jotain vikaa on

_jukka-

löytyykö jotain logista
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:21:45, on 6.9.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
c:\program files\internet explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202491196265
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 5882 bytes

15

471

    Vastaukset

    Anonyymi (Kirjaudu / Rekisteröidy)
    5000
    • tämmöstä..

      Mulla ei osu ainakaan mitään silmää... Korjatkoo joku jos oon väärässä.

      Lataa http://www.besttechie.net/tools/mbam-setup.exe

      [list][*]Tuplaklikkaa [b]mbam-setup.exe[/b] ja seuraa ohjeita asentaaksesi ohjelman.
      [*]Lopuksi varmistu, että seuraavat on valittu: [b]Päivitä Malwarebytes' Anti-Malware[/b] ja [b]Käynnistä Malwarebytes' Anti-Malware[/b] ja sen jälkeen klikkaa [b]Lopeta[/b].
      [*]Jos päivitys löytyy, ohjelma lataa ja asentaa uusimman version.
      [*]Kun ohjelma on latautunut, valitse [b]Suorita täysi tarkistus[/b] ja klikkaa [b]Tarkista[/b].
      [*]Kun skanni on valmis, klikkaa [b]OK[/b] ja sitten [b]Näytä tulokset[/b] nähdäksesi tulokset.
      [*]Varmistu, että kaikki on merkitty ja klikkaa [b]Poista valitut[/b].
      [*]Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\[i]Käyttäjänimi[/i]\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\[b]log-[i]päiväys[/i].txt[/b]
      [*]Lähetä lokin sisältö seuraavassa viestissäsi.[/list]

      • -jukka--

        joo kunnossa on, kaveri katso. ongelmana huonosti poistetut ohjelmat jotka hyppi vähän välillä "silmille" mutta kiitos kun viitsit katsoa logini


      • Fix.Fix
        -jukka-- kirjoitti:

        joo kunnossa on, kaveri katso. ongelmana huonosti poistetut ohjelmat jotka hyppi vähän välillä "silmille" mutta kiitos kun viitsit katsoa logini

        hjt:n loki


      • jukka-.,,,.-.,
        Fix.Fix kirjoitti:

        hjt:n loki

        en oo ehtinyt palstalla käydä, kun kaveri sano että kone on kunnossa.
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 5:53:17, on 12.9.2008
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16705)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Sygate\SPF\smc.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Viewpoint\Common\ViewpointService.exe
        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
        C:\PROGRA~1\AVG\AVG8\avgemc.exe
        C:\PROGRA~1\AVG\AVG8\avgtray.exe
        C:\Program Files\Common Files\Real\Update_OB\realsched.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        c:\program files\internet explorer\iexplore.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202491196265
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
        O20 - AppInit_DLLs: avgrsstx.dll
        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
        O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
        O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
        O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

        --
        End of file - 6704 bytes


      • Fix.Fix
        jukka-.,,,.-., kirjoitti:

        en oo ehtinyt palstalla käydä, kun kaveri sano että kone on kunnossa.
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 5:53:17, on 12.9.2008
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16705)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Sygate\SPF\smc.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Viewpoint\Common\ViewpointService.exe
        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
        C:\PROGRA~1\AVG\AVG8\avgemc.exe
        C:\PROGRA~1\AVG\AVG8\avgtray.exe
        C:\Program Files\Common Files\Real\Update_OB\realsched.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        c:\program files\internet explorer\iexplore.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202491196265
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
        O20 - AppInit_DLLs: avgrsstx.dll
        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
        O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
        O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
        O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

        --
        End of file - 6704 bytes

        Poista lisää poista sovelutuksesta

        Viewpoint

        Poista kansio vikasiedossa

        C:\Program Files\>> Viewpoint


      • se.
        jukka-.,,,.-., kirjoitti:

        en oo ehtinyt palstalla käydä, kun kaveri sano että kone on kunnossa.
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 5:53:17, on 12.9.2008
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16705)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Sygate\SPF\smc.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Viewpoint\Common\ViewpointService.exe
        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
        C:\PROGRA~1\AVG\AVG8\avgemc.exe
        C:\PROGRA~1\AVG\AVG8\avgtray.exe
        C:\Program Files\Common Files\Real\Update_OB\realsched.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        c:\program files\internet explorer\iexplore.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202491196265
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
        O20 - AppInit_DLLs: avgrsstx.dll
        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
        O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
        O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
        O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

        --
        End of file - 6704 bytes

        viesti


      • Fix.Fix
        jukka-.,,,.-., kirjoitti:

        en oo ehtinyt palstalla käydä, kun kaveri sano että kone on kunnossa.
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 5:53:17, on 12.9.2008
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16705)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Sygate\SPF\smc.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Viewpoint\Common\ViewpointService.exe
        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
        C:\PROGRA~1\AVG\AVG8\avgemc.exe
        C:\PROGRA~1\AVG\AVG8\avgtray.exe
        C:\Program Files\Common Files\Real\Update_OB\realsched.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        c:\program files\internet explorer\iexplore.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202491196265
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
        O20 - AppInit_DLLs: avgrsstx.dll
        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
        O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
        O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
        O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

        --
        End of file - 6704 bytes

        tuossa muodossa

        1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
        [url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe][color=red]combofix1[/color][/url]
        [url=http://subs.geekstogo.com/ComboFix.exe][color=red]combofix2[/color][/url]

        2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
        3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
        Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.


      • _jukka--.
        Fix.Fix kirjoitti:

        tuossa muodossa

        1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
        [url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe][color=red]combofix1[/color][/url]
        [url=http://subs.geekstogo.com/ComboFix.exe][color=red]combofix2[/color][/url]

        2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
        3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
        Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

        tässä gombo fixin logi

        ComboFix 08-09-10.04 - Omistaja 2008-09-12 16:46:03.8 - NTFSx86
        Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1035.18.637 [GMT 3:00]
        Sijainti: C:\Documents and Settings\Omistaja\Työpöytä\ComboFix.exe
        * Uusi palautuspiste luotu
        .

        (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
        .

        C:\Documents and Settings\Omistaja\Application Data\inst.exe

        .
        ((((((((((((((((((((((((((((((((((((((( Ajurit/Palvelut )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        -------\Legacy_6TO4
        -------\Service_6to4


        ((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2008-08-12 to 2008-09-12 )))))))))))))))))
        .

        2008-09-10 20:31 . 2008-09-11 18:44      d--------   C:\Documents and Settings\Omistaja\.onnet
        2008-09-10 18:49 . 2008-09-10 18:49      d--------   C:\Documents and Settings\Omistaja\Application Data\Motive
        2008-09-10 00:51 . 2008-09-10 09:38      d----c---   C:\Poker
        2008-09-10 00:19 . 2008-09-10 02:18      d--------   C:\Program Files\PartyGaming
        2008-09-09 23:01 . 2008-09-12 16:37      d--------   C:\Program Files\PAFPoker
        2008-09-09 21:43 . 2008-09-09 21:43      d--------   C:\Program Files\Malwarebytes' Anti-Malware
        2008-09-09 21:43 . 2008-09-09 21:43      d--------   C:\Documents and Settings\Omistaja\Application Data\Malwarebytes
        2008-09-09 21:43 . 2008-09-09 21:43      d--------   C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2008-09-09 21:43 . 2008-09-08 00:11   38,528   --a------   C:\WINDOWS\system32\drivers\mbamswissarmy.sys
        2008-09-09 21:43 . 2008-09-08 00:11   17,200   --a------   C:\WINDOWS\system32\drivers\mbam.sys
        2008-09-09 16:11 . 2008-09-09 16:11      d--------   C:\Program Files\Common Files\xing shared
        2008-09-09 16:10 . 2008-09-09 16:10      d--------   C:\Program Files\Real
        2008-09-09 15:24 . 2008-09-09 15:24      d--------   C:\Program Files\Pro Pinball
        2008-09-02 18:08 . 2008-09-02 18:25   281   --a------   C:\WINDOWS\Clony2.ini
        2008-09-02 18:03 . 2008-09-02 18:03      d--------   C:\Program Files\SlySoft
        2008-09-01 20:05 . 2008-09-01 20:05   28   --a------   C:\WINDOWS\system32\mcheck.mhf
        2008-09-01 20:00 . 2008-09-01 20:00      d--------   C:\Program Files\Elaborate Bytes
        2008-08-30 14:40 . 2008-08-30 14:40   6,656   --ahs----   C:\WINDOWS\system32\Thumbs.db
        2008-08-30 14:40 . 2008-08-30 14:40   5,632   --ahs----   C:\WINDOWS\Thumbs.db
        2008-08-29 17:04 . 2008-08-29 17:04      d--------   C:\Documents and Settings\Omistaja\Application Data\acccore
        2008-08-29 16:54 . 2008-09-12 16:37      d--------   C:\Documents and Settings\All Users\Application Data\Viewpoint
        2008-08-29 16:54 . 2008-08-29 16:55      d--------   C:\Documents and Settings\All Users\Application Data\AOL Downloads
        2008-08-29 16:54 . 2008-08-29 16:54      d--------   C:\Documents and Settings\All Users\Application Data\acccore
        2008-08-29 16:54 . 2008-08-29 16:54   21   --a------   C:\WINDOWS\atid.ini
        2008-08-29 16:53 . 2008-08-29 19:49      d--------   C:\Program Files\Common Files\AOL
        2008-08-29 16:53 . 2008-08-29 16:58      d--------   C:\Documents and Settings\All Users\Application Data\AOL OCP
        2008-08-29 16:53 . 2008-08-29 16:53      d--------   C:\Documents and Settings\All Users\Application Data\AOL
        2008-08-29 16:53 . 2008-08-29 16:56   1,214   --ah-----   C:\IPH.PH
        2008-08-24 21:38 . 2008-07-12 08:18   3,851,784   --a------   C:\WINDOWS\system32\D3DX9_39.dll
        2008-08-24 21:38 . 2008-07-12 08:18   1,493,528   --a------   C:\WINDOWS\system32\D3DCompiler_39.dll
        2008-08-24 21:38 . 2008-07-31 10:40   509,448   --a------   C:\WINDOWS\system32\XAudio2_2.dll
        2008-08-24 21:38 . 2008-05-30 14:19   507,400   --a------   C:\WINDOWS\system32\XAudio2_1.dll
        2008-08-24 21:38 . 2008-07-12 08:18   467,984   --a------   C:\WINDOWS\system32\d3dx10_39.dll
        2008-08-24 21:38 . 2008-07-31 10:41   238,088   --a------   C:\WINDOWS\system32\xactengine3_2.dll
        2008-08-24 21:38 . 2008-05-30 14:18   238,088   --a------   C:\WINDOWS\system32\xactengine3_1.dll
        2008-08-24 21:38 . 2008-07-31 10:41   68,616   --a------   C:\WINDOWS\system32\XAPOFX1_1.dll
        2008-08-24 21:38 . 2008-05-30 14:17   65,032   --a------   C:\WINDOWS\system32\XAPOFX1_0.dll
        2008-08-24 21:37 . 2008-08-24 21:37      d--------   C:\WINDOWS\Logs
        2008-08-24 21:37 . 2008-05-30 14:11   3,850,760   --a------   C:\WINDOWS\system32\D3DX9_38.dll
        2008-08-24 21:37 . 2008-05-30 14:11   1,491,992   --a------   C:\WINDOWS\system32\D3DCompiler_38.dll
        2008-08-24 21:37 . 2008-05-30 14:11   467,984   --a------   C:\WINDOWS\system32\d3dx10_38.dll
        2008-08-24 21:37 . 2008-05-30 14:17   25,608   --a------   C:\WINDOWS\system32\X3DAudio1_4.dll
        2008-08-24 21:24 . 2008-08-24 21:24      d--------   C:\Program Files\Utherverse Digital Inc
        2008-08-16 09:29 . 2008-08-18 20:19      d--------   C:\Program Files\Common Files\Symantec Shared
        2008-08-15 12:50 . 2008-08-15 12:50   0   --a------   C:\WINDOWS\nsreg.dat
        2008-08-14 19:40 . 2008-08-14 19:40      d--------   C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
        2008-08-13 19:40 . 2008-08-21 20:38      d--h-----   C:\$AVG8.VAULT$
        2008-08-13 17:00 . 2008-09-12 16:05      d--------   C:\WINDOWS\system32\drivers\Avg
        2008-08-13 17:00 . 2008-08-13 17:00      d--------   C:\Program Files\AVG
        2008-08-13 17:00 . 2008-08-13 17:00      d--------   C:\Documents and Settings\All Users\Application Data\avg8
        2008-08-13 17:00 . 2008-08-29 05:41   97,928   --a------   C:\WINDOWS\system32\drivers\avgldx86.sys
        2008-08-13 17:00 . 2008-08-13 17:00   76,040   --a------   C:\WINDOWS\system32\drivers\avgtdix.sys
        2008-08-13 17:00 . 2008-08-13 17:00   10,520   --a------   C:\WINDOWS\system32\avgrsstx.dll
        2008-08-13 06:17 . 2008-05-01 17:35   331,776   -----c---   C:\WINDOWS\system32\dllcache\msadce.dll
        2008-08-13 06:14 . 2008-04-11 22:05   691,712   -----c---   C:\WINDOWS\system32\dllcache\inetcomm.dll
        2008-08-12 21:23 . 2008-08-12 21:27      d--------   C:\Program Files\weblin
        2008-08-12 21:22 . 2008-08-12 21:27      d--------   C:\Documents and Settings\Omistaja\Application Data\zweitgeist

        .
        (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-09-10 20:42   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\BitTorrent
        2008-09-10 16:09   47,360   ----a-w   C:\Documents and Settings\Omistaja\Application Data\pcouffin.sys
        2008-09-10 16:09   ---------   d-----w   C:\Program Files\DVDFab Platinum 4
        2008-09-10 16:09   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\Vso
        2008-09-09 13:10   499,712   ----a-w   C:\WINDOWS\system32\msvcp71.dll
        2008-09-09 13:10   348,160   ----a-w   C:\WINDOWS\system32\msvcr71.dll
        2008-09-09 13:10   ---------   d-----w   C:\Program Files\Common Files\Real
        2008-09-06 06:40   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\Ahead
        2008-09-06 06:29   ---------   d-----w   C:\Program Files\Common Files\Ahead
        2008-09-06 06:27   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Nero
        2008-09-06 06:20   ---------   d-----w   C:\Program Files\Ahead
        2008-09-05 13:15   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\wsInspector
        2008-09-04 17:17   ---------   d-----w   C:\Program Files\Windows Live
        2008-09-04 17:16   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\WLInstaller
        2008-09-01 13:18   ---------   d-----w   C:\Program Files\Windows Live Safety Center
        2008-08-30 09:19   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\DVD Shrink
        2008-08-28 14:05   107,888   ----a-w   C:\WINDOWS\system32\CmdLineExt.dll
        2008-08-28 13:55   ---------   d-----w   C:\Program Files\EA GAMES
        2008-08-25 13:46   ---------   d---a-w   C:\Documents and Settings\All Users\Application Data\TEMP
        2008-08-25 13:45   ---------   d-----w   C:\Program Files\SpywareBlaster
        2008-08-18 17:00   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
        2008-08-15 13:26   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\vghd
        2008-08-13 13:47   ---------   d-----w   C:\Program Files\TrojanHunter 5.0
        2008-08-12 18:08   152,920   ----a-w   C:\WINDOWS\system32\vghd.scr
        2008-08-06 18:54   ---------   d-----w   C:\Program Files\Common Files\Totem Shared
        2008-08-05 14:49   ---------   d-----w   C:\Program Files\DNA
        2008-08-03 14:46   278,728   ----a-w   C:\WINDOWS\system32\drivers\atksgt.sys
        2008-08-03 14:46   25,416   ----a-w   C:\WINDOWS\system32\drivers\lirsgt.sys
        2008-08-03 07:40   44,344   ----a-w   C:\Documents and Settings\Omistaja\Application Data\GDIPFONTCACHEV1.DAT
        2008-08-03 05:00   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
        2008-08-02 18:15   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\NCH Swift Sound
        2008-08-02 17:38   ---------   d-----w   C:\Program Files\Microsoft Laskin
        2008-08-02 13:43   ---------   d-----w   C:\Program Files\TeamViewer3
        2008-08-02 13:43   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\TeamViewer
        2008-08-02 13:16   ---------   d-----w   C:\WINDOWS\system32\config\systemprofile\Application Data\TeamViewer
        2008-07-30 14:49   ---------   d-----w   C:\Program Files\BitTorrent
        2008-07-27 06:14   ---------   d-----w   C:\Program Files\NovaClock
        2008-07-26 08:54   ---------   d-----w   C:\Program Files\Uniblue
        2008-07-26 08:54   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\Uniblue
        2008-07-24 15:40   ---------   d-----w   C:\Program Files\MagicISO
        2008-07-22 04:22   ---------   d-----w   C:\Program Files\Java
        2008-07-22 04:21   ---------   d-----w   C:\Program Files\Common Files\Java
        2008-07-21 16:07   ---------   d-----w   C:\Program Files\Trend Micro
        2008-07-20 05:37   ---------   d-----w   C:\Program Files\Audacity
        2008-07-18 19:10   94,920   ----a-w   C:\WINDOWS\system32\cdm.dll
        2008-07-18 19:10   53,448   ----a-w   C:\WINDOWS\system32\wuauclt.exe
        2008-07-18 19:10   45,768   ----a-w   C:\WINDOWS\system32\wups2.dll
        2008-07-18 19:10   36,552   ----a-w   C:\WINDOWS\system32\wups.dll
        2008-07-18 19:09   563,912   ----a-w   C:\WINDOWS\system32\wuapi.dll
        2008-07-18 19:09   325,832   ----a-w   C:\WINDOWS\system32\wucltui.dll
        2008-07-18 19:09   205,000   ----a-w   C:\WINDOWS\system32\wuweb.dll
        2008-07-18 19:09   1,811,656   ----a-w   C:\WINDOWS\system32\wuaueng.dll
        2008-07-18 19:07   270,880   ----a-w   C:\WINDOWS\system32\mucltui.dll
        2008-07-18 19:07   210,976   ----a-w   C:\WINDOWS\system32\muweb.dll
        2008-07-17 11:32   ---------   d-----w   C:\Program Files\Registry Easy
        2008-07-17 11:08   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\nView_Profiles
        2008-07-17 11:01   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\dvdcss
        2008-07-17 10:48   ---------   d-----w   C:\Program Files\Common Files\Wise Installation Wizard
        2008-07-08 08:09   81,920   -c----r   C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
        2008-07-07 20:28   253,952   ----a-w   C:\WINDOWS\system32\es.dll
        2008-06-24 16:44   74,240   ----a-w   C:\WINDOWS\system32\mscms.dll
        2008-06-24 15:12   295,936   ------w   C:\WINDOWS\system32\wmpeffects.dll
        2008-06-23 16:29   826,368   ----a-w   C:\WINDOWS\system32\wininet.dll
        2008-06-20 17:47   246,784   ----a-w   C:\WINDOWS\system32\mswsock.dll
        2008-03-31 16:23   604   -c-ha-w   C:\Program Files\STLL Notifier
        2004-03-11 11:27   40,960   ----a-w   C:\Program Files\Uninstall_CDS.exe
        2008-05-09 16:24   32,768   --sha-w   C:\WINDOWS\system32\config\systemprofile\Local Settings\Sivuhistoria\History.IE5\MSHist012008050920080510\index.dat
        .

        (((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        *Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„
        REGEDIT4

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2004-10-15 2577632]
        "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-08-29 1235736]
        "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 8523776]
        "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
        "NoResolveSearch"= 1 (0x1)

        [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
        "{93994DE8-8239-4655-B1D1-5F4E91300429}"= "C:\Program Files\DVD Region CSS Free\DVDShell.dll" [2004-10-09 49152]
        "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
        2007-04-19 14:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
        "AppInit_DLLs"=avgrsstx.dll

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^HP Digital Imaging Monitor.lnk]

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^HP Image Zone -pikakäynnistys.lnk]

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^Logitech Desktop Messenger.lnk]
        path=C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Logitech Desktop Messenger.lnk
        backup=C:\WINDOWS\pss\Logitech Desktop Messenger.lnkCommon Startup

        [HKLM\~\startupfolder\C:^Documents and Settings^Omistaja^Käynnistä-valikko^Ohjelmat^Käynnistys^MagicDisc.lnk]

        [HKLM\~\startupfolder\C:^Documents and Settings^Omistaja^Käynnistä-valikko^Ohjelmat^Käynnistys^VirtuaGirl HD.LNK]
        path=C:\Documents and Settings\Omistaja\Käynnistä-valikko\Ohjelmat\Käynnistys\VirtuaGirl HD.LNK
        backup=C:\WINDOWS\pss\VirtuaGirl HD.LNKStartup

        [HKLM\~\startupfolder\C:^Documents and Settings^Omistaja^Käynnistä-valikko^Ohjelmat^Käynnistys^VirtuaGirl2.lnk]
        path=C:\Documents and Settings\Omistaja\Käynnistä-valikko\Ohjelmat\Käynnistys\VirtuaGirl2.lnk
        backup=C:\WINDOWS\pss\VirtuaGirl2.lnkStartup
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Disk Cleaner
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerBar
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Registry Helper
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RestartNeroSetup
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
        --a------ 2008-04-14 19:12 15360 C:\WINDOWS\system32\ctfmon.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
        --a------ 2004-08-22 18:05 81920 C:\Program Files\D-Tools\daemon.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
        --a------ 2004-05-12 16:18 241664 C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]
        --a------ 2008-07-08 11:09 20480 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwavscan]
        --a------ 2004-09-09 20:04 475200 C:\Kaspersky\mwavscan.com

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
        --a------ 2007-12-05 02:41 8523776 C:\WINDOWS\system32\nvcpl.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
        --a------ 2008-03-29 00:37 413696 C:\Program Files\QuickTime\QTTask.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
        --a------ 2008-06-10 05:27 144784 C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
        --a------ 2007-11-04 13:30 171448 C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\THGuard]
        C:\Program Files\TrojanHunter 5.0\THGuard.exe [BU]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
        --a------ 2008-09-09 16:10 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
        "gusvc"=3 (0x3)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
        "EnableFirewall"= 0 (0x0)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
        "%windir%\\system32\\sessmgr.exe"=
        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
        "C:\\Program Files\\BitTorrent\\bittorrent.exe"=
        "C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
        "C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
        "C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
        "8000:UDP"= 8000:UDP:Express Talk RTP Incoming Audio (UDP)
        "8001:UDP"= 8001:UDP:Express Talk RTP Incoming Audio (UDP)
        "8002:UDP"= 8002:UDP:Express Talk RTP Incoming Audio (UDP)
        "8003:UDP"= 8003:UDP:Express Talk RTP Incoming Audio (UDP)
        "8004:UDP"= 8004:UDP:Express Talk RTP Incoming Audio (UDP)
        "8005:UDP"= 8005:UDP:Express Talk RTP Incoming Audio (UDP)
        "8006:UDP"= 8006:UDP:Express Talk RTP Incoming Audio (UDP)
        "8007:UDP"= 8007:UDP:Express Talk RTP Incoming Audio (UDP)
        "8008:UDP"= 8008:UDP:Express Talk RTP Incoming Audio (UDP)
        "8009:UDP"= 8009:UDP:Express Talk RTP Incoming Audio (UDP)

        R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-29 97928]
        R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-29 875288]
        R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-29 231704]
        R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-08-13 76040]
        S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [ ]
        S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [ ]
        S3 teamviewervpn;TeamViewer VPN Adapter;C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2008-01-25 25088]
        S3 V0090VID;Creative WebCam Vista Plus;C:\WINDOWS\system32\DRIVERS\V0090Vid.sys [2005-04-14 138112]
        .
        'Ajoitetut teht„v„t'-kansion sis„lt”
        .
        - - - - POISTETUT JŽMŽRIVIT - - - -

        WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
        MSConfigStartUp-MsnMsgr - C:\Program Files\MSN Messenger\msnmsgr.exe
        MSConfigStartUp-NeroFilterCheck - C:\WINDOWS\system32\NeroCheck.exe


        .
        ------- T„ydent„v„ tarkistus -------
        .
        FireFox -: Profile - C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\1nojauc4.default\
        FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.com/
        FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
        FF -: plugin - C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
        .

        **************************************************************************

        catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-09-12 16:52:17
        Windows 5.1.2600 Service Pack 3 NTFS

        tarkistaa piilotettuja prosesseja ...

        tarkistaa piilotettuja k„ynnistysarvoja ...

        tarkistaa piilotettuja tiedostoja ...

        tarkistus on valmis
        piilotetut tiedostot: 0

        **************************************************************************

        [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vsdatant]
        "ImagePath"=""
        .
        ------------------------ Muut prosessit ------------------------
        .
        C:\Program Files\Sygate\SPF\Smc.exe
        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.exe
        C:\Program Files\AVG\AVG8\avgrsx.exe
        C:\Program Files\AVG\AVG8\avgrsx.exe
        .
        **************************************************************************
        .
        Valmistumisajankohta: 2008-09-12 16:57:23 - kone k„ynnistettiin uudelleen [Omistaja]
        ComboFix-quarantined-files.txt 2008-09-12 13:57:14
        ComboFix2.txt 2008-05-21 05:33:12
        ComboFix3.txt 2008-04-07 18:46:08
        ComboFix4.txt 2008-04-05 18:27:44
        ComboFix5.txt 2008-04-03 14:54:56

        Pre-Run: 37,450,018,816 tavua vapaana
        Post-Run: 37,367,758,848 tavua vapaana

        291   --- E O F ---   2008-09-10 06:15:55


      • Fix.Fix
        _jukka--. kirjoitti:

        tässä gombo fixin logi

        ComboFix 08-09-10.04 - Omistaja 2008-09-12 16:46:03.8 - NTFSx86
        Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1035.18.637 [GMT 3:00]
        Sijainti: C:\Documents and Settings\Omistaja\Työpöytä\ComboFix.exe
        * Uusi palautuspiste luotu
        .

        (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
        .

        C:\Documents and Settings\Omistaja\Application Data\inst.exe

        .
        ((((((((((((((((((((((((((((((((((((((( Ajurit/Palvelut )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        -------\Legacy_6TO4
        -------\Service_6to4


        ((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2008-08-12 to 2008-09-12 )))))))))))))))))
        .

        2008-09-10 20:31 . 2008-09-11 18:44      d--------   C:\Documents and Settings\Omistaja\.onnet
        2008-09-10 18:49 . 2008-09-10 18:49      d--------   C:\Documents and Settings\Omistaja\Application Data\Motive
        2008-09-10 00:51 . 2008-09-10 09:38      d----c---   C:\Poker
        2008-09-10 00:19 . 2008-09-10 02:18      d--------   C:\Program Files\PartyGaming
        2008-09-09 23:01 . 2008-09-12 16:37      d--------   C:\Program Files\PAFPoker
        2008-09-09 21:43 . 2008-09-09 21:43      d--------   C:\Program Files\Malwarebytes' Anti-Malware
        2008-09-09 21:43 . 2008-09-09 21:43      d--------   C:\Documents and Settings\Omistaja\Application Data\Malwarebytes
        2008-09-09 21:43 . 2008-09-09 21:43      d--------   C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2008-09-09 21:43 . 2008-09-08 00:11   38,528   --a------   C:\WINDOWS\system32\drivers\mbamswissarmy.sys
        2008-09-09 21:43 . 2008-09-08 00:11   17,200   --a------   C:\WINDOWS\system32\drivers\mbam.sys
        2008-09-09 16:11 . 2008-09-09 16:11      d--------   C:\Program Files\Common Files\xing shared
        2008-09-09 16:10 . 2008-09-09 16:10      d--------   C:\Program Files\Real
        2008-09-09 15:24 . 2008-09-09 15:24      d--------   C:\Program Files\Pro Pinball
        2008-09-02 18:08 . 2008-09-02 18:25   281   --a------   C:\WINDOWS\Clony2.ini
        2008-09-02 18:03 . 2008-09-02 18:03      d--------   C:\Program Files\SlySoft
        2008-09-01 20:05 . 2008-09-01 20:05   28   --a------   C:\WINDOWS\system32\mcheck.mhf
        2008-09-01 20:00 . 2008-09-01 20:00      d--------   C:\Program Files\Elaborate Bytes
        2008-08-30 14:40 . 2008-08-30 14:40   6,656   --ahs----   C:\WINDOWS\system32\Thumbs.db
        2008-08-30 14:40 . 2008-08-30 14:40   5,632   --ahs----   C:\WINDOWS\Thumbs.db
        2008-08-29 17:04 . 2008-08-29 17:04      d--------   C:\Documents and Settings\Omistaja\Application Data\acccore
        2008-08-29 16:54 . 2008-09-12 16:37      d--------   C:\Documents and Settings\All Users\Application Data\Viewpoint
        2008-08-29 16:54 . 2008-08-29 16:55      d--------   C:\Documents and Settings\All Users\Application Data\AOL Downloads
        2008-08-29 16:54 . 2008-08-29 16:54      d--------   C:\Documents and Settings\All Users\Application Data\acccore
        2008-08-29 16:54 . 2008-08-29 16:54   21   --a------   C:\WINDOWS\atid.ini
        2008-08-29 16:53 . 2008-08-29 19:49      d--------   C:\Program Files\Common Files\AOL
        2008-08-29 16:53 . 2008-08-29 16:58      d--------   C:\Documents and Settings\All Users\Application Data\AOL OCP
        2008-08-29 16:53 . 2008-08-29 16:53      d--------   C:\Documents and Settings\All Users\Application Data\AOL
        2008-08-29 16:53 . 2008-08-29 16:56   1,214   --ah-----   C:\IPH.PH
        2008-08-24 21:38 . 2008-07-12 08:18   3,851,784   --a------   C:\WINDOWS\system32\D3DX9_39.dll
        2008-08-24 21:38 . 2008-07-12 08:18   1,493,528   --a------   C:\WINDOWS\system32\D3DCompiler_39.dll
        2008-08-24 21:38 . 2008-07-31 10:40   509,448   --a------   C:\WINDOWS\system32\XAudio2_2.dll
        2008-08-24 21:38 . 2008-05-30 14:19   507,400   --a------   C:\WINDOWS\system32\XAudio2_1.dll
        2008-08-24 21:38 . 2008-07-12 08:18   467,984   --a------   C:\WINDOWS\system32\d3dx10_39.dll
        2008-08-24 21:38 . 2008-07-31 10:41   238,088   --a------   C:\WINDOWS\system32\xactengine3_2.dll
        2008-08-24 21:38 . 2008-05-30 14:18   238,088   --a------   C:\WINDOWS\system32\xactengine3_1.dll
        2008-08-24 21:38 . 2008-07-31 10:41   68,616   --a------   C:\WINDOWS\system32\XAPOFX1_1.dll
        2008-08-24 21:38 . 2008-05-30 14:17   65,032   --a------   C:\WINDOWS\system32\XAPOFX1_0.dll
        2008-08-24 21:37 . 2008-08-24 21:37      d--------   C:\WINDOWS\Logs
        2008-08-24 21:37 . 2008-05-30 14:11   3,850,760   --a------   C:\WINDOWS\system32\D3DX9_38.dll
        2008-08-24 21:37 . 2008-05-30 14:11   1,491,992   --a------   C:\WINDOWS\system32\D3DCompiler_38.dll
        2008-08-24 21:37 . 2008-05-30 14:11   467,984   --a------   C:\WINDOWS\system32\d3dx10_38.dll
        2008-08-24 21:37 . 2008-05-30 14:17   25,608   --a------   C:\WINDOWS\system32\X3DAudio1_4.dll
        2008-08-24 21:24 . 2008-08-24 21:24      d--------   C:\Program Files\Utherverse Digital Inc
        2008-08-16 09:29 . 2008-08-18 20:19      d--------   C:\Program Files\Common Files\Symantec Shared
        2008-08-15 12:50 . 2008-08-15 12:50   0   --a------   C:\WINDOWS\nsreg.dat
        2008-08-14 19:40 . 2008-08-14 19:40      d--------   C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
        2008-08-13 19:40 . 2008-08-21 20:38      d--h-----   C:\$AVG8.VAULT$
        2008-08-13 17:00 . 2008-09-12 16:05      d--------   C:\WINDOWS\system32\drivers\Avg
        2008-08-13 17:00 . 2008-08-13 17:00      d--------   C:\Program Files\AVG
        2008-08-13 17:00 . 2008-08-13 17:00      d--------   C:\Documents and Settings\All Users\Application Data\avg8
        2008-08-13 17:00 . 2008-08-29 05:41   97,928   --a------   C:\WINDOWS\system32\drivers\avgldx86.sys
        2008-08-13 17:00 . 2008-08-13 17:00   76,040   --a------   C:\WINDOWS\system32\drivers\avgtdix.sys
        2008-08-13 17:00 . 2008-08-13 17:00   10,520   --a------   C:\WINDOWS\system32\avgrsstx.dll
        2008-08-13 06:17 . 2008-05-01 17:35   331,776   -----c---   C:\WINDOWS\system32\dllcache\msadce.dll
        2008-08-13 06:14 . 2008-04-11 22:05   691,712   -----c---   C:\WINDOWS\system32\dllcache\inetcomm.dll
        2008-08-12 21:23 . 2008-08-12 21:27      d--------   C:\Program Files\weblin
        2008-08-12 21:22 . 2008-08-12 21:27      d--------   C:\Documents and Settings\Omistaja\Application Data\zweitgeist

        .
        (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-09-10 20:42   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\BitTorrent
        2008-09-10 16:09   47,360   ----a-w   C:\Documents and Settings\Omistaja\Application Data\pcouffin.sys
        2008-09-10 16:09   ---------   d-----w   C:\Program Files\DVDFab Platinum 4
        2008-09-10 16:09   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\Vso
        2008-09-09 13:10   499,712   ----a-w   C:\WINDOWS\system32\msvcp71.dll
        2008-09-09 13:10   348,160   ----a-w   C:\WINDOWS\system32\msvcr71.dll
        2008-09-09 13:10   ---------   d-----w   C:\Program Files\Common Files\Real
        2008-09-06 06:40   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\Ahead
        2008-09-06 06:29   ---------   d-----w   C:\Program Files\Common Files\Ahead
        2008-09-06 06:27   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Nero
        2008-09-06 06:20   ---------   d-----w   C:\Program Files\Ahead
        2008-09-05 13:15   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\wsInspector
        2008-09-04 17:17   ---------   d-----w   C:\Program Files\Windows Live
        2008-09-04 17:16   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\WLInstaller
        2008-09-01 13:18   ---------   d-----w   C:\Program Files\Windows Live Safety Center
        2008-08-30 09:19   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\DVD Shrink
        2008-08-28 14:05   107,888   ----a-w   C:\WINDOWS\system32\CmdLineExt.dll
        2008-08-28 13:55   ---------   d-----w   C:\Program Files\EA GAMES
        2008-08-25 13:46   ---------   d---a-w   C:\Documents and Settings\All Users\Application Data\TEMP
        2008-08-25 13:45   ---------   d-----w   C:\Program Files\SpywareBlaster
        2008-08-18 17:00   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
        2008-08-15 13:26   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\vghd
        2008-08-13 13:47   ---------   d-----w   C:\Program Files\TrojanHunter 5.0
        2008-08-12 18:08   152,920   ----a-w   C:\WINDOWS\system32\vghd.scr
        2008-08-06 18:54   ---------   d-----w   C:\Program Files\Common Files\Totem Shared
        2008-08-05 14:49   ---------   d-----w   C:\Program Files\DNA
        2008-08-03 14:46   278,728   ----a-w   C:\WINDOWS\system32\drivers\atksgt.sys
        2008-08-03 14:46   25,416   ----a-w   C:\WINDOWS\system32\drivers\lirsgt.sys
        2008-08-03 07:40   44,344   ----a-w   C:\Documents and Settings\Omistaja\Application Data\GDIPFONTCACHEV1.DAT
        2008-08-03 05:00   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
        2008-08-02 18:15   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\NCH Swift Sound
        2008-08-02 17:38   ---------   d-----w   C:\Program Files\Microsoft Laskin
        2008-08-02 13:43   ---------   d-----w   C:\Program Files\TeamViewer3
        2008-08-02 13:43   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\TeamViewer
        2008-08-02 13:16   ---------   d-----w   C:\WINDOWS\system32\config\systemprofile\Application Data\TeamViewer
        2008-07-30 14:49   ---------   d-----w   C:\Program Files\BitTorrent
        2008-07-27 06:14   ---------   d-----w   C:\Program Files\NovaClock
        2008-07-26 08:54   ---------   d-----w   C:\Program Files\Uniblue
        2008-07-26 08:54   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\Uniblue
        2008-07-24 15:40   ---------   d-----w   C:\Program Files\MagicISO
        2008-07-22 04:22   ---------   d-----w   C:\Program Files\Java
        2008-07-22 04:21   ---------   d-----w   C:\Program Files\Common Files\Java
        2008-07-21 16:07   ---------   d-----w   C:\Program Files\Trend Micro
        2008-07-20 05:37   ---------   d-----w   C:\Program Files\Audacity
        2008-07-18 19:10   94,920   ----a-w   C:\WINDOWS\system32\cdm.dll
        2008-07-18 19:10   53,448   ----a-w   C:\WINDOWS\system32\wuauclt.exe
        2008-07-18 19:10   45,768   ----a-w   C:\WINDOWS\system32\wups2.dll
        2008-07-18 19:10   36,552   ----a-w   C:\WINDOWS\system32\wups.dll
        2008-07-18 19:09   563,912   ----a-w   C:\WINDOWS\system32\wuapi.dll
        2008-07-18 19:09   325,832   ----a-w   C:\WINDOWS\system32\wucltui.dll
        2008-07-18 19:09   205,000   ----a-w   C:\WINDOWS\system32\wuweb.dll
        2008-07-18 19:09   1,811,656   ----a-w   C:\WINDOWS\system32\wuaueng.dll
        2008-07-18 19:07   270,880   ----a-w   C:\WINDOWS\system32\mucltui.dll
        2008-07-18 19:07   210,976   ----a-w   C:\WINDOWS\system32\muweb.dll
        2008-07-17 11:32   ---------   d-----w   C:\Program Files\Registry Easy
        2008-07-17 11:08   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\nView_Profiles
        2008-07-17 11:01   ---------   d-----w   C:\Documents and Settings\Omistaja\Application Data\dvdcss
        2008-07-17 10:48   ---------   d-----w   C:\Program Files\Common Files\Wise Installation Wizard
        2008-07-08 08:09   81,920   -c----r   C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
        2008-07-07 20:28   253,952   ----a-w   C:\WINDOWS\system32\es.dll
        2008-06-24 16:44   74,240   ----a-w   C:\WINDOWS\system32\mscms.dll
        2008-06-24 15:12   295,936   ------w   C:\WINDOWS\system32\wmpeffects.dll
        2008-06-23 16:29   826,368   ----a-w   C:\WINDOWS\system32\wininet.dll
        2008-06-20 17:47   246,784   ----a-w   C:\WINDOWS\system32\mswsock.dll
        2008-03-31 16:23   604   -c-ha-w   C:\Program Files\STLL Notifier
        2004-03-11 11:27   40,960   ----a-w   C:\Program Files\Uninstall_CDS.exe
        2008-05-09 16:24   32,768   --sha-w   C:\WINDOWS\system32\config\systemprofile\Local Settings\Sivuhistoria\History.IE5\MSHist012008050920080510\index.dat
        .

        (((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        *Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„
        REGEDIT4

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2004-10-15 2577632]
        "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-08-29 1235736]
        "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 8523776]
        "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
        "NoResolveSearch"= 1 (0x1)

        [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
        "{93994DE8-8239-4655-B1D1-5F4E91300429}"= "C:\Program Files\DVD Region CSS Free\DVDShell.dll" [2004-10-09 49152]
        "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
        2007-04-19 14:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
        "AppInit_DLLs"=avgrsstx.dll

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^HP Digital Imaging Monitor.lnk]

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^HP Image Zone -pikakäynnistys.lnk]

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^Logitech Desktop Messenger.lnk]
        path=C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Logitech Desktop Messenger.lnk
        backup=C:\WINDOWS\pss\Logitech Desktop Messenger.lnkCommon Startup

        [HKLM\~\startupfolder\C:^Documents and Settings^Omistaja^Käynnistä-valikko^Ohjelmat^Käynnistys^MagicDisc.lnk]

        [HKLM\~\startupfolder\C:^Documents and Settings^Omistaja^Käynnistä-valikko^Ohjelmat^Käynnistys^VirtuaGirl HD.LNK]
        path=C:\Documents and Settings\Omistaja\Käynnistä-valikko\Ohjelmat\Käynnistys\VirtuaGirl HD.LNK
        backup=C:\WINDOWS\pss\VirtuaGirl HD.LNKStartup

        [HKLM\~\startupfolder\C:^Documents and Settings^Omistaja^Käynnistä-valikko^Ohjelmat^Käynnistys^VirtuaGirl2.lnk]
        path=C:\Documents and Settings\Omistaja\Käynnistä-valikko\Ohjelmat\Käynnistys\VirtuaGirl2.lnk
        backup=C:\WINDOWS\pss\VirtuaGirl2.lnkStartup
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Disk Cleaner
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerBar
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Registry Helper
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RestartNeroSetup
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
        --a------ 2008-04-14 19:12 15360 C:\WINDOWS\system32\ctfmon.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
        --a------ 2004-08-22 18:05 81920 C:\Program Files\D-Tools\daemon.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
        --a------ 2004-05-12 16:18 241664 C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]
        --a------ 2008-07-08 11:09 20480 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwavscan]
        --a------ 2004-09-09 20:04 475200 C:\Kaspersky\mwavscan.com

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
        --a------ 2007-12-05 02:41 8523776 C:\WINDOWS\system32\nvcpl.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
        --a------ 2008-03-29 00:37 413696 C:\Program Files\QuickTime\QTTask.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
        --a------ 2008-06-10 05:27 144784 C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
        --a------ 2007-11-04 13:30 171448 C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\THGuard]
        C:\Program Files\TrojanHunter 5.0\THGuard.exe [BU]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
        --a------ 2008-09-09 16:10 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
        "gusvc"=3 (0x3)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
        "EnableFirewall"= 0 (0x0)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
        "%windir%\\system32\\sessmgr.exe"=
        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
        "C:\\Program Files\\BitTorrent\\bittorrent.exe"=
        "C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
        "C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
        "C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
        "8000:UDP"= 8000:UDP:Express Talk RTP Incoming Audio (UDP)
        "8001:UDP"= 8001:UDP:Express Talk RTP Incoming Audio (UDP)
        "8002:UDP"= 8002:UDP:Express Talk RTP Incoming Audio (UDP)
        "8003:UDP"= 8003:UDP:Express Talk RTP Incoming Audio (UDP)
        "8004:UDP"= 8004:UDP:Express Talk RTP Incoming Audio (UDP)
        "8005:UDP"= 8005:UDP:Express Talk RTP Incoming Audio (UDP)
        "8006:UDP"= 8006:UDP:Express Talk RTP Incoming Audio (UDP)
        "8007:UDP"= 8007:UDP:Express Talk RTP Incoming Audio (UDP)
        "8008:UDP"= 8008:UDP:Express Talk RTP Incoming Audio (UDP)
        "8009:UDP"= 8009:UDP:Express Talk RTP Incoming Audio (UDP)

        R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-29 97928]
        R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-29 875288]
        R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-29 231704]
        R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-08-13 76040]
        S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [ ]
        S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [ ]
        S3 teamviewervpn;TeamViewer VPN Adapter;C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2008-01-25 25088]
        S3 V0090VID;Creative WebCam Vista Plus;C:\WINDOWS\system32\DRIVERS\V0090Vid.sys [2005-04-14 138112]
        .
        'Ajoitetut teht„v„t'-kansion sis„lt”
        .
        - - - - POISTETUT JŽMŽRIVIT - - - -

        WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
        MSConfigStartUp-MsnMsgr - C:\Program Files\MSN Messenger\msnmsgr.exe
        MSConfigStartUp-NeroFilterCheck - C:\WINDOWS\system32\NeroCheck.exe


        .
        ------- T„ydent„v„ tarkistus -------
        .
        FireFox -: Profile - C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\1nojauc4.default\
        FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.com/
        FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
        FF -: plugin - C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
        .

        **************************************************************************

        catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-09-12 16:52:17
        Windows 5.1.2600 Service Pack 3 NTFS

        tarkistaa piilotettuja prosesseja ...

        tarkistaa piilotettuja k„ynnistysarvoja ...

        tarkistaa piilotettuja tiedostoja ...

        tarkistus on valmis
        piilotetut tiedostot: 0

        **************************************************************************

        [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vsdatant]
        "ImagePath"=""
        .
        ------------------------ Muut prosessit ------------------------
        .
        C:\Program Files\Sygate\SPF\Smc.exe
        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.exe
        C:\Program Files\AVG\AVG8\avgrsx.exe
        C:\Program Files\AVG\AVG8\avgrsx.exe
        .
        **************************************************************************
        .
        Valmistumisajankohta: 2008-09-12 16:57:23 - kone k„ynnistettiin uudelleen [Omistaja]
        ComboFix-quarantined-files.txt 2008-09-12 13:57:14
        ComboFix2.txt 2008-05-21 05:33:12
        ComboFix3.txt 2008-04-07 18:46:08
        ComboFix4.txt 2008-04-05 18:27:44
        ComboFix5.txt 2008-04-03 14:54:56

        Pre-Run: 37,450,018,816 tavua vapaana
        Post-Run: 37,367,758,848 tavua vapaana

        291   --- E O F ---   2008-09-10 06:15:55

        tuolla

        Lataa http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
        OTMoveIt ja tallenna se työpöydällesi.

        Tuplaklikkaa OTMoveIt.exe.
        Klikkaa CleanUp!.
        Valitse Yes kun kysytään "Begin cleanup Process?".
        Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.


        HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.

        ============

        mites kone toimii


      • -jukka_.-.-
        Fix.Fix kirjoitti:

        tuolla

        Lataa http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
        OTMoveIt ja tallenna se työpöydällesi.

        Tuplaklikkaa OTMoveIt.exe.
        Klikkaa CleanUp!.
        Valitse Yes kun kysytään "Begin cleanup Process?".
        Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.


        HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.

        ============

        mites kone toimii

        Kone toimii hyvin, kiitos avusta


      • -jukka..-.-
        -jukka_.-.- kirjoitti:

        Kone toimii hyvin, kiitos avusta

        vikasietotilassa löytyy tommonen.
        viewpointservice.exe-108... pitääkö se poistaa?


      • -jukka.,-.-.
        -jukka..-.- kirjoitti:

        vikasietotilassa löytyy tommonen.
        viewpointservice.exe-108... pitääkö se poistaa?

        ja on tommosessa paikassa kun
        C/ WINDOWS/Prefetch


      • Fix.Fix
        -jukka.,-.-. kirjoitti:

        ja on tommosessa paikassa kun
        C/ WINDOWS/Prefetch

        siis tämä viewpointservice.exe-108


      • -jukka-.--.-
        Fix.Fix kirjoitti:

        siis tämä viewpointservice.exe-108

        suuretkiitokset kun viitsit auttaa.
        Täytyypä todeta että kone toimii kun uusi.
        Kiiiiiiitoooooos


    • ffsfsfs

    Ketjusta on poistettu 0 sääntöjenvastaista viestiä.

    Luetuimmat keskustelut

    1. Kotkalainen Demari Riku Pirinen vangittu Saksassa lapsipornosta

      https://www.kymensanomat.fi/paikalliset/8081054 Kotkalainen Demari Riku Pirinen vangittu Saksassa lapsipornon hallussapi
      Kotka
      130
      3211
    2. Vanhalle ukon rähjälle

      Satutit mua niin paljon kun erottiin. Oletko todella niin itsekäs että kuvittelet että huolisin sut kaiken tapahtuneen
      Ikävä
      38
      2553
    3. Olen tosi outo....

      Päättelen palstajuttujen perusteella mitä mieltä minun kaipauksen kohde minusta on. Joskus kuvittelen tänne selkeitä tap
      Ikävä
      30
      2445
    4. Maisa on SALAKUVATTU huumepoliisinsa kanssa!

      https://www.seiska.fi/vain-seiskassa/ensimmainen-yhteiskuva-maisa-torpan-ja-poliisikullan-lahiorakkaus-roihuaa/1525663
      Kotimaiset julkkisjuorut
      113
      2228
    5. Oletko sä luovuttanut

      Mun suhteeni
      Ikävä
      114
      1720
    6. Nurmossa kuoli 2 Lasta..

      Autokolarissa. Näin kertovat iltapäivälehdet juuri nyt. 22.11. Ja aina ennen Joulua näitä tulee. . .
      Seinäjoki
      28
      1600
    7. Hommaatko kinkkua jouluksi?

      Itse tein pakastimeen n. 3Kg:n murekkeen sienillä ja juustokuorrutuksella. Voihan se olla, että jonkun pienen, valmiin k
      Sinkut
      174
      1418
    8. Mikko Koivu yrittää pestä mustan valkoiseksi

      Ilmeisesti huomannut, että Helenan tukijoukot kasvaa kasvamistaan. Riistakamera paljasti hiljattain kylmän totuuden Mi
      Kotimaiset julkkisjuorut
      298
      1311
    9. Aatteleppa ite!

      Jos ei oltaisikaan nyt NATOssa, olisimme puolueettomana sivustakatsojia ja elelisimme tyytyväisenä rauhassa maassamme.
      Maailman menoa
      292
      1258
    10. Onko se ikä

      Alkanut haitata?
      Ikävä
      63
      1110
    Aihe