Matolaatikossa vikaa!

ComboFix 08-06-20.4 - Niblaa 2008-06-24 15:21:51.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1035.18.494 [GMT 3:00]
Running from: C:\Documents and Settings\Niblaa\Työpöytä\ComboFix.exe
* Created a new restore point

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.

(((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\BMebc864e8.xml
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\cgknavcx.ini
C:\WINDOWS\system32\EgiPsBeg.ini
C:\WINDOWS\system32\EgiPsBeg.ini2
C:\WINDOWS\system32\gycapycx.ini
C:\WINDOWS\system32\njpvdaac.ini
C:\WINDOWS\system32\opolmiqp.dll
C:\WINDOWS\system32\qjkuxblt.dll
C:\WINDOWS\system32\tomfoxmr.dll
C:\WINDOWS\system32\vdamsfwy.dll

.
((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2008-05-24 to 2008-06-24 )))))))))))))))))
.

2008-06-21 23:37 . 2008-06-21 23:37   40,960   --a------   C:\WINDOWS\system32\xokamvaj.dll
2008-06-20 23:31 . 2008-06-20 23:31   40,960   --a------   C:\WINDOWS\system32\qdqtledj.dll
2008-06-20 23:22 . 2008-06-20 23:22   90,624   --a------   C:\WINDOWS\system32\mqtocanx.dll
2008-06-19 23:31 . 2008-06-19 23:31   40,960   --a------   C:\WINDOWS\system32\ynolakqi.dll
2008-06-18 23:20 . 2008-06-18 23:20   40,960   --a------   C:\WINDOWS\system32\gudkmnqy.dll
2008-06-11 03:50 . 2008-04-14 18:52   272,128   ---------   C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 03:50 . 2008-04-14 18:52   272,128   -----c---   C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-08 21:34 . 2008-06-08 21:34      d--------   C:\Program Files\Malwarebytes' Anti-Malware
2008-06-08 21:34 . 2008-06-08 21:34      d--------   C:\Documents and Settings\Niblaa\Application Data\Malwarebytes
2008-06-08 21:34 . 2008-06-08 21:34      d--------   C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-08 21:34 . 2008-06-05 16:04   34,296   --a------   C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-06-08 21:34 . 2008-06-05 16:04   15,864   --a------   C:\WINDOWS\system32\drivers\mbam.sys
2008-06-08 19:51 . 2008-06-08 19:51      d--------   C:\Documents and Settings\Järjestelmänvalvoja
2008-06-08 16:32 . 2008-06-08 16:32      d--------   C:\Program Files\Trend Micro
2008-06-08 03:00 . 2008-06-13 13:06   1,374   --a------   C:\WINDOWS\imsins.BAK
2008-06-04 20:56 . 2008-06-04 20:56      d--------   C:\Program Files\MSN Messenger
2008-06-04 19:57 . 2008-06-04 20:09      d--------   C:\WINDOWS\SxsCaPendDel
2008-06-04 19:56 . 2008-02-22 02:33   69,632   --a------   C:\WINDOWS\system32\javacpl.cpl
2008-06-01 13:51 . 2008-06-24 01:13      d--------   C:\Documents and Settings\All Users\Application Data\Google Updater

.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-24 12:24   ---------   d-----w   C:\Documents and Settings\Niblaa\Application Data\uTorrent
2008-06-24 00:11   ---------   d-----w   C:\Program Files\DC
2008-06-16 02:53   98,304   ----a-w   C:\WINDOWS\DUMP68cc.tmp
2008-06-08 16:07   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-06-04 18:06   ---------   d-----w   C:\Program Files\Zoom Player
2008-06-04 16:56   ---------   d-----w   C:\Program Files\Java
2008-06-01 10:51   ---------   d-----w   C:\Program Files\Google
2008-05-22 12:48   ---------   d-----w   C:\Program Files\RealMedia
2008-05-22 12:48   ---------   d-----w   C:\Program Files\OpenSource Flash Video Splitter
2008-05-22 12:48   ---------   d-----w   C:\Program Files\DScaler5
2008-05-22 12:48   ---------   d-----w   C:\Program Files\CD Audio Reader Filter
2008-05-22 12:47   ---------   d-----w   C:\Program Files\Haali
2008-05-22 12:47   ---------   d-----w   C:\Program Files\ffdshow
2008-05-22 12:47   ---------   d-----w   C:\Program Files\DSP-worx
2008-05-22 12:47   ---------   d-----w   C:\Program Files\DirectVobSub
2008-05-16 15:26   ---------   d-----w   C:\Program Files\B2BPOKER
2008-05-11 14:54   ---------   d-----w   C:\Program Files\PAFPoker
2008-05-08 12:28   202,752   ----a-w   C:\WINDOWS\system32\drivers\rmcast.sys
2005-03-31 19:17   40,960   ----a-w   C:\Program Files\Uninstall_CDS.exe
.

((((((((((((((((((((((((((((( snapshot@2008-06-08_19.51.21.37 )))))))))))))))))))))))))))))))))))))))))
.
2008-04-21 06:57:48   1,024,000   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\browseui.dll
2008-04-21 06:57:48   151,552   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\cdfview.dll
2008-04-21 06:57:49   1,055,232   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\danim.dll
2008-04-21 06:57:49   357,888   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\dxtmsft.dll
2008-04-21 06:57:49   205,312   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\dxtrans.dll
2008-04-21 06:57:49   55,808   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\extmgr.dll
2008-04-17 10:46:59   18,432   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\iedw.exe
2008-04-21 06:57:49   251,392   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\iepeers.dll
2008-04-21 06:57:50   96,256   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\inseng.dll
2008-04-21 06:57:50   16,384   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\jsproxy.dll
2008-04-21 06:57:52   3,087,872   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mshtml.dll
2008-04-21 06:57:52   449,024   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mshtmled.dll
2008-04-21 06:57:52   146,432   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\msrating.dll
2008-04-21 06:57:53   532,480   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mstime.dll
2008-04-21 06:57:53   39,424   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\pngfilt.dll
2008-04-21 06:57:54   1,498,624   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shdocvw.dll
2008-04-21 06:57:54   474,112   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shlwapi.dll
2008-04-17 11:03:44   357,888   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\spru040b.dll
2008-04-21 06:57:54   619,008   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\urlmon.dll
2008-04-21 06:57:55   666,624   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\wininet.dll
2008-04-21 06:44:07   3,087,872   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\mshtml.dll
2008-04-21 06:44:08   666,112   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll
2008-04-21 06:30:44   3,088,384   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll
2008-04-21 06:30:45   666,624   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll
2007-11-30 12:39:27   17,272   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\spmsg.dll
2007-11-30 12:39:27   232,824   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\spuninst.exe
2007-11-30 12:39:27   26,488   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\update\spcustom.dll
2007-11-30 12:39:27   757,112   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\update\update.exe
2007-11-30 12:39:28   392,056   ----a-w   C:\WINDOWS\$hf_mig$\KB950759\update\updspapi.dll
2008-05-07 04:55:33   1,288,704   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
2008-05-07 05:12:01   1,288,704   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
2008-05-07 05:04:48   1,288,704   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
2007-11-30 11:19:02   17,272   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
2007-11-30 11:19:02   232,824   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
2007-11-30 11:19:02   26,488   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
2007-11-30 12:39:27   757,112   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
2007-11-30 12:39:28   392,056   ----a-w   C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
- 2008-06-08 16:47:26   2,048   --s-a-w   C:\WINDOWS\bootstat.dat
2008-06-24 12:26:02   2,048   --s-a-w   C:\WINDOWS\bootstat.dat
2008-04-14 15:52:59   272,128   ------w   C:\WINDOWS\Driver Cache\i386\bthport.sys
- 2000-08-31 05:00:00   28,160   ----a-w   C:\WINDOWS\Nircmd.exe
2000-08-31 05:00:00   28,672   ----a-w   C:\WINDOWS\Nircmd.exe
- 2008-02-16 09:02:36   1,023,488   ----a-w   C:\WINDOWS\system32\browseui.dll
2008-04-21 07:02:46   1,023,488   ----a-w   C:\WINDOWS\system32\browseui.dll
- 2008-02-16 09:02:36   151,552   ----a-w   C:\WINDOWS\system32\cdfview.dll
2008-04-21 07:02:46   151,552   ----a-w   C:\WINDOWS\system32\cdfview.dll
- 2008-02-16 09:02:37   1,055,232   ----a-w   C:\WINDOWS\system32\danim.dll
2008-04-21 07:02:47   1,055,232   ----a-w   C:\WINDOWS\system32\danim.dll
- 2008-02-16 09:02:36   1,023,488   -c--a-w   C:\WINDOWS\system32\dllcache\browseui.dll
2008-04-21 07:02:46   1,023,488   -c--a-w   C:\WINDOWS\system32\dllcache\browseui.dll
- 2008-02-16 09:02:36   151,552   -c--a-w   C:\WINDOWS\system32\dllcache\cdfview.dll
2008-04-21 07:02:46   151,552   -c--a-w   C:\WINDOWS\system32\dllcache\cdfview.dll
- 2008-02-16 09:02:37   1,055,232   -c--a-w   C:\WINDOWS\system32\dllcache\danim.dll
2008-04-21 07:02:47   1,055,232   -c--a-w   C:\WINDOWS\system32\dllcache\danim.dll
- 2008-02-16 09:02:37   357,888   -c--a-w   C:\WINDOWS\system32\dllcache\dxtmsft.dll
2008-04-21 07:02:47   357,888   -c--a-w   C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2008-02-16 09:02:37   205,312   -c--a-w   C:\WINDOWS\system32\dllcache\dxtrans.dll
2008-04-21 07:02:47   205,312   -c--a-w   C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2008-02-16 09:02:37   55,808   -c--a-w   C:\WINDOWS\system32\dllcache\extmgr.dll
2008-04-21 07:02:47   55,808   -c--a-w   C:\WINDOWS\system32\dllcache\extmgr.dll
- 2008-02-15 09:23:37   18,432   -c--a-w   C:\WINDOWS\system32\dllcache\iedw.exe
2008-04-17 10:52:54   18,432   -c--a-w   C:\WINDOWS\system32\dllcache\iedw.exe
- 2008-02-16 09:02:38   250,880   -c--a-w   C:\WINDOWS\system32\dllcache\iepeers.dll
2008-04-21 07:02:47   250,880   -c--a-w   C:\WINDOWS\system32\dllcache\iepeers.dll
- 2008-02-16 09:02:38   96,256   -c--a-w   C:\WINDOWS\system32\dllcache\inseng.dll
2008-04-21 07:02:47   96,256   -c--a-w   C:\WINDOWS\system32\dllcache\inseng.dll
- 2008-02-16 09:02:38   16,384   -c--a-w   C:\WINDOWS\system32\dllcache\jsproxy.dll
2008-04-21 07:02:47   16,384   -c--a-w   C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2008-02-16 22:32:40   3,080,704   -c--a-w   C:\WINDOWS\system32\dllcache\mshtml.dll
2008-04-21 07:02:49   3,080,704   -c--a-w   C:\WINDOWS\system32\dllcache\mshtml.dll
- 2008-02-16 09:02:39   449,024   -c--a-w   C:\WINDOWS\system32\dllcache\mshtmled.dll
2008-04-21 07:02:49   449,024   -c--a-w   C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2008-02-16 09:02:39   146,432   -c--a-w   C:\WINDOWS\system32\dllcache\msrating.dll
2008-04-21 07:02:49   146,432   -c--a-w   C:\WINDOWS\system32\dllcache\msrating.dll
- 2008-02-16 09:02:39   532,480   -c--a-w   C:\WINDOWS\system32\dllcache\mstime.dll
2008-04-21 07:02:50   532,480   -c--a-w   C:\WINDOWS\system32\dllcache\mstime.dll
- 2008-02-16 09:02:39   39,424   -c--a-w   C:\WINDOWS\system32\dllcache\pngfilt.dll
2008-04-21 07:02:50   39,424   -c--a-w   C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2007-10-29 22:43:51   1,288,192   -c--a-w   C:\WINDOWS\system32\dllcache\quartz.dll
2008-05-07 05:15:43   1,288,192   -c--a-w   C:\WINDOWS\system32\dllcache\quartz.dll
- 2006-07-13 08:48:58   202,240   -c--a-w   C:\WINDOWS\system32\dllcache\rmcast.sys
2008-05-08 12:28:49   202,752   -c--a-w   C:\WINDOWS\system32\dllcache\rmcast.sys
- 2008-02-16 09:02:41   1,494,016   -c--a-w   C:\WINDOWS\system32\dllcache\shdocvw.dll
2008-04-21 07:02:51   1,494,016   -c--a-w   C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2008-02-16 09:02:41   474,112   -c--a-w   C:\WINDOWS\system32\dllcache\shlwapi.dll
2008-04-21 07:02:51   474,112   -c--a-w   C:\WINDOWS\system32\dllcache\shlwapi.dll
- 2008-02-16 09:02:41   616,448   -c--a-w   C:\WINDOWS\system32\dllcache\urlmon.dll
2008-04-21 07:02:52   616,448   -c--a-w   C:\WINDOWS\system32\dllcache\urlmon.dll
- 2008-02-16 09:02:42   659,456   -c--a-w   C:\WINDOWS\system32\dllcache\wininet.dll
2008-04-21 07:02:52   659,456   -c--a-w   C:\WINDOWS\system32\dllcache\wininet.dll
- 2008-02-16 09:02:37   357,888   ----a-w   C:\WINDOWS\system32\dxtmsft.dll
2008-04-21 07:02:47   357,888   ----a-w   C:\WINDOWS\system32\dxtmsft.dll
- 2008-02-16 09:02:37   205,312   ----a-w   C:\WINDOWS\system32\dxtrans.dll
2008-04-21 07:02:47   205,312   ----a-w   C:\WINDOWS\system32\dxtrans.dll
- 2008-02-16 09:02:37   55,808   ----a-w   C:\WINDOWS\system32\extmgr.dll
2008-04-21 07:02:47   55,808   ----a-w   C:\WINDOWS\system32\extmgr.dll
- 2008-02-16 09:02:38   250,880   ----a-w   C:\WINDOWS\system32\iepeers.dll
2008-04-21 07:02:47   250,880   ----a-w   C:\WINDOWS\system32\iepeers.dll
- 2008-02-16 09:02:38   96,256   ----a-w   C:\WINDOWS\system32\inseng.dll
2008-04-21 07:02:47   96,256   ----a-w   C:\WINDOWS\system32\inseng.dll
- 2008-02-16 09:02:38   16,384   ----a-w   C:\WINDOWS\system32\jsproxy.dll
2008-04-21 07:02:47   16,384   ----a-w   C:\WINDOWS\system32\jsproxy.dll
- 2008-05-09 11:35:06   16,863,864   ----a-w   C:\WINDOWS\system32\MRT.exe
2008-05-29 23:35:11   17,486,968   ----a-w   C:\WINDOWS\system32\MRT.exe
- 2008-02-16 22:32:40   3,080,704   ----a-w   C:\WINDOWS\system32\mshtml.dll
2008-04-21 07:02:49   3,080,704   ----a-w   C:\WINDOWS\system32\mshtml.dll
- 2008-02-16 09:02:39   449,024   ----a-w   C:\WINDOWS\system32\mshtmled.dll
2008-04-21 07:02:49   449,024   ----a-w   C:\WINDOWS\system32\mshtmled.dll
- 2008-02-16 09:02:39   146,432   ----a-w   C:\WINDOWS\system32\msrating.dll
2008-04-21 07:02:49   146,432   ----a-w   C:\WINDOWS\system32\msrating.dll
- 2008-02-16 09:02:39   532,480   ----a-w   C:\WINDOWS\system32\mstime.dll
2008-04-21 07:02:50   532,480   ----a-w   C:\WINDOWS\system32\mstime.dll
- 2008-06-08 16:37:03   58,596   ----a-w   C:\WINDOWS\system32\perfc009.dat
2008-06-23 19:38:13   58,596   ----a-w   C:\WINDOWS\system32\perfc009.dat
- 2008-06-08 16:37:03   70,990   ----a-w   C:\WINDOWS\system32\perfc00B.dat
2008-06-23 19:38:13   70,990   ----a-w   C:\WINDOWS\system32\perfc00B.dat
- 2008-06-08 16:37:03   392,296   ----a-w   C:\WINDOWS\system32\perfh009.dat
2008-06-23 19:38:13   392,296   ----a-w   C:\WINDOWS\system32\perfh009.dat
- 2008-06-08 16:37:03   366,492   ----a-w   C:\WINDOWS\system32\perfh00B.dat
2008-06-23 19:38:13   366,492   ----a-w   C:\WINDOWS\system32\perfh00B.dat
- 2008-02-16 09:02:39   39,424   ----a-w   C:\WINDOWS\system32\pngfilt.dll
2008-04-21 07:02:50   39,424   ----a-w   C:\WINDOWS\system32\pngfilt.dll
- 2007-10-29 22:43:51   1,288,192   ----a-w   C:\WINDOWS\system32\quartz.dll
2008-05-07 05:15:43   1,288,192   ----a-w   C:\WINDOWS\system32\quartz.dll
- 2008-02-16 09:02:41   1,494,016   ----a-w   C:\WINDOWS\system32\shdocvw.dll
2008-04-21 07:02:51   1,494,016   ----a-w   C:\WINDOWS\system32\shdocvw.dll
- 2008-02-16 09:02:41   474,112   ----a-w   C:\WINDOWS\system32\shlwapi.dll
2008-04-21 07:02:51   474,112   ----a-w   C:\WINDOWS\system32\shlwapi.dll
- 2008-02-16 09:02:41   616,448   ----a-w   C:\WINDOWS\system32\urlmon.dll
2008-04-21 07:02:52   616,448   ----a-w   C:\WINDOWS\system32\urlmon.dll
- 2008-02-16 09:02:42   659,456   ----a-w   C:\WINDOWS\system32\wininet.dll
2008-04-21 07:02:52   659,456   ----a-w   C:\WINDOWS\system32\wininet.dll
- 2008-02-15 23:03:12   357,888   ----a-w   C:\WINDOWS\system32\xpsp3res.dll
2008-04-17 11:03:44   357,888   ----a-w   C:\WINDOWS\system32\xpsp3res.dll
2008-06-24 12:26:11   16,384   ----atw   C:\WINDOWS\Temp\Perflib_Perfdata_fc.dat
- 2008-06-08 16:47:51   1,500   ----a-w   C:\WINDOWS\UI\BIOSCTL.DAT
2008-06-24 12:26:29   1,500   ----a-w   C:\WINDOWS\UI\BIOSCTL.DAT
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5BBBE4BC-D787-4529-8DFC-DDD26F99DF2B}]
         C:\WINDOWS\system32\geBsPigE.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BE7E4CE1-8CBA-44A6-956F-462A667D3286}]
         C:\WINDOWS\system32\qoMgghFY.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\nbj.exe" [2005-05-19 20:38 1957888]
"FreeRAM XP"="C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" [2006-03-23 01:13 1591808]
"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2005-11-30 16:56 1306624]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 12:54 5674352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PtiuPbmd"="ptipbm.dll" [2003-01-15 14:41 24576 C:\WINDOWS\system32\ptipbm.dll]
"Gainward"="C:\WINDOWS\TBPanel.exe" [2003-06-16 06:56 2031616]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2003-12-15 19:56 81920]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"SoundMan"="SOUNDMAN.EXE" [2004-06-18 11:31 67584 C:\WINDOWS\soundman.exe]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 23:46 57344]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 01:07 8491008]
"nwiz"="nwiz.exe" [2007-09-17 01:07 1626112 C:\WINDOWS\system32\nwiz.exe]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2004-12-20 21:41 33792]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"PCSuiteTrayApplication"="C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE" [2005-12-13 08:49 217088]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 01:07 81920]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-09-14 16:12 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{BE7E4CE1-8CBA-44A6-956F-462A667D3286}"= C:\WINDOWS\system32\qoMgghFY.dll [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qoMgghFY]
qoMgghFY.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.divf"= divx412.dll
"vidc.mjpg"= m3jpeg32.dll
"vidc.dmb1"= m3jpeg32.dll
"vidc.avrn"= C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.advj"= C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.mszh"= C:\PROGRA~1\ACEMEG~1\SystemS\avimszh.dll
"vidc.zlib"= C:\PROGRA~1\ACEMEG~1\SystemS\avizlib.dll
"msacm.sl_anet"= C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm
"vidc.wrpr"= C:\PROGRA~1\ACEMEG~1\SystemS\aviwrap.dll
"vidc.3ivx"= C:\PROGRA~1\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL
"vidc.3iv0"= C:\PROGRA~1\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL
"vidc.3iv1"= C:\PROGRA~1\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL
"vidc.3iv2"= C:\PROGRA~1\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL
"vidc.3ivd"= C:\PROGRA~1\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL
"vidc.yv12"= C:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.divx"= C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX511.dll
"vidc.iyuv"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll
"vidc.yvu9"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll
"vidc.uyvy"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.yuy2"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.yvyu"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"msacm.msaudio1"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\DC \\DCPlusPlus.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\The All-Seeing Eye\\eye.exe"=
"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\javaw.exe"=
"C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=
"C:\\Program Files\\uTorrent\\utorrent.exe"=
"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\javaw.exe"=
"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\javaw.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=

R0 d343bus;d343bus;C:\WINDOWS\system32\DRIVERS\d343bus.sys [2003-12-15 19:46]
R0 d343port;d343port;C:\WINDOWS\system32\DRIVERS\d343port.sys [2003-12-15 18:29]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 02:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 02:16]
R3 2802W;SMC2802W 2.4GHz 54 Mbps Wireless PCI Driver;C:\WINDOWS\system32\DRIVERS\2802W.sys [2004-03-08 17:23]
R3 PCAlertDriver;PCAlertDriver;C:\Program Files\MSI\Core Center\NTGLM7X.sys [2004-08-20 19:03]
R3 RushTopDevice;RushTopDevice;C:\Program Files\MSI\Core Center\RushTop.sys [2004-05-26 20:55]
R3 w3304an5;WN3X0X Wireless Adapter;C:\PROGRA~1\SMC\SMC280~1.4GH\INSTAL~1\WINXP\w3304an5.SYS [2002-10-07 05:14]

*Newly Created Service* - PCALERTDRIVER
*Newly Created Service* - RUSHTOPDEVICE
.
'Ajoitetut teht„v„t'-kansion sis„lt”
"2008-06-24 11:43:01 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-24 15:26:40
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\MSI\Core Center\CoreCenter.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\SMC\SMC2802W 2.4GHz 54 Mbps Wireless PCI Adapter\Installer\WINXP\SMC11GMonitor.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
.
**************************************************************************
.
Completion time: 2008-06-24 15:29:58 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-24 12:29:55
ComboFix2.txt 2008-06-08 20:59:20
ComboFix3.txt 2008-06-08 17:51:20
ComboFix4.txt 2008-06-08 16:51:38

Pre-Run: 648,048,640 tavua vapaana
Post-Run: 698,630,144 tavua vapaana

330   --- E O F ---   2008-06-13 10:07:30