Apua, mää en ossaa!!

Lonti

2008-06-05 20:14:24

Mun koneella on avattu tää meselinkki..
Hjt:llä scannatessa tuli tällanen lista.
Mitä pittää tehä?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:05:30, on 5.6.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
C:\Program Files\Norman\Npm\Bin\Zanda.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
c:\Windows\system32\o2flash.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
C:\Program Files\Norman\Nvc\bin\nvcoas.exe
C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\CAPRPCSK.EXE
C:\Windows\Explorer.EXE
C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Norman\Npm\Bin\Zlh.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Users\Päiscäti\Documents\Winamp\winampa.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Norman\Nvc\BIN\NIP.EXE
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Norman\Nvc\bin\cclaw.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Users\Päiscäti\Documents\Winamp\winamp.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\HijackThis.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O13 - Gopher Prefix:
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 9510 bytes

620

Äänestä

Vastaukset

FixFix
2008-06-05 20:32:36
mutta nyt tuo pois

poista lisää poista sovelutuksesta

AdVantage

Poista kansio vikasiedossa

C:\Program Files\==>AdVantage
- lonti
  2008-06-05 21:13:28
  Tällanen tuli nytten.
  
  ComboFix 08-06-05.2 - Päiscäti 2008-06-05 20:58:18.1 - NTFSx86
  Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1213 [GMT 3:00]
  Running from: C:\Users\Päiscäti\Desktop\ComboFix.exe
  * Created a new restore point
  * Resident AV is active
  
  .
  
  (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  C:\Windows\system32\x64
  
  .
  ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-05-05 to 2008-06-05 )))))))))))))))))
  .
  
  2008-06-05 19:51 . 2008-06-05 19:51   396,288   --a------   C:\Program Files\HijackThis.exe
  2008-06-05 13:51 . 2006-12-20 09:03   229,888   --a------   C:\Windows\System32\msshsq.dll
  2008-06-02 00:49 . 2008-06-03 13:38      d--h-----   C:\$AVG8.VAULT$
  2008-06-01 23:07 . 2008-06-01 23:07   10,520   --a------   C:\Windows\System32\avgrsstx.dll
  2008-06-01 23:06 . 2008-06-05 12:17      d--------   C:\Windows\System32\drivers\Avg
  2008-06-01 23:06 . 2008-06-01 23:06      d--------   C:\Users\All Users\avg8
  2008-06-01 23:06 . 2008-06-01 23:06      d--------   C:\ProgramData\avg8
  2008-06-01 23:06 . 2008-06-01 23:06      d--------   C:\Program Files\AVG
  2008-06-01 23:06 . 2008-06-01 23:07   524,288   --ahs----   C:\Users\PISC~1{63598e85-300b-11dd-90bc-00030d5955c7}.TMContainer00000000000000000002.regtrans-ms
  2008-06-01 23:06 . 2008-06-01 23:07   524,288   --ahs----   C:\Users\PISC~1{63598e85-300b-11dd-90bc-00030d5955c7}.TMContainer00000000000000000001.regtrans-ms
  2008-06-01 23:06 . 2008-06-01 23:06   96,520   --a------   C:\Windows\System32\drivers\avgldx86.sys
  2008-06-01 23:06 . 2008-06-01 23:07   65,536   --ahs----   C:\Users\PISC~1{63598e85-300b-11dd-90bc-00030d5955c7}.TM.blf
  2008-06-01 23:06 . 2008-06-01 23:07   8,192   --a------   C:\Users\PISC~1
  2008-06-01 23:06 . 2008-06-01 23:07   5,120   --ah-----   C:\Users\PISC~1.LOG1
  2008-06-01 23:06 . 2008-06-01 23:06   0   --ah-----   C:\Users\PISC~1.LOG2
  2008-05-28 17:23 . 2008-03-08 03:37   4,247,552   --a------   C:\Windows\System32\GameUXLegacyGDFs.dll
  2008-05-28 17:23 . 2008-03-08 07:30   1,686,528   --a------   C:\Windows\System32\gameux.dll
  2008-05-18 20:09 . 2008-05-18 20:09      d--------   C:\ConvertTemp
  2008-05-18 19:59 . 2008-05-18 19:59      d--------   C:\Users\Päiscäti\AppData\Roaming\Samsung
  2008-05-14 10:51 . 2008-05-14 10:51      d--------   C:\perflogs
  2008-05-10 16:23 . 2008-05-10 16:23   0   --ah-----   C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
  2008-05-09 21:52 . 2008-05-09 21:52      d--------   C:\Users\Virpi\AppData\Roaming\Samsung
  2008-05-09 21:49 . 2006-05-03 22:53   174,592   --a------   C:\Windows\System32\framedyn.dll
  2008-05-09 21:47 . 2007-07-03 16:58   106,792   --a------   C:\Windows\System32\drivers\sscdmdm.sys
  2008-05-09 21:47 . 2007-07-03 16:54   80,552   --a------   C:\Windows\System32\drivers\sscdbus.sys
  2008-05-09 21:47 . 2007-07-03 16:57   11,944   --a------   C:\Windows\System32\drivers\sscdmdfl.sys
  2008-05-09 21:47 . 2007-07-03 17:00   9,256   --a------   C:\Windows\System32\drivers\sscdwhnt.sys
  2008-05-09 21:47 . 2007-07-03 17:00   9,256   --a------   C:\Windows\System32\drivers\sscdwh.sys
  2008-05-09 21:47 . 2007-07-03 16:56   9,256   --a------   C:\Windows\System32\drivers\sscdcmnt.sys
  2008-05-09 21:47 . 2007-07-03 16:56   9,256   --a------   C:\Windows\System32\drivers\sscdcm.sys
  2008-05-09 21:45 . 2008-05-09 21:48      d--------   C:\Windows\System32\Samsung_USB_Drivers
  2008-05-09 21:45 . 2006-07-24 16:05   5,632   --a------   C:\Windows\System32\drivers\StarOpen.sys
  2008-05-09 21:45 . 2005-08-28 20:51   766   --a------   C:\Windows\System32\Uninstall.ico
  2008-05-09 21:44 . 2008-05-09 21:44      d--------   C:\Program Files\Samsung
  2008-05-08 22:05 . 2008-05-08 22:05      d--------   C:\Users\All Users\Nokia
  2008-05-08 22:05 . 2008-05-08 22:05      d--------   C:\ProgramData\Nokia
  2008-05-08 22:01 . 2008-05-08 22:04      d--------   C:\Program Files\Nokia
  
  .
  (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2008-06-05 18:02   1,835,008   --sha-w   C:\Users\Päiscäti\NTUSER.DAT
  2008-06-05 18:02   1,835,008   --sha-w   C:\Users\Päiscäti\NTUSER.DAT
  2008-06-05 17:50   ---------   d-----w   C:\Program Files\Norman
  2008-06-05 17:39   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\BSplayer
  2008-06-05 17:37   ---------   d-s---w   C:\Users\Päiscäti\AppData\Roaming\Microsoft
  2008-06-05 17:05   9,511   ----a-w   C:\Program Files\hijackthis.log
  2008-06-05 10:49   ---------   d-----w   C:\ProgramData\Microsoft Help
  2008-05-18 16:59   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\Samsung
  2008-05-14 07:59   ---------   d-----w   C:\Program Files\Windows Mail
  2008-05-14 06:09   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\Winamp
  2008-05-09 18:48   ---------   d-----w   C:\Program Files\Common Files\Adobe
  2008-05-09 18:44   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
  2008-05-08 19:01   ---------   d-----w   C:\Program Files\Common Files\Nokia
  2008-05-08 19:00   ---------   d-----w   C:\ProgramData\Installations
  2008-05-08 18:45   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\Nokia
  2008-03-08 04:30   537,600   ----a-w   C:\Windows\AppPatch\AcLayers.dll
  2008-03-08 04:30   449,536   ----a-w   C:\Windows\AppPatch\AcSpecfc.dll
  2008-03-08 04:30   2,144,256   ----a-w   C:\Windows\AppPatch\AcGenral.dll
  2008-03-08 04:30   173,056   ----a-w   C:\Windows\AppPatch\AcXtrnal.dll
  2008-03-08 00:22   2,560   ----a-w   C:\Windows\AppPatch\AcRes.dll
  2007-09-19 19:36   26,999   ----a-w   C:\Users\Päiscäti\evan.almighty.(2007).fin.1cd.(3142942).zip
  2007-09-19 19:36   26,999   ----a-w   C:\Users\Päiscäti\evan.almighty.(2007).fin.1cd.(3142942).zip
  2007-08-29 12:31   174   --sha-w   C:\Program Files\desktop.ini
  .
  
  ------- Sigcheck -------
  
  .
  (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  REGEDIT4
  *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
  
  [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
  2008-06-01 23:06   2050816   --a------   C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-06-01 23:06 2050816]
  
  [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
  [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
  "{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-06-01 23:06 2050816]
  
  [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
  [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 15:57 1232896]
  "AdVantage"="C:\Program Files\AdVantage\AdVantage.exe" [ ]
  "ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 21:41 196608]
  "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 15:35 125440]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "IgfxTray"="C:\Windows\system32\igfxtray.exe" [2006-11-06 11:02 98304]
  "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2006-11-06 11:05 106496]
  "Persistence"="C:\Windows\system32\igfxpers.exe" [2006-11-06 11:02 81920]
  "RtHDVCpl"="RtHDVCpl.exe" [2006-11-01 18:37 3772416 C:\Windows\RtHDVCpl.exe]
  "SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 22:43 729088]
  "Norman ZANDA"="C:\Program Files\Norman\Npm\bin\ZLH.exe" [2007-08-09 14:40 183352]
  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
  "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]
  "CAPON"="C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE" [2007-03-12 19:43 28288]
  "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-04-13 15:07 69632]
  "PCSuiteTrayApplication"="C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 16:10 271360]
  "ExtraFilmHemmaAgent"="C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe" [2005-05-27 17:00 303104]
  "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-02-01 00:13 385024]
  "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
  "WinampAgent"="C:\Users\Päiscäti\Documents\Winamp\winampa.exe" [2008-04-01 21:49 36352]
  "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-06-01 23:06 1177368]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "Nokia.PCSync"="C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 11:17 1241088]
  
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
  Canon LBP-810 Status Window.LNK - C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE [2007-03-12 15:29:14 120976]
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
  "{783A5C34-FE8A-4ECB-B7CA-200D0A3E6C34}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
  "TCP Query User{C074C25E-2C94-4191-BC34-ECD9C5B5DAC9}C:\\program files\\common files\\ahead\\nero web\\setupx.exe"= UDP:C:\program files\common files\ahead\nero web\setupx.exe:MSI starter
  "UDP Query User{4F409745-C34D-4806-BAE5-F8EE3DFC8F50}C:\\program files\\common files\\ahead\\nero web\\setupx.exe"= TCP:C:\program files\common files\ahead\nero web\setupx.exe:MSI starter
  "{56750B51-FF0B-4116-ADB0-B25754178B1F}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
  "TCP Query User{9EBD0136-77FA-435D-8ADC-8A0EBA914325}C:\\users\\päiscäti\\documents\\limewire\\limewire.exe"= UDP:C:\users\päiscäti\documents\limewire\limewire.exe:limewire.exe
  "UDP Query User{6747343D-1EA6-44C2-B8C9-ABB2DAB7401C}C:\\users\\päiscäti\\documents\\limewire\\limewire.exe"= TCP:C:\users\päiscäti\documents\limewire\limewire.exe:limewire.exe
  "TCP Query User{4DBFDF22-5262-44AB-9758-395A9547B1B5}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
  "UDP Query User{0B6EBA9D-019A-4487-91D8-48355099DFE2}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
  "TCP Query User{FEACC2AA-90A8-4EC4-A7D9-ED5D19F6B729}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
  "UDP Query User{6CA91F80-8692-4D33-846D-D93502DF172A}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
  "{68680095-9EBB-4B9F-AA48-EE8EDAE1DBDE}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
  "TCP Query User{F8B7394D-C502-4A38-A45F-B29DD09B1C98}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "UDP Query User{2CD80398-8686-440E-8D33-050EAF1FA4CF}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "TCP Query User{FEB4BFF2-80D2-4EBE-A713-781907429A85}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "UDP Query User{372B2441-22E6-44DD-82F1-8B5315B000CB}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "{8F662E30-CF3A-4A8B-A8D6-E12F05DB360D}"= UDP:C:\Program Files\Norman\Npm\Bin\niu.exe:Internet-päivitys
  "{CAD72449-9AA7-4415-91AF-3BE7D1CADFD8}"= TCP:C:\Program Files\Norman\Npm\Bin\niu.exe:Internet-päivitys
  "TCP Query User{D45B6573-753B-4BC7-B374-979765E5BC94}C:\\users\\päiscäti\\documents\\dc \\dcplusplus.exe"= UDP:C:\users\päiscäti\documents\dc \dcplusplus.exe:dcplusplus.exe
  "UDP Query User{730C3A07-6419-4B14-A7BB-2F05B069840A}C:\\users\\päiscäti\\documents\\dc \\dcplusplus.exe"= TCP:C:\users\päiscäti\documents\dc \dcplusplus.exe:dcplusplus.exe
  "{5B7C2198-94E4-4667-85EA-C6A6298A411E}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
  "TCP Query User{AEC910CC-DDAA-46CB-8E87-56357A19789D}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= UDP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
  "UDP Query User{B15C20A1-0EC7-4A1D-8968-5276F681E538}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= TCP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
  "TCP Query User{9A4660D2-D1DD-4C8D-B138-E40A3BA70DB2}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= UDP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
  "UDP Query User{2A23AFCC-B286-4A91-9E47-C282BA3FCDFC}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= TCP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
  "{22995B24-8AD9-4E0A-B34D-361080466949}"= UDP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb
  "{2AAA5E46-82BA-401C-9BF6-8451A48397FF}"= TCP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb
  "{95196EDA-5FD7-445A-A76C-0E033FF25DDC}"= UDP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray
  "{F39DB1D7-30D7-4D60-B36A-A7DA97106C24}"= TCP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray
  "{C3EB846E-0F1C-4F87-A6FB-8E613AC259B9}"= UDP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR
  "{1D1A1B7C-5575-42EB-8685-7F07B2670A67}"= TCP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR
  "{97CA8BF6-E6F4-46FC-995B-AD454E09A450}"= UDP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client
  "{EB0C0932-E527-49CE-BA9A-30E54EDCE3EB}"= TCP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client
  "{DF6114CC-D9C6-425F-B9EE-B862E00D0E54}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
  "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
  
  R0 O2MDRDR;O2MDRDR;C:\Windows\system32\DRIVERS\o2media.sys [2006-11-20 17:14]
  R0 O2SDRDR;O2SDRDR;C:\Windows\system32\DRIVERS\o2sd.sys [2006-11-17 15:58]
  R1 AvgLdx86;AVG AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-06-01 23:06]
  R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-06-01 23:06]
  R2 Ndiskio;Ndiskio;C:\Program Files\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 09:55]
  R3 igfx;igfx;C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-11-06 12:29]
  R3 NvcMFlt;NvcMFlt;C:\Windows\system32\DRIVERS\nvcv32mf.sys [2008-02-11 15:56]
  R3 nvcoas;Norman Virus Control on-access component;C:\Program Files\Norman\Nvc\bin\nvcoas.exe [2007-12-12 12:45]
  R3 NVCScheduler;Norman Virus Control Scheduler;C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 13:23]
  S2 RapidPort;RapidPort;C:\Windows\system32\Drivers\CAPLPTN.SYS [2001-02-06 00:00]
  S3 nvcfsr;nvcfsr;C:\Program Files\Norman\Nvc\bin\nvcfsr.sys [2007-01-09 15:25]
  S3 nvcoafl4;nvcoafl4;C:\Program Files\Norman\Nvc\bin\nvcoafl4.sys [2007-01-09 15:25]
  S3 nvcoaft4;nvcoaft4;C:\Program Files\Norman\Nvc\bin\nvcoaft4.sys [2007-01-09 15:25]
  S3 nvcoarc4;nvcoarc4;C:\Program Files\Norman\Nvc\bin\nvcoarc4.sys [2007-01-09 15:25]
  S3 upperdev;upperdev;C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2007-11-29 10:39]
  S3 UsbserFilt;UsbserFilt;C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2007-11-29 10:39]
  
  *Newly Created Service* - CATCHME
  .
  **************************************************************************
  
  catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2008-06-05 21:02:32
  Windows 6.0.6000 NTFS
  
  scanning hidden processes ...
  
  scanning hidden autostart entries ...
  
  scanning hidden files ...
  
  scan completed successfully
  hidden files: 0
  
  **************************************************************************
  .
  Completion time: 2008-06-05 21:04:30
  ComboFix-quarantined-files.txt 2008-06-05 18:04:10
  
  Pre-Run: 29,006,082,048 tavua vapaana
  Post-Run: 29,780,815,872 tavua vapaana
  
  188   --- E O F ---   2008-06-05 10:52:46
- FixFix
  2008-06-05 21:27:38
  lonti kirjoitti:
  Tällanen tuli nytten.
  
  ComboFix 08-06-05.2 - Päiscäti 2008-06-05 20:58:18.1 - NTFSx86
  Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1213 [GMT 3:00]
  Running from: C:\Users\Päiscäti\Desktop\ComboFix.exe
  * Created a new restore point
  * Resident AV is active
  
  .
  
  (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  C:\Windows\system32\x64
  
  .
  ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-05-05 to 2008-06-05 )))))))))))))))))
  .
  
  2008-06-05 19:51 . 2008-06-05 19:51   396,288   --a------   C:\Program Files\HijackThis.exe
  2008-06-05 13:51 . 2006-12-20 09:03   229,888   --a------   C:\Windows\System32\msshsq.dll
  2008-06-02 00:49 . 2008-06-03 13:38      d--h-----   C:\$AVG8.VAULT$
  2008-06-01 23:07 . 2008-06-01 23:07   10,520   --a------   C:\Windows\System32\avgrsstx.dll
  2008-06-01 23:06 . 2008-06-05 12:17      d--------   C:\Windows\System32\drivers\Avg
  2008-06-01 23:06 . 2008-06-01 23:06      d--------   C:\Users\All Users\avg8
  2008-06-01 23:06 . 2008-06-01 23:06      d--------   C:\ProgramData\avg8
  2008-06-01 23:06 . 2008-06-01 23:06      d--------   C:\Program Files\AVG
  2008-06-01 23:06 . 2008-06-01 23:07   524,288   --ahs----   C:\Users\PISC~1{63598e85-300b-11dd-90bc-00030d5955c7}.TMContainer00000000000000000002.regtrans-ms
  2008-06-01 23:06 . 2008-06-01 23:07   524,288   --ahs----   C:\Users\PISC~1{63598e85-300b-11dd-90bc-00030d5955c7}.TMContainer00000000000000000001.regtrans-ms
  2008-06-01 23:06 . 2008-06-01 23:06   96,520   --a------   C:\Windows\System32\drivers\avgldx86.sys
  2008-06-01 23:06 . 2008-06-01 23:07   65,536   --ahs----   C:\Users\PISC~1{63598e85-300b-11dd-90bc-00030d5955c7}.TM.blf
  2008-06-01 23:06 . 2008-06-01 23:07   8,192   --a------   C:\Users\PISC~1
  2008-06-01 23:06 . 2008-06-01 23:07   5,120   --ah-----   C:\Users\PISC~1.LOG1
  2008-06-01 23:06 . 2008-06-01 23:06   0   --ah-----   C:\Users\PISC~1.LOG2
  2008-05-28 17:23 . 2008-03-08 03:37   4,247,552   --a------   C:\Windows\System32\GameUXLegacyGDFs.dll
  2008-05-28 17:23 . 2008-03-08 07:30   1,686,528   --a------   C:\Windows\System32\gameux.dll
  2008-05-18 20:09 . 2008-05-18 20:09      d--------   C:\ConvertTemp
  2008-05-18 19:59 . 2008-05-18 19:59      d--------   C:\Users\Päiscäti\AppData\Roaming\Samsung
  2008-05-14 10:51 . 2008-05-14 10:51      d--------   C:\perflogs
  2008-05-10 16:23 . 2008-05-10 16:23   0   --ah-----   C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
  2008-05-09 21:52 . 2008-05-09 21:52      d--------   C:\Users\Virpi\AppData\Roaming\Samsung
  2008-05-09 21:49 . 2006-05-03 22:53   174,592   --a------   C:\Windows\System32\framedyn.dll
  2008-05-09 21:47 . 2007-07-03 16:58   106,792   --a------   C:\Windows\System32\drivers\sscdmdm.sys
  2008-05-09 21:47 . 2007-07-03 16:54   80,552   --a------   C:\Windows\System32\drivers\sscdbus.sys
  2008-05-09 21:47 . 2007-07-03 16:57   11,944   --a------   C:\Windows\System32\drivers\sscdmdfl.sys
  2008-05-09 21:47 . 2007-07-03 17:00   9,256   --a------   C:\Windows\System32\drivers\sscdwhnt.sys
  2008-05-09 21:47 . 2007-07-03 17:00   9,256   --a------   C:\Windows\System32\drivers\sscdwh.sys
  2008-05-09 21:47 . 2007-07-03 16:56   9,256   --a------   C:\Windows\System32\drivers\sscdcmnt.sys
  2008-05-09 21:47 . 2007-07-03 16:56   9,256   --a------   C:\Windows\System32\drivers\sscdcm.sys
  2008-05-09 21:45 . 2008-05-09 21:48      d--------   C:\Windows\System32\Samsung_USB_Drivers
  2008-05-09 21:45 . 2006-07-24 16:05   5,632   --a------   C:\Windows\System32\drivers\StarOpen.sys
  2008-05-09 21:45 . 2005-08-28 20:51   766   --a------   C:\Windows\System32\Uninstall.ico
  2008-05-09 21:44 . 2008-05-09 21:44      d--------   C:\Program Files\Samsung
  2008-05-08 22:05 . 2008-05-08 22:05      d--------   C:\Users\All Users\Nokia
  2008-05-08 22:05 . 2008-05-08 22:05      d--------   C:\ProgramData\Nokia
  2008-05-08 22:01 . 2008-05-08 22:04      d--------   C:\Program Files\Nokia
  
  .
  (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2008-06-05 18:02   1,835,008   --sha-w   C:\Users\Päiscäti\NTUSER.DAT
  2008-06-05 18:02   1,835,008   --sha-w   C:\Users\Päiscäti\NTUSER.DAT
  2008-06-05 17:50   ---------   d-----w   C:\Program Files\Norman
  2008-06-05 17:39   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\BSplayer
  2008-06-05 17:37   ---------   d-s---w   C:\Users\Päiscäti\AppData\Roaming\Microsoft
  2008-06-05 17:05   9,511   ----a-w   C:\Program Files\hijackthis.log
  2008-06-05 10:49   ---------   d-----w   C:\ProgramData\Microsoft Help
  2008-05-18 16:59   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\Samsung
  2008-05-14 07:59   ---------   d-----w   C:\Program Files\Windows Mail
  2008-05-14 06:09   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\Winamp
  2008-05-09 18:48   ---------   d-----w   C:\Program Files\Common Files\Adobe
  2008-05-09 18:44   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
  2008-05-08 19:01   ---------   d-----w   C:\Program Files\Common Files\Nokia
  2008-05-08 19:00   ---------   d-----w   C:\ProgramData\Installations
  2008-05-08 18:45   ---------   d-----w   C:\Users\Päiscäti\AppData\Roaming\Nokia
  2008-03-08 04:30   537,600   ----a-w   C:\Windows\AppPatch\AcLayers.dll
  2008-03-08 04:30   449,536   ----a-w   C:\Windows\AppPatch\AcSpecfc.dll
  2008-03-08 04:30   2,144,256   ----a-w   C:\Windows\AppPatch\AcGenral.dll
  2008-03-08 04:30   173,056   ----a-w   C:\Windows\AppPatch\AcXtrnal.dll
  2008-03-08 00:22   2,560   ----a-w   C:\Windows\AppPatch\AcRes.dll
  2007-09-19 19:36   26,999   ----a-w   C:\Users\Päiscäti\evan.almighty.(2007).fin.1cd.(3142942).zip
  2007-09-19 19:36   26,999   ----a-w   C:\Users\Päiscäti\evan.almighty.(2007).fin.1cd.(3142942).zip
  2007-08-29 12:31   174   --sha-w   C:\Program Files\desktop.ini
  .
  
  ------- Sigcheck -------
  
  .
  (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  REGEDIT4
  *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
  
  [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
  2008-06-01 23:06   2050816   --a------   C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-06-01 23:06 2050816]
  
  [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
  [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
  "{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-06-01 23:06 2050816]
  
  [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
  [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 15:57 1232896]
  "AdVantage"="C:\Program Files\AdVantage\AdVantage.exe" [ ]
  "ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 21:41 196608]
  "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 15:35 125440]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "IgfxTray"="C:\Windows\system32\igfxtray.exe" [2006-11-06 11:02 98304]
  "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2006-11-06 11:05 106496]
  "Persistence"="C:\Windows\system32\igfxpers.exe" [2006-11-06 11:02 81920]
  "RtHDVCpl"="RtHDVCpl.exe" [2006-11-01 18:37 3772416 C:\Windows\RtHDVCpl.exe]
  "SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 22:43 729088]
  "Norman ZANDA"="C:\Program Files\Norman\Npm\bin\ZLH.exe" [2007-08-09 14:40 183352]
  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
  "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]
  "CAPON"="C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE" [2007-03-12 19:43 28288]
  "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-04-13 15:07 69632]
  "PCSuiteTrayApplication"="C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 16:10 271360]
  "ExtraFilmHemmaAgent"="C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe" [2005-05-27 17:00 303104]
  "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-02-01 00:13 385024]
  "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
  "WinampAgent"="C:\Users\Päiscäti\Documents\Winamp\winampa.exe" [2008-04-01 21:49 36352]
  "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-06-01 23:06 1177368]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "Nokia.PCSync"="C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 11:17 1241088]
  
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
  Canon LBP-810 Status Window.LNK - C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE [2007-03-12 15:29:14 120976]
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
  "{783A5C34-FE8A-4ECB-B7CA-200D0A3E6C34}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
  "TCP Query User{C074C25E-2C94-4191-BC34-ECD9C5B5DAC9}C:\\program files\\common files\\ahead\\nero web\\setupx.exe"= UDP:C:\program files\common files\ahead\nero web\setupx.exe:MSI starter
  "UDP Query User{4F409745-C34D-4806-BAE5-F8EE3DFC8F50}C:\\program files\\common files\\ahead\\nero web\\setupx.exe"= TCP:C:\program files\common files\ahead\nero web\setupx.exe:MSI starter
  "{56750B51-FF0B-4116-ADB0-B25754178B1F}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
  "TCP Query User{9EBD0136-77FA-435D-8ADC-8A0EBA914325}C:\\users\\päiscäti\\documents\\limewire\\limewire.exe"= UDP:C:\users\päiscäti\documents\limewire\limewire.exe:limewire.exe
  "UDP Query User{6747343D-1EA6-44C2-B8C9-ABB2DAB7401C}C:\\users\\päiscäti\\documents\\limewire\\limewire.exe"= TCP:C:\users\päiscäti\documents\limewire\limewire.exe:limewire.exe
  "TCP Query User{4DBFDF22-5262-44AB-9758-395A9547B1B5}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
  "UDP Query User{0B6EBA9D-019A-4487-91D8-48355099DFE2}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
  "TCP Query User{FEACC2AA-90A8-4EC4-A7D9-ED5D19F6B729}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
  "UDP Query User{6CA91F80-8692-4D33-846D-D93502DF172A}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
  "{68680095-9EBB-4B9F-AA48-EE8EDAE1DBDE}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
  "TCP Query User{F8B7394D-C502-4A38-A45F-B29DD09B1C98}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "UDP Query User{2CD80398-8686-440E-8D33-050EAF1FA4CF}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "TCP Query User{FEB4BFF2-80D2-4EBE-A713-781907429A85}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "UDP Query User{372B2441-22E6-44DD-82F1-8B5315B000CB}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
  "{8F662E30-CF3A-4A8B-A8D6-E12F05DB360D}"= UDP:C:\Program Files\Norman\Npm\Bin\niu.exe:Internet-päivitys
  "{CAD72449-9AA7-4415-91AF-3BE7D1CADFD8}"= TCP:C:\Program Files\Norman\Npm\Bin\niu.exe:Internet-päivitys
  "TCP Query User{D45B6573-753B-4BC7-B374-979765E5BC94}C:\\users\\päiscäti\\documents\\dc \\dcplusplus.exe"= UDP:C:\users\päiscäti\documents\dc \dcplusplus.exe:dcplusplus.exe
  "UDP Query User{730C3A07-6419-4B14-A7BB-2F05B069840A}C:\\users\\päiscäti\\documents\\dc \\dcplusplus.exe"= TCP:C:\users\päiscäti\documents\dc \dcplusplus.exe:dcplusplus.exe
  "{5B7C2198-94E4-4667-85EA-C6A6298A411E}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
  "TCP Query User{AEC910CC-DDAA-46CB-8E87-56357A19789D}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= UDP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
  "UDP Query User{B15C20A1-0EC7-4A1D-8968-5276F681E538}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= TCP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
  "TCP Query User{9A4660D2-D1DD-4C8D-B138-E40A3BA70DB2}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= UDP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
  "UDP Query User{2A23AFCC-B286-4A91-9E47-C282BA3FCDFC}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= TCP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
  "{22995B24-8AD9-4E0A-B34D-361080466949}"= UDP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb
  "{2AAA5E46-82BA-401C-9BF6-8451A48397FF}"= TCP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb
  "{95196EDA-5FD7-445A-A76C-0E033FF25DDC}"= UDP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray
  "{F39DB1D7-30D7-4D60-B36A-A7DA97106C24}"= TCP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray
  "{C3EB846E-0F1C-4F87-A6FB-8E613AC259B9}"= UDP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR
  "{1D1A1B7C-5575-42EB-8685-7F07B2670A67}"= TCP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR
  "{97CA8BF6-E6F4-46FC-995B-AD454E09A450}"= UDP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client
  "{EB0C0932-E527-49CE-BA9A-30E54EDCE3EB}"= TCP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client
  "{DF6114CC-D9C6-425F-B9EE-B862E00D0E54}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
  "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
  
  R0 O2MDRDR;O2MDRDR;C:\Windows\system32\DRIVERS\o2media.sys [2006-11-20 17:14]
  R0 O2SDRDR;O2SDRDR;C:\Windows\system32\DRIVERS\o2sd.sys [2006-11-17 15:58]
  R1 AvgLdx86;AVG AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-06-01 23:06]
  R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-06-01 23:06]
  R2 Ndiskio;Ndiskio;C:\Program Files\Norman\Nse\bin\NDISKIO.SYS [2007-01-02 09:55]
  R3 igfx;igfx;C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-11-06 12:29]
  R3 NvcMFlt;NvcMFlt;C:\Windows\system32\DRIVERS\nvcv32mf.sys [2008-02-11 15:56]
  R3 nvcoas;Norman Virus Control on-access component;C:\Program Files\Norman\Nvc\bin\nvcoas.exe [2007-12-12 12:45]
  R3 NVCScheduler;Norman Virus Control Scheduler;C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 13:23]
  S2 RapidPort;RapidPort;C:\Windows\system32\Drivers\CAPLPTN.SYS [2001-02-06 00:00]
  S3 nvcfsr;nvcfsr;C:\Program Files\Norman\Nvc\bin\nvcfsr.sys [2007-01-09 15:25]
  S3 nvcoafl4;nvcoafl4;C:\Program Files\Norman\Nvc\bin\nvcoafl4.sys [2007-01-09 15:25]
  S3 nvcoaft4;nvcoaft4;C:\Program Files\Norman\Nvc\bin\nvcoaft4.sys [2007-01-09 15:25]
  S3 nvcoarc4;nvcoarc4;C:\Program Files\Norman\Nvc\bin\nvcoarc4.sys [2007-01-09 15:25]
  S3 upperdev;upperdev;C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2007-11-29 10:39]
  S3 UsbserFilt;UsbserFilt;C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2007-11-29 10:39]
  
  *Newly Created Service* - CATCHME
  .
  **************************************************************************
  
  catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2008-06-05 21:02:32
  Windows 6.0.6000 NTFS
  
  scanning hidden processes ...
  
  scanning hidden autostart entries ...
  
  scanning hidden files ...
  
  scan completed successfully
  hidden files: 0
  
  **************************************************************************
  .
  Completion time: 2008-06-05 21:04:30
  ComboFix-quarantined-files.txt 2008-06-05 18:04:10
  
  Pre-Run: 29,006,082,048 tavua vapaana
  Post-Run: 29,780,815,872 tavua vapaana
  
  188   --- E O F ---   2008-06-05 10:52:46
  Lataa [url=http://www.besttechie.net/tools/mbam-setup.exe][color=red][b]Malwarebytes' Anti-Malware[/b][/color][/url] [b]työpöydällesi[/b].
  
  1. Tuplaklikkaa [b]mbam-setup.exe[/b] ja seuraa ohjeita asentaaksesi ohjelman.
  2. Lopuksi varmistu, että seuraavat on valittu: Update [b]Malwarebytes[/b]', [b]Anti-Malware[/b]ja
  [b]Launch Malwarebytes[/b]' Anti-Malware ja sen jälkeen klikkaa[b]Finish[/b].
  3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
  4. Kun ohjelma on latautunut, valitse [b]Perform full scan[/b] ja klikkaa [b]Scan[/b].
  5. Kun skanni on valmis, klikkaa [b]OK[/b] ja sitten [b]Show Results[/b] nähdäksesi tulokset.
  6. Varmistu, että kaikki on merkitty ja klikkaa [b]Remove Selected[/b].
  7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
  löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
  Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\[b]log-päiväys.txt[/b]
  8. Lähetä lokin sisältö seuraavassa viestissäsi.
- Lonti
  2008-06-05 22:53:18
  FixFix kirjoitti:
  Lataa [url=http://www.besttechie.net/tools/mbam-setup.exe][color=red][b]Malwarebytes' Anti-Malware[/b][/color][/url] [b]työpöydällesi[/b].
  
  1. Tuplaklikkaa [b]mbam-setup.exe[/b] ja seuraa ohjeita asentaaksesi ohjelman.
  2. Lopuksi varmistu, että seuraavat on valittu: Update [b]Malwarebytes[/b]', [b]Anti-Malware[/b]ja
  [b]Launch Malwarebytes[/b]' Anti-Malware ja sen jälkeen klikkaa[b]Finish[/b].
  3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
  4. Kun ohjelma on latautunut, valitse [b]Perform full scan[/b] ja klikkaa [b]Scan[/b].
  5. Kun skanni on valmis, klikkaa [b]OK[/b] ja sitten [b]Show Results[/b] nähdäksesi tulokset.
  6. Varmistu, että kaikki on merkitty ja klikkaa [b]Remove Selected[/b].
  7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
  löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
  Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\[b]log-päiväys.txt[/b]
  8. Lähetä lokin sisältö seuraavassa viestissäsi.
  Onkohan tää nyt oikee mikä sieltä piti tulla??
  
  Malwarebytes' Anti-Malware 1.14
  Tietokantaversio: 829
  
  22:45:56 5.6.2008
  mbam-log-6-5-2008 (22-45-56).txt
  
  Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
  Tarkistetut kohteet: 122292
  Kulunut aika: 1 hour(s), 2 minute(s), 23 second(s)
  
  Saastuneita muistiprosesseja: 0
  Saastuneita muistimoduuleja: 0
  Saastuneita rekisteriavaimia: 0
  Saastuneita rekisteriarvoja: 0
  Saastuneita rekisterikohteita: 0
  Saastuneita hakemistoja: 0
  Saastuneita tiedostoja: 0
  
  Saastuneita muistiprosesseja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita muistimoduuleja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita rekisteriavaimia:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita rekisteriarvoja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita rekisterikohteita:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita hakemistoja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita tiedostoja:
  (Haitallisia kohteita ei löydetty)
- FixFix
  2008-06-05 23:27:22
  Lonti kirjoitti:
  Onkohan tää nyt oikee mikä sieltä piti tulla??
  
  Malwarebytes' Anti-Malware 1.14
  Tietokantaversio: 829
  
  22:45:56 5.6.2008
  mbam-log-6-5-2008 (22-45-56).txt
  
  Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
  Tarkistetut kohteet: 122292
  Kulunut aika: 1 hour(s), 2 minute(s), 23 second(s)
  
  Saastuneita muistiprosesseja: 0
  Saastuneita muistimoduuleja: 0
  Saastuneita rekisteriavaimia: 0
  Saastuneita rekisteriarvoja: 0
  Saastuneita rekisterikohteita: 0
  Saastuneita hakemistoja: 0
  Saastuneita tiedostoja: 0
  
  Saastuneita muistiprosesseja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita muistimoduuleja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita rekisteriavaimia:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita rekisteriarvoja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita rekisterikohteita:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita hakemistoja:
  (Haitallisia kohteita ei löydetty)
  
  Saastuneita tiedostoja:
  (Haitallisia kohteita ei löydetty)
  oli tuo
  
  ===========
  
  scannaa uusi hjt:n loki
- lonti
  2008-06-06 16:45:19
  FixFix kirjoitti:
  oli tuo
  
  ===========
  
  scannaa uusi hjt:n loki
  tässäpä olis tää uus hjt loki..
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 20:05:30, on 5.6.2008
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16643)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  C:\Program Files\Norman\Npm\Bin\Zanda.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  c:\Windows\system32\o2flash.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\PROGRA~1\AVG\AVG8\avgrsx.exe
  C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\system32\CAPRPCSK.EXE
  C:\Windows\Explorer.EXE
  C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Program Files\Windows Defender\MSASCui.exe
  C:\Windows\System32\hkcmd.exe
  C:\Windows\System32\igfxpers.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Norman\Npm\Bin\Zlh.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
  C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Norman\Nvc\BIN\NIP.EXE
  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  C:\Program Files\Norman\Nvc\bin\cclaw.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Users\Päiscäti\Documents\Winamp\winamp.exe
  C:\Program Files\Internet Explorer\IEUser.exe
  C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\Program Files\HijackThis.exe
  C:\Windows\system32\NOTEPAD.EXE
  C:\Windows\system32\wbem\wmiprvse.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
  O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
  O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
  O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O13 - Gopher Prefix:
  O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
  O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O20 - AppInit_DLLs: avgrsstx.dll
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
  O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 9510 bytes
- FixFix
  2008-06-06 17:06:12
  lonti kirjoitti:
  tässäpä olis tää uus hjt loki..
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 20:05:30, on 5.6.2008
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16643)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  C:\Program Files\Norman\Npm\Bin\Zanda.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  c:\Windows\system32\o2flash.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\PROGRA~1\AVG\AVG8\avgrsx.exe
  C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\system32\CAPRPCSK.EXE
  C:\Windows\Explorer.EXE
  C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Program Files\Windows Defender\MSASCui.exe
  C:\Windows\System32\hkcmd.exe
  C:\Windows\System32\igfxpers.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Norman\Npm\Bin\Zlh.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
  C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Norman\Nvc\BIN\NIP.EXE
  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  C:\Program Files\Norman\Nvc\bin\cclaw.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Users\Päiscäti\Documents\Winamp\winamp.exe
  C:\Program Files\Internet Explorer\IEUser.exe
  C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\Program Files\HijackThis.exe
  C:\Windows\system32\NOTEPAD.EXE
  C:\Windows\system32\wbem\wmiprvse.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
  O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
  O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
  O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O13 - Gopher Prefix:
  O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
  O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O20 - AppInit_DLLs: avgrsstx.dll
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
  O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 9510 bytes
  koneella avg5 ja norman mikä on käytössä
  
  poista lisää poista sovelutuksesta
  
  AdVantage
  
  poista kansio vikasiedossa
  
  C:\Program Files\==> AdVantage
- lonti
  2008-06-06 17:38:10
  FixFix kirjoitti:
  koneella avg5 ja norman mikä on käytössä
  
  poista lisää poista sovelutuksesta
  
  AdVantage
  
  poista kansio vikasiedossa
  
  C:\Program Files\==> AdVantage
  no poistin nyt noi jutut.. pitääkö vielä tehä jotain?
  Käytän normania. poistanko avg:n?
- FixFix
  2008-06-06 18:20:50
  lonti kirjoitti:
  no poistin nyt noi jutut.. pitääkö vielä tehä jotain?
  Käytän normania. poistanko avg:n?
  laita sitten taas uusi hjt:n loki
- lonti
  2008-06-06 18:28:30
  FixFix kirjoitti:
  laita sitten taas uusi hjt:n loki
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 20:05:30, on 5.6.2008
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16643)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  C:\Program Files\Norman\Npm\Bin\Zanda.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  c:\Windows\system32\o2flash.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\PROGRA~1\AVG\AVG8\avgrsx.exe
  C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\system32\CAPRPCSK.EXE
  C:\Windows\Explorer.EXE
  C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Program Files\Windows Defender\MSASCui.exe
  C:\Windows\System32\hkcmd.exe
  C:\Windows\System32\igfxpers.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Norman\Npm\Bin\Zlh.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
  C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Norman\Nvc\BIN\NIP.EXE
  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  C:\Program Files\Norman\Nvc\bin\cclaw.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Users\Päiscäti\Documents\Winamp\winamp.exe
  C:\Program Files\Internet Explorer\IEUser.exe
  C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\Program Files\HijackThis.exe
  C:\Windows\system32\NOTEPAD.EXE
  C:\Windows\system32\wbem\wmiprvse.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
  O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
  O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
  O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O13 - Gopher Prefix:
  O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
  O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O20 - AppInit_DLLs: avgrsstx.dll
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
  O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 9510 bytes
- FixFix
  2008-06-06 18:51:13
  lonti kirjoitti:
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 20:05:30, on 5.6.2008
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16643)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  C:\Program Files\Norman\Npm\Bin\Zanda.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  c:\Windows\system32\o2flash.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\PROGRA~1\AVG\AVG8\avgrsx.exe
  C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\system32\CAPRPCSK.EXE
  C:\Windows\Explorer.EXE
  C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Program Files\Windows Defender\MSASCui.exe
  C:\Windows\System32\hkcmd.exe
  C:\Windows\System32\igfxpers.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Norman\Npm\Bin\Zlh.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
  C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Norman\Nvc\BIN\NIP.EXE
  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  C:\Program Files\Norman\Nvc\bin\cclaw.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Users\Päiscäti\Documents\Winamp\winamp.exe
  C:\Program Files\Internet Explorer\IEUser.exe
  C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\Program Files\HijackThis.exe
  C:\Windows\system32\NOTEPAD.EXE
  C:\Windows\system32\wbem\wmiprvse.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
  O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
  O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
  O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O13 - Gopher Prefix:
  O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
  O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O20 - AppInit_DLLs: avgrsstx.dll
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
  O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 9510 bytes
  C:\Program Files\HijackThis.exe
  
  HijackThis
  tekstitiedosto
  
  scannaa sitten uusi hjt:n loki
- lonti
  2008-06-06 19:22:38
  FixFix kirjoitti:
  C:\Program Files\HijackThis.exe
  
  HijackThis
  tekstitiedosto
  
  scannaa sitten uusi hjt:n loki
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 19:21:50, on 6.6.2008
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16643)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  C:\Program Files\Norman\Npm\Bin\Zanda.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\CAPRPCSK.EXE
  C:\Windows\Explorer.EXE
  C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\hkcmd.exe
  C:\Windows\System32\igfxpers.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Norman\Npm\Bin\Zlh.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  c:\Windows\system32\o2flash.exe
  C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe
  C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  C:\Windows\system32\taskeng.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Internet Explorer\ieuser.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Users\Päiscäti\Documents\Winamp\winamp.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Program Files\Norman\Nvc\BIN\NIP.EXE
  C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  C:\Program Files\Norman\Nvc\bin\cclaw.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
  C:\Windows\system32\wbem\wmiprvse.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
  O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
  O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O13 - Gopher Prefix:
  O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
  O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
  O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 8291 bytes
- FixFix
  2008-06-06 22:11:36
  lonti kirjoitti:
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 19:21:50, on 6.6.2008
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16643)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  C:\Program Files\Norman\Npm\Bin\Zanda.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\CAPRPCSK.EXE
  C:\Windows\Explorer.EXE
  C:\Windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\hkcmd.exe
  C:\Windows\System32\igfxpers.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Norman\Npm\Bin\Zlh.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  c:\Windows\system32\o2flash.exe
  C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe
  C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  C:\Windows\system32\taskeng.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Internet Explorer\ieuser.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Users\Päiscäti\Documents\Winamp\winamp.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Program Files\Norman\Nvc\BIN\NIP.EXE
  C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  C:\Program Files\Norman\Nvc\bin\cclaw.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
  C:\Windows\system32\wbem\wmiprvse.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [CAPON] C:\Windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\LaunchApplication.exe -startup
  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Users\Päiscäti\Documents\ExtraFilm Kotona\Agent.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Users\Päiscäti\Documents\Winamp\winampa.exe
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
  O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Users\Päiscäti\Documents\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
  O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\Windows\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O13 - Gopher Prefix:
  O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
  O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
  O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
  O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
  O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
  O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
  O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - c:\Windows\system32\o2flash.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 8291 bytes
  mites kone toimii
- lonti
  2008-06-07 23:28:17
  FixFix kirjoitti:
  mites kone toimii
  Nettiki toimii tosi nopeesti nytten.
  Kiitos paljon avusta!

Ketjusta on poistettu 1 sääntöjenvastaista viestiä.

Takaisin ylös

Luetuimmat keskustelut

Kotkalainen Demari Riku Pirinen vangittu Saksassa lapsipornosta
https://www.kymensanomat.fi/paikalliset/8081054 Kotkalainen Demari Riku Pirinen vangittu Saksassa lapsipornon hallussapi
20.11.2024 20:43Kotka
128
3170
Vanhalle ukon rähjälle
Satutit mua niin paljon kun erottiin. Oletko todella niin itsekäs että kuvittelet että huolisin sut kaiken tapahtuneen
21.11.2024 00:39Ikävä
38
2523
Olen tosi outo....
Päättelen palstajuttujen perusteella mitä mieltä minun kaipauksen kohde minusta on. Joskus kuvittelen tänne selkeitä tap
20.11.2024 00:07Ikävä
30
2435
Maisa on SALAKUVATTU huumepoliisinsa kanssa!
https://www.seiska.fi/vain-seiskassa/ensimmainen-yhteiskuva-maisa-torpan-ja-poliisikullan-lahiorakkaus-roihuaa/1525663
21.11.2024 09:27Kotimaiset julkkisjuorut
113
2198
Oletko sä luovuttanut
Mun suhteeni
20.11.2024 22:38Ikävä
114
1700
Nurmossa kuoli 2 Lasta..
Autokolarissa. Näin kertovat iltapäivälehdet juuri nyt. 22.11. Ja aina ennen Joulua näitä tulee. . .
22.11.2024 12:41Seinäjoki
27
1468
Hommaatko kinkkua jouluksi?
Itse tein pakastimeen n. 3Kg:n murekkeen sienillä ja juustokuorrutuksella. Voihan se olla, että jonkun pienen, valmiin k
20.11.2024 06:48Sinkut
173
1410
Mikko Koivu yrittää pestä mustan valkoiseksi
Ilmeisesti huomannut, että Helenan tukijoukot kasvaa kasvamistaan. Riistakamera paljasti hiljattain kylmän totuuden Mi
21.11.2024 20:14Kotimaiset julkkisjuorut
291
1277
Aatteleppa ite!
Jos ei oltaisikaan nyt NATOssa, olisimme puolueettomana sivustakatsojia ja elelisimme tyytyväisenä rauhassa maassamme.
20.11.2024 17:34Maailman menoa
292
1248
Onko se ikä
Alkanut haitata?
20.11.2024 03:29Ikävä
63
1090

Apua, mää en ossaa!!

Vastaukset

lonti kirjoitti:

FixFix kirjoitti:

Lonti kirjoitti:

FixFix kirjoitti:

lonti kirjoitti:

FixFix kirjoitti:

lonti kirjoitti:

FixFix kirjoitti:

lonti kirjoitti:

FixFix kirjoitti:

lonti kirjoitti:

FixFix kirjoitti:

Luetuimmat keskustelut

Kotkalainen Demari Riku Pirinen vangittu Saksassa lapsipornosta

Vanhalle ukon rähjälle

Olen tosi outo....

Maisa on SALAKUVATTU huumepoliisinsa kanssa!

Oletko sä luovuttanut

Nurmossa kuoli 2 Lasta..

Hommaatko kinkkua jouluksi?

Mikko Koivu yrittää pestä mustan valkoiseksi

Aatteleppa ite!

Onko se ikä

Joel Harkimo seuraa Martina Aitolehden jalanjälkiä!

Ernest Lawson paljastaa, mitä tapahtuu Nelli-rakkaan kanssa sunnuntai-iltaisin: "Jos vaimo ei ole.."

Miksi pankkitunnuksilla kaikkialle

Susanna Laine avoimena - Ei "seurustele" tästä erityisestä syystä Farmi-kisaajien kanssa: "En ole.."

Bachelor Suomi: Sinkkunainen Ada avaa sanaisen arkkunsa bachelor-Joonaksen toimista: "Miksen...?"

Maisa on SALAKUVATTU huumepoliisinsa kanssa!

Ensitreffit Hai rehellisenä - Tämä intiimiyden muoto puuttui suhteesta Annan kanssa: "Meillä ei..."

Vessahätä mainittu! Metsäpeikko eli Atte Kilpinen teki paljastuksia Masked Singer -kulissien takaa

Hommaatko kinkkua jouluksi?

Omalääkäri hallituksen utopia?