Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    hjt log

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:13:21, on 16.2.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\PowerISO\PWRISOVM.EXE
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\xxwxw.dll,#1
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [32aa9646] rundll32.exe "C:\Windows\system32\wwbabtdy.dll",b
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
    O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
    O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 6838 bytes
    7345
    Äänestä

    Muut lukivat myös

    Vastaukset 7

    Vanhimmat

    ComboFix 08-02-16.2 - Omistaja 2008-02-16 12:17:27.6 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1116 [GMT 2:00]
    Running from: C:\Users\Omistaja\Desktop\ComboFix.exe
    * Created a new restore point
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Windows\system32\geeec.dll
    C:\Windows\system32\rqrol.dll
    C:\Windows\system32\urqpm.dll
    C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat . . . . poisto epäonnistui
    C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat . . . . poisto epäonnistui
    C:\Windows\System32\1.exe
    C:\Windows\System32\amlygfgd.ini
    C:\Windows\system32\awvss.dll
    C:\Windows\system32\axiynldv.dll
    C:\Windows\system32\byvvvvt.dll
    C:\Windows\System32\ceeeg.ini
    C:\Windows\System32\ceeeg.ini2
    C:\Windows\System32\cefii.ini
    C:\Windows\System32\cefii.ini2
    C:\Windows\System32\cjsgafec.ini
    C:\Windows\system32\command.exe
    C:\Windows\System32\dbfgyaoe.ini
    C:\Windows\system32\ddaby.dll
    C:\Windows\System32\elsrrcvc.ini
    C:\Windows\System32\eswvoiur.ini
    C:\Windows\System32\fehhk.ini
    C:\Windows\System32\fehhk.ini2
    C:\Windows\System32\frjimkgn.ini
    C:\Windows\system32\fxjutgdk.dll
    C:\Windows\system32\gebay.dll
    C:\Windows\system32\gebxvss.dll
    C:\Windows\system32\geeec.dll
    C:\Windows\System32\ggfii.ini
    C:\Windows\System32\ggfii.ini2
    C:\Windows\System32\ghtuuiso.ini
    C:\Windows\System32\glwmcwke.ini
    C:\Windows\System32\grxavrgt.ini
    C:\Windows\System32\hssfufot.ini
    C:\Windows\system32\iiijjhh.dll
    C:\Windows\system32\jkkjhhh.dll
    C:\Windows\System32\kdgtujxf.ini
    C:\Windows\system32\khhef.dll
    C:\Windows\System32\leiecheu.ini
    C:\Windows\System32\lorqr.ini
    C:\Windows\System32\lorqr.ini2
    C:\Windows\System32\mpqru.ini
    C:\Windows\System32\mpqru.ini2
    C:\Windows\system32\ngkmijrf.dll
    C:\Windows\System32\nimoqvuu.ini
    C:\Windows\system32\oauegqyr.dll
    C:\Windows\System32\orjrcptx.ini
    C:\Windows\system32\osiuuthg.dll
    C:\Windows\System32\otsfxqyx.ini
    C:\Windows\System32\oyrxdtgo.ini
    C:\Windows\System32\pqehlivl.ini
    C:\Windows\system32\qjtlhwlh.dll
    C:\Windows\system32\qopnkig.dll
    C:\Windows\system32\qybhiuwn.dll
    C:\Windows\system32\rqoon.dll
    C:\Windows\system32\rqrol.dll
    C:\Windows\System32\sekbdkoy.ini
    C:\Windows\System32\ssvwa.ini
    C:\Windows\System32\ssvwa.ini2
    C:\Windows\system32\tuvuu.dll
    C:\Windows\System32\tvyxx.ini
    C:\Windows\System32\tvyxx.ini2
    C:\Windows\system32\urqpm.dll
    C:\Windows\System32\uuvut.ini
    C:\Windows\System32\uuvut.ini2
    C:\Windows\System32\uxwvw.ini
    C:\Windows\System32\uxwvw.ini2
    C:\Windows\System32\vdlnyixa.ini
    C:\Windows\system32\wwbabtdy.dll
    C:\Windows\system32\wvusttq.dll
    C:\Windows\System32\vwynodqi.ini
    C:\Windows\system32\xxyvt.dll
    C:\Windows\System32\xyxyb.ini
    C:\Windows\System32\xyxyb.ini2
    C:\Windows\system32\yabawwu.dll
    C:\Windows\system32\yabby.dll
    C:\Windows\System32\yabeg.ini
    C:\Windows\System32\yabeg.ini2
    C:\Windows\System32\ybadd.ini
    C:\Windows\System32\ybadd.ini2
    C:\Windows\System32\ybbay.ini
    C:\Windows\System32\ybbay.ini2
    C:\Windows\System32\ydtbabww.ini
    C:\Windows\System32\ylxxkocy.ini
    C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat . . . . poisto epäonnistui
    C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat . . . . poisto epäonnistui
    .
    ---- Previous Run -------
    .
    C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
    C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
    C:\Windows\System32\1.exe
    C:\Windows\System32\amlygfgd.ini
    C:\Windows\system32\awvss.dll
    C:\Windows\system32\axiynldv.dll
    C:\Windows\system32\byvvvvt.dll
    C:\Windows\System32\ceeeg.ini
    C:\Windows\System32\ceeeg.ini2
    C:\Windows\System32\cefii.ini
    C:\Windows\System32\cefii.ini2
    C:\Windows\System32\cjsgafec.ini
    C:\Windows\system32\command.exe
    C:\Windows\System32\dbfgyaoe.ini
    C:\Windows\system32\ddaby.dll
    C:\Windows\System32\elsrrcvc.ini
    C:\Windows\System32\eswvoiur.ini
    C:\Windows\System32\fehhk.ini
    C:\Windows\System32\fehhk.ini2
    C:\Windows\System32\frjimkgn.ini
    C:\Windows\system32\fxjutgdk.dll
    C:\Windows\system32\gebxvss.dll
    C:\Windows\system32\geeec.dll
    C:\Windows\System32\ggfii.ini
    C:\Windows\System32\ggfii.ini2
    C:\Windows\System32\ghtuuiso.ini
    C:\Windows\System32\glwmcwke.ini
    C:\Windows\System32\grxavrgt.ini
    C:\Windows\System32\hssfufot.ini
    C:\Windows\system32\iiijjhh.dll
    C:\Windows\system32\jkkjhhh.dll
    C:\Windows\System32\kdgtujxf.ini
    C:\Windows\system32\khhef.dll
    C:\Windows\System32\leiecheu.ini
    C:\Windows\System32\lorqr.ini
    C:\Windows\System32\lorqr.ini2
    C:\Windows\System32\mpqru.ini
    C:\Windows\System32\mpqru.ini2
    C:\Windows\system32\ngkmijrf.dll
    C:\Windows\System32\nimoqvuu.ini
    C:\Windows\system32\oauegqyr.dll
    C:\Windows\System32\orjrcptx.ini
    C:\Windows\system32\osiuuthg.dll
    C:\Windows\System32\otsfxqyx.ini
    C:\Windows\System32\oyrxdtgo.ini
    C:\Windows\System32\pqehlivl.ini
    C:\Windows\system32\qopnkig.dll
    C:\Windows\system32\qybhiuwn.dll
    C:\Windows\system32\rqoon.dll
    C:\Windows\system32\rqrol.dll
    C:\Windows\System32\sekbdkoy.ini
    C:\Windows\System32\ssvwa.ini
    C:\Windows\System32\ssvwa.ini2
    C:\Windows\system32\tuvuu.dll
    C:\Windows\System32\tvyxx.ini
    C:\Windows\System32\tvyxx.ini2
    C:\Windows\system32\urqpm.dll
    C:\Windows\System32\uuvut.ini
    C:\Windows\System32\uuvut.ini2
    C:\Windows\System32\vdlnyixa.ini
    C:\Windows\system32\wvusttq.dll
    C:\Windows\System32\vwynodqi.ini
    C:\Windows\system32\xxyvt.dll
    C:\Windows\System32\xyxyb.ini
    C:\Windows\System32\xyxyb.ini2
    C:\Windows\system32\yabawwu.dll
    C:\Windows\system32\yabby.dll
    C:\Windows\System32\ybadd.ini
    C:\Windows\System32\ybadd.ini2
    C:\Windows\System32\ybbay.ini
    C:\Windows\System32\ybbay.ini2
    C:\Windows\System32\ylxxkocy.ini

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-01-16 to 2008-02-16 )))))))))))))))))
    .

    Tiedostoja ei ole luotu tällä aikavälillä

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-02-16 08:56   ---------   d-----w   C:\Program Files\Norman
    2008-02-15 18:53   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Nokia
    2008-02-15 18:09   ---------   d-----w   C:\ProgramData\PC Suite
    2008-02-15 17:11   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\PC Suite
    2008-02-15 17:08   ---------   d-----w   C:\Program Files\Nokia
    2008-02-15 17:08   ---------   d-----w   C:\Program Files\DIFX
    2008-02-15 17:08   ---------   d-----w   C:\Program Files\Common Files\PCSuite
    2008-02-15 17:08   ---------   d-----w   C:\Program Files\Common Files\Nokia
    2008-02-15 17:07   ---------   d-----w   C:\Program Files\PC Connectivity Solution
    2008-02-15 17:05   ---------   d-----w   C:\ProgramData\Installations
    2008-02-15 16:53   60,416   ----a-w   C:\Windows\system32\drivers\ComboFix.sys
    2008-02-13 21:53   194,560   ----a-w   C:\Windows\System32\WebClnt.dll
    2008-02-13 21:53   110,080   ----a-w   C:\Windows\system32\drivers\mrxdav.sys
    2008-02-13 21:49   803,328   ----a-w   C:\Windows\system32\drivers\tcpip.sys
    2008-02-13 21:47   824,832   ----a-w   C:\Windows\System32\wininet.dll
    2008-02-13 21:47   56,320   ----a-w   C:\Windows\System32\iesetup.dll
    2008-02-13 21:47   52,736   ----a-w   C:\Windows\AppPatch\iebrshim.dll
    2008-02-13 21:47   26,624   ----a-w   C:\Windows\System32\ieUnatt.exe
    2008-02-13 21:45   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\BitTorrent
    2008-02-10 01:30   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\RegistrySmart
    2008-02-06 18:18   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Grisoft
    2008-02-06 18:18   ---------   d-----w   C:\ProgramData\Grisoft
    2008-02-06 13:37   ---------   d-----w   C:\Program Files\Trend Micro
    2008-02-05 19:34   ---------   d-----w   C:\Program Files\IZArc
    2008-02-05 17:35   ---------   d-----w   C:\ProgramData\Lavasoft
    2008-02-05 17:35   ---------   d-----w   C:\Program Files\Lavasoft
    2008-02-05 17:15   ---------   d-----w   C:\Program Files\Eraser
    2008-02-05 16:03   ---------   d-----w   C:\Program Files\PowerISO
    2008-02-03 21:14   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\SecondLife
    2008-02-03 21:13   ---------   d-----w   C:\Program Files\SecondLife
    2008-01-31 20:27   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\gtk-2.0
    2008-01-31 14:55   ---------   d-----w   C:\Program Files\DAEMON Tools SearchBar
    2008-01-31 14:55   ---------   d-----w   C:\Program Files\DAEMON Tools Pro
    2008-01-27 18:58   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\LimeWire
    2008-01-26 14:41   ---------   d-----w   C:\Program Files\World of Warcraft
    2008-01-25 20:58   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Dr. DivX 2.0 OSS
    2008-01-25 15:21   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Media Player Classic
    2008-01-25 14:57   ---------   d-----w   C:\Program Files\DivX
    2008-01-25 12:27   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\DivX
    2008-01-20 07:07   33,292   ----a-w   C:\Windows\system32\drivers\scdemu.sys
    2008-01-19 10:34   ---------   d-----w   C:\ProgramData\NVIDIA
    2008-01-19 01:58   229,888   ----a-w   C:\Windows\System32\msshsq.dll
    2008-01-19 01:57   ---------   d-----w   C:\ProgramData\Microsoft Help
    2008-01-18 14:44   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\BitTorrent DNA
    2008-01-18 13:02   ---------   d-----w   C:\ProgramData\Media Center Programs
    2008-01-18 12:38   ---------   d-----w   C:\Program Files\Electronic Arts
    2008-01-17 22:38   ---------   d-----w   C:\Program Files\Diablo II
    2008-01-17 20:46   ---------   d-----w   C:\Program Files\GameSpy
    2008-01-17 20:45   669,184   ----a-w   C:\Windows\System32\pbsvc.exe
    2008-01-17 20:45   66,872   ----a-w   C:\Windows\System32\PnkBstrA.exe
    2008-01-17 20:45   22,328   ----a-w   C:\Windows\system32\drivers\PnkBstrK.sys
    2008-01-17 20:45   22,328   ----a-w   C:\Users\Omistaja\AppData\Roaming\PnkBstrK.sys
    2008-01-17 20:45   103,736   ----a-w   C:\Windows\System32\PnkBstrB.exe
    2008-01-17 19:59   ---------   d-----w   C:\Program Files\Steam
    2008-01-17 19:59   ---------   d-----w   C:\Program Files\Picasa2
    2008-01-17 19:59   ---------   d-----w   C:\Program Files\BitTorrent_DNA
    2008-01-17 19:54   38,912   ----a-w   C:\Windows\System32\xxwxw.dll
    2008-01-17 19:54   38,912   ----a-w   C:\Windows\System32\qopnn.dll
    2008-01-17 19:54   38,912   ----a-w   C:\Windows\System32\iiifd.dll
    2008-01-17 19:53   107,888   ----a-w   C:\Windows\System32\CmdLineExt.dll
    2008-01-17 19:53   ---------   d--h--r   C:\Users\Omistaja\AppData\Roaming\SecuROM
    2008-01-15 14:22   ---------   d-----w   C:\Program Files\Google
    2008-01-12 09:55   ---------   d-----w   C:\Program Files\Common Files\Steam
    2008-01-10 12:51   ---------   d-----w   C:\Program Files\Windows Sidebar
    2008-01-10 12:51   ---------   d-----w   C:\Program Files\Windows Mail
    2008-01-10 12:48   211,000   ----a-w   C:\Windows\system32\drivers\volsnap.sys
    2008-01-10 12:48   11,776   ----a-w   C:\Windows\System32\sbunattend.exe
    2008-01-10 12:48   1,060,920   ----a-w   C:\Windows\system32\drivers\ntfs.sys
    2008-01-09 11:18   524,288   ----a-w   C:\Windows\System32\DivXsm.exe
    2008-01-09 11:18   3,596,288   ----a-w   C:\Windows\System32\qt-dx331.dll
    2008-01-09 11:18   200,704   ----a-w   C:\Windows\System32\ssldivx.dll
    2008-01-09 11:18   1,044,480   ----a-w   C:\Windows\System32\libdivx.dll
    2008-01-09 11:16   823,296   ----a-w   C:\Windows\System32\divx_xx0c.dll
    2008-01-09 11:16   823,296   ----a-w   C:\Windows\System32\divx_xx07.dll
    2008-01-09 11:16   81,920   ----a-w   C:\Windows\System32\dpl100.dll
    2008-01-09 11:16   802,816   ----a-w   C:\Windows\System32\divx_xx11.dll
    2008-01-09 11:16   682,496   ----a-w   C:\Windows\System32\DivX.dll
    2008-01-09 11:16   196,608   ----a-w   C:\Windows\System32\dtu100.dll
    2008-01-02 01:14   ---------   d-----w   C:\Program Files\WoW-BurningCrusade-enGB-Slim-Installer
    2008-01-01 17:37   ---------   d-----w   C:\Program Files\Common Files\Blizzard Entertainment
    2008-01-01 17:25   ---------   d-----w   C:\Program Files\MSN Messenger
    2008-01-01 17:25   ---------   d-----w   C:\Program Files\Messenger Plus! Live
    2007-12-28 14:28   9,728   ----a-w   C:\Windows\System32\LAPRXY.DLL
    2007-12-28 14:28   223,232   ----a-w   C:\Windows\System32\WMASF.DLL
    2007-12-28 14:28   1,327,104   ----a-w   C:\Windows\System32\quartz.dll
    2007-12-28 14:24   84,992   ----a-w   C:\Windows\system32\drivers\srvnet.sys
    2007-12-28 14:24   58,368   ----a-w   C:\Windows\system32\drivers\mrxsmb20.sys
    2007-12-28 14:24   130,048   ----a-w   C:\Windows\system32\drivers\srv2.sys
    2007-12-28 14:24   101,888   ----a-w   C:\Windows\system32\drivers\mrxsmb.sys
    2007-12-22 23:03   91,472   ----a-w   C:\Windows\System32\Erasext.dll
    2007-12-22 23:03   41,296   ----a-w   C:\Windows\System32\Eraserl.exe
    2007-12-22 23:03   316,752   ----a-w   C:\Windows\System32\Eraser.dll
    2007-12-14 09:32   12,632   ----a-w   C:\Windows\System32\lsdelete.exe
    2007-12-11 19:44   593,920   ----a-w   C:\Windows\System32\dpuGUI11.dll
    2007-12-11 19:44   57,344   ----a-w   C:\Windows\System32\dpv11.dll
    2007-12-11 19:44   53,248   ----a-w   C:\Windows\System32\dpuGUI10.dll
    2007-12-11 19:44   344,064   ----a-w   C:\Windows\System32\dpus11.dll
    2007-12-11 19:44   294,912   ----a-w   C:\Windows\System32\dpu11.dll
    2007-12-11 19:44   294,912   ----a-w   C:\Windows\System32\dpu10.dll
    2007-12-11 19:44   156,992   ----a-w   C:\Windows\System32\DivXCodecVersionChecker.exe
    2007-09-15 07:19   32,768   --sha-w   C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007091520070916\index.dat
    2007-09-15 07:19   32,768   --sha-w   C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7DD3EFCD-73E9-450A-9951-7D33B838C68B}]
             C:\Windows\system32\iifgg.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{91451717-7CEA-4FE2-B9AA-D16F5D7C85E8}]
             C:\Windows\system32\wvwxu.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9FB4F3DE-A46E-4587-BE93-AC21039C47B5}]
             C:\Windows\system32\byxyx.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AECED78C-C3BA-40D9-B7E2-65F76CDFC80A}]
             C:\Windows\system32\iifec.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D7348181-D8E3-4010-9309-0FC1C9CC7C65}]
             C:\Windows\system32\pmnll.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 14:48 1232896]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ]
    "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55 5674352]
    "BitTorrent DNA"="C:\Program Files\BitTorrent_DNA\dna.exe" [ ]
    "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
    "Steam"="C:\Program Files\Steam\Steam.exe" [ ]
    "DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [ ]
    "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [ ]
    "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MSServer"="C:\Windows\system32\iiifd.dll" [2008-01-17 21:54 38912]
    "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-08-14 07:59 1006264]
    "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [ ]
    "JMB36X IDE Setup"="C:\Windows\JM\JMInsIDE.exe" [ ]
    "Norman ZANDA"="C:\Program Files\Norman\Npm\bin\ZLH.exe" [ ]
    "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [ ]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
    "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-12 05:28 86016]
    "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-12 05:28 8497696]
    "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-12 05:28 81920]
    "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2008-01-20 09:05 217088]
    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
    "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableLUA"= 0 (0x0)

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{FA16FE06-B462-470E-9653-79C54B1871FF}"= C:\Windows\system32\iiifd.dll [2008-01-17 21:54 38912]

    R2 Ndiskio;Ndiskio;C:\Program Files\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 09:55]
    R3 NvcMFlt;NvcMFlt;C:\Windows\system32\DRIVERS\nvcv32mf.sys [2007-09-06 09:45]
    R3 nvcoas;Norman Virus Control on-access component;C:\Program Files\Norman\Nvc\bin\nvcoas.exe [2007-12-12 11:45]
    R3 NVCScheduler;Norman Virus Control Scheduler;C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 12:23]
    R3 RTL8169;Realtek 8169 NT Driver;C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 09:30]
    S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-01-11 22:24]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\N]
    \shell\AutoRun\command - N:\Autorun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1b3e4f08-86e6-11dc-9807-001bfc774f09}]
    \shell\AutoRun\command - J:\Autorun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{515be8d5-d7cc-11dc-9131-001bfc774f09}]
    \shell\AutoRun\command - P:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{beab3b73-499f-11dc-aa7c-806e6f6e6963}]
    \shell\AutoRun\command - E:\N5610XpressMusic.exe

    .
    'Ajoitetut tehtävät'-kansion sisältö
    "2008-02-16 01:30:00 C:\Windows\Tasks\RegistrySmart Scheduled Scan.job"
    - C:\Program Files\RegistrySmart\RegistrySmart.ex
    - C:\Program Files\RegistrySmart
    "2008-02-16 10:23:00 C:\Windows\Tasks\Tarkistetaan Windows Live -työkalurivin päivitykset.job"

    Äänestä

    • Lataa [b][url=http://www.atribune.org/ccount/click.php?id=4 ][color=red]VundoFix.exe[/color][/url] työpöydällesi.[/b]

      Tupla-klikkaa [b]VundoFix.exe[/b] ajaaksesi sen.
      Klikkaa [b]Scan for Vundo[/b] valintaa.
      Kun skannaus on valmis, klikkaa [b]Remove Vundo[/b] valintaa.
      Sinulta kysytään haluatko poistaa filut - klikkaa [b]YES[/b].
      Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
      Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa [b]OK[/b].
      Postita C:\[b]vundofix.txt [/b]lokin sekä tuoreen [b]HijackThis lokin[/b] sisältö.

      Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
      Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa [b]Scan for Vundo[/b] valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.


      ==============

      Lataa [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.exe][color=red]SDFix by AndyManchesta[/color][/url] ja tallenna se työpöydällesi.

      [b]Käynnistä koneesi vikasietotilaan:[/b]

      sammuta ja käynnistä
      käynnistyksen yhteydessä hakkaa F8 nappia
      valitse nuolinäppäimellä vikasietotila
      paina enter ja enter
      valitse käyttäjätilisi
      paina kyllä

      Jossakin koneissa hakataan F8:sin sijasta F5:tä

      "   Kun vikasietotilassa, pura tiedoston [b]SDFix.zip[/b] sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä [b]SDFix[/b].
      "   Avaa [b]SDFix[/b]-kansio ja tuplaklikkaa tiedostoa [b]RunThis.bat[/b] käynnistääksesi ohjelman.
      "   Paina [b]Y[/b] käynnistääksesi skriptin.
      "   Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "[b]Press any key to Reboot[/b]".
      "   Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
      "   Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
      "   Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "[b]Finished[/b]".
      "   Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
      "   Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston [b]Report.txt[/b] sisältö viestiketjuusi uuden [b]HijackThis:n[/b] lokin kera.

      ============

      aja vielä combofix uudelleen

      ==========

      Nimeä uudeleen

      C:\Program Files\Trend Micro\HijackThis\>> HijackThis.exe

      Äänestä

    • 123321 kirjoitti:

      Lataa [b][url=http://www.atribune.org/ccount/click.php?id=4 ][color=red]VundoFix.exe[/color][/url] työpöydällesi.[/b]

      Tupla-klikkaa [b]VundoFix.exe[/b] ajaaksesi sen.
      Klikkaa [b]Scan for Vundo[/b] valintaa.
      Kun skannaus on valmis, klikkaa [b]Remove Vundo[/b] valintaa.
      Sinulta kysytään haluatko poistaa filut - klikkaa [b]YES[/b].
      Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
      Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa [b]OK[/b].
      Postita C:\[b]vundofix.txt [/b]lokin sekä tuoreen [b]HijackThis lokin[/b] sisältö.

      Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
      Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa [b]Scan for Vundo[/b] valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.


      ==============

      Lataa [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.exe][color=red]SDFix by AndyManchesta[/color][/url] ja tallenna se työpöydällesi.

      [b]Käynnistä koneesi vikasietotilaan:[/b]

      sammuta ja käynnistä
      käynnistyksen yhteydessä hakkaa F8 nappia
      valitse nuolinäppäimellä vikasietotila
      paina enter ja enter
      valitse käyttäjätilisi
      paina kyllä

      Jossakin koneissa hakataan F8:sin sijasta F5:tä

      "   Kun vikasietotilassa, pura tiedoston [b]SDFix.zip[/b] sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä [b]SDFix[/b].
      "   Avaa [b]SDFix[/b]-kansio ja tuplaklikkaa tiedostoa [b]RunThis.bat[/b] käynnistääksesi ohjelman.
      "   Paina [b]Y[/b] käynnistääksesi skriptin.
      "   Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "[b]Press any key to Reboot[/b]".
      "   Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
      "   Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
      "   Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "[b]Finished[/b]".
      "   Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
      "   Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston [b]Report.txt[/b] sisältö viestiketjuusi uuden [b]HijackThis:n[/b] lokin kera.

      ============

      aja vielä combofix uudelleen

      ==========

      Nimeä uudeleen

      C:\Program Files\Trend Micro\HijackThis\>> HijackThis.exe

      VundoFix V6.7.8

      Checking Java version...

      Scan started at 10:15:46 2008-02-16

      Listing files found while scanning....


      VundoFix V6.7.8

      Checking Java version...

      Scan started at 10:33:21 16.2.2008

      Listing files found while scanning....

      C:\Users\Omistaja\Desktop\Play SpellForce 2 - Shadow Wars.lnk
      C:\Windows\System32\dxnhvnlb.dll
      C:\Windows\System32\ghtuuiso.ini
      C:\Windows\System32\osiuuthg.dll
      C:\Windows\System32\qybhiuwn.dll
      C:\Windows\System32\urqpm.dll
      C:\Windows\System32\wvwxu.dll

      Beginning removal...

      Attempting to delete C:\Users\Omistaja\Desktop\Play SpellForce 2 - Shadow Wars.lnk
      C:\Users\Omistaja\Desktop\Play SpellForce 2 - Shadow Wars.lnk Has been deleted!

      Attempting to delete C:\Windows\System32\dxnhvnlb.dll
      C:\Windows\System32\dxnhvnlb.dll Has been deleted!

      Attempting to delete C:\Windows\System32\ghtuuiso.ini
      C:\Windows\System32\ghtuuiso.ini Has been deleted!

      Attempting to delete C:\Windows\System32\osiuuthg.dll
      C:\Windows\System32\osiuuthg.dll Has been deleted!

      Attempting to delete C:\Windows\System32\qybhiuwn.dll
      C:\Windows\System32\qybhiuwn.dll Has been deleted!

      Attempting to delete C:\Windows\System32\urqpm.dll
      C:\Windows\System32\urqpm.dll Has been deleted!

      Attempting to delete C:\Windows\System32\wvwxu.dll
      C:\Windows\System32\wvwxu.dll Has been deleted!

      Performing Repairs to the registry.
      Done!

      VundoFix V6.7.8

      Checking Java version...

      Scan started at 11:03:30 2008-02-17

      Listing files found while scanning....

      C:\Windows\System32\gijlm.ini
      C:\Windows\System32\gijlm.ini2
      C:\Windows\System32\mljig.dll
      C:\Windows\System32\xxwvu.dll

      Beginning removal...

      =====================================

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 12:05, on 2008-02-17
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16609)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\PowerISO\PWRISOVM.EXE
      C:\Windows\System32\rundll32.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Grisoft\AVG7\avgcc.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Windows\system32\rundll32.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mllmk.dll,#1
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
      O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [32aa9646] rundll32.exe "C:\Windows\system32\gyeavxfi.dll",b
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
      O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
      O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
      O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O13 - Gopher Prefix:
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
      O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
      O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe

      --
      End of file - 7424 bytes

      Äänestä

    • apuwah kirjoitti:

      VundoFix V6.7.8

      Checking Java version...

      Scan started at 10:15:46 2008-02-16

      Listing files found while scanning....


      VundoFix V6.7.8

      Checking Java version...

      Scan started at 10:33:21 16.2.2008

      Listing files found while scanning....

      C:\Users\Omistaja\Desktop\Play SpellForce 2 - Shadow Wars.lnk
      C:\Windows\System32\dxnhvnlb.dll
      C:\Windows\System32\ghtuuiso.ini
      C:\Windows\System32\osiuuthg.dll
      C:\Windows\System32\qybhiuwn.dll
      C:\Windows\System32\urqpm.dll
      C:\Windows\System32\wvwxu.dll

      Beginning removal...

      Attempting to delete C:\Users\Omistaja\Desktop\Play SpellForce 2 - Shadow Wars.lnk
      C:\Users\Omistaja\Desktop\Play SpellForce 2 - Shadow Wars.lnk Has been deleted!

      Attempting to delete C:\Windows\System32\dxnhvnlb.dll
      C:\Windows\System32\dxnhvnlb.dll Has been deleted!

      Attempting to delete C:\Windows\System32\ghtuuiso.ini
      C:\Windows\System32\ghtuuiso.ini Has been deleted!

      Attempting to delete C:\Windows\System32\osiuuthg.dll
      C:\Windows\System32\osiuuthg.dll Has been deleted!

      Attempting to delete C:\Windows\System32\qybhiuwn.dll
      C:\Windows\System32\qybhiuwn.dll Has been deleted!

      Attempting to delete C:\Windows\System32\urqpm.dll
      C:\Windows\System32\urqpm.dll Has been deleted!

      Attempting to delete C:\Windows\System32\wvwxu.dll
      C:\Windows\System32\wvwxu.dll Has been deleted!

      Performing Repairs to the registry.
      Done!

      VundoFix V6.7.8

      Checking Java version...

      Scan started at 11:03:30 2008-02-17

      Listing files found while scanning....

      C:\Windows\System32\gijlm.ini
      C:\Windows\System32\gijlm.ini2
      C:\Windows\System32\mljig.dll
      C:\Windows\System32\xxwvu.dll

      Beginning removal...

      =====================================

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 12:05, on 2008-02-17
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16609)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\PowerISO\PWRISOVM.EXE
      C:\Windows\System32\rundll32.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Grisoft\AVG7\avgcc.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Windows\system32\rundll32.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mllmk.dll,#1
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
      O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [32aa9646] rundll32.exe "C:\Windows\system32\gyeavxfi.dll",b
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
      O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
      O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
      O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O13 - Gopher Prefix:
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
      O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
      O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe

      --
      End of file - 7424 bytes

      en saanu SDfixiä toimiin ku se ei näköjään toimi vistalla mutta tässä olis tämä combofixin logi

      ============================================

      ComboFix 08-02-16.2 - Omistaja 2008-02-17 12:41:02.7 - NTFSx86
      Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1167 [GMT 2:00]
      Running from: C:\Users\Omistaja\Desktop\ComboFix.exe
      .

      (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\Windows\System32\fnenbpmj.ini
      C:\Windows\System32\gijlm.ini
      C:\Windows\System32\gijlm.ini2
      C:\Windows\System32\ifxvaeyg.ini
      C:\Windows\system32\mljig.dll
      C:\Windows\System32\uvwxx.ini
      C:\Windows\System32\uvwxx.ini2
      C:\Windows\system32\xxwvu.dll
      .
      ---- Previous Run -------
      .
      C:\Windows\system32\geeec.dll
      C:\Windows\system32\rqrol.dll
      C:\Windows\system32\urqpm.dll
      C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
      C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat . . . . poisto epäonnistui
      C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
      C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat . . . . poisto epäonnistui
      C:\Windows\System32\1.exe
      C:\Windows\System32\amlygfgd.ini
      C:\Windows\system32\awvss.dll
      C:\Windows\system32\axiynldv.dll
      C:\Windows\system32\byvvvvt.dll
      C:\Windows\System32\ceeeg.ini
      C:\Windows\System32\ceeeg.ini2
      C:\Windows\System32\cefii.ini
      C:\Windows\System32\cefii.ini2
      C:\Windows\System32\cjsgafec.ini
      C:\Windows\system32\command.exe
      C:\Windows\System32\dbfgyaoe.ini
      C:\Windows\system32\ddaby.dll
      C:\Windows\System32\elsrrcvc.ini
      C:\Windows\System32\eswvoiur.ini
      C:\Windows\System32\fehhk.ini
      C:\Windows\System32\fehhk.ini2
      C:\Windows\System32\frjimkgn.ini
      C:\Windows\system32\fxjutgdk.dll
      C:\Windows\system32\gebay.dll
      C:\Windows\system32\gebxvss.dll
      C:\Windows\system32\geeec.dll
      C:\Windows\System32\ggfii.ini
      C:\Windows\System32\ggfii.ini2
      C:\Windows\System32\ghtuuiso.ini
      C:\Windows\System32\glwmcwke.ini
      C:\Windows\System32\grxavrgt.ini
      C:\Windows\System32\hssfufot.ini
      C:\Windows\system32\iiijjhh.dll
      C:\Windows\system32\jkkjhhh.dll
      C:\Windows\System32\kdgtujxf.ini
      C:\Windows\system32\khhef.dll
      C:\Windows\System32\leiecheu.ini
      C:\Windows\System32\lorqr.ini
      C:\Windows\System32\lorqr.ini2
      C:\Windows\System32\mpqru.ini
      C:\Windows\System32\mpqru.ini2
      C:\Windows\system32\ngkmijrf.dll
      C:\Windows\System32\nimoqvuu.ini
      C:\Windows\system32\oauegqyr.dll
      C:\Windows\System32\orjrcptx.ini
      C:\Windows\system32\osiuuthg.dll
      C:\Windows\System32\otsfxqyx.ini
      C:\Windows\System32\oyrxdtgo.ini
      C:\Windows\System32\pqehlivl.ini
      C:\Windows\system32\qjtlhwlh.dll
      C:\Windows\system32\qopnkig.dll
      C:\Windows\system32\qybhiuwn.dll
      C:\Windows\system32\rqoon.dll
      C:\Windows\system32\rqrol.dll
      C:\Windows\System32\sekbdkoy.ini
      C:\Windows\System32\ssvwa.ini
      C:\Windows\System32\ssvwa.ini2
      C:\Windows\system32\tuvuu.dll
      C:\Windows\System32\tvyxx.ini
      C:\Windows\System32\tvyxx.ini2
      C:\Windows\system32\urqpm.dll
      C:\Windows\System32\uuvut.ini
      C:\Windows\System32\uuvut.ini2
      C:\Windows\System32\uxwvw.ini
      C:\Windows\System32\uxwvw.ini2
      C:\Windows\System32\vdlnyixa.ini
      C:\Windows\system32\wwbabtdy.dll
      C:\Windows\system32\wvusttq.dll
      C:\Windows\System32\vwynodqi.ini
      C:\Windows\system32\xxyvt.dll
      C:\Windows\System32\xyxyb.ini
      C:\Windows\System32\xyxyb.ini2
      C:\Windows\system32\yabawwu.dll
      C:\Windows\system32\yabby.dll
      C:\Windows\System32\yabeg.ini
      C:\Windows\System32\yabeg.ini2
      C:\Windows\System32\ybadd.ini
      C:\Windows\System32\ybadd.ini2
      C:\Windows\System32\ybbay.ini
      C:\Windows\System32\ybbay.ini2
      C:\Windows\System32\ydtbabww.ini
      C:\Windows\System32\ylxxkocy.ini
      C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat . . . . poisto epäonnistui
      C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat . . . . poisto epäonnistui

      .
      ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-01-17 to 2008-02-17 )))))))))))))))))
      .

      Tiedostoja ei ole luotu tällä aikavälillä

      .
      (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-02-17 11:29   ---------   d-----w   C:\Program Files\Norman
      2008-02-17 09:58   24,576   ----a-w   C:\Windows\System32\VundoFixSVC.exe
      2008-02-17 08:49   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\AVG7
      2008-02-16 16:55   ---------   d-----w   C:\ProgramData\avg7
      2008-02-16 16:50   55,304   ----a-w   C:\Windows\system32\drivers\avgwfp.sys
      2008-02-16 16:44   9,216   ----a-w   C:\Windows\System32\avgwlntf.dll
      2008-02-16 16:43   ---------   d-----w   C:\ProgramData\Grisoft
      2008-02-16 14:53   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Nokia Multimedia Player
      2008-02-16 11:42   ---------   d-----w   C:\Program Files\World of Warcraft
      2008-02-16 11:40   ---------   d-----w   C:\Program Files\WoW-FE
      2008-02-15 18:53   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Nokia
      2008-02-15 18:09   ---------   d-----w   C:\ProgramData\PC Suite
      2008-02-15 17:11   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\PC Suite
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\Nokia
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\DIFX
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\Common Files\PCSuite
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\Common Files\Nokia
      2008-02-15 17:07   ---------   d-----w   C:\Program Files\PC Connectivity Solution
      2008-02-15 17:05   ---------   d-----w   C:\ProgramData\Installations
      2008-02-15 16:53   60,416   ----a-w   C:\Windows\system32\drivers\ComboFix.sys
      2008-02-13 21:53   194,560   ----a-w   C:\Windows\System32\WebClnt.dll
      2008-02-13 21:53   110,080   ----a-w   C:\Windows\system32\drivers\mrxdav.sys
      2008-02-13 21:49   803,328   ----a-w   C:\Windows\system32\drivers\tcpip.sys
      2008-02-13 21:47   824,832   ----a-w   C:\Windows\System32\wininet.dll
      2008-02-13 21:47   56,320   ----a-w   C:\Windows\System32\iesetup.dll
      2008-02-13 21:47   52,736   ----a-w   C:\Windows\AppPatch\iebrshim.dll
      2008-02-13 21:47   26,624   ----a-w   C:\Windows\System32\ieUnatt.exe
      2008-02-13 21:45   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\BitTorrent
      2008-02-10 01:30   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\RegistrySmart
      2008-02-06 18:18   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Grisoft
      2008-02-06 13:37   ---------   d-----w   C:\Program Files\Trend Micro
      2008-02-05 19:34   ---------   d-----w   C:\Program Files\IZArc
      2008-02-05 17:35   ---------   d-----w   C:\ProgramData\Lavasoft
      2008-02-05 17:35   ---------   d-----w   C:\Program Files\Lavasoft
      2008-02-05 17:15   ---------   d-----w   C:\Program Files\Eraser
      2008-02-05 16:03   ---------   d-----w   C:\Program Files\PowerISO
      2008-02-03 21:14   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\SecondLife
      2008-02-03 21:13   ---------   d-----w   C:\Program Files\SecondLife
      2008-01-31 20:27   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\gtk-2.0
      2008-01-31 14:55   ---------   d-----w   C:\Program Files\DAEMON Tools SearchBar
      2008-01-31 14:55   ---------   d-----w   C:\Program Files\DAEMON Tools Pro
      2008-01-27 18:58   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\LimeWire
      2008-01-25 20:58   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Dr. DivX 2.0 OSS
      2008-01-25 15:21   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Media Player Classic
      2008-01-25 14:57   ---------   d-----w   C:\Program Files\DivX
      2008-01-25 12:27   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\DivX
      2008-01-20 07:07   33,292   ----a-w   C:\Windows\system32\drivers\scdemu.sys
      2008-01-19 10:34   ---------   d-----w   C:\ProgramData\NVIDIA
      2008-01-19 01:58   229,888   ----a-w   C:\Windows\System32\msshsq.dll
      2008-01-19 01:57   ---------   d-----w   C:\ProgramData\Microsoft Help
      2008-01-18 14:44   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\BitTorrent DNA
      2008-01-18 13:02   ---------   d-----w   C:\ProgramData\Media Center Programs
      2008-01-18 12:38   ---------   d-----w   C:\Program Files\Electronic Arts
      2008-01-17 22:38   ---------   d-----w   C:\Program Files\Diablo II
      2008-01-17 20:46   ---------   d-----w   C:\Program Files\GameSpy
      2008-01-17 20:45   669,184   ----a-w   C:\Windows\System32\pbsvc.exe
      2008-01-17 20:45   66,872   ----a-w   C:\Windows\System32\PnkBstrA.exe
      2008-01-17 20:45   22,328   ----a-w   C:\Windows\system32\drivers\PnkBstrK.sys
      2008-01-17 20:45   22,328   ----a-w   C:\Users\Omistaja\AppData\Roaming\PnkBstrK.sys
      2008-01-17 20:45   103,736   ----a-w   C:\Windows\System32\PnkBstrB.exe
      2008-01-17 19:59   ---------   d-----w   C:\Program Files\Steam
      2008-01-17 19:59   ---------   d-----w   C:\Program Files\Picasa2
      2008-01-17 19:59   ---------   d-----w   C:\Program Files\BitTorrent_DNA
      2008-01-17 19:53   107,888   ----a-w   C:\Windows\System32\CmdLineExt.dll
      2008-01-17 19:53   ---------   d--h--r   C:\Users\Omistaja\AppData\Roaming\SecuROM
      2008-01-15 14:22   ---------   d-----w   C:\Program Files\Google
      2008-01-12 09:55   ---------   d-----w   C:\Program Files\Common Files\Steam
      2008-01-10 12:51   ---------   d-----w   C:\Program Files\Windows Sidebar
      2008-01-10 12:51   ---------   d-----w   C:\Program Files\Windows Mail
      2008-01-10 12:48   211,000   ----a-w   C:\Windows\system32\drivers\volsnap.sys
      2008-01-10 12:48   11,776   ----a-w   C:\Windows\System32\sbunattend.exe
      2008-01-10 12:48   1,060,920   ----a-w   C:\Windows\system32\drivers\ntfs.sys
      2008-01-10 05:50   1,244,672   ----a-w   C:\Windows\System32\mcmde.dll
      2008-01-09 11:18   524,288   ----a-w   C:\Windows\System32\DivXsm.exe
      2008-01-09 11:18   3,596,288   ----a-w   C:\Windows\System32\qt-dx331.dll
      2008-01-09 11:18   200,704   ----a-w   C:\Windows\System32\ssldivx.dll
      2008-01-09 11:18   1,044,480   ----a-w   C:\Windows\System32\libdivx.dll
      2008-01-09 11:16   823,296   ----a-w   C:\Windows\System32\divx_xx0c.dll
      2008-01-09 11:16   823,296   ----a-w   C:\Windows\System32\divx_xx07.dll
      2008-01-09 11:16   81,920   ----a-w   C:\Windows\System32\dpl100.dll
      2008-01-09 11:16   802,816   ----a-w   C:\Windows\System32\divx_xx11.dll
      2008-01-09 11:16   682,496   ----a-w   C:\Windows\System32\DivX.dll
      2008-01-09 11:16   196,608   ----a-w   C:\Windows\System32\dtu100.dll
      2008-01-02 01:14   ---------   d-----w   C:\Program Files\WoW-BurningCrusade-enGB-Slim-Installer
      2008-01-01 17:37   ---------   d-----w   C:\Program Files\Common Files\Blizzard Entertainment
      2008-01-01 17:25   ---------   d-----w   C:\Program Files\MSN Messenger
      2008-01-01 17:25   ---------   d-----w   C:\Program Files\Messenger Plus! Live
      2007-12-28 14:28   9,728   ----a-w   C:\Windows\System32\LAPRXY.DLL
      2007-12-28 14:28   223,232   ----a-w   C:\Windows\System32\WMASF.DLL
      2007-12-28 14:28   1,327,104   ----a-w   C:\Windows\System32\quartz.dll
      2007-12-28 14:24   84,992   ----a-w   C:\Windows\system32\drivers\srvnet.sys
      2007-12-28 14:24   58,368   ----a-w   C:\Windows\system32\drivers\mrxsmb20.sys
      2007-12-28 14:24   130,048   ----a-w   C:\Windows\system32\drivers\srv2.sys
      2007-12-28 14:24   101,888   ----a-w   C:\Windows\system32\drivers\mrxsmb.sys
      2007-12-22 23:03   91,472   ----a-w   C:\Windows\System32\Erasext.dll
      2007-12-22 23:03   41,296   ----a-w   C:\Windows\System32\Eraserl.exe
      2007-12-22 23:03   316,752   ----a-w   C:\Windows\System32\Eraser.dll
      2007-12-14 09:32   12,632   ----a-w   C:\Windows\System32\lsdelete.exe
      2007-12-11 19:44   593,920   ----a-w   C:\Windows\System32\dpuGUI11.dll
      2007-12-11 19:44   57,344   ----a-w   C:\Windows\System32\dpv11.dll
      2007-09-15 07:19   32,768   --sha-w   C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007091520070916\index.dat
      2007-09-15 07:19   32,768   --sha-w   C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat
      .

      (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{57f03a16-90c2-42d4-8c69-63678b852ec1}]
               C:\Windows\system32\jxjcwtoo.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7DD3EFCD-73E9-450A-9951-7D33B838C68B}]
               C:\Windows\system32\iifgg.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{91451717-7CEA-4FE2-B9AA-D16F5D7C85E8}]
               C:\Windows\system32\wvwxu.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9FB4F3DE-A46E-4587-BE93-AC21039C47B5}]
               C:\Windows\system32\byxyx.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AECED78C-C3BA-40D9-B7E2-65F76CDFC80A}]
               C:\Windows\system32\iifec.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D7348181-D8E3-4010-9309-0FC1C9CC7C65}]
               C:\Windows\system32\pmnll.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 14:48 1232896]
      "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ]
      "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55 5674352]
      "BitTorrent DNA"="C:\Program Files\BitTorrent_DNA\dna.exe" [ ]
      "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
      "Steam"="C:\Program Files\Steam\Steam.exe" [ ]
      "DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [ ]
      "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [ ]
      "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "MSServer"="C:\Windows\system32\mllmk.dll" [ ]
      "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-08-14 07:59 1006264]
      "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [ ]
      "JMB36X IDE Setup"="C:\Windows\JM\JMInsIDE.exe" [ ]
      "Norman ZANDA"="C:\Program Files\Norman\Npm\bin\ZLH.exe" [ ]
      "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [ ]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
      "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-12 05:28 86016]
      "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-12 05:28 8497696]
      "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-12 05:28 81920]
      "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2008-01-20 09:05 217088]
      "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
      "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]
      "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-02-16 18:51 579072]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]
      "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-02-16 18:43 219136]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "EnableLUA"= 0 (0x0)

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
      avgwlntf.dll 2008-02-16 18:44 9216 C:\Windows\System32\avgwlntf.dll

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
      Authentication Packages   REG_MULTI_SZ    msv1_0 C:\Windows\system32\xxwvu.dll

      R2 Ndiskio;Ndiskio;C:\Program Files\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 09:55]
      R3 AvgWFP;AVG7 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfp.sys [2008-02-16 18:50]
      R3 NvcMFlt;NvcMFlt;C:\Windows\system32\DRIVERS\nvcv32mf.sys [2007-09-06 09:45]
      R3 nvcoas;Norman Virus Control on-access component;C:\Program Files\Norman\Nvc\bin\nvcoas.exe [2007-12-12 11:45]
      R3 NVCScheduler;Norman Virus Control Scheduler;C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 12:23]
      R3 RTL8169;Realtek 8169 NT Driver;C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 09:30]
      S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-01-11 22:24]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\N]
      \shell\AutoRun\command - N:\Autorun.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1b3e4f08-86e6-11dc-9807-001bfc774f09}]
      \shell\AutoRun\command - J:\Autorun.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{515be8d5-d7cc-11dc-9131-001bfc774f09}]
      \shell\AutoRun\command - P:\LaunchU3.exe -a

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{beab3b73-499f-11dc-aa7c-806e6f6e6963}]
      \shell\AutoRun\command - E:\N5610XpressMusic.exe

      .
      'Ajoitetut tehtävät'-kansion sisältö
      "2008-02-17 01:30:00 C:\Windows\Tasks\RegistrySmart Scheduled Scan.job"
      - C:\Program Files\RegistrySmart\RegistrySmart.ex
      - C:\Program Files\RegistrySmart
      "2008-02-17 11:23:00 C:\Windows\Tasks\Tarkistetaan Windows Live -työkalurivin päivitykset.job"

      Äänestä

    • apuwah kirjoitti:

      en saanu SDfixiä toimiin ku se ei näköjään toimi vistalla mutta tässä olis tämä combofixin logi

      ============================================

      ComboFix 08-02-16.2 - Omistaja 2008-02-17 12:41:02.7 - NTFSx86
      Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1167 [GMT 2:00]
      Running from: C:\Users\Omistaja\Desktop\ComboFix.exe
      .

      (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\Windows\System32\fnenbpmj.ini
      C:\Windows\System32\gijlm.ini
      C:\Windows\System32\gijlm.ini2
      C:\Windows\System32\ifxvaeyg.ini
      C:\Windows\system32\mljig.dll
      C:\Windows\System32\uvwxx.ini
      C:\Windows\System32\uvwxx.ini2
      C:\Windows\system32\xxwvu.dll
      .
      ---- Previous Run -------
      .
      C:\Windows\system32\geeec.dll
      C:\Windows\system32\rqrol.dll
      C:\Windows\system32\urqpm.dll
      C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
      C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat . . . . poisto epäonnistui
      C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
      C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat . . . . poisto epäonnistui
      C:\Windows\System32\1.exe
      C:\Windows\System32\amlygfgd.ini
      C:\Windows\system32\awvss.dll
      C:\Windows\system32\axiynldv.dll
      C:\Windows\system32\byvvvvt.dll
      C:\Windows\System32\ceeeg.ini
      C:\Windows\System32\ceeeg.ini2
      C:\Windows\System32\cefii.ini
      C:\Windows\System32\cefii.ini2
      C:\Windows\System32\cjsgafec.ini
      C:\Windows\system32\command.exe
      C:\Windows\System32\dbfgyaoe.ini
      C:\Windows\system32\ddaby.dll
      C:\Windows\System32\elsrrcvc.ini
      C:\Windows\System32\eswvoiur.ini
      C:\Windows\System32\fehhk.ini
      C:\Windows\System32\fehhk.ini2
      C:\Windows\System32\frjimkgn.ini
      C:\Windows\system32\fxjutgdk.dll
      C:\Windows\system32\gebay.dll
      C:\Windows\system32\gebxvss.dll
      C:\Windows\system32\geeec.dll
      C:\Windows\System32\ggfii.ini
      C:\Windows\System32\ggfii.ini2
      C:\Windows\System32\ghtuuiso.ini
      C:\Windows\System32\glwmcwke.ini
      C:\Windows\System32\grxavrgt.ini
      C:\Windows\System32\hssfufot.ini
      C:\Windows\system32\iiijjhh.dll
      C:\Windows\system32\jkkjhhh.dll
      C:\Windows\System32\kdgtujxf.ini
      C:\Windows\system32\khhef.dll
      C:\Windows\System32\leiecheu.ini
      C:\Windows\System32\lorqr.ini
      C:\Windows\System32\lorqr.ini2
      C:\Windows\System32\mpqru.ini
      C:\Windows\System32\mpqru.ini2
      C:\Windows\system32\ngkmijrf.dll
      C:\Windows\System32\nimoqvuu.ini
      C:\Windows\system32\oauegqyr.dll
      C:\Windows\System32\orjrcptx.ini
      C:\Windows\system32\osiuuthg.dll
      C:\Windows\System32\otsfxqyx.ini
      C:\Windows\System32\oyrxdtgo.ini
      C:\Windows\System32\pqehlivl.ini
      C:\Windows\system32\qjtlhwlh.dll
      C:\Windows\system32\qopnkig.dll
      C:\Windows\system32\qybhiuwn.dll
      C:\Windows\system32\rqoon.dll
      C:\Windows\system32\rqrol.dll
      C:\Windows\System32\sekbdkoy.ini
      C:\Windows\System32\ssvwa.ini
      C:\Windows\System32\ssvwa.ini2
      C:\Windows\system32\tuvuu.dll
      C:\Windows\System32\tvyxx.ini
      C:\Windows\System32\tvyxx.ini2
      C:\Windows\system32\urqpm.dll
      C:\Windows\System32\uuvut.ini
      C:\Windows\System32\uuvut.ini2
      C:\Windows\System32\uxwvw.ini
      C:\Windows\System32\uxwvw.ini2
      C:\Windows\System32\vdlnyixa.ini
      C:\Windows\system32\wwbabtdy.dll
      C:\Windows\system32\wvusttq.dll
      C:\Windows\System32\vwynodqi.ini
      C:\Windows\system32\xxyvt.dll
      C:\Windows\System32\xyxyb.ini
      C:\Windows\System32\xyxyb.ini2
      C:\Windows\system32\yabawwu.dll
      C:\Windows\system32\yabby.dll
      C:\Windows\System32\yabeg.ini
      C:\Windows\System32\yabeg.ini2
      C:\Windows\System32\ybadd.ini
      C:\Windows\System32\ybadd.ini2
      C:\Windows\System32\ybbay.ini
      C:\Windows\System32\ybbay.ini2
      C:\Windows\System32\ydtbabww.ini
      C:\Windows\System32\ylxxkocy.ini
      C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat . . . . poisto epäonnistui
      C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat . . . . poisto epäonnistui

      .
      ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-01-17 to 2008-02-17 )))))))))))))))))
      .

      Tiedostoja ei ole luotu tällä aikavälillä

      .
      (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-02-17 11:29   ---------   d-----w   C:\Program Files\Norman
      2008-02-17 09:58   24,576   ----a-w   C:\Windows\System32\VundoFixSVC.exe
      2008-02-17 08:49   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\AVG7
      2008-02-16 16:55   ---------   d-----w   C:\ProgramData\avg7
      2008-02-16 16:50   55,304   ----a-w   C:\Windows\system32\drivers\avgwfp.sys
      2008-02-16 16:44   9,216   ----a-w   C:\Windows\System32\avgwlntf.dll
      2008-02-16 16:43   ---------   d-----w   C:\ProgramData\Grisoft
      2008-02-16 14:53   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Nokia Multimedia Player
      2008-02-16 11:42   ---------   d-----w   C:\Program Files\World of Warcraft
      2008-02-16 11:40   ---------   d-----w   C:\Program Files\WoW-FE
      2008-02-15 18:53   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Nokia
      2008-02-15 18:09   ---------   d-----w   C:\ProgramData\PC Suite
      2008-02-15 17:11   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\PC Suite
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\Nokia
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\DIFX
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\Common Files\PCSuite
      2008-02-15 17:08   ---------   d-----w   C:\Program Files\Common Files\Nokia
      2008-02-15 17:07   ---------   d-----w   C:\Program Files\PC Connectivity Solution
      2008-02-15 17:05   ---------   d-----w   C:\ProgramData\Installations
      2008-02-15 16:53   60,416   ----a-w   C:\Windows\system32\drivers\ComboFix.sys
      2008-02-13 21:53   194,560   ----a-w   C:\Windows\System32\WebClnt.dll
      2008-02-13 21:53   110,080   ----a-w   C:\Windows\system32\drivers\mrxdav.sys
      2008-02-13 21:49   803,328   ----a-w   C:\Windows\system32\drivers\tcpip.sys
      2008-02-13 21:47   824,832   ----a-w   C:\Windows\System32\wininet.dll
      2008-02-13 21:47   56,320   ----a-w   C:\Windows\System32\iesetup.dll
      2008-02-13 21:47   52,736   ----a-w   C:\Windows\AppPatch\iebrshim.dll
      2008-02-13 21:47   26,624   ----a-w   C:\Windows\System32\ieUnatt.exe
      2008-02-13 21:45   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\BitTorrent
      2008-02-10 01:30   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\RegistrySmart
      2008-02-06 18:18   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Grisoft
      2008-02-06 13:37   ---------   d-----w   C:\Program Files\Trend Micro
      2008-02-05 19:34   ---------   d-----w   C:\Program Files\IZArc
      2008-02-05 17:35   ---------   d-----w   C:\ProgramData\Lavasoft
      2008-02-05 17:35   ---------   d-----w   C:\Program Files\Lavasoft
      2008-02-05 17:15   ---------   d-----w   C:\Program Files\Eraser
      2008-02-05 16:03   ---------   d-----w   C:\Program Files\PowerISO
      2008-02-03 21:14   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\SecondLife
      2008-02-03 21:13   ---------   d-----w   C:\Program Files\SecondLife
      2008-01-31 20:27   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\gtk-2.0
      2008-01-31 14:55   ---------   d-----w   C:\Program Files\DAEMON Tools SearchBar
      2008-01-31 14:55   ---------   d-----w   C:\Program Files\DAEMON Tools Pro
      2008-01-27 18:58   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\LimeWire
      2008-01-25 20:58   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Dr. DivX 2.0 OSS
      2008-01-25 15:21   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\Media Player Classic
      2008-01-25 14:57   ---------   d-----w   C:\Program Files\DivX
      2008-01-25 12:27   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\DivX
      2008-01-20 07:07   33,292   ----a-w   C:\Windows\system32\drivers\scdemu.sys
      2008-01-19 10:34   ---------   d-----w   C:\ProgramData\NVIDIA
      2008-01-19 01:58   229,888   ----a-w   C:\Windows\System32\msshsq.dll
      2008-01-19 01:57   ---------   d-----w   C:\ProgramData\Microsoft Help
      2008-01-18 14:44   ---------   d-----w   C:\Users\Omistaja\AppData\Roaming\BitTorrent DNA
      2008-01-18 13:02   ---------   d-----w   C:\ProgramData\Media Center Programs
      2008-01-18 12:38   ---------   d-----w   C:\Program Files\Electronic Arts
      2008-01-17 22:38   ---------   d-----w   C:\Program Files\Diablo II
      2008-01-17 20:46   ---------   d-----w   C:\Program Files\GameSpy
      2008-01-17 20:45   669,184   ----a-w   C:\Windows\System32\pbsvc.exe
      2008-01-17 20:45   66,872   ----a-w   C:\Windows\System32\PnkBstrA.exe
      2008-01-17 20:45   22,328   ----a-w   C:\Windows\system32\drivers\PnkBstrK.sys
      2008-01-17 20:45   22,328   ----a-w   C:\Users\Omistaja\AppData\Roaming\PnkBstrK.sys
      2008-01-17 20:45   103,736   ----a-w   C:\Windows\System32\PnkBstrB.exe
      2008-01-17 19:59   ---------   d-----w   C:\Program Files\Steam
      2008-01-17 19:59   ---------   d-----w   C:\Program Files\Picasa2
      2008-01-17 19:59   ---------   d-----w   C:\Program Files\BitTorrent_DNA
      2008-01-17 19:53   107,888   ----a-w   C:\Windows\System32\CmdLineExt.dll
      2008-01-17 19:53   ---------   d--h--r   C:\Users\Omistaja\AppData\Roaming\SecuROM
      2008-01-15 14:22   ---------   d-----w   C:\Program Files\Google
      2008-01-12 09:55   ---------   d-----w   C:\Program Files\Common Files\Steam
      2008-01-10 12:51   ---------   d-----w   C:\Program Files\Windows Sidebar
      2008-01-10 12:51   ---------   d-----w   C:\Program Files\Windows Mail
      2008-01-10 12:48   211,000   ----a-w   C:\Windows\system32\drivers\volsnap.sys
      2008-01-10 12:48   11,776   ----a-w   C:\Windows\System32\sbunattend.exe
      2008-01-10 12:48   1,060,920   ----a-w   C:\Windows\system32\drivers\ntfs.sys
      2008-01-10 05:50   1,244,672   ----a-w   C:\Windows\System32\mcmde.dll
      2008-01-09 11:18   524,288   ----a-w   C:\Windows\System32\DivXsm.exe
      2008-01-09 11:18   3,596,288   ----a-w   C:\Windows\System32\qt-dx331.dll
      2008-01-09 11:18   200,704   ----a-w   C:\Windows\System32\ssldivx.dll
      2008-01-09 11:18   1,044,480   ----a-w   C:\Windows\System32\libdivx.dll
      2008-01-09 11:16   823,296   ----a-w   C:\Windows\System32\divx_xx0c.dll
      2008-01-09 11:16   823,296   ----a-w   C:\Windows\System32\divx_xx07.dll
      2008-01-09 11:16   81,920   ----a-w   C:\Windows\System32\dpl100.dll
      2008-01-09 11:16   802,816   ----a-w   C:\Windows\System32\divx_xx11.dll
      2008-01-09 11:16   682,496   ----a-w   C:\Windows\System32\DivX.dll
      2008-01-09 11:16   196,608   ----a-w   C:\Windows\System32\dtu100.dll
      2008-01-02 01:14   ---------   d-----w   C:\Program Files\WoW-BurningCrusade-enGB-Slim-Installer
      2008-01-01 17:37   ---------   d-----w   C:\Program Files\Common Files\Blizzard Entertainment
      2008-01-01 17:25   ---------   d-----w   C:\Program Files\MSN Messenger
      2008-01-01 17:25   ---------   d-----w   C:\Program Files\Messenger Plus! Live
      2007-12-28 14:28   9,728   ----a-w   C:\Windows\System32\LAPRXY.DLL
      2007-12-28 14:28   223,232   ----a-w   C:\Windows\System32\WMASF.DLL
      2007-12-28 14:28   1,327,104   ----a-w   C:\Windows\System32\quartz.dll
      2007-12-28 14:24   84,992   ----a-w   C:\Windows\system32\drivers\srvnet.sys
      2007-12-28 14:24   58,368   ----a-w   C:\Windows\system32\drivers\mrxsmb20.sys
      2007-12-28 14:24   130,048   ----a-w   C:\Windows\system32\drivers\srv2.sys
      2007-12-28 14:24   101,888   ----a-w   C:\Windows\system32\drivers\mrxsmb.sys
      2007-12-22 23:03   91,472   ----a-w   C:\Windows\System32\Erasext.dll
      2007-12-22 23:03   41,296   ----a-w   C:\Windows\System32\Eraserl.exe
      2007-12-22 23:03   316,752   ----a-w   C:\Windows\System32\Eraser.dll
      2007-12-14 09:32   12,632   ----a-w   C:\Windows\System32\lsdelete.exe
      2007-12-11 19:44   593,920   ----a-w   C:\Windows\System32\dpuGUI11.dll
      2007-12-11 19:44   57,344   ----a-w   C:\Windows\System32\dpv11.dll
      2007-09-15 07:19   32,768   --sha-w   C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007091520070916\index.dat
      2007-09-15 07:19   32,768   --sha-w   C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat
      .

      (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{57f03a16-90c2-42d4-8c69-63678b852ec1}]
               C:\Windows\system32\jxjcwtoo.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7DD3EFCD-73E9-450A-9951-7D33B838C68B}]
               C:\Windows\system32\iifgg.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{91451717-7CEA-4FE2-B9AA-D16F5D7C85E8}]
               C:\Windows\system32\wvwxu.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9FB4F3DE-A46E-4587-BE93-AC21039C47B5}]
               C:\Windows\system32\byxyx.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AECED78C-C3BA-40D9-B7E2-65F76CDFC80A}]
               C:\Windows\system32\iifec.dll

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D7348181-D8E3-4010-9309-0FC1C9CC7C65}]
               C:\Windows\system32\pmnll.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 14:48 1232896]
      "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ]
      "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55 5674352]
      "BitTorrent DNA"="C:\Program Files\BitTorrent_DNA\dna.exe" [ ]
      "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
      "Steam"="C:\Program Files\Steam\Steam.exe" [ ]
      "DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [ ]
      "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [ ]
      "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "MSServer"="C:\Windows\system32\mllmk.dll" [ ]
      "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-08-14 07:59 1006264]
      "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [ ]
      "JMB36X IDE Setup"="C:\Windows\JM\JMInsIDE.exe" [ ]
      "Norman ZANDA"="C:\Program Files\Norman\Npm\bin\ZLH.exe" [ ]
      "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [ ]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
      "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-12 05:28 86016]
      "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-12 05:28 8497696]
      "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-12 05:28 81920]
      "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2008-01-20 09:05 217088]
      "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
      "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]
      "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-02-16 18:51 579072]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]
      "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-02-16 18:43 219136]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "EnableLUA"= 0 (0x0)

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
      avgwlntf.dll 2008-02-16 18:44 9216 C:\Windows\System32\avgwlntf.dll

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
      Authentication Packages   REG_MULTI_SZ    msv1_0 C:\Windows\system32\xxwvu.dll

      R2 Ndiskio;Ndiskio;C:\Program Files\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 09:55]
      R3 AvgWFP;AVG7 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfp.sys [2008-02-16 18:50]
      R3 NvcMFlt;NvcMFlt;C:\Windows\system32\DRIVERS\nvcv32mf.sys [2007-09-06 09:45]
      R3 nvcoas;Norman Virus Control on-access component;C:\Program Files\Norman\Nvc\bin\nvcoas.exe [2007-12-12 11:45]
      R3 NVCScheduler;Norman Virus Control Scheduler;C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 12:23]
      R3 RTL8169;Realtek 8169 NT Driver;C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 09:30]
      S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-01-11 22:24]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\N]
      \shell\AutoRun\command - N:\Autorun.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1b3e4f08-86e6-11dc-9807-001bfc774f09}]
      \shell\AutoRun\command - J:\Autorun.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{515be8d5-d7cc-11dc-9131-001bfc774f09}]
      \shell\AutoRun\command - P:\LaunchU3.exe -a

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{beab3b73-499f-11dc-aa7c-806e6f6e6963}]
      \shell\AutoRun\command - E:\N5610XpressMusic.exe

      .
      'Ajoitetut tehtävät'-kansion sisältö
      "2008-02-17 01:30:00 C:\Windows\Tasks\RegistrySmart Scheduled Scan.job"
      - C:\Program Files\RegistrySmart\RegistrySmart.ex
      - C:\Program Files\RegistrySmart
      "2008-02-17 11:23:00 C:\Windows\Tasks\Tarkistetaan Windows Live -työkalurivin päivitykset.job"

      scannaa uusi hjt:n loki

      Äänestä

    • 123321 kirjoitti:

      scannaa uusi hjt:n loki

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 00:37, on 2008-02-19
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16609)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\PowerISO\PWRISOVM.EXE
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Grisoft\AVG7\avgcc.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O2 - BHO: {1ce258b8-7636-96c8-4d24-2c0961a30f75} - {57f03a16-90c2-42d4-8c69-63678b852ec1} - C:\Windows\system32\jxjcwtoo.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7DD3EFCD-73E9-450A-9951-7D33B838C68B} - C:\Windows\system32\iifgg.dll (file missing)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {91451717-7CEA-4FE2-B9AA-D16F5D7C85E8} - C:\Windows\system32\wvwxu.dll (file missing)
      O2 - BHO: (no name) - {9FB4F3DE-A46E-4587-BE93-AC21039C47B5} - C:\Windows\system32\byxyx.dll (file missing)
      O2 - BHO: (no name) - {AECED78C-C3BA-40D9-B7E2-65F76CDFC80A} - C:\Windows\system32\iifec.dll (file missing)
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: (no name) - {D7348181-D8E3-4010-9309-0FC1C9CC7C65} - C:\Windows\system32\pmnll.dll (file missing)
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mllmk.dll,#1
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
      O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
      O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
      O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
      O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O13 - Gopher Prefix:
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
      O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
      O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe

      --
      End of file - 8387 bytes

      Äänestä

    • apuwah kirjoitti:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 00:37, on 2008-02-19
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16609)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\PowerISO\PWRISOVM.EXE
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Grisoft\AVG7\avgcc.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O2 - BHO: {1ce258b8-7636-96c8-4d24-2c0961a30f75} - {57f03a16-90c2-42d4-8c69-63678b852ec1} - C:\Windows\system32\jxjcwtoo.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7DD3EFCD-73E9-450A-9951-7D33B838C68B} - C:\Windows\system32\iifgg.dll (file missing)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {91451717-7CEA-4FE2-B9AA-D16F5D7C85E8} - C:\Windows\system32\wvwxu.dll (file missing)
      O2 - BHO: (no name) - {9FB4F3DE-A46E-4587-BE93-AC21039C47B5} - C:\Windows\system32\byxyx.dll (file missing)
      O2 - BHO: (no name) - {AECED78C-C3BA-40D9-B7E2-65F76CDFC80A} - C:\Windows\system32\iifec.dll (file missing)
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: (no name) - {D7348181-D8E3-4010-9309-0FC1C9CC7C65} - C:\Windows\system32\pmnll.dll (file missing)
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mllmk.dll,#1
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
      O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
      O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
      O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
      O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O13 - Gopher Prefix:
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
      O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
      O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe

      --
      End of file - 8387 bytes

      scannaa hjt:llä merkka paina Fix checked

      O2 - BHO: (no name) - {7DD3EFCD-73E9-450A-9951-7D33B838C68B} - C:\Windows\system32\iifgg.dll (file missing)
      O2 - BHO: (no name) - {7DD3EFCD-73E9-450A-9951-7D33B838C68B} - C:\Windows\system32\iifgg.dll (file missing)
      O2 - BHO: (no name) - {91451717-7CEA-4FE2-B9AA-D16F5D7C85E8} - C:\Windows\system32\wvwxu.dll (file missing)
      O2 - BHO: (no name) - {9FB4F3DE-A46E-4587-BE93-AC21039C47B5} - C:\Windows\system32\byxyx.dll (file missing)
      O2 - BHO: (no name) - {AECED78C-C3BA-40D9-B7E2-65F76CDFC80A} - C:\Windows\system32\iifec.dll (file missing)
      O2 - BHO: (no name) - {D7348181-D8E3-4010-9309-0FC1C9CC7C65} - C:\Windows\system32\pmnll.dll (file missing)
      O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mllmk.dll,#1

      ===============

      Koneella kaksi virustorjuntaa avg ja norman
      poista toinen

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    apuwah kirjoitti:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:13:21, on 16.2.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\PowerISO\PWRISOVM.EXE
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\xxwxw.dll,#1
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [32aa9646] rundll32.exe "C:\Windows\system32\wwbabtdy.dll",b
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
    O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
    O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 6838 bytes

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu