Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Vakoiluohjelmia ja viruksia

    Eli oon täs 4 päivää taistellu virusten ja vakoiluohjelmien kanssa ja nyt sain ilmeisesti koneen siivottua kun ei f-secure enää mitään löytänyt.. Vanhassa f-securessa ei ollut vakoiluohjelmien scannausta ollenkaan ja hommasin uudemman niin alkasi löytymään. Nyt kone valittaa että puuttuu tälläinen tiedosto C:\windows\system32\ofatippb.dll.. Oon parilta kaverilta kysynyt tuosta tiedostosta niin ei niiltäkään tuota löydy. Virheilmo tulee aina kun koneen käynnistää. Missä vika??
    472225
    Äänestä

    Muut lukivat myös

    Vastaukset 47

    Vanhimmat

    se valittaa sen puuttumista?

    Äänestä

    • kirjautunut sisään windowsiin ja lataa windowsia...

      Äänestä

    sellaista vikaa että kun laittaa googleen jotain hakuun ja painaa sieltä jotain linkkiä niin menee yleensä pornosivuille:) Ei auta vaikka tyhjentää evästeet,sivuhistoriat ym.. Sama vika myös jos kirjautuu toisilla tunnuksilla (VIERAS) windowsiin.. Alkaa jo pikku hiljaa kypsyttämään..

    Äänestä

    sellaista vikaa että kun laittaa googleen jotain hakuun ja painaa sieltä jotain linkkiä niin menee yleensä pornosivuille:) Ei auta vaikka tyhjentää evästeet,sivuhistoriat ym.. Sama vika myös jos kirjautuu toisilla tunnuksilla (VIERAS) windowsiin.. Alkaa jo pikku hiljaa kypsyttämään..

    Äänestä

    • nimestä päätellen oli yksi niistä haittaohjelmatiedostoista ja f-secure on sen dceletoinut tai nimennyt uudelleen.
      Rekisteriin on jäänyt viittaus tuon lataamisesta ja virheilmo tulee, kun ei sitä enää löydykkään.

      Voit koettaa windowsin haulla löytää laittamalla nimen ofatippb.0ll
      siis tuossa lopussa on .nolla ällä ällä
      Jos löytää, senkin voi poistaa.
      Parempi olis laittaa tuo Hijackthisin logi.

      Äänestä

    • Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 4:35:29, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323

      Äänestä

    • tämää kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 4:35:29, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323

      spybot löytää selaisen haittaohjelman kun ZLOB.DNSChanger.rtk, mutta ei saa poistettua sitä:( Millä ton sais pois?

      Äänestä

    • tämää kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 4:35:29, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323

      Poista Avast, vain yksi reaaliaikainen virustorjunta päällä kerralla.

      sammuta S&D Tea Timer, ohjeet: http://aaxxeell.googlepages.com/spybot-timer


      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään. Laita raportti tästä.


      Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.
      http://downloads.andymanchesta.com/RemovalTools/SDFix.zip

      Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi: Käynnistä tietokone
      Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
      Seuraavaksi pitäisi ilmestyä valikko
      Valitse valikosta vikasietotila.

      Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix.exe) työpöydälle. Tuplakilikkaa työpöydälle ilmestynyttä sdfix.exe tiedostoa. Tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM C:\SDFix
      - Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
      -Paina Y käynnistääksesi skriptin.
      - Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
      -Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
      - Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
      - Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
      - Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
      - Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.

      Äänestä

    • .......... kirjoitti:

      Poista Avast, vain yksi reaaliaikainen virustorjunta päällä kerralla.

      sammuta S&D Tea Timer, ohjeet: http://aaxxeell.googlepages.com/spybot-timer


      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään. Laita raportti tästä.


      Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.
      http://downloads.andymanchesta.com/RemovalTools/SDFix.zip

      Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi: Käynnistä tietokone
      Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
      Seuraavaksi pitäisi ilmestyä valikko
      Valitse valikosta vikasietotila.

      Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix.exe) työpöydälle. Tuplakilikkaa työpöydälle ilmestynyttä sdfix.exe tiedostoa. Tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM C:\SDFix
      - Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
      -Paina Y käynnistääksesi skriptin.
      - Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
      -Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
      - Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
      - Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
      - Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
      - Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.

      Lataa VundoFix.exe työpöydällesi. http://www.atribune.org/ccount/click.php?id=4
      [*]Tupla-klikkaa VundoFix.exe ajaaksesi sen.
      [*]Klikkaa Scan for Vundo valintaa.
      [*]Kun skannaus on valmis, klikkaa Remove Vundo valintaa.
      [*]Sinulta kysytään haluatko poistaa filut - klikkaa YES.
      [*]Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
      [*]Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK.
      [*]Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö.

      Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
      Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä

      Äänestä

    • tämää kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 4:35:29, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323

      hjt:llä merkkaa paina Fix checked

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: (no name) - {2C72FD5C-A1C9-4569-85F8-99125945C8A7} - (no file)
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {CB064430-E465-43B1-A33C-1D8E0B55591A} - (no file)
      O2 - BHO: (no name) - {FAB1D23F-AC75-4122-BA2D-0736D7DEC771} - (no file)
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O20 - Winlogon Notify: rqrpmjj - rqrpmjj.dll (file missing)
      O22 - SharedTaskScheduler: ficklety - {e31f5c72-8e0d-4921-8375-9573746c170c} - (no file)

      =================

      Kumpaas virus ohjelmaa haluat käyttää avasti vai F-securee

      ===============

      Kun kaikki operaatiot olet tehnyt scannaa uusi hjt loki

      ============

      Äänestä

    • tämää kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 4:35:29, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323

      Lataa SmitfraudFix (c) S!Ri http://siri.urz.free.fr/Fix/SmitfraudFix.zip
      Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:

      Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
      Valitse optio #1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
      Postita tämän tekstitiedoston sisältö viestiketjuusi.

      Huomaa : process.exe filun tunnistaa jotkut Anti-virus ohjelmat (AntiVir, Dr.Web, Kaspersky) "Haittakaluna"; se ei ole virus, vaan ohjelma joka pysäyttää prosesseja. A/V ohjelmat eivät pysty tunnistamaan hyvän ja pahan käytön tälläisten ohjelmian väliltä, silloin ne saattavat varoittaa käyttäjää.

      Äänestä

    • .......... kirjoitti:

      Poista Avast, vain yksi reaaliaikainen virustorjunta päällä kerralla.

      sammuta S&D Tea Timer, ohjeet: http://aaxxeell.googlepages.com/spybot-timer


      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään. Laita raportti tästä.


      Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.
      http://downloads.andymanchesta.com/RemovalTools/SDFix.zip

      Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi: Käynnistä tietokone
      Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
      Seuraavaksi pitäisi ilmestyä valikko
      Valitse valikosta vikasietotila.

      Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix.exe) työpöydälle. Tuplakilikkaa työpöydälle ilmestynyttä sdfix.exe tiedostoa. Tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM C:\SDFix
      - Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
      -Paina Y käynnistääksesi skriptin.
      - Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
      -Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
      - Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
      - Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
      - Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
      - Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.

      raportti

      Username "ARI-MATTI" - 07.01.2008 16:18:48 [Fixwareout edited 9/01/2007]

      ~~~~~ Prerun check
      HKLM\SOFTWARE\~\Winlogon\ "System"="kdbmc.exe"

      DNS-tulkintatoiminnon välimuistin tyhjentäminen onnistui.


      System was rebooted successfully.

      ~~~~~ Postrun check
      HKLM\SOFTWARE\~\Winlogon\ "system"=""
      ....
      ....
      ~~~~~ Misc files.
      ....
      ~~~~~ Checking for older varients.
      ....
      ~~~~~ Other
      C:\WINDOWS\Temp\kdbmc.ren 76828 13.06.2007

      ~~~~~ Current runs (hklm hkcu "run" Keys Only)
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_03\\bin\\jusched.exe\""
      "hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
      "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
      "nwiz"="nwiz.exe /installquiet /keeploaded /nodetect"
      "AGRSMMSG"="AGRSMMSG.exe"
      "HPHUPD06"="c:\\Program Files\\HP\\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\\hphupd06.exe"
      "HPHmon06"="C:\\WINDOWS\\system32\\hphmon06.exe"
      "KBD"="C:\\HP\\KBD\\KBD.EXE"
      "Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
      "PS2"="C:\\WINDOWS\\system32\\ps2.exe"
      "AlcxMonitor"="ALCXMNTR.EXE"
      "LSBWatcher"="c:\\hp\\drivers\\hplsbwatcher\\lsburnwatcher.exe"
      "WinampAgent"="D:\\Winamp\\winampa.exe"
      "F-Secure Manager"="\"C:\\Program Files\\F-Secure\\Common\\FSM32.EXE\" /splash"
      "F-Secure TNB"="\"C:\\Program Files\\F-Secure\\FSGUI\\TNBUtil.exe\" /CHECKALL /WAITFORSW"
      "DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1033"
      "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
      "QuickTime Task"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime"
      "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
      "PCSuiteTrayApplication"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\LaunchApplication.exe -startup"
      "c0556397"="rundll32.exe \"C:\\WINDOWS\\system32\\ofatippb.dll\",b"

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
      "H/PC Connection Agent"="\"C:\\Program Files\\Microsoft ActiveSync\\Wcescomm.exe\""
      ....
      Hosts file was reset, If you use a custom hosts file please replace it...
      ~~~~~ End report ~~~~~

      Äänestä

    • .......... kirjoitti:

      Poista Avast, vain yksi reaaliaikainen virustorjunta päällä kerralla.

      sammuta S&D Tea Timer, ohjeet: http://aaxxeell.googlepages.com/spybot-timer


      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään. Laita raportti tästä.


      Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.
      http://downloads.andymanchesta.com/RemovalTools/SDFix.zip

      Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi: Käynnistä tietokone
      Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
      Seuraavaksi pitäisi ilmestyä valikko
      Valitse valikosta vikasietotila.

      Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix.exe) työpöydälle. Tuplakilikkaa työpöydälle ilmestynyttä sdfix.exe tiedostoa. Tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM C:\SDFix
      - Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
      -Paina Y käynnistääksesi skriptin.
      - Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
      -Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
      - Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
      - Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
      - Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
      - Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.

      SDFix: Version 1.124

      Run by ARI-MATTI on ma 07.01.2008 at 16:40

      Microsoft Windows XP [versio 5.1.2600]

      Running From: C:\DOCUME~1\ARI-MA~1\TYPYT~1\SDFix

      Safe Mode:
      Checking Services:


      Restoring Windows Registry Values
      Restoring Windows Default Hosts File

      Rebooting...


      Normal Mode:
      Checking Files:

      No Trojan Files Found




      Folder C:\Program Files\Helper - Removed

      Removing Temp Files...

      ADS Check:

      C:\WINDOWS
      No streams found.

      C:\WINDOWS\system32
      No streams found.

      C:\WINDOWS\system32\svchost.exe
      No streams found.

      C:\WINDOWS\system32\ntoskrnl.exe
      No streams found.



      Final Check:

      catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-01-07 16:49:36
      Windows 5.1.2600 Service Pack 2 NTFS

      scanning hidden processes ...

      scanning hidden services & system hive ...

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,a9,f8,22,fe,ab,16,b6,50,7e,e1,e6,9d,f7,..
      "hj34z0"=hex:ee,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,89,..
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf41]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,42,5a,33,61,ab,16,b6,50,7e,e1,e6,9d,f7,..
      "hj34z0"=hex:ee,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,43,..
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf42]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,8f,dc,74,6f,ab,16,b6,50,6a,e1,e6,9d,f7,..
      "hj34z0"=hex:fa,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,7c,..
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf43]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,36,46,38,da,ab,16,b6,50,6a,e1,e6,9d,f7,..
      "hj34z0"=hex:fa,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,93,..

      scanning hidden registry entries ...

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x90\x2022\x20ac|\xff\xff\xff\xff"\x2022\x20ac|\xfe\xbb\xd3w\2]
      "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"

      scanning hidden files ...

      scan completed successfully
      hidden processes: 0
      hidden services: 0
      hidden files: 0


      Remaining Services:
      ------------------



      Authorized Application Key Export:

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
      "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\\Pelit\\MOHAA\\MOHAA.exe"="C:\\Pelit\\MOHAA\\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
      "C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe"="C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"
      "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
      "C:\\Documents and Settings\\ARI-MATTI\\Ty”p”yt„\\utorrent.exe"="C:\\Documents and Settings\\ARI-MATTI\\Ty”p”yt„\\utorrent.exe:*:Enabled:æTorrent"
      "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
      "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "D:\\DC++\\DCPlusPlus.exe"="D:\\DC++\\DCPlusPlus.exe:*:Enabled:DC++"
      "C:\\Program Files\\RevConnect\\DCPlusPlus.exe"="C:\\Program Files\\RevConnect\\DCPlusPlus.exe:*:Enabled:DC++"
      "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
      "C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
      "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
      "C:\\Documents and Settings\\ARSKA\\Ty”p”yt„\\utorrent.exe"="C:\\Documents and Settings\\ARSKA\\Ty”p”yt„\\utorrent.exe:*:Enabled:æTorrent"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
      "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"
      "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
      "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

      Remaining Files:
      ---------------


      Files with Hidden Attributes:

      Tue 12 Jul 2005 213 A.SHR --- "C:\BOOT.BAK"
      Mon 17 Oct 2005 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
      Tue 19 Jul 2005 56 A..H. --- "C:\WINDOWS\system32\5F9E165367.sys"
      Tue 1 Jan 2008 6,519 ..SH. --- "C:\WINDOWS\system32\dcbeg.bak1"
      Wed 2 Jan 2008 124,522 ..SH. --- "C:\WINDOWS\system32\dcbeg.bak2"
      Thu 3 Jan 2008 6,519 ..SH. --- "C:\WINDOWS\system32\hgjlm.bak1"
      Sun 6 Jan 2008 127,804 ..SH. --- "C:\WINDOWS\system32\hgjlm.bak2"
      Thu 3 Jan 2008 124,433 ..SH. --- "C:\WINDOWS\system32\klkkj.bak1"
      Wed 2 Jan 2008 6,519 ..SH. --- "C:\WINDOWS\system32\svvwa.bak1"

      Finished!

      Äänestä

    • reportti kirjoitti:

      SDFix: Version 1.124

      Run by ARI-MATTI on ma 07.01.2008 at 16:40

      Microsoft Windows XP [versio 5.1.2600]

      Running From: C:\DOCUME~1\ARI-MA~1\TYPYT~1\SDFix

      Safe Mode:
      Checking Services:


      Restoring Windows Registry Values
      Restoring Windows Default Hosts File

      Rebooting...


      Normal Mode:
      Checking Files:

      No Trojan Files Found




      Folder C:\Program Files\Helper - Removed

      Removing Temp Files...

      ADS Check:

      C:\WINDOWS
      No streams found.

      C:\WINDOWS\system32
      No streams found.

      C:\WINDOWS\system32\svchost.exe
      No streams found.

      C:\WINDOWS\system32\ntoskrnl.exe
      No streams found.



      Final Check:

      catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-01-07 16:49:36
      Windows 5.1.2600 Service Pack 2 NTFS

      scanning hidden processes ...

      scanning hidden services & system hive ...

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,a9,f8,22,fe,ab,16,b6,50,7e,e1,e6,9d,f7,..
      "hj34z0"=hex:ee,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,89,..
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf41]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,42,5a,33,61,ab,16,b6,50,7e,e1,e6,9d,f7,..
      "hj34z0"=hex:ee,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,43,..
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf42]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,8f,dc,74,6f,ab,16,b6,50,6a,e1,e6,9d,f7,..
      "hj34z0"=hex:fa,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,7c,..
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf43]
      "khjeh"=hex:20,02,00,00,07,9c,c9,df,36,46,38,da,ab,16,b6,50,6a,e1,e6,9d,f7,..
      "hj34z0"=hex:fa,19,bd,4f,14,4a,a0,24,22,bd,f1,e9,63,70,38,99,11,d9,61,ba,93,..

      scanning hidden registry entries ...

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x90\x2022\x20ac|\xff\xff\xff\xff"\x2022\x20ac|\xfe\xbb\xd3w\2]
      "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"

      scanning hidden files ...

      scan completed successfully
      hidden processes: 0
      hidden services: 0
      hidden files: 0


      Remaining Services:
      ------------------



      Authorized Application Key Export:

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
      "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\\Pelit\\MOHAA\\MOHAA.exe"="C:\\Pelit\\MOHAA\\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
      "C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe"="C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"
      "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
      "C:\\Documents and Settings\\ARI-MATTI\\Ty”p”yt„\\utorrent.exe"="C:\\Documents and Settings\\ARI-MATTI\\Ty”p”yt„\\utorrent.exe:*:Enabled:æTorrent"
      "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
      "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "D:\\DC++\\DCPlusPlus.exe"="D:\\DC++\\DCPlusPlus.exe:*:Enabled:DC++"
      "C:\\Program Files\\RevConnect\\DCPlusPlus.exe"="C:\\Program Files\\RevConnect\\DCPlusPlus.exe:*:Enabled:DC++"
      "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
      "C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
      "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
      "C:\\Documents and Settings\\ARSKA\\Ty”p”yt„\\utorrent.exe"="C:\\Documents and Settings\\ARSKA\\Ty”p”yt„\\utorrent.exe:*:Enabled:æTorrent"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
      "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"
      "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
      "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
      "C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

      Remaining Files:
      ---------------


      Files with Hidden Attributes:

      Tue 12 Jul 2005 213 A.SHR --- "C:\BOOT.BAK"
      Mon 17 Oct 2005 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
      Tue 19 Jul 2005 56 A..H. --- "C:\WINDOWS\system32\5F9E165367.sys"
      Tue 1 Jan 2008 6,519 ..SH. --- "C:\WINDOWS\system32\dcbeg.bak1"
      Wed 2 Jan 2008 124,522 ..SH. --- "C:\WINDOWS\system32\dcbeg.bak2"
      Thu 3 Jan 2008 6,519 ..SH. --- "C:\WINDOWS\system32\hgjlm.bak1"
      Sun 6 Jan 2008 127,804 ..SH. --- "C:\WINDOWS\system32\hgjlm.bak2"
      Thu 3 Jan 2008 124,433 ..SH. --- "C:\WINDOWS\system32\klkkj.bak1"
      Wed 2 Jan 2008 6,519 ..SH. --- "C:\WINDOWS\system32\svvwa.bak1"

      Finished!

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 16:59:25, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323<=1&it=2007-12-31 02:37:22&dt=2008-01-01 16:14:48&q=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {2C72FD5C-A1C9-4569-85F8-99125945C8A7} - (no file)
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: (no name) - {CB064430-E465-43B1-A33C-1D8E0B55591A} - (no file)
      O2 - BHO: (no name) - {FAB1D23F-AC75-4122-BA2D-0736D7DEC771} - (no file)
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [c0556397] rundll32.exe "C:\WINDOWS\system32\ofatippb.dll",b
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O20 - Winlogon Notify: rqrpmjj - rqrpmjj.dll (file missing)
      O22 - SharedTaskScheduler: ficklety - {e31f5c72-8e0d-4921-8375-9573746c170c} - (no file)
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 27632 bytes

      Äänestä

    • .......... kirjoitti:

      Lataa VundoFix.exe työpöydällesi. http://www.atribune.org/ccount/click.php?id=4
      [*]Tupla-klikkaa VundoFix.exe ajaaksesi sen.
      [*]Klikkaa Scan for Vundo valintaa.
      [*]Kun skannaus on valmis, klikkaa Remove Vundo valintaa.
      [*]Sinulta kysytään haluatko poistaa filut - klikkaa YES.
      [*]Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
      [*]Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK.
      [*]Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö.

      Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
      Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä

      ei löytynyt mitään...

      Äänestä

    • reportti kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 16:59:25, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageback.com/?cm=612323<=1&it=2007-12-31 02:37:22&dt=2008-01-01 16:14:48&q=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {2C72FD5C-A1C9-4569-85F8-99125945C8A7} - (no file)
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: (no name) - {CB064430-E465-43B1-A33C-1D8E0B55591A} - (no file)
      O2 - BHO: (no name) - {FAB1D23F-AC75-4122-BA2D-0736D7DEC771} - (no file)
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [c0556397] rundll32.exe "C:\WINDOWS\system32\ofatippb.dll",b
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O20 - Winlogon Notify: rqrpmjj - rqrpmjj.dll (file missing)
      O22 - SharedTaskScheduler: ficklety - {e31f5c72-8e0d-4921-8375-9573746c170c} - (no file)
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 27632 bytes

      mitä fixsaat pois

      Äänestä

    • 123321 kirjoitti:

      mitä fixsaat pois

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:44:22, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\HP\KBD\KBD.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\iPod\bin\iPodService.exe
      D:\Winamp\winamp.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [c0556397] rundll32.exe "C:\WINDOWS\system32\ofatippb.dll",b
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 26787 bytes

      Äänestä

    • 123321 kirjoitti:

      mitä fixsaat pois

      scannata ja se viimeinenkin vakoiluohjelma on nyt poistettu.. Onko mun kone vihdoinkin puhdas?

      Äänestä

    • spybotilla kirjoitti:

      scannata ja se viimeinenkin vakoiluohjelma on nyt poistettu.. Onko mun kone vihdoinkin puhdas?

      scannaa hjt:llä merkkaa paina Fix checked

      O4 - HKLM\..\Run: [c0556397] rundll32.exe "C:\WINDOWS\system32\ofatippb.dll",b

      ==========================

      sitten tuossa alla on "ajoon myös"

      ajoitko sen ja löytykkö siintä raporttia

      Äänestä

    • 123321 kirjoitti:

      scannaa hjt:llä merkkaa paina Fix checked

      O4 - HKLM\..\Run: [c0556397] rundll32.exe "C:\WINDOWS\system32\ofatippb.dll",b

      ==========================

      sitten tuossa alla on "ajoon myös"

      ajoitko sen ja löytykkö siintä raporttia

      tuon,mutta mitä tarkoitat tuolla "ajoon myös"?

      Äänestä

    • arska kirjoitti:

      tuon,mutta mitä tarkoitat tuolla "ajoon myös"?

      ei mitään,tajusinkin.. Ajan pian tuon

      Äänestä

    scannaten

    Äänestä

    • SmitFraudFix v2.274

      Scan done at 18:20:09,23, ma 07.01.2008
      Run from C:\Documents and Settings\ARI-MATTI\Ty”p”yt„\SmitfraudFix\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in normal mode

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\iPod\bin\iPodService.exe
      D:\Winamp\winamp.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\explorer.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      »»»»»»»»»»»»»»»»»»»»»»»» C:\


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ARI-MATTI


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ARI-MATTI\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ARI-MA~1\Suosikit


      »»»»»»»»»»»»»»»»»»»»»»»» Desktop


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


      »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


      »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Nykyinen kotisivu"


      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, following keys are not inevitably infected!!!

      IEDFix.exe by S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "system"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Rustock



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Wireless PCI 802.11b/g adapter WN4201B - Paketinajoituksen miniportti
      DNS Server Search Order: 208.67.220.220
      DNS Server Search Order: 208.67.222.222

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: DhcpNameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222


      »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


      »»»»»»»»»»»»»»»»»»»»»»»» End

      Äänestä

    • Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:27:27, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\iPod\bin\iPodService.exe
      D:\Winamp\winamp.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 26729 bytes

      Äänestä

    • kun äsken f-secure ilmoitti että on havainnut riskiohjelman nimeltä: risktool.win32.reboot???

      Äänestä

    • reportti kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:27:27, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\iPod\bin\iPodService.exe
      D:\Winamp\winamp.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 26729 bytes

      smitfraudfixsiä..

      sulla on vielä tuolla listassa

      O4 sontaa

      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"

      ==============
      heitä toi Spybot-S&D koneelta pois tuolta lisää poista sovelutuksesta
      ==============

      ja laita sitten uusi hjt:n loki scannaten

      Äänestä

    • 123321 kirjoitti:

      smitfraudfixsiä..

      sulla on vielä tuolla listassa

      O4 sontaa

      O4 - HKLM\..\RunOnce: [SpybotDeletingE2661] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2170] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8111] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6905] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7308] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7286] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2986] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6555] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1195] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1783] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4529] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5859] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5070] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5081] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE824] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3680] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8244] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7500] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3162] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8700] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3328] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3209] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7872] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6006] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9937] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4337] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7115] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3144] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3075] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2240] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5897] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4119] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2222] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7785] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2348] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3990] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5938] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE9818] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE927] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1668] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8151] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3580] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6660] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6980] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2350] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4817] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1411] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1786] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7082] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2774] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5223] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE919] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5007] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3957] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8991] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE5958] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7860] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE6215] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE4603] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1488] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE1005] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7658] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE8721] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE2165] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE7200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingE3118] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1792] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1723] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4341] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4588] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6806] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4788] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6158] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1200] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2050] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9739] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9040] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8951] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6737] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6042] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2031] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF3941] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6052] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9916] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1622] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF374] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9395] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9405] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8137] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5896] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6207] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4334] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF4490] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF586] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7088] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF455] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7256] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6639] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2016] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF5101] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF8690] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF2386] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7963] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF6255] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF7523] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF1614] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingF9742] "C:\Program Files\Spybot - Search & Destroy\SDDelFile.exe" "C:\WINDOWS\system32\mljgh.dll_old"

      ==============
      heitä toi Spybot-S&D koneelta pois tuolta lisää poista sovelutuksesta
      ==============

      ja laita sitten uusi hjt:n loki scannaten

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:46:00, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\rundll32.exe
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 9697 bytes

      Äänestä

    • spybot kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:46:00, on 7.1.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\rundll32.exe
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 9697 bytes

      1.Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
      http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
      http://download.bleepingcomputer.com/sUBs/ComboFix.exe


      2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
      3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
      Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

      Äänestä

    • 123321 kirjoitti:

      1.Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
      http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
      http://download.bleepingcomputer.com/sUBs/ComboFix.exe


      2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
      3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
      Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

      läpi,mutta ei jättänyt mitään lokia vaan ohjelma sammui..

      Äänestä

    • ohjelman kirjoitti:

      läpi,mutta ei jättänyt mitään lokia vaan ohjelma sammui..

      C:\

      Äänestä

    • 123321 kirjoitti:

      C:\

      ComboFix 08-01-07.5 - ARI-MATTI 2008-01-07 19:07:56.1 - NTFSx86
      Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.81 [GMT 2:00]
      Running from: C:\Documents and Settings\ARI-MATTI\Työpöytä\ComboFix.exe
      * Created a new restore point
      .

      (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\Documents and Settings\ARI-MATTI\Application Data\inst.exe
      C:\WINDOWS\system32\bppitafo.ini
      C:\WINDOWS\system32\dcbeg.bak1
      C:\WINDOWS\system32\dcbeg.bak2
      C:\WINDOWS\system32\dcbeg.ini
      C:\WINDOWS\system32\dhtybbbj.ini
      C:\WINDOWS\system32\dlagmqrj.dll
      C:\WINDOWS\system32\fyfqppwj.ini
      C:\WINDOWS\system32\hgjlm.bak1
      C:\WINDOWS\system32\hgjlm.bak2
      C:\WINDOWS\system32\hgjlm.ini
      C:\WINDOWS\system32\klkkj.bak1
      C:\WINDOWS\system32\klkkj.ini
      C:\WINDOWS\system32\svvwa.bak1
      C:\WINDOWS\system32\svvwa.ini
      D:\Autorun.inf

      .
      ((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2007-12-07 to 2008-01-07 )))))))))))))))))
      .

      2008-01-07 19:06 . 2000-08-31 08:00   51,200   --a------   C:\WINDOWS\NirCmd.exe
      2008-01-07 18:20 . 2008-01-07 18:20   3,500   --a------   C:\WINDOWS\system32\tmp.reg
      2008-01-07 16:38 . 2008-01-07 16:38      d--------   C:\WINDOWS\ERUNT
      2008-01-07 04:34 . 2008-01-07 04:34      d--------   C:\Program Files\Trend Micro
      2008-01-06 21:45 . 2008-01-06 21:45      d--------   C:\Documents and Settings\ARI-MATTI\Application Data\Grisoft
      2008-01-06 21:44 . 2008-01-06 21:44      d--------   C:\Documents and Settings\All Users\Application Data\Grisoft
      2008-01-06 20:11 . 2008-01-06 20:11   24,576   --a------   C:\WINDOWS\system32\VundoFixSVC.exe
      2008-01-06 19:24 . 2008-01-06 23:09      d--------   C:\VundoFix Backups
      2008-01-06 18:42 . 2008-01-06 18:42      d--------   C:\Program Files\IObit
      2008-01-06 16:37 . 2008-01-07 18:40      d--------   C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      2008-01-06 16:17 . 2008-01-06 16:17      d--------   C:\Documents and Settings\All Users\Application Data\Lavasoft
      2008-01-06 16:15 . 2008-01-06 16:15      d--------   C:\Program Files\Common Files\Wise Installation Wizard
      2008-01-06 15:51 . 2008-01-06 15:51   75,840   --a------   C:\WINDOWS\system32\keqencfp.dll
      2008-01-06 15:11 . 2008-01-06 15:11      d--------   C:\Program Files\Alwil Software
      2008-01-05 19:04 . 2008-01-05 19:04      d--------   C:\Documents and Settings\All Users\Application Data\Apple Computer
      2008-01-05 15:49 . 2008-01-05 15:49      d--------   C:\Program Files\ToniArts
      2008-01-04 17:00 . 2008-01-06 15:51      d--------   C:\Documents and Settings\ARI-MATTI\Application Data\F-Secure
      2008-01-04 16:54 . 2008-01-04 16:54      d--------   C:\Documents and Settings\All Users\Application Data\F-Secure
      2008-01-02 19:52 . 2008-01-07 18:36   9,428   --a------   C:\WINDOWS\wininit.ini
      2008-01-02 19:20 . 2008-01-04 16:15      d--------   C:\Program Files\Microsoft AntiSpyware
      2007-12-31 17:10 . 2007-12-31 17:10      d--------   C:\Program Files\Lavasoft
      2007-12-26 17:24 . 2007-12-26 17:24      d--------   C:\Documents and Settings\All Users\Application Data\Nokia
      2007-12-26 17:24 . 2007-02-22 10:15   137,216   --a------   C:\WINDOWS\system32\drivers\nmwcd.sys
      2007-12-26 17:24 . 2007-02-22 10:15   65,536   --a------   C:\WINDOWS\system32\nmwcdcocls.dll
      2007-12-26 17:24 . 2007-02-22 10:15   12,288   --a------   C:\WINDOWS\system32\drivers\nmwcdcm.sys
      2007-12-26 17:24 . 2007-02-22 10:15   12,288   --a------   C:\WINDOWS\system32\drivers\nmwcdcj.sys
      2007-12-26 17:24 . 2007-02-22 10:15   8,320   --a------   C:\WINDOWS\system32\drivers\nmwcdc.sys
      2007-12-26 17:22 . 2007-12-26 17:22      d--------   C:\Documents and Settings\All Users\Application Data\Installations

      .
      (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-01-05 22:33   ---------   d-----w   C:\Program Files\RevConnect
      2008-01-05 13:57   ---------   d-----w   C:\Documents and Settings\ARI-MATTI\Application Data\uTorrent
      2008-01-05 13:49   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
      2008-01-04 15:39   ---------   d-----w   C:\Program Files\F-Secure
      2007-12-26 15:24   ---------   d-----w   C:\Program Files\Nokia
      2007-12-26 15:23   ---------   d-----w   C:\Program Files\Common Files\Nokia
      2007-12-26 13:08   ---------   d-----w   C:\Documents and Settings\ARI-MATTI\Application Data\Vso
      2007-12-02 11:47   ---------   d-----w   C:\Program Files\VAG-COM
      2007-12-01 01:00   ---------   d-----w   C:\Program Files\Windows Live Toolbar
      2007-11-14 07:29   450,560   ----a-w   C:\WINDOWS\system32\dllcache\jscript.dll
      2007-11-13 10:25   20,480   ----a-w   C:\WINDOWS\system32\drivers\secdrv.sys
      2007-10-30 10:19   3,079,680   ----a-w   C:\WINDOWS\system32\dllcache\mshtml.dll
      2007-10-29 22:43   1,288,192   ----a-w   C:\WINDOWS\system32\quartz.dll
      2007-10-29 22:43   1,288,192   ----a-w   C:\WINDOWS\system32\dllcache\quartz.dll
      2007-10-25 16:56   8,458,752   ----a-w   C:\WINDOWS\system32\dllcache\shell32.dll
      2007-10-20 04:01   227,328   ----a-w   C:\WINDOWS\system32\wmasf.dll
      2007-10-20 04:01   227,328   ----a-w   C:\WINDOWS\system32\dllcache\wmasf.dll
      2007-10-11 06:14   96,256   ----a-w   C:\WINDOWS\system32\dllcache\inseng.dll
      2007-10-11 06:14   659,456   ----a-w   C:\WINDOWS\system32\dllcache\wininet.dll
      2007-10-11 06:14   615,936   ----a-w   C:\WINDOWS\system32\dllcache\urlmon.dll
      2007-10-11 06:14   55,808   ----a-w   C:\WINDOWS\system32\dllcache\extmgr.dll
      2007-10-11 06:14   532,480   ----a-w   C:\WINDOWS\system32\dllcache\mstime.dll
      2007-10-11 06:14   474,112   ----a-w   C:\WINDOWS\system32\dllcache\shlwapi.dll
      2007-10-11 06:14   449,024   ----a-w   C:\WINDOWS\system32\dllcache\mshtmled.dll
      2007-10-11 06:14   39,424   ----a-w   C:\WINDOWS\system32\dllcache\pngfilt.dll
      2007-10-11 06:14   357,888   ----a-w   C:\WINDOWS\system32\dllcache\dxtmsft.dll
      2007-10-11 06:14   250,880   ----a-w   C:\WINDOWS\system32\dllcache\iepeers.dll
      2007-10-11 06:14   205,312   ----a-w   C:\WINDOWS\system32\dllcache\dxtrans.dll
      2007-10-11 06:14   16,384   ----a-w   C:\WINDOWS\system32\dllcache\jsproxy.dll
      2007-10-11 06:14   151,552   ----a-w   C:\WINDOWS\system32\dllcache\cdfview.dll
      2007-10-11 06:14   146,432   ----a-w   C:\WINDOWS\system32\dllcache\msrating.dll
      2007-10-11 06:14   1,494,016   ----a-w   C:\WINDOWS\system32\dllcache\shdocvw.dll
      2007-10-11 06:14   1,055,232   ----a-w   C:\WINDOWS\system32\dllcache\danim.dll
      2007-10-11 06:14   1,023,488   ----a-w   C:\WINDOWS\system32\dllcache\browseui.dll
      2007-10-10 11:16   18,432   ----a-w   C:\WINDOWS\system32\dllcache\iedw.exe
      2007-04-29 16:44   47,360   ----a-w   C:\Documents and Settings\ARI-MATTI\Application Data\pcouffin.sys
      2006-11-30 09:59   37,528   ----a-w   C:\Documents and Settings\Vieras\Application Data\GDIPFONTCACHEV1.DAT
      2005-07-12 21:03   0   ----a-w   C:\Documents and Settings\ARI-MATTI\Application Data\wklnhst.dat
      2005-10-17 17:56   22   --sha-w   C:\WINDOWS\SMINST\HPCD.sys
      .

      (((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9613f446-26f6-464a-beac-ff386cf59f5b}]
      2008-01-06 15:51   75840   --a------   C:\WINDOWS\system32\keqencfp.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55 5674352]
      "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 16:38 1289000]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
      "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 18:04 52736]
      "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-09-29 22:23 4603904]
      "nwiz"="nwiz.exe" [2004-09-29 22:23 921600 C:\WINDOWS\system32\nwiz.exe]
      "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 19:06 88363 C:\WINDOWS\AGRSMMSG.exe]
      "HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 21:34 49152]
      "HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 21:29 659456]
      "KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 21:02 61440]
      "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 22:43 233472]
      "PS2"="C:\WINDOWS\system32\ps2.exe" [2004-10-25 23:17 90112]
      "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54 253952]
      "WinampAgent"="D:\Winamp\winampa.exe" [2004-12-20 21:41 33792]
      "F-Secure Manager"="C:\Program Files\F-Secure\Common\FSM32.exe" [2006-12-05 15:22 176177]
      "F-Secure TNB"="C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" [2007-01-08 21:10 724992]
      "DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 17:05 81920]
      "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
      "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 05:24 286720]
      "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-07-10 08:18 270648]
      "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2006-11-28 13:12 222720]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-11-09 16:15 1634304]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
      "NoResolveSearch"= 1 (0x1)

      R0 FSFW;F-Secure Firewall Driver;C:\WINDOWS\system32\drivers\fsdfw.sys [2006-12-21 15:51]
      R0 tffsport;M-Systems DiskOnChip 2000;C:\WINDOWS\system32\DRIVERS\tffsport.sys [2004-08-03 22:00]
      R1 F-Secure HIPS;F-Secure HIPS;C:\Program Files\F-Secure\HIPS\fshs.sys [2006-12-14 17:52]
      R3 F-Secure Gatekeeper;F-Secure Gatekeeper;C:\Program Files\F-Secure\Anti-Virus\minifilter\fsgk.sys [2007-01-24 17:41]
      R3 PRISM_A00;Wireless PCI 802.11b/g adapter WN4201B Driver;C:\WINDOWS\system32\DRIVERS\PCTELSAP.SYS [2004-11-30 20:54]
      S3 MR97310_VGA_DUAL_CAMERA;VGA Dual Camera;C:\WINDOWS\system32\DRIVERS\mr97310v.sys [2004-03-17 08:54]
      S3 Z302Mic;Vimicro Z302 Mic Audio Filter Driver;C:\WINDOWS\system32\drivers\UsbMicfilt.sys [2002-05-14 13:05]
      S3 ZSMC302;PC CAM 300A;C:\WINDOWS\system32\Drivers\usbvm302.sys [2002-11-01 19:43]
      S4 F-Secure Filter;F-Secure File System Filter;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSfilter.sys [2007-01-24 17:41]
      S4 F-Secure Recognizer;F-Secure File System Recognizer;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSrec.sys [2007-01-24 17:41]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
      \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

      .
      'Ajoitetut teht„v„t'-kansion sis„lt”
      "2008-01-03 14:53:15 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
      - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
      "2008-01-07 17:18:08 C:\WINDOWS\Tasks\Tarkistetaan Windows Live -työkalurivin päivitykset.job"

      Äänestä

    Aloita ekaksi tästä

    Lataa tuolta http://www.ccleaner.com/download/builds.aspx
    CCleaner v2.03.532- Standard Build, ÄLÄ aseenna Yahoo toolbaria!

    laita asetukset näin:
    Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

    aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
    aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi

    ====================

    Sitten tokaksi tästä

    Lataa http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe
    OTMoveIt ja tallenna se työpöydällesi.

    Tuplaklikkaa OTMoveIt.exe.
    Klikkaa CleanUp!.
    Valitse Yes kun kysytään "Begin cleanup Process?".
    Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.


    HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.

    Äänestä

    • kone uudelleen..

      Äänestä

    • ja käynnistetty kirjoitti:

      kone uudelleen..

      uusi hjt:n loki nätti silmälle ja kone kiva käteen?
      :D

      Äänestä

    • 123321 kirjoitti:

      uusi hjt:n loki nätti silmälle ja kone kiva käteen?
      :D

      silmille ja hyvin taas tuntuu toimivan. Ootko varma että tässä koneessa ei enää haittaohjelmia/viruksia ole? Tuhannet kiitokset sulle tästä,en olisi ikinä itse saanut tätä puhtaaksi:)

      Äänestä

    • nätti kirjoitti:

      silmille ja hyvin taas tuntuu toimivan. Ootko varma että tässä koneessa ei enää haittaohjelmia/viruksia ole? Tuhannet kiitokset sulle tästä,en olisi ikinä itse saanut tätä puhtaaksi:)

      hyvin. laita vielä se uusi scannatu hjt:n loki jos sitä vielä vilasis.

      Äänestä

    • 123321 kirjoitti:

      hyvin. laita vielä se uusi scannatu hjt:n loki jos sitä vielä vilasis.

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:12, on 2008-01-07
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 9567 bytes

      Äänestä

    • hjt-lista kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:12, on 2008-01-07
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 9567 bytes

      scannaa hjt:llä merkkaa paina Fix checked

      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222

      ==================

      JATKA

      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.


      Lähetä uusi HjT-loki ja c:\fixwareout\report.txt sisältö

      =================

      Nimeä uudelleen

      C:\Program Files\Trend Micro\HijackThis\>>> HijackThis.exe

      Äänestä

    • 123321 kirjoitti:

      scannaa hjt:llä merkkaa paina Fix checked

      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222

      ==================

      JATKA

      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.


      Lähetä uusi HjT-loki ja c:\fixwareout\report.txt sisältö

      =================

      Nimeä uudelleen

      C:\Program Files\Trend Micro\HijackThis\>>> HijackThis.exe

      Username "ARI-MATTI" - 2008-01-07 20:41:08 [Fixwareout edited 9/01/2007]

      ~~~~~ Prerun check

      DNS-tulkintatoiminnon välimuistin tyhjentäminen onnistui.


      System was rebooted successfully.

      ~~~~~ Postrun check
      HKLM\SOFTWARE\~\Winlogon\ "system"=""
      ....
      ....
      ~~~~~ Misc files.
      ....
      ~~~~~ Checking for older varients.
      ....

      ~~~~~ Current runs (hklm hkcu "run" Keys Only)
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_03\\bin\\jusched.exe\""
      "hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
      "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
      "nwiz"="nwiz.exe /installquiet /keeploaded /nodetect"
      "AGRSMMSG"="AGRSMMSG.exe"
      "HPHUPD06"="c:\\Program Files\\HP\\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\\hphupd06.exe"
      "HPHmon06"="C:\\WINDOWS\\system32\\hphmon06.exe"
      "KBD"="C:\\HP\\KBD\\KBD.EXE"
      "Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
      "PS2"="C:\\WINDOWS\\system32\\ps2.exe"
      "LSBWatcher"="c:\\hp\\drivers\\hplsbwatcher\\lsburnwatcher.exe"
      "WinampAgent"="D:\\Winamp\\winampa.exe"
      "F-Secure Manager"="\"C:\\Program Files\\F-Secure\\Common\\FSM32.EXE\" /splash"
      "F-Secure TNB"="\"C:\\Program Files\\F-Secure\\FSGUI\\TNBUtil.exe\" /CHECKALL /WAITFORSW"
      "DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1033"
      "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
      "QuickTime Task"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime"
      "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
      "PCSuiteTrayApplication"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\LaunchApplication.exe -startup"

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
      "H/PC Connection Agent"="\"C:\\Program Files\\Microsoft ActiveSync\\Wcescomm.exe\""
      ....
      Hosts file was reset, If you use a custom hosts file please replace it...
      ~~~~~ End report ~~~~~

      Äänestä

    • 123321 kirjoitti:

      scannaa hjt:llä merkkaa paina Fix checked

      O2 - BHO: {b5f95fc6-83ff-caeb-a464-6f62644f3169} - {9613f446-26f6-464a-beac-ff386cf59f5b} - C:\WINDOWS\system32\keqencfp.dll
      O17 - HKLM\System\CCS\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{87802B78-3AFB-4AF4-8A22-00E996E4C13C}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B207F6-64BC-43C1-8604-DF169FE96632}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{EC872E28-D870-46DE-8F82-FEE2D0DF4535}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CS1\Services\Tcpip\..\{0B8C3FA4-EEBF-46D0-B364-F3632C97B8AB}: NameServer = 208.67.220.220,208.67.222.222
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222

      ==================

      JATKA

      Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
      tai täältä >
      http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
      ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.


      Lähetä uusi HjT-loki ja c:\fixwareout\report.txt sisältö

      =================

      Nimeä uudelleen

      C:\Program Files\Trend Micro\HijackThis\>>> HijackThis.exe

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:52, on 2008-01-07
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\rundll32.exe
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Trend Micro\HijackThis\skanneri.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 8659 bytes

      Äänestä

    • hjt-lista kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:52, on 2008-01-07
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\rundll32.exe
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Trend Micro\HijackThis\skanneri.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 8659 bytes

      nätti :D

      tehääs vielä tämmönen turhaan käynnistyvien vähennys.

      http://www.malwarebytes.org/startuplite.php

      lataa tuolta sitten kun on valmis paina continue

      Äänestä

    • 123321 kirjoitti:

      nätti :D

      tehääs vielä tämmönen turhaan käynnistyvien vähennys.

      http://www.malwarebytes.org/startuplite.php

      lataa tuolta sitten kun on valmis paina continue

      nopeammalta mitä ennen noita viruksia:) Nettisivut aukeaa heti=) Hyvä että jotkut viitsivät auttaa ja siitä iso kiitos!!!

      Äänestä

    • paljonpaljon kirjoitti:

      nopeammalta mitä ennen noita viruksia:) Nettisivut aukeaa heti=) Hyvä että jotkut viitsivät auttaa ja siitä iso kiitos!!!

      voikin sitten ottaa rauhalliset yö unet ilman hermoilua ;)

      Äänestä

    • hjt-lista kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:52, on 2008-01-07
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\rundll32.exe
      D:\Winamp\winampa.exe
      C:\Program Files\F-Secure\Common\FSM32.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Trend Micro\HijackThis\skanneri.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
      O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?66a2b7742beb41cb94a1e2cd89c089c8
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?66a2b7742beb41cb94a1e2cd89c089c8
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Matkaviestimen suosikkien luominen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

      --
      End of file - 8659 bytes

      noi vielä pois

      Skannaa HJT:llä ja laita ruksi näiden eteen ja paina Fix checked

      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.updatesgate.com/redirect.php (file missing)

      voit poistaa koneelta myös VundoFix ja fixwareout scannerit ja logit.

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    arska kirjoitti:

    Eli oon täs 4 päivää taistellu virusten ja vakoiluohjelmien kanssa ja nyt sain ilmeisesti koneen siivottua kun ei f-secure enää mitään löytänyt.. Vanhassa f-securessa ei ollut vakoiluohjelmien scannausta ollenkaan ja hommasin uudemman niin alkasi löytymään. Nyt kone valittaa että puuttuu tälläinen tiedosto C:\windows\system32\ofatippb.dll.. Oon parilta kaverilta kysynyt tuosta tiedostosta niin ei niiltäkään tuota löydy. Virheilmo tulee aina kun koneen käynnistää. Missä vika??

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu