Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Logi

    Logfile of HijackThis v1.99.1
    Scan saved at 17:14:20, on 18.2.2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Sygate\SPF\smc.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\HDD Health\HDDHealth.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\WINDOWS\system32\svchost.exe
    c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Documents and Settings\Antti\Omat tiedostot\Sekalaisia\sekalaista\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKLM\..\Run: [588fd45c] rundll32.exe "C:\WINDOWS\system32\viaeeygq.dll",b
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: thoosje's sidebar.lnk = ?
    O4 - Global Startup: Service Manager.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.0 Control) - https://ssl.extrafilm.org/upload/activex/ImageUploader3.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O21 - SSODL: ComponentAlrt - {781f58cf-0ec0-490d-b40a-998e19daea00} - C:\WINDOWS\Installer\{781f58cf-0ec0-490d-b40a-998e19daea00}\ComponentAlrt.dll
    O21 - SSODL: zip - {c64bd827-dcc6-45d8-9b21-1147bbfcfe03} - C:\WINDOWS\Installer\{c64bd827-dcc6-45d8-9b21-1147bbfcfe03}\zip.dll
    O21 - SSODL: SrvMon - {4437a441-5d3b-4b49-aa19-a40b50e9e058} - C:\WINDOWS\Installer\{4437a441-5d3b-4b49-aa19-a40b50e9e058}\SrvMon.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Pinnacle Systems tvtv Spooler (EpgSpooler) - - c:\progra~1\pinnacle\mediac~1\epgspo~2.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Norman Type-R - Unknown owner - C:\Norman\Npf\BIN\NPFSVICE.EXE (file missing)
    O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
    4510
    Äänestä

    Muut lukivat myös

    Vastaukset 4

    Vanhimmat

    Lataa VundoFix.exe
    http://www.atribune.org/ccount/click.php?id=4 työpöydällesi.

    •   Tupla-klikkaa VundoFix.exe ajaaksesi sen.
    •   Klikkaa Scan for Vundo valintaa.
    •   Kun skannaus on valmis, klikkaa Remove Vundo valintaa.
    •   Sinulta kysytään haluatko poistaa filut - klikkaa YES.
    •   Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
    •   Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK.
    •   Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö.


    Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
    Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.

    =====

    Javan päivitys ja välimuistin tyhjennys:

    1. Klikkaa Käynnistä -> Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa.
    2. Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... )
    Niissä pitäisi olla seuraava kuva vieressä:
    http://users.telenet.be/bluepatchy/miekiemoes/images/javaicon.jpg
    3. Valitse kaikki entiset Java versiosi ja valitse Poista.
    4. Asenna uusin Java päivitys seuraavasta linkistä..
    5. Käynnistä kone uudelleen asennuksen jälkeen:
    http://java.sun.com/javase/downloads/index.jsp
    Rullaa alas kohteeseen Java Runtime Environment (JRE) 6u4
    Paina Download
    Ruksaa Accept, ota offline installation, tallenna vaikka työpöydälle ja asenna se.
    6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
    7. General Settings -osion alla, vedä liukusäädintä (Disk Space) pienemmälle, ja klikkaa Delete Files -nappia.

    (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
    Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle).

    8. Varmista että kaikki kaksi valintaa ovat rastitettuja:
    *Applications and Applets
    *Trace and Log Files
    Ja paina OK -nappia
    9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.
    10. Klikkaa OK jättääksesi Java asetusikkunasi.

    ============

    Laita tuo omaan kansioon

    C:\Documents and Settings\Antti\Omat tiedostot\Sekalaisia\sekalaista\==> HijackThis.exe > scanneri

    Äänestä

    • VundoFix V6.7.8

      Checking Java version...

      Java version is 1.5.0.10

      Scan started at 16:53:55 20.2.2008

      Listing files found while scanning....

      C:\WINDOWS\system32\cvckjylc.dll
      C:\WINDOWS\system32\esowjljg.dll
      C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\gebyx.dll
      C:\WINDOWS\system32\kpkvuwly.dll
      C:\WINDOWS\system32\xybeg.ini
      C:\WINDOWS\system32\xybeg.ini2
      C:\WINDOWS\system32\yjpfihcr.dll
      C:\WINDOWS\system32\ylwuvkpk.ini

      Beginning removal...

      Attempting to delete C:\WINDOWS\system32\cvckjylc.dll
      C:\WINDOWS\system32\cvckjylc.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\esowjljg.dll
      C:\WINDOWS\system32\esowjljg.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\gebbxvt.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\gebyx.dll
      C:\WINDOWS\system32\gebyx.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\kpkvuwly.dll
      C:\WINDOWS\system32\kpkvuwly.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\xybeg.ini
      C:\WINDOWS\system32\xybeg.ini Has been deleted!

      Attempting to delete C:\WINDOWS\system32\xybeg.ini2
      C:\WINDOWS\system32\xybeg.ini2 Has been deleted!

      Attempting to delete C:\WINDOWS\system32\yjpfihcr.dll
      C:\WINDOWS\system32\yjpfihcr.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\ylwuvkpk.ini
      C:\WINDOWS\system32\ylwuvkpk.ini Has been deleted!

      Performing Repairs to the registry.
      Done!

      Beginning removal...

      Attempting to delete C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\gebbxvt.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\kpkvuwly.dll
      C:\WINDOWS\system32\kpkvuwly.dll Could not be deleted.

      Performing Repairs to the registry.
      Done!
      =========================================================================

      Logfile of HijackThis v1.99.1
      Scan saved at 17:31:05, on 20.2.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
      C:\WINDOWS\system32\svchost.exe
      c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\DAEMON Tools\daemon.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
      C:\Program Files\HDD Health\HDDHealth.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
      C:\WINDOWS\system32\msiexec.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\HJT\Scanneri.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: {6d05aac4-d767-f979-2914-526c47e677b0} - {0b776e74-c625-4192-979f-767d4caa50d6} - C:\WINDOWS\system32\xlsylgvp.dll
      O2 - BHO: MSEvents Object - {0E0A2AD5-1ADC-4EC3-90FC-0FB793C9259E} - C:\WINDOWS\system32\gebbxvt.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: (no name) - {67F27F47-F915-434B-B1E2-A2D07E7574DE} - C:\WINDOWS\system32\mljgg.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {83666C13-B585-44E8-9F1B-D685B493F8B4} - (no file)
      O2 - BHO: (no name) - {A635411D-A824-4F04-9445-6E587F78F993} - C:\WINDOWS\system32\gebyx.dll (file missing)
      O2 - BHO: (no name) - {D1034108-836E-4768-A43A-6F4FD214BEC2} - (no file)
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
      O4 - HKLM\..\Run: [588fd45c] rundll32.exe "C:\WINDOWS\system32\bblnwrsy.dll",b
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
      O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.0 Control) - https://ssl.extrafilm.org/upload/activex/ImageUploader3.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O21 - SSODL: ComponentAlrt - {781f58cf-0ec0-490d-b40a-998e19daea00} - C:\WINDOWS\Installer\{781f58cf-0ec0-490d-b40a-998e19daea00}\ComponentAlrt.dll
      O21 - SSODL: zip - {ce0b9428-2f93-4d61-82de-52d560d464fa} - C:\WINDOWS\Installer\{ce0b9428-2f93-4d61-82de-52d560d464fa}\zip.dll
      O21 - SSODL: SrvMon - {4437a441-5d3b-4b49-aa19-a40b50e9e058} - C:\WINDOWS\Installer\{4437a441-5d3b-4b49-aa19-a40b50e9e058}\SrvMon.dll
      O21 - SSODL: AvpDrv - {e30e2eb5-e792-46b4-be25-b6c1a0955e63} - C:\WINDOWS\Installer\{e30e2eb5-e792-46b4-be25-b6c1a0955e63}\AvpDrv.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: Pinnacle Systems tvtv Spooler (EpgSpooler) - - c:\progra~1\pinnacle\mediac~1\epgspo~2.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Norman Type-R - Unknown owner - C:\Norman\Npf\BIN\NPFSVICE.EXE (file missing)
      O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      Äänestä

    • desklet kirjoitti:

      VundoFix V6.7.8

      Checking Java version...

      Java version is 1.5.0.10

      Scan started at 16:53:55 20.2.2008

      Listing files found while scanning....

      C:\WINDOWS\system32\cvckjylc.dll
      C:\WINDOWS\system32\esowjljg.dll
      C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\gebyx.dll
      C:\WINDOWS\system32\kpkvuwly.dll
      C:\WINDOWS\system32\xybeg.ini
      C:\WINDOWS\system32\xybeg.ini2
      C:\WINDOWS\system32\yjpfihcr.dll
      C:\WINDOWS\system32\ylwuvkpk.ini

      Beginning removal...

      Attempting to delete C:\WINDOWS\system32\cvckjylc.dll
      C:\WINDOWS\system32\cvckjylc.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\esowjljg.dll
      C:\WINDOWS\system32\esowjljg.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\gebbxvt.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\gebyx.dll
      C:\WINDOWS\system32\gebyx.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\kpkvuwly.dll
      C:\WINDOWS\system32\kpkvuwly.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\xybeg.ini
      C:\WINDOWS\system32\xybeg.ini Has been deleted!

      Attempting to delete C:\WINDOWS\system32\xybeg.ini2
      C:\WINDOWS\system32\xybeg.ini2 Has been deleted!

      Attempting to delete C:\WINDOWS\system32\yjpfihcr.dll
      C:\WINDOWS\system32\yjpfihcr.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\ylwuvkpk.ini
      C:\WINDOWS\system32\ylwuvkpk.ini Has been deleted!

      Performing Repairs to the registry.
      Done!

      Beginning removal...

      Attempting to delete C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\gebbxvt.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\kpkvuwly.dll
      C:\WINDOWS\system32\kpkvuwly.dll Could not be deleted.

      Performing Repairs to the registry.
      Done!
      =========================================================================

      Logfile of HijackThis v1.99.1
      Scan saved at 17:31:05, on 20.2.2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
      C:\WINDOWS\system32\svchost.exe
      c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\DAEMON Tools\daemon.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
      C:\Program Files\HDD Health\HDDHealth.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
      C:\WINDOWS\system32\msiexec.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\HJT\Scanneri.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: {6d05aac4-d767-f979-2914-526c47e677b0} - {0b776e74-c625-4192-979f-767d4caa50d6} - C:\WINDOWS\system32\xlsylgvp.dll
      O2 - BHO: MSEvents Object - {0E0A2AD5-1ADC-4EC3-90FC-0FB793C9259E} - C:\WINDOWS\system32\gebbxvt.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: (no name) - {67F27F47-F915-434B-B1E2-A2D07E7574DE} - C:\WINDOWS\system32\mljgg.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {83666C13-B585-44E8-9F1B-D685B493F8B4} - (no file)
      O2 - BHO: (no name) - {A635411D-A824-4F04-9445-6E587F78F993} - C:\WINDOWS\system32\gebyx.dll (file missing)
      O2 - BHO: (no name) - {D1034108-836E-4768-A43A-6F4FD214BEC2} - (no file)
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
      O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
      O4 - HKLM\..\Run: [588fd45c] rundll32.exe "C:\WINDOWS\system32\bblnwrsy.dll",b
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
      O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.0 Control) - https://ssl.extrafilm.org/upload/activex/ImageUploader3.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O21 - SSODL: ComponentAlrt - {781f58cf-0ec0-490d-b40a-998e19daea00} - C:\WINDOWS\Installer\{781f58cf-0ec0-490d-b40a-998e19daea00}\ComponentAlrt.dll
      O21 - SSODL: zip - {ce0b9428-2f93-4d61-82de-52d560d464fa} - C:\WINDOWS\Installer\{ce0b9428-2f93-4d61-82de-52d560d464fa}\zip.dll
      O21 - SSODL: SrvMon - {4437a441-5d3b-4b49-aa19-a40b50e9e058} - C:\WINDOWS\Installer\{4437a441-5d3b-4b49-aa19-a40b50e9e058}\SrvMon.dll
      O21 - SSODL: AvpDrv - {e30e2eb5-e792-46b4-be25-b6c1a0955e63} - C:\WINDOWS\Installer\{e30e2eb5-e792-46b4-be25-b6c1a0955e63}\AvpDrv.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: Pinnacle Systems tvtv Spooler (EpgSpooler) - - c:\progra~1\pinnacle\mediac~1\epgspo~2.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Norman Type-R - Unknown owner - C:\Norman\Npf\BIN\NPFSVICE.EXE (file missing)
      O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

      scannaa hjt.llä merkkaa pina fix checked

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {83666C13-B585-44E8-9F1B-D685B493F8B4} - (no file)
      O2 - BHO: (no name) - {A635411D-A824-4F04-9445-6E587F78F993} - C:\WINDOWS\system32\gebyx.dll (file missing)
      O2 - BHO: (no name) - {D1034108-836E-4768-A43A-6F4FD214BEC2} - (no file)
      O4 - HKLM\..\Run: [588fd45c] rundll32.exe "C:\WINDOWS\system32\bblnwrsy.dll",b
      O23 - Service: Norman Type-R - Unknown owner - C:\Norman\Npf\BIN\NPFSVICE.EXE (file missing)


      Kopioi / liitä seuraava teksti alapuolella tyhjään muistioFiluun
      Varmista että tiedoston tyyppi on ”all Files” ja tallenna se Poisto.bat. nimisenä
      työpöydällesi.

      @echo off
      sc stop ”Norman Type-R”
      sc delete ”Norman Type-R”

      Tupla-klikkaa Poisto.bat. filua työpöydälläsi , ikkuna avautuu ja Sulkeutuu tämä on normaalia.

      ------

      1.Lataa combofix.exe työpöydällesi yhdestä kolmesta linkistä:
      http://download.bleepingcomputer.com/sUBs/ComboFix.exe
      http://subs.geekstogo.com/ComboFix.exe

      2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
      3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
      Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

      Äänestä

    • 123321 kirjoitti:

      scannaa hjt.llä merkkaa pina fix checked

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {83666C13-B585-44E8-9F1B-D685B493F8B4} - (no file)
      O2 - BHO: (no name) - {A635411D-A824-4F04-9445-6E587F78F993} - C:\WINDOWS\system32\gebyx.dll (file missing)
      O2 - BHO: (no name) - {D1034108-836E-4768-A43A-6F4FD214BEC2} - (no file)
      O4 - HKLM\..\Run: [588fd45c] rundll32.exe "C:\WINDOWS\system32\bblnwrsy.dll",b
      O23 - Service: Norman Type-R - Unknown owner - C:\Norman\Npf\BIN\NPFSVICE.EXE (file missing)


      Kopioi / liitä seuraava teksti alapuolella tyhjään muistioFiluun
      Varmista että tiedoston tyyppi on ”all Files” ja tallenna se Poisto.bat. nimisenä
      työpöydällesi.

      @echo off
      sc stop ”Norman Type-R”
      sc delete ”Norman Type-R”

      Tupla-klikkaa Poisto.bat. filua työpöydälläsi , ikkuna avautuu ja Sulkeutuu tämä on normaalia.

      ------

      1.Lataa combofix.exe työpöydällesi yhdestä kolmesta linkistä:
      http://download.bleepingcomputer.com/sUBs/ComboFix.exe
      http://subs.geekstogo.com/ComboFix.exe

      2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
      3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
      Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

      ComboFix 08-02-20.2 - Antti 2008-02-20 23:36:02.1 - NTFSx86
      Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.501 [GMT 2:00]
      Running from: C:\Documents and Settings\Antti\Työpöytä\ComboFix.exe
      * Created a new restore point

      [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
      .

      (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\WINDOWS\system32\awtqp.dll
      C:\WINDOWS\cookies.ini
      C:\WINDOWS\system32\awtqp.dll
      C:\WINDOWS\system32\ehkicljm.ini
      C:\WINDOWS\system32\gebbxvt.dll
      C:\WINDOWS\system32\mcrh.tmp
      C:\WINDOWS\system32\pqtwa.ini
      C:\WINDOWS\system32\pqtwa.ini2
      C:\WINDOWS\system32\qgyeeaiv.ini
      C:\WINDOWS\system32\qyolqdbx.dll
      C:\WINDOWS\system32\rchifpjy.ini
      C:\WINDOWS\system32\thhniugt.dll
      C:\WINDOWS\system32\xbdqloyq.ini
      C:\WINDOWS\system32\xlsylgvp.dll
      C:\WINDOWS\system32\ysrwnlbb.ini

      .
      ((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2008-01-20 to 2008-02-20 )))))))))))))))))
      .

      2008-02-20 23:21 . 2008-02-20 23:21   12,288   --a------   C:\Program Files\tmp21750328.exe
      2008-02-20 23:21 . 2008-02-20 23:21   12,288   --a------   C:\Program Files\tmp21747421.exe
      2008-02-20 17:27 . 2008-02-20 23:28      d--------   C:\HJT
      2008-02-20 17:24 . 2008-02-20 18:13   318   --ahs----   C:\WINDOWS\system32\ggjlm.ini
      2008-02-20 17:17 . 2008-02-20 17:20   354   ---hs----   C:\WINDOWS\system32\ylwuvkpk.ini
      2008-02-20 15:29 . 2007-12-14 01:59   69,632   --a------   C:\WINDOWS\system32\javacpl.cpl
      2008-02-20 15:28 . 2008-02-20 15:28      d--------   C:\Program Files\Common Files\Java
      2008-02-20 00:34 . 2008-02-20 00:34      d--------   C:\Program Files\uTorrent
      2008-02-19 16:56 . 2008-02-20 17:17      d--------   C:\VundoFix Backups
      2008-02-18 13:15 . 2008-02-18 13:16      d--------   C:\Documents and Settings\All Users\Application Data\Lavasoft
      2008-02-18 13:08 . 2008-02-18 13:08   230   --a------   C:\WINDOWS\system32\spupdsvc.inf
      2008-02-18 12:58 . 2008-02-18 12:58      d--------   C:\Program Files\SysCleaner
      2008-02-17 18:05 . 2008-02-17 18:05   54,156   --ah-----   C:\WINDOWS\QTFont.qfn
      2008-02-17 18:05 . 2008-02-17 18:05   1,409   --a------   C:\WINDOWS\QTFont.for
      2008-02-17 15:42 . 2008-02-17 15:42      d--------   C:\Program Files\ToniArts
      2008-02-12 16:02 . 2008-02-12 16:02      d--------   C:\Documents and Settings\All Users\Application Data\Media Center Programs
      2008-02-12 15:46 . 2008-02-12 15:46      d--------   C:\Program Files\THQ
      2008-02-12 15:31 . 2008-02-12 15:31      d--------   C:\Documents and Settings\Antti\Application Data\InstallShield
      2008-02-03 17:49 . 2008-02-03 17:49      d--------   C:\Documents and Settings\Riitta\Phone Browser
      2008-01-27 22:35 . 2008-01-27 22:46      d--------   C:\Documents and Settings\Antti\.onnet
      2008-01-20 01:51 . 2008-01-20 01:51      d--------   C:\Documents and Settings\Antti\Application Data\Nokia Multimedia Player

      .
      (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-02-20 21:42   ---------   d-----w   C:\Program Files\HDD Health
      2008-02-20 13:29   ---------   d-----w   C:\Program Files\Java
      2008-02-20 13:26   ---------   d-----w   C:\Documents and Settings\Antti\Application Data\uTorrent
      2008-02-19 22:00   ---------   d-----w   C:\Program Files\Windows Live Safety Center
      2008-02-19 13:31   ---------   d-----w   C:\Documents and Settings\Antti\Application Data\wsInspector
      2008-02-19 02:00   ---------   d-----w   C:\Program Files\MessengerDiscovery
      2008-02-18 18:52   ---------   d-----w   C:\Program Files\Spybot - Search & Destroy
      2008-02-18 12:48   ---------   d-----w   C:\Documents and Settings\Antti\Application Data\Skype
      2008-02-18 11:15   ---------   d-----w   C:\Program Files\Lavasoft
      2008-02-18 11:15   ---------   d-----w   C:\Program Files\Common Files\Wise Installation Wizard
      2008-02-17 14:23   ---------   d-----w   C:\Documents and Settings\Antti\Application Data\Azureus
      2008-02-17 14:23   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\NPF
      2008-02-17 13:42   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
      2008-02-12 13:20   ---------   d-----w   C:\Program Files\Rockstar Games
      2008-02-07 21:09   ---------   d-----w   C:\Program Files\MSN Messenger
      2008-02-03 15:31   ---------   d-----w   C:\Program Files\ExtraFilm Kotona
      2008-01-14 17:12   ---------   d-----w   C:\Documents and Settings\Antti\Application Data\InstallShield Installation Information
      2008-01-04 22:41   ---------   d-----w   C:\Program Files\ProPilkki2
      2008-01-01 18:49   ---------   d-----w   C:\Documents and Settings\Antti\Application Data\PC Suite
      2008-01-01 16:08   ---------   d-----w   C:\Documents and Settings\Riitta\Application Data\Nokia
      2008-01-01 16:06   ---------   d-----w   C:\Documents and Settings\Riitta\Application Data\Nokia Multimedia Player
      2008-01-01 16:03   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\PC Suite
      2008-01-01 16:01   ---------   d-----w   C:\Documents and Settings\Riitta\Application Data\PC Suite
      2008-01-01 16:00   ---------   d-----w   C:\Program Files\PC Connectivity Solution
      2008-01-01 16:00   ---------   d-----w   C:\Program Files\Nokia
      2008-01-01 16:00   ---------   d-----w   C:\Program Files\DIFX
      2008-01-01 16:00   ---------   d-----w   C:\Program Files\Common Files\PCSuite
      2008-01-01 16:00   ---------   d-----w   C:\Program Files\Common Files\Nokia
      2008-01-01 15:57   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Installations
      2007-12-25 09:43   ---------   d-----w   C:\Documents and Settings\Riitta\Application Data\TomTom
      2007-12-25 09:42   ---------   d-----w   C:\Program Files\TomTom HOME 2
      2007-12-25 09:42   ---------   d-----w   C:\Documents and Settings\Riitta\Application Data\InstallShield
      2007-12-25 09:42   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\TomTom
      2007-12-25 09:39   ---------   d-----w   C:\Program Files\TomTom DesktopSuite
      2007-10-30 14:56   870,400   ----a-w   C:\Documents and Settings\Antti\autorun.dat
      2007-10-30 14:56   402,696   ----a-w   C:\Documents and Settings\Antti\AutoRun.exe
      2007-10-24 18:50   258   ----a-w   C:\Documents and Settings\Antti\dat.bin
      2006-07-03 19:24   702   ----a-w   C:\Documents and Settings\Riitta\Application Data\wklnhst.dat
      2005-08-15 18:28   182   ----a-w   C:\Documents and Settings\Antti\Application Data\wklnhst.dat
      2004-09-15 12:00   60,416   --sha-w   C:\WINDOWS\BricoPacks\SysFiles\80_msimn.exe
      .

      (((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55 5674352]
      "HDDHealth"="C:\Program Files\HDD Health\HDDHealth.exe" [2005-06-24 09:17 715264]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SoundMan"="SOUNDMAN.EXE" [2004-12-22 18:09 77824 C:\WINDOWS\SOUNDMAN.EXE]
      "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2005-11-09 00:00 128920]
      "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
      "SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2004-10-15 18:40 2577632]
      "RegistryMechanic"="" []
      "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 11:35 90112]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-09-15 14:00 15360]
      "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
      "DisableRegedit"= 0 (0x0)

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
      "ComponentAlrt"= {781f58cf-0ec0-490d-b40a-998e19daea00} - C:\WINDOWS\Installer\{781f58cf-0ec0-490d-b40a-998e19daea00}\ComponentAlrt.dll [2008-02-17 23:02 14374]
      "zip"= {ce0b9428-2f93-4d61-82de-52d560d464fa} - C:\WINDOWS\Installer\{ce0b9428-2f93-4d61-82de-52d560d464fa}\zip.dll [2008-02-18 22:29 24102]
      "SrvMon"= {4437a441-5d3b-4b49-aa19-a40b50e9e058} - C:\WINDOWS\Installer\{4437a441-5d3b-4b49-aa19-a40b50e9e058}\SrvMon.dll [2008-02-18 16:57 14374]
      "AvpDrv"= {e30e2eb5-e792-46b4-be25-b6c1a0955e63} - C:\WINDOWS\Installer\{e30e2eb5-e792-46b4-be25-b6c1a0955e63}\AvpDrv.dll [2008-02-19 15:23 14374]

      R0 NDIS_RD;Firewall Engine Type-R2;C:\WINDOWS\system32\drivers\NDIS_RD.sys [2004-12-06 11:18]
      R1 TDI_RD;Firewall Engine Type-R;C:\WINDOWS\system32\drivers\tdi_rd.sys [2004-10-13 23:01]
      R3 3xHybrid;Pinnacle PCTV 300i Stereo DVB-T;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2004-09-03 12:14]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
      \Shell\AutoRun\command - E:\Setup\rsrc\autorun.exe
      \Shell\dinstall\command - E:\Directx\dxsetup.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4201354c-b2cd-11dc-9dfd-0011d8914011}]
      \Shell\AutoRun\command - E:\InstallTomTomHOME.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{545e9790-ad8e-11dc-9df4-0011d8914011}]
      \Shell\AutoRun\command - explorer.exe "http://www.karlsro.se/kampanj"

      .
      **************************************************************************

      catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-02-20 23:42:34
      Windows 5.1.2600 Service Pack 2 NTFS

      scanning hidden processes ...

      scanning hidden autostart entries ...

      scanning hidden files ...

      scan completed successfully
      hidden files: 0

      **************************************************************************
      .
      --------------------- DLLs Loaded Under Running Processes ---------------------

      PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
      -> C:\WINDOWS\Installer\{781f58cf-0ec0-490d-b40a-998e19daea00}\ComponentAlrt.dll
      -> C:\WINDOWS\Installer\{ce0b9428-2f93-4d61-82de-52d560d464fa}\zip.dll
      -> C:\WINDOWS\Installer\{4437a441-5d3b-4b49-aa19-a40b50e9e058}\SrvMon.dll
      -> C:\WINDOWS\Installer\{e30e2eb5-e792-46b4-be25-b6c1a0955e63}\AvpDrv.dll
      .
      ------------------------ Other Running Processes ------------------------
      .
      C:\WINDOWS\system32\savedump.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\Sygate\SPF\smc.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      c:\progra~1\pinnacle\mediac~1\epgspo~2.exe
      C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
      c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      .
      **************************************************************************
      .
      Completion time: 2008-02-20 23:46:07 - machine was rebooted
      ComboFix-quarantined-files.txt 2008-02-20 21:46:04
      .
      2008-02-19 21:19:47   --- E O F ---

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    Desklet kirjoitti:

    Logfile of HijackThis v1.99.1
    Scan saved at 17:14:20, on 18.2.2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Sygate\SPF\smc.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\HDD Health\HDDHealth.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\WINDOWS\system32\svchost.exe
    c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Documents and Settings\Antti\Omat tiedostot\Sekalaisia\sekalaista\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKLM\..\Run: [588fd45c] rundll32.exe "C:\WINDOWS\system32\viaeeygq.dll",b
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: thoosje's sidebar.lnk = ?
    O4 - Global Startup: Service Manager.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.0 Control) - https://ssl.extrafilm.org/upload/activex/ImageUploader3.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O21 - SSODL: ComponentAlrt - {781f58cf-0ec0-490d-b40a-998e19daea00} - C:\WINDOWS\Installer\{781f58cf-0ec0-490d-b40a-998e19daea00}\ComponentAlrt.dll
    O21 - SSODL: zip - {c64bd827-dcc6-45d8-9b21-1147bbfcfe03} - C:\WINDOWS\Installer\{c64bd827-dcc6-45d8-9b21-1147bbfcfe03}\zip.dll
    O21 - SSODL: SrvMon - {4437a441-5d3b-4b49-aa19-a40b50e9e058} - C:\WINDOWS\Installer\{4437a441-5d3b-4b49-aa19-a40b50e9e058}\SrvMon.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Pinnacle Systems tvtv Spooler (EpgSpooler) - - c:\progra~1\pinnacle\mediac~1\epgspo~2.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Norman Type-R - Unknown owner - C:\Norman\Npf\BIN\NPFSVICE.EXE (file missing)
    O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu