [Scan path] c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
      [Scan path] c:\program files\antivir personaledition classic\avgnt.exe
      [Scan path] c:\program files\antivir personaledition classic\avguard.exe
      [Scan path] c:\program files\antivir personaledition classic\sched.exe
      [Scan path] c:\program files\antivir personaledition classic\shlext.dll
      [Scan path] c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe
      [Scan path] c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
      [Scan path] c:\program files\common files\sony shared\avlib\sptisrv.exe
      [Scan path] c:\program files\common files\system\ole db\oledb32.dll
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\avgas.exe
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\guard.exe
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\guard.sys
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll
      [Scan path] c:\program files\izarc\izarccm.dll
      [Scan path] c:\program files\messenger\msmsgs.exe
      [Scan path] c:\program files\mozilla firefox\firefox.exe
      [Scan path] c:\program files\msn messenger\fsshext.8.1.0178.00.dll
      [Scan path] c:\program files\msn messenger\msgrapp.8.1.0178.00.dll
      [Scan path] c:\program files\msn messenger\usnsvc.exe
      [Scan path] c:\program files\openoffice.org 2.0\program\quickstart.exe
      [Scan path] c:\program files\openoffice.org 2.0\program\shlxthdl.dll
      [Scan path] c:\program files\openoffice.org 2.0\program\soffice.bin
      [Scan path] c:\program files\openoffice.org 2.0\program\soffice.exe
      [Scan path] c:\program files\outlook express\setup50.exe
      [Scan path] c:\program files\outlook express\wabfind.dll
      [Scan path] c:\program files\quicktime\qttask.exe
      [Scan path] c:\program files\spybot - search & destroy\sdhelper.dll
      [Scan path] c:\program files\winamp\winampa.exe
      [Scan path] c:\program files\windows live toolbar\msntb.dll
      [Scan path] c:\program files\windows media player\wmpnetwk.exe
      [Scan path] c:\program files\windows media player\wmpnscfg.exe
      [Scan path] c:\program files\yahoo!\companion\installs\cpn\yt.dll
      [Scan path] c:\program files\zone labs\zonealarm\zlavscan.dll
      [Scan path] c:\program files\zone labs\zonealarm\zlclient.exe
      [Scan path] c:\windows\explorer.exe
      [Scan path] c:\windows\inf\unregmp2.exe
      [Scan path] c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe
      [Scan path] c:\windows\msagent\agentpsh.dll
      [Scan path] c:\windows\network diagnostic\xpnetdiag.exe
      [Scan path] c:\windows\system32\advapi32.dll
      [Scan path] c:\windows\system32\advpack.dll
      [Scan path] c:\windows\system32\alg.exe
      [Scan path] c:\windows\system32\appwiz.cpl
      [Scan path] c:\windows\system32\ati2evxx.dll
      [Scan path] c:\windows\system32\ati2evxx.exe
      [Scan path] c:\windows\system32\ati2sgag.exe
      [Scan path] c:\windows\system32\audiodev.dll
      [Scan path] c:\windows\system32\autochk.exe
      [Scan path] c:\windows\system32\browseui.dll
      [Scan path] c:\windows\system32\cabview.dll
      [Scan path] c:\windows\system32\cisvc.exe
      [Scan path] c:\windows\system32\clipsrv.exe
      [Scan path] c:\windows\system32\cnbjmon.dll
      [Scan path] c:\windows\system32\comdlg32.dll
      [Scan path] c:\windows\system32\crypt32.dll
      [Scan path] c:\windows\system32\cryptext.dll
      [Scan path] c:\windows\system32\cryptnet.dll
      [Scan path] c:\windows\system32\cscdll.dll
      [Scan path] c:\windows\system32\cscui.dll
      [Scan path] c:\windows\system32\csrss.exe
      [Scan path] c:\windows\system32\ctfmon.exe
      [Scan path] c:\windows\system32\deskadp.dll
      [Scan path] c:\windows\system32\deskmon.dll
      [Scan path] c:\windows\system32\deskperf.dll
      [Scan path] c:\windows\system32\dfsshlex.dll
      [Scan path] c:\windows\system32\diskcopy.dll
      [Scan path] c:\windows\system32\dllhost.exe
      [Scan path] c:\windows\system32\dmadmin.exe
      [Scan path] c:\windows\system32\docprop.dll
      [Scan path] c:\windows\system32\docprop2.dll
      [Scan path] c:\windows\system32\drivers\acpi.sys
      [Scan path] c:\windows\system32\drivers\aec.sys
      [Scan path] c:\windows\system32\drivers\afd.sys
      [Scan path] c:\windows\system32\drivers\alcxsens.sys
      [Scan path] c:\windows\system32\drivers\alcxwdm.sys
      [Scan path] c:\windows\system32\drivers\amdk7.sys
      [Scan path] c:\windows\system32\drivers\asyncmac.sys
      [Scan path] c:\windows\system32\drivers\atapi.sys
      [Scan path] c:\windows\system32\drivers\ati2mtag.sys
      [Scan path] c:\windows\system32\drivers\atmarpc.sys
      [Scan path] c:\windows\system32\drivers\audstub.sys
      [Scan path] c:\windows\system32\drivers\avgascln.sys
      [Scan path] c:\windows\system32\drivers\avgntdd.sys
      [Scan path] c:\windows\system32\drivers\avgntmgr.sys
      [Scan path] c:\windows\system32\drivers\cdrom.sys
      [Scan path] c:\windows\system32\drivers\cnxetp.sys
      [Scan path] c:\windows\system32\drivers\cnxetu.sys
      [Scan path] c:\windows\system32\drivers\cnxtgn.sys
      [Scan path] c:\windows\system32\drivers\disk.sys
      [Scan path] c:\windows\system32\drivers\dmboot.sys
      [Scan path] c:\windows\system32\drivers\dmio.sys
      [Scan path] c:\windows\system32\drivers\dmload.sys
      [Scan path] c:\windows\system32\drivers\dmusic.sys
      [Scan path] c:\windows\system32\drivers\drmkaud.sys
      [Scan path] c:\windows\system32\drivers\fdc.sys
      [Scan path] c:\windows\system32\drivers\fetnd5.sys
      [Scan path] c:\windows\system32\drivers\fetnd5b.sys
      [Scan path] c:\windows\system32\drivers\flpydisk.sys
      [Scan path] c:\windows\system32\drivers\fltmgr.sys
      [Scan path] c:\windows\system32\drivers\ftdisk.sys
      [Scan path] c:\windows\system32\drivers\gameenum.sys
      [Scan path] c:\windows\system32\drivers\http.sys
      [Scan path] c:\windows\system32\drivers\i8042prt.sys
      [Scan path] c:\windows\system32\drivers\imapi.sys
      [Scan path] c:\windows\system32\drivers\ip6fw.sys
      [Scan path] c:\windows\system32\drivers\ipfltdrv.sys
      [Scan path] c:\windows\system32\drivers\ipinip.sys
      [Scan path] c:\windows\system32\drivers\ipnat.sys
      [Scan path] c:\windows\system32\drivers\ipsec.sys
      [Scan path] c:\windows\system32\drivers\irenum.sys
      [Scan path] c:\windows\system32\drivers\isapnp.sys
      [Scan path] c:\windows\system32\drivers\kbdclass.sys
      [Scan path] c:\windows\system32\drivers\kmixer.sys
      [Scan path] c:\windows\system32\drivers\mouclass.sys
      [Scan path] c:\windows\system32\drivers\mrxdav.sys
      [Scan path] c:\windows\system32\drivers\mrxsmb.sys
      [Scan path] c:\windows\system32\drivers\msgpc.sys
      [Scan path] c:\windows\system32\drivers\mskssrv.sys
      [Scan path] c:\windows\system32\drivers\mspclock.sys
      [Scan path] c:\windows\system32\drivers\mspqm.sys
      [Scan path] c:\windows\system32\drivers\mssmbios.sys
      [Scan path] c:\windows\system32\drivers\ndistapi.sys
      [Scan path] c:\windows\system32\drivers\ndisuio.sys
      [Scan path] c:\windows\system32\drivers\ndiswan.sys
      [Scan path] c:\windows\system32\drivers\netbios.sys
      [Scan path] c:\windows\system32\drivers\netbt.sys
      [Scan path] c:\windows\system32\drivers\nwlnkflt.sys
      [Scan path] c:\windows\system32\drivers\nwlnkfwd.sys
      [Scan path] c:\windows\system32\drivers\parport.sys
      [Scan path] c:\windows\system32\drivers\pci.sys
      [Scan path] c:\windows\system32\drivers\pfc.sys
      [Scan path] c:\windows\system32\drivers\psched.sys
      [Scan path] c:\windows\system32\drivers\ptilink.sys
      [Scan path] c:\windows\system32\drivers\pxhelp20.sys
      [Scan path] c:\windows\system32\drivers\rasacd.sys
      [Scan path] c:\windows\system32\drivers\rasl2tp.sys
      [Scan path] c:\windows\system32\drivers\raspppoe.sys
      [Scan path] c:\windows\system32\drivers\raspptp.sys
      [Scan path] c:\windows\system32\drivers\raspti.sys
      [Scan path] c:\windows\system32\drivers\rdbss.sys
      [Scan path] c:\windows\system32\drivers\rdpcdd.sys
      [Scan path] c:\windows\system32\drivers\redbook.sys
      [Scan path] c:\windows\system32\drivers\scsiport.sys
      [Scan path] c:\windows\system32\drivers\secdrv.sys
      [Scan path] c:\windows\system32\drivers\serenum.sys
      [Scan path] c:\windows\system32\drivers\serial.sys
      [Scan path] c:\windows\system32\drivers\splitter.sys
      [Scan path] c:\windows\system32\drivers\sr.sys
      [Scan path] c:\windows\system32\drivers\srv.sys
      [Scan path] c:\windows\system32\drivers\sshdrv65.sys
      [Scan path] c:\windows\system32\drivers\sshdrv79.sys
      [Scan path] c:\windows\system32\drivers\sshdrv85.sys
      [Scan path] c:\windows\system32\drivers\swenum.sys
      [Scan path] c:\windows\system32\drivers\swmidi.sys
      [Scan path] c:\windows\system32\drivers\sysaudio.sys
      [Scan path] c:\windows\system32\drivers\tcpip.sys
      [Scan path] c:\windows\system32\drivers\termdd.sys
      [Scan path] c:\windows\system32\drivers\update.sys
      [Scan path] c:\windows\system32\drivers\usbehci.sys
      [Scan path] c:\windows\system32\drivers\usbhub.sys
      [Scan path] c:\windows\system32\drivers\usbscan.sys
      [Scan path] c:\windows\system32\drivers\usbstor.sys
      [Scan path] c:\windows\system32\drivers\usbuhci.sys
      [Scan path] c:\windows\system32\drivers\vga.sys
      [Scan path] c:\windows\system32\drivers\viaagp1.sys
      [Scan path] c:\windows\system32\drivers\viaide.sys
      [Scan path] c:\windows\system32\drivers\wanarp.sys
      [Scan path] c:\windows\system32\drivers\wdmaud.sys
      [Scan path] c:\windows\system32\drivers\wudfpf.sys
      [Scan path] c:\windows\system32\drivers\wudfrd.sys
      [Scan path] c:\windows\system32\dskquoui.dll
      [Scan path] c:\windows\system32\dsquery.dll
      [Scan path] c:\windows\system32\dssec.dll
      [Scan path] c:\windows\system32\dsuiext.dll
      [Scan path] c:\windows\system32\dumprep.exe
      [Scan path] c:\windows\system32\extmgr.dll
      [Scan path] c:\windows\system32\fontext.dll
      [Scan path] c:\windows\system32\gdi32.dll
      [Scan path] c:\windows\system32\hticons.dll
      [Scan path] c:\windows\system32\icmui.dll
      [Scan path] c:\windows\system32\ie4uinit.exe
      [Scan path] c:\windows\system32\iedkcs32.dll
      [Scan path] c:\windows\system32\ieframe.dll
      [Scan path] c:\windows\system32\ieudinit.exe
      [Scan path] c:\windows\system32\imagehlp.dll
      [Scan path] c:\windows\system32\imapi.exe
      [Scan path] c:\windows\system32\inetcomm.dll
      [Scan path] c:\windows\system32\itss.dll
      [Scan path] c:\windows\system32\kerberos.dll
      [Scan path] c:\windows\system32\kernel32.dll
      [Scan path] c:\windows\system32\localspl.dll
      [Scan path] c:\windows\system32\locator.exe
      [Scan path] c:\windows\system32\logonui.exe
      [Scan path] c:\windows\system32\lsass.exe
      [Scan path] c:\windows\system32\lz32.dll
      [Scan path] c:\windows\system32\mmcshext.dll
      [Scan path] c:\windows\system32\mmsys.cpl
      [Scan path] c:\windows\system32\mnmsrvc.exe
      [Scan path] c:\windows\system32\mscoree.dll
      [Scan path] c:\windows\system32\mscories.dll
      [Scan path] c:\windows\system32\msdtc.exe
      [Scan path] c:\windows\system32\mshtml.dll
      [Scan path] c:\windows\system32\msieftp.dll
      [Scan path] c:\windows\system32\msiexec.exe
      [Scan path] c:\windows\system32\mstask.dll
      [Scan path] c:\windows\system32\msv1_0.dll
      [Scan path] c:\windows\system32\msvidctl.dll
      [Scan path] c:\windows\system32\mswsock.dll
      [Scan path] c:\windows\system32\mydocs.dll
      [Scan path] c:\windows\system32\netdde.exe
      [Scan path] c:\windows\system32\netplwiz.dll
      [Scan path] c:\windows\system32\netshell.dll
      [Scan path] c:\windows\system32\ntlanui2.dll
      [Scan path] c:\windows\system32\ntsd.exe
      [Scan path] c:\windows\system32\ntshrui.dll
      [Scan path] c:\windows\system32\ntsim.sys
      [Scan path] c:\windows\system32\occache.dll
      [Scan path] c:\windows\system32\ole32.dll
      [Scan path] c:\windows\system32\oleaut32.dll
      [Scan path] c:\windows\system32\olecli32.dll
      [Scan path] c:\windows\system32\olecnv32.dll
      [Scan path] c:\windows\system32\olesvr32.dll
      [Scan path] c:\windows\system32\olethk32.dll
      [Scan path] c:\windows\system32\photowiz.dll
      [Scan path] c:\windows\system32\pjlmon.dll
      [Scan path] c:\windows\system32\printui.dll
      [Scan path] c:\windows\system32\regsvr32.exe
      [Scan path] c:\windows\system32\remotepg.dll
      [Scan path] c:\windows\system32\rpcrt4.dll
      [Scan path] c:\windows\system32\rpcss.dll
      [Scan path] c:\windows\system32\rshx32.dll
      [Scan path] c:\windows\system32\rsvp.exe
      [Scan path] c:\windows\system32\rsvpsp.dll
      [Scan path] c:\windows\system32\rundll32.exe
      [Scan path] c:\windows\system32\scardsvr.exe
      [Scan path] c:\windows\system32\scecli.dll
      [Scan path] c:\windows\system32\schannel.dll
      [Scan path] c:\windows\system32\sclgntfy.dll
      [Scan path] c:\windows\system32\sendmail.dll
      [Scan path] c:\windows\system32\services.exe
      [Scan path] c:\windows\system32\sessmgr.exe
      [Scan path] c:\windows\system32\shdocvw.dll
      [Scan path] c:\windows\system32\shell32.dll
      [Scan path] c:\windows\system32\shimgvw.dll
      [Scan path] c:\windows\system32\shmedia.dll
      [Scan path] c:\windows\system32\shmgrate.exe
      [Scan path] c:\windows\system32\shscrap.dll
      [Scan path] c:\windows\system32\slayerxp.dll
      [Scan path] c:\windows\system32\smlogsvc.exe
      [Scan path] c:\windows\system32\smss.exe
      [Scan path] c:\windows\system32\spoolsv.exe
      [Scan path] c:\windows\system32\stobject.dll
      [Scan path] c:\windows\system32\svchost.exe
      [Scan path] c:\windows\system32\syncui.dll
      [Scan path] c:\windows\system32\tcpmon.dll
      [Scan path] c:\windows\system32\themeui.dll
      [Scan path] c:\windows\system32\twext.dll
      [Scan path] c:\windows\system32\ups.exe
      [Scan path] c:\windows\system32\url.dll
      [Scan path] c:\windows\system32\urlmon.dll
      [Scan path] c:\windows\system32\usbmon.dll
      [Scan path] c:\windows\system32\user32.dll
      [Scan path] c:\windows\system32\userinit.exe
      [Scan path] c:\windows\system32\version.dll
      [Scan path] c:\windows\system32\vsdatant.sys
      [Scan path] c:\windows\system32\vssvc.exe
      [Scan path] c:\windows\system32\wbem\wmiapsrv.exe
      [Scan path] c:\windows\system32\wdigest.dll
      [Scan path] c:\windows\system32\webcheck.dll
      [Scan path] c:\windows\system32\wgalogon.dll
      [Scan path] c:\windows\system32\wiascr.dll
      [Scan path] c:\windows\system32\wiashext.dll
      [Scan path] c:\windows\system32\wininet.dll
      [Scan path] c:\windows\system32\winlogon.exe
      [Scan path] c:\windows\system32\wldap32.dll
      [Scan path] c:\windows\system32\wlnotify.dll
      [Scan path] c:\windows\system32\wmpshell.dll
      [Scan path] c:\windows\system32\wpdshext.dll
      [Scan path] c:\windows\system32\wpdshserviceobj.dll
      [Scan path] c:\windows\system32\wshext.dll
      [Scan path] c:\windows\system32\wuaucpl.cpl
      [Scan path] c:\windows\system32\zipfldr.dll
      [Scan path] c:\windows\system32\zonelabs\srescan.sys
      [Scan path] c:\windows\system32\zonelabs\vsmon.exe
      -----------------------------------------------------------------------------
      Scan statistics
      -----------------------------------------------------------------------------
      Objects scanned: 294
      Infected objects found: 0
      Objects with modifications found: 0
      Suspicious objects found: 0
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 0
      Objects ignored: 0
      Scan speed: 2715 Kb/s
      Scan time: 00:00:37
      -----------------------------------------------------------------------------

      [Scan path] C:\
      C:\Documents and Settings\LocalService\NTUSER.DAT - read error
      C:\Documents and Settings\LocalService\NTUSER~1.LOG - read error
      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - read error
      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\USRCLA~1.LOG - read error
      C:\Documents and Settings\Matti\ntuser.dat - read error
      C:\Documents and Settings\Matti\NTUSER~1.LOG - read error
      >C:\Documents and Settings\Matti\Application Data\Flag plan\vmwadevm.exe infected with Trojan.Swizzor - incurable - moved
      C:\Documents and Settings\Matti\Application Data\Mozilla\Firefox\Profiles\fr9r4uh0.default\PARENT~1.LOC - read error
      C:\Documents and Settings\Matti\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - read error
      C:\Documents and Settings\Matti\Local Settings\Application Data\Microsoft\Windows\USRCLA~1.LOG - read error
      C:\Documents and Settings\NetworkService\NTUSER.DAT - read error
      C:\Documents and Settings\NetworkService\NTUSER~1.LOG - read error
      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - read error
      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\USRCLA~1.LOG - read error
      >C:\Program Files\DivX\DivX Web Player\npdivx32.dll>C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll>C:\System Volume Information\_restore{F51C7859-7A19-47C0-9382-B3D4FF6F9E75}\RP213\A0101980.exe infected with Trojan.Swizzor - incurable - moved
      >C:\WINDOWS\Downloaded Program Files\fscax.dll probably infected with BINARYRES
      C:\WINDOWS\system32\CatRoot2\edb.log - read error
      C:\WINDOWS\system32\CatRoot2\tmp.edb - read error
      C:\WINDOWS\system32\config\default - read error
      C:\WINDOWS\system32\config\default.LOG - read error
      C:\WINDOWS\system32\config\SAM - read error
      C:\WINDOWS\system32\config\SAM.LOG - read error
      C:\WINDOWS\system32\config\SECURITY - read error
      C:\WINDOWS\system32\config\SECURITY.LOG - read error
      C:\WINDOWS\system32\config\software - read error
      C:\WINDOWS\system32\config\software.LOG - read error
      C:\WINDOWS\system32\config\system - read error
      C:\WINDOWS\system32\config\system.LOG - read error
      C:\WINDOWS\Temp\ZLT06a8d.TMP - read error
      C:\WINDOWS\Temp\ZLT06a90.TMP - read error

      -----------------------------------------------------------------------------
      Scan statistics
      -----------------------------------------------------------------------------
      Objects scanned: 118565
      Infected objects found: 2
      Objects with modifications found: 0
      Suspicious objects found: 1
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 2
      Objects ignored: 0
      Scan speed: 550 Kb/s
      Scan time: 01:40:44
      -----------------------------------------------------------------------------

      C:\WINDOWS\Downloaded Program Files\fscax.dll - incurable - moved

      =============================================================================
      Total session statistics
      =============================================================================
      Objects scanned: 118859
      Infected objects found: 2
      Objects with modifications found: 0
      Suspicious objects found: 1
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 3
      Objects ignored: 0
      Scan speed: 563 Kb/s
      Scan time: 01:41:21
      =============================================================================

      Äänestä

    • löys se jotakin paskaa kirjoitti:

      =============================================================================
      Dr.Web(R) Scanner for Windows v4.33.2 (4.33.2.10067)
      Copyright (c) Igor Daniloff, 1992-2006
      Log generated on: 2007-07-25, 18:50:09 [Matti]
      Command-line: "C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cureit.exe" /lng /ini:cureit_XP.ini
      Operating system:Windows XP Home Edition x86 (Build 2600), Service Pack 2
      =============================================================================
      Engine version: 4.33 (4.33.5.10110)
      Engine API version: 2.01
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwtoday.cdb - 898 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43397.cdb - 3389 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43396.cdb - 4255 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43395.cdb - 1566 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43394.cdb - 3970 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43393.cdb - 2628 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43392.cdb - 1869 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43391.cdb - 4089 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43390.cdb - 2323 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43389.cdb - 1300 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43388.cdb - 2421 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43387.cdb - 1529 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43386.cdb - 1303 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43385.cdb - 1396 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43384.cdb - 2530 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43383.cdb - 3927 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43382.cdb - 1811 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43381.cdb - 1262 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43380.cdb - 906 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43379.cdb - 1485 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43378.cdb - 2545 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43377.cdb - 1030 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43376.cdb - 1390 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43375.cdb - 1633 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43374.cdb - 2090 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43373.cdb - 1252 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43372.cdb - 1289 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43371.cdb - 2370 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43370.cdb - 2022 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43369.cdb - 687 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43368.cdb - 1099 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43367.cdb - 1834 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43366.cdb - 4015 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43365.cdb - 1342 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43364.cdb - 1335 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43363.cdb - 1152 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43362.cdb - 1006 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43361.cdb - 878 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43360.cdb - 988 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43359.cdb - 1205 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43358.cdb - 1139 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43357.cdb - 1302 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43356.cdb - 1332 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43355.cdb - 2456 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43354.cdb - 1283 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43353.cdb - 795 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43352.cdb - 2016 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43351.cdb - 941 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43350.cdb - 1020 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43349.cdb - 1008 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43348.cdb - 1096 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43347.cdb - 707 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43346.cdb - 1428 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43345.cdb - 1358 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43344.cdb - 694 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43343.cdb - 1186 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43342.cdb - 744 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43341.cdb - 841 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43340.cdb - 822 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43339.cdb - 1071 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43338.cdb - 989 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43337.cdb - 855 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43336.cdb - 1297 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43335.cdb - 1195 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43334.cdb - 900 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43333.cdb - 1381 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43332.cdb - 1340 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43331.cdb - 2735 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43330.cdb - 2078 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43329.cdb - 2490 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43328.cdb - 743 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43327.cdb - 958 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43326.cdb - 793 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43325.cdb - 713 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43324.cdb - 655 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43323.cdb - 655 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43322.cdb - 778 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43321.cdb - 846 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43320.cdb - 808 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43319.cdb - 764 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43318.cdb - 838 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43317.cdb - 363 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43316.cdb - 730 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43315.cdb - 627 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43314.cdb - 824 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43313.cdb - 842 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43312.cdb - 830 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43311.cdb - 862 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43310.cdb - 853 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43309.cdb - 733 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43308.cdb - 708 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43307.cdb - 839 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43306.cdb - 930 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43305.cdb - 759 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43304.cdb - 721 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43303.cdb - 638 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43302.cdb - 806 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43301.cdb - 504 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crw43300.cdb - 24 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwebase.cdb - 78674 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwrtoday.cdb - 50 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwr43302.cdb - 576 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwr43301.cdb - 697 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwrisky.cdb - 1271 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwntoday.cdb - 19 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43310.cdb - 764 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43309.cdb - 774 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43308.cdb - 838 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43307.cdb - 854 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43306.cdb - 781 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43305.cdb - 752 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43304.cdb - 793 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43303.cdb - 766 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43302.cdb - 850 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cwn43301.cdb - 772 virus records
      [Virus base] C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\crwnasty.cdb - 4867 virus records
      Total virus records: 229760
      Key file: C:\DOCUME~1\Matti\LOCALS~1\Temp\RarSFX0\cureit.key
      License key number: 0010092936
      Registered to: Dr.Web CureIt Project
      License key activates: 2007-02-05
      License key expires: 2010-02-11

      -----------------------------------------------------------------------------
      Scan statistics
      -----------------------------------------------------------------------------
      Objects scanned: 0
      Infected objects found: 0
      Objects with modifications found: 0
      Suspicious objects found: 0
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 0
      Objects ignored: 0
      Scan speed: 0 Kb/s
      Scan time: 00:00:00
      -----------------------------------------------------------------------------

      [Scan path] c:\documents and settings\all users\käynnistä-valikko\ohjelmat\käynnistys\desktop.ini
      [Scan path] c:\documents and settings\matti\käynnistä-valikko\ohjelmat\käynnistys\desktop.ini
      [Scan path] c:\documents and settings\matti\local settings\temp\rarsfx0\_start.exe
      [Scan path] c:\documents and settings\matti\local settings\temp\rarsfx0\cureit.exe
      [Scan path] c:\documents and settings\matti\työpöytä\drweb-cureit.exe
      [Scan path] c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
      [Scan path] c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
      [Scan path] c:\program files\adobe\acrobat 7.0\reader\adobeupdatemanager.exe
      [Scan path] c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
      [Scan path] c:\program files\antivir personaledition classic\avgnt.exe
      [Scan path] c:\program files\antivir personaledition classic\avguard.exe
      [Scan path] c:\program files\antivir personaledition classic\sched.exe
      [Scan path] c:\program files\antivir personaledition classic\shlext.dll
      [Scan path] c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe
      [Scan path] c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
      [Scan path] c:\program files\common files\sony shared\avlib\sptisrv.exe
      [Scan path] c:\program files\common files\system\ole db\oledb32.dll
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\avgas.exe
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\guard.exe
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\guard.sys
      [Scan path] c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll
      [Scan path] c:\program files\izarc\izarccm.dll
      [Scan path] c:\program files\messenger\msmsgs.exe
      [Scan path] c:\program files\mozilla firefox\firefox.exe
      [Scan path] c:\program files\msn messenger\fsshext.8.1.0178.00.dll
      [Scan path] c:\program files\msn messenger\msgrapp.8.1.0178.00.dll
      [Scan path] c:\program files\msn messenger\usnsvc.exe
      [Scan path] c:\program files\openoffice.org 2.0\program\quickstart.exe
      [Scan path] c:\program files\openoffice.org 2.0\program\shlxthdl.dll
      [Scan path] c:\program files\openoffice.org 2.0\program\soffice.bin
      [Scan path] c:\program files\openoffice.org 2.0\program\soffice.exe
      [Scan path] c:\program files\outlook express\setup50.exe
      [Scan path] c:\program files\outlook express\wabfind.dll
      [Scan path] c:\program files\quicktime\qttask.exe
      [Scan path] c:\program files\spybot - search & destroy\sdhelper.dll
      [Scan path] c:\program files\winamp\winampa.exe
      [Scan path] c:\program files\windows live toolbar\msntb.dll
      [Scan path] c:\program files\windows media player\wmpnetwk.exe
      [Scan path] c:\program files\windows media player\wmpnscfg.exe
      [Scan path] c:\program files\yahoo!\companion\installs\cpn\yt.dll
      [Scan path] c:\program files\zone labs\zonealarm\zlavscan.dll
      [Scan path] c:\program files\zone labs\zonealarm\zlclient.exe
      [Scan path] c:\windows\explorer.exe
      [Scan path] c:\windows\inf\unregmp2.exe
      [Scan path] c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe
      [Scan path] c:\windows\msagent\agentpsh.dll
      [Scan path] c:\windows\network diagnostic\xpnetdiag.exe
      [Scan path] c:\windows\system32\advapi32.dll
      [Scan path] c:\windows\system32\advpack.dll
      [Scan path] c:\windows\system32\alg.exe
      [Scan path] c:\windows\system32\appwiz.cpl
      [Scan path] c:\windows\system32\ati2evxx.dll
      [Scan path] c:\windows\system32\ati2evxx.exe
      [Scan path] c:\windows\system32\ati2sgag.exe
      [Scan path] c:\windows\system32\audiodev.dll
      [Scan path] c:\windows\system32\autochk.exe
      [Scan path] c:\windows\system32\browseui.dll
      [Scan path] c:\windows\system32\cabview.dll
      [Scan path] c:\windows\system32\cisvc.exe
      [Scan path] c:\windows\system32\clipsrv.exe
      [Scan path] c:\windows\system32\cnbjmon.dll
      [Scan path] c:\windows\system32\comdlg32.dll
      [Scan path] c:\windows\system32\crypt32.dll
      [Scan path] c:\windows\system32\cryptext.dll
      [Scan path] c:\windows\system32\cryptnet.dll
      [Scan path] c:\windows\system32\cscdll.dll
      [Scan path] c:\windows\system32\cscui.dll
      [Scan path] c:\windows\system32\csrss.exe
      [Scan path] c:\windows\system32\ctfmon.exe
      [Scan path] c:\windows\system32\deskadp.dll
      [Scan path] c:\windows\system32\deskmon.dll
      [Scan path] c:\windows\system32\deskperf.dll
      [Scan path] c:\windows\system32\dfsshlex.dll
      [Scan path] c:\windows\system32\diskcopy.dll
      [Scan path] c:\windows\system32\dllhost.exe
      [Scan path] c:\windows\system32\dmadmin.exe
      [Scan path] c:\windows\system32\docprop.dll
      [Scan path] c:\windows\system32\docprop2.dll
      [Scan path] c:\windows\system32\drivers\acpi.sys
      [Scan path] c:\windows\system32\drivers\aec.sys
      [Scan path] c:\windows\system32\drivers\afd.sys
      [Scan path] c:\windows\system32\drivers\alcxsens.sys
      [Scan path] c:\windows\system32\drivers\alcxwdm.sys
      [Scan path] c:\windows\system32\drivers\amdk7.sys
      [Scan path] c:\windows\system32\drivers\asyncmac.sys
      [Scan path] c:\windows\system32\drivers\atapi.sys
      [Scan path] c:\windows\system32\drivers\ati2mtag.sys
      [Scan path] c:\windows\system32\drivers\atmarpc.sys
      [Scan path] c:\windows\system32\drivers\audstub.sys
      [Scan path] c:\windows\system32\drivers\avgascln.sys
      [Scan path] c:\windows\system32\drivers\avgntdd.sys
      [Scan path] c:\windows\system32\drivers\avgntmgr.sys
      [Scan path] c:\windows\system32\drivers\cdrom.sys
      [Scan path] c:\windows\system32\drivers\cnxetp.sys
      [Scan path] c:\windows\system32\drivers\cnxetu.sys
      [Scan path] c:\windows\system32\drivers\cnxtgn.sys
      [Scan path] c:\windows\system32\drivers\disk.sys
      [Scan path] c:\windows\system32\drivers\dmboot.sys
      [Scan path] c:\windows\system32\drivers\dmio.sys
      [Scan path] c:\windows\system32\drivers\dmload.sys
      [Scan path] c:\windows\system32\drivers\dmusic.sys
      [Scan path] c:\windows\system32\drivers\drmkaud.sys
      [Scan path] c:\windows\system32\drivers\fdc.sys
      [Scan path] c:\windows\system32\drivers\fetnd5.sys
      [Scan path] c:\windows\system32\drivers\fetnd5b.sys
      [Scan path] c:\windows\system32\drivers\flpydisk.sys
      [Scan path] c:\windows\system32\drivers\fltmgr.sys
      [Scan path] c:\windows\system32\drivers\ftdisk.sys
      [Scan path] c:\windows\system32\drivers\gameenum.sys
      [Scan path] c:\windows\system32\drivers\http.sys
      [Scan path] c:\windows\system32\drivers\i8042prt.sys
      [Scan path] c:\windows\system32\drivers\imapi.sys
      [Scan path] c:\windows\system32\drivers\ip6fw.sys
      [Scan path] c:\windows\system32\drivers\ipfltdrv.sys
      [Scan path] c:\windows\system32\drivers\ipinip.sys
      [Scan path] c:\windows\system32\drivers\ipnat.sys
      [Scan path] c:\windows\system32\drivers\ipsec.sys
      [Scan path] c:\windows\system32\drivers\irenum.sys
      [Scan path] c:\windows\system32\drivers\isapnp.sys
      [Scan path] c:\windows\system32\drivers\kbdclass.sys
      [Scan path] c:\windows\system32\drivers\kmixer.sys
      [Scan path] c:\windows\system32\drivers\mouclass.sys
      [Scan path] c:\windows\system32\drivers\mrxdav.sys
      [Scan path] c:\windows\system32\drivers\mrxsmb.sys
      [Scan path] c:\windows\system32\drivers\msgpc.sys
      [Scan path] c:\windows\system32\drivers\mskssrv.sys
      [Scan path] c:\windows\system32\drivers\mspclock.sys
      [Scan path] c:\windows\system32\drivers\mspqm.sys
      [Scan path] c:\windows\system32\drivers\mssmbios.sys
      [Scan path] c:\windows\system32\drivers\ndistapi.sys
      [Scan path] c:\windows\system32\drivers\ndisuio.sys
      [Scan path] c:\windows\system32\drivers\ndiswan.sys
      [Scan path] c:\windows\system32\drivers\netbios.sys
      [Scan path] c:\windows\system32\drivers\netbt.sys
      [Scan path] c:\windows\system32\drivers\nwlnkflt.sys
      [Scan path] c:\windows\system32\drivers\nwlnkfwd.sys
      [Scan path] c:\windows\system32\drivers\parport.sys
      [Scan path] c:\windows\system32\drivers\pci.sys
      [Scan path] c:\windows\system32\drivers\pfc.sys
      [Scan path] c:\windows\system32\drivers\psched.sys
      [Scan path] c:\windows\system32\drivers\ptilink.sys
      [Scan path] c:\windows\system32\drivers\pxhelp20.sys
      [Scan path] c:\windows\system32\drivers\rasacd.sys
      [Scan path] c:\windows\system32\drivers\rasl2tp.sys
      [Scan path] c:\windows\system32\drivers\raspppoe.sys
      [Scan path] c:\windows\system32\drivers\raspptp.sys
      [Scan path] c:\windows\system32\drivers\raspti.sys
      [Scan path] c:\windows\system32\drivers\rdbss.sys
      [Scan path] c:\windows\system32\drivers\rdpcdd.sys
      [Scan path] c:\windows\system32\drivers\redbook.sys
      [Scan path] c:\windows\system32\drivers\scsiport.sys
      [Scan path] c:\windows\system32\drivers\secdrv.sys
      [Scan path] c:\windows\system32\drivers\serenum.sys
      [Scan path] c:\windows\system32\drivers\serial.sys
      [Scan path] c:\windows\system32\drivers\splitter.sys
      [Scan path] c:\windows\system32\drivers\sr.sys
      [Scan path] c:\windows\system32\drivers\srv.sys
      [Scan path] c:\windows\system32\drivers\sshdrv65.sys
      [Scan path] c:\windows\system32\drivers\sshdrv79.sys
      [Scan path] c:\windows\system32\drivers\sshdrv85.sys
      [Scan path] c:\windows\system32\drivers\swenum.sys
      [Scan path] c:\windows\system32\drivers\swmidi.sys
      [Scan path] c:\windows\system32\drivers\sysaudio.sys
      [Scan path] c:\windows\system32\drivers\tcpip.sys
      [Scan path] c:\windows\system32\drivers\termdd.sys
      [Scan path] c:\windows\system32\drivers\update.sys
      [Scan path] c:\windows\system32\drivers\usbehci.sys
      [Scan path] c:\windows\system32\drivers\usbhub.sys
      [Scan path] c:\windows\system32\drivers\usbscan.sys
      [Scan path] c:\windows\system32\drivers\usbstor.sys
      [Scan path] c:\windows\system32\drivers\usbuhci.sys
      [Scan path] c:\windows\system32\drivers\vga.sys
      [Scan path] c:\windows\system32\drivers\viaagp1.sys
      [Scan path] c:\windows\system32\drivers\viaide.sys
      [Scan path] c:\windows\system32\drivers\wanarp.sys
      [Scan path] c:\windows\system32\drivers\wdmaud.sys
      [Scan path] c:\windows\system32\drivers\wudfpf.sys
      [Scan path] c:\windows\system32\drivers\wudfrd.sys
      [Scan path] c:\windows\system32\dskquoui.dll
      [Scan path] c:\windows\system32\dsquery.dll
      [Scan path] c:\windows\system32\dssec.dll
      [Scan path] c:\windows\system32\dsuiext.dll
      [Scan path] c:\windows\system32\dumprep.exe
      [Scan path] c:\windows\system32\extmgr.dll
      [Scan path] c:\windows\system32\fontext.dll
      [Scan path] c:\windows\system32\gdi32.dll
      [Scan path] c:\windows\system32\hticons.dll
      [Scan path] c:\windows\system32\icmui.dll
      [Scan path] c:\windows\system32\ie4uinit.exe
      [Scan path] c:\windows\system32\iedkcs32.dll
      [Scan path] c:\windows\system32\ieframe.dll
      [Scan path] c:\windows\system32\ieudinit.exe
      [Scan path] c:\windows\system32\imagehlp.dll
      [Scan path] c:\windows\system32\imapi.exe
      [Scan path] c:\windows\system32\inetcomm.dll
      [Scan path] c:\windows\system32\itss.dll
      [Scan path] c:\windows\system32\kerberos.dll
      [Scan path] c:\windows\system32\kernel32.dll
      [Scan path] c:\windows\system32\localspl.dll
      [Scan path] c:\windows\system32\locator.exe
      [Scan path] c:\windows\system32\logonui.exe
      [Scan path] c:\windows\system32\lsass.exe
      [Scan path] c:\windows\system32\lz32.dll
      [Scan path] c:\windows\system32\mmcshext.dll
      [Scan path] c:\windows\system32\mmsys.cpl
      [Scan path] c:\windows\system32\mnmsrvc.exe
      [Scan path] c:\windows\system32\mscoree.dll
      [Scan path] c:\windows\system32\mscories.dll
      [Scan path] c:\windows\system32\msdtc.exe
      [Scan path] c:\windows\system32\mshtml.dll
      [Scan path] c:\windows\system32\msieftp.dll
      [Scan path] c:\windows\system32\msiexec.exe
      [Scan path] c:\windows\system32\mstask.dll
      [Scan path] c:\windows\system32\msv1_0.dll
      [Scan path] c:\windows\system32\msvidctl.dll
      [Scan path] c:\windows\system32\mswsock.dll
      [Scan path] c:\windows\system32\mydocs.dll
      [Scan path] c:\windows\system32\netdde.exe
      [Scan path] c:\windows\system32\netplwiz.dll
      [Scan path] c:\windows\system32\netshell.dll
      [Scan path] c:\windows\system32\ntlanui2.dll
      [Scan path] c:\windows\system32\ntsd.exe
      [Scan path] c:\windows\system32\ntshrui.dll
      [Scan path] c:\windows\system32\ntsim.sys
      [Scan path] c:\windows\system32\occache.dll
      [Scan path] c:\windows\system32\ole32.dll
      [Scan path] c:\windows\system32\oleaut32.dll
      [Scan path] c:\windows\system32\olecli32.dll
      [Scan path] c:\windows\system32\olecnv32.dll
      [Scan path] c:\windows\system32\olesvr32.dll
      [Scan path] c:\windows\system32\olethk32.dll
      [Scan path] c:\windows\system32\photowiz.dll
      [Scan path] c:\windows\system32\pjlmon.dll
      [Scan path] c:\windows\system32\printui.dll
      [Scan path] c:\windows\system32\regsvr32.exe
      [Scan path] c:\windows\system32\remotepg.dll
      [Scan path] c:\windows\system32\rpcrt4.dll
      [Scan path] c:\windows\system32\rpcss.dll
      [Scan path] c:\windows\system32\rshx32.dll
      [Scan path] c:\windows\system32\rsvp.exe
      [Scan path] c:\windows\system32\rsvpsp.dll
      [Scan path] c:\windows\system32\rundll32.exe
      [Scan path] c:\windows\system32\scardsvr.exe
      [Scan path] c:\windows\system32\scecli.dll
      [Scan path] c:\windows\system32\schannel.dll
      [Scan path] c:\windows\system32\sclgntfy.dll
      [Scan path] c:\windows\system32\sendmail.dll
      [Scan path] c:\windows\system32\services.exe
      [Scan path] c:\windows\system32\sessmgr.exe
      [Scan path] c:\windows\system32\shdocvw.dll
      [Scan path] c:\windows\system32\shell32.dll
      [Scan path] c:\windows\system32\shimgvw.dll
      [Scan path] c:\windows\system32\shmedia.dll
      [Scan path] c:\windows\system32\shmgrate.exe
      [Scan path] c:\windows\system32\shscrap.dll
      [Scan path] c:\windows\system32\slayerxp.dll
      [Scan path] c:\windows\system32\smlogsvc.exe
      [Scan path] c:\windows\system32\smss.exe
      [Scan path] c:\windows\system32\spoolsv.exe
      [Scan path] c:\windows\system32\stobject.dll
      [Scan path] c:\windows\system32\svchost.exe
      [Scan path] c:\windows\system32\syncui.dll
      [Scan path] c:\windows\system32\tcpmon.dll
      [Scan path] c:\windows\system32\themeui.dll
      [Scan path] c:\windows\system32\twext.dll
      [Scan path] c:\windows\system32\ups.exe
      [Scan path] c:\windows\system32\url.dll
      [Scan path] c:\windows\system32\urlmon.dll
      [Scan path] c:\windows\system32\usbmon.dll
      [Scan path] c:\windows\system32\user32.dll
      [Scan path] c:\windows\system32\userinit.exe
      [Scan path] c:\windows\system32\version.dll
      [Scan path] c:\windows\system32\vsdatant.sys
      [Scan path] c:\windows\system32\vssvc.exe
      [Scan path] c:\windows\system32\wbem\wmiapsrv.exe
      [Scan path] c:\windows\system32\wdigest.dll
      [Scan path] c:\windows\system32\webcheck.dll
      [Scan path] c:\windows\system32\wgalogon.dll
      [Scan path] c:\windows\system32\wiascr.dll
      [Scan path] c:\windows\system32\wiashext.dll
      [Scan path] c:\windows\system32\wininet.dll
      [Scan path] c:\windows\system32\winlogon.exe
      [Scan path] c:\windows\system32\wldap32.dll
      [Scan path] c:\windows\system32\wlnotify.dll
      [Scan path] c:\windows\system32\wmpshell.dll
      [Scan path] c:\windows\system32\wpdshext.dll
      [Scan path] c:\windows\system32\wpdshserviceobj.dll
      [Scan path] c:\windows\system32\wshext.dll
      [Scan path] c:\windows\system32\wuaucpl.cpl
      [Scan path] c:\windows\system32\zipfldr.dll
      [Scan path] c:\windows\system32\zonelabs\srescan.sys
      [Scan path] c:\windows\system32\zonelabs\vsmon.exe
      -----------------------------------------------------------------------------
      Scan statistics
      -----------------------------------------------------------------------------
      Objects scanned: 294
      Infected objects found: 0
      Objects with modifications found: 0
      Suspicious objects found: 0
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 0
      Objects ignored: 0
      Scan speed: 2715 Kb/s
      Scan time: 00:00:37
      -----------------------------------------------------------------------------

      [Scan path] C:\
      C:\Documents and Settings\LocalService\NTUSER.DAT - read error
      C:\Documents and Settings\LocalService\NTUSER~1.LOG - read error
      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - read error
      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\USRCLA~1.LOG - read error
      C:\Documents and Settings\Matti\ntuser.dat - read error
      C:\Documents and Settings\Matti\NTUSER~1.LOG - read error
      >C:\Documents and Settings\Matti\Application Data\Flag plan\vmwadevm.exe infected with Trojan.Swizzor - incurable - moved
      C:\Documents and Settings\Matti\Application Data\Mozilla\Firefox\Profiles\fr9r4uh0.default\PARENT~1.LOC - read error
      C:\Documents and Settings\Matti\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - read error
      C:\Documents and Settings\Matti\Local Settings\Application Data\Microsoft\Windows\USRCLA~1.LOG - read error
      C:\Documents and Settings\NetworkService\NTUSER.DAT - read error
      C:\Documents and Settings\NetworkService\NTUSER~1.LOG - read error
      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - read error
      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\USRCLA~1.LOG - read error
      >C:\Program Files\DivX\DivX Web Player\npdivx32.dll>C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll>C:\System Volume Information\_restore{F51C7859-7A19-47C0-9382-B3D4FF6F9E75}\RP213\A0101980.exe infected with Trojan.Swizzor - incurable - moved
      >C:\WINDOWS\Downloaded Program Files\fscax.dll probably infected with BINARYRES
      C:\WINDOWS\system32\CatRoot2\edb.log - read error
      C:\WINDOWS\system32\CatRoot2\tmp.edb - read error
      C:\WINDOWS\system32\config\default - read error
      C:\WINDOWS\system32\config\default.LOG - read error
      C:\WINDOWS\system32\config\SAM - read error
      C:\WINDOWS\system32\config\SAM.LOG - read error
      C:\WINDOWS\system32\config\SECURITY - read error
      C:\WINDOWS\system32\config\SECURITY.LOG - read error
      C:\WINDOWS\system32\config\software - read error
      C:\WINDOWS\system32\config\software.LOG - read error
      C:\WINDOWS\system32\config\system - read error
      C:\WINDOWS\system32\config\system.LOG - read error
      C:\WINDOWS\Temp\ZLT06a8d.TMP - read error
      C:\WINDOWS\Temp\ZLT06a90.TMP - read error

      -----------------------------------------------------------------------------
      Scan statistics
      -----------------------------------------------------------------------------
      Objects scanned: 118565
      Infected objects found: 2
      Objects with modifications found: 0
      Suspicious objects found: 1
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 2
      Objects ignored: 0
      Scan speed: 550 Kb/s
      Scan time: 01:40:44
      -----------------------------------------------------------------------------

      C:\WINDOWS\Downloaded Program Files\fscax.dll - incurable - moved

      =============================================================================
      Total session statistics
      =============================================================================
      Objects scanned: 118859
      Infected objects found: 2
      Objects with modifications found: 0
      Suspicious objects found: 1
      Adware programs found: 0
      Dialer programs found: 0
      Joke programs found: 0
      Riskware programs found: 0
      Hacktool programs found: 0
      Objects cured: 0
      Objects deleted: 0
      Objects renamed: 0
      Objects moved: 3
      Objects ignored: 0
      Scan speed: 563 Kb/s
      Scan time: 01:41:21
      =============================================================================

      1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla
      2. Valitse ominaisuudet
      3. Valitse järjestelmän palauttaminen välilehti
      4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa
      5. Paina Käytä
      6. Paina ok
      7. Sammuta ja käynnistä
      8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa
      9. Käytä ja OK

      ===========

      eikä muuta

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    näyttää oudolta minusta täm... kirjoitti:

    Logfile of HijackThis v1.99.1
    Scan saved at 14:21:09, on 24.7.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Skanneri.exe.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?linkid=677
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37570.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu