kone buuttaa

itekseen, eikä pysty skannaan

tein sit ton jonku ohjeen mukaan

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:31:33, on 1.4.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\FSC\LASER MOUSE\1.0\GTGMouse.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\tero\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Java\jre6\bin\jp2launcher.exe
C:\Program Files\Java\jre6\bin\java.exe
c:\users\tero\Downloads\HiJackThis_v2.0.2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [recinfo348] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [GTGMOUSE] "C:\Program Files\FSC\LASER MOUSE\1.0\GTGMouse.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\tero\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: HP-leikekirja - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart -valitse - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - (no file)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resource/download/scanner/fi-FI/wlscctrl2.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 7327 bytes

3

1361

Äänestä

    Vastaukset

    Anonyymi (Kirjaudu / Rekisteröidy)
    5000
    • toinen logi

      StartupList report, 1.4.2009, 23:20:01
      StartupList version: 1.52.2
      Started from : c:\users\tero\Downloads\HiJackThis_v2.0.2.EXE
      Detected: Windows Vista SP1 (WinNT 6.00.1905)
      Detected: Internet Explorer v7.00 (7.00.6001.18000)
      * Using default options
      ==================================================

      Running processes:

      C:\Windows\system32\Dwm.exe
      C:\Windows\system32\taskeng.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\RtHDVCpl.exe
      C:\Program Files\FSC\LASER MOUSE\1.0\GTGMouse.exe
      C:\Windows\System32\wpcumi.exe
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Users\tero\AppData\Local\Google\Update\GoogleUpdate.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Windows\system32\wbem\unsecapp.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\PROGRA~1\Java\jre6\bin\jp2launcher.exe
      C:\Program Files\Java\jre6\bin\java.exe
      c:\users\tero\Downloads\HiJackThis_v2.0.2.exe
      C:\Windows\system32\conime.exe

      --------------------------------------------------

      Listing of startup folders:

      Shell folders Common Startup:
      [C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]
      HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

      --------------------------------------------------

      Checking Windows NT UserInit:

      [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
      UserInit = C:\Windows\system32\userinit.exe,

      --------------------------------------------------

      Autorun entries from Registry:
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run

      RtHDVCpl = RtHDVCpl.exe
      recinfo348 = c:\RecInfo\RecInfo.exe
      GTGMOUSE = "C:\Program Files\FSC\LASER MOUSE\1.0\GTGMouse.exe"
      Skytel = Skytel.exe
      WPCUMI = C:\Windows\system32\WpcUmi.exe
      avast! = "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
      SunJavaUpdateSched = "C:\Program Files\Java\jre6\bin\jusched.exe"
      Adobe Reader Speed Launcher = "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      NvCplDaemon = RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      NvMediaCenter = RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

      --------------------------------------------------

      Autorun entries from Registry:
      HKCU\Software\Microsoft\Windows\CurrentVersion\Run

      Sidebar = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      ehTray.exe = C:\Windows\ehome\ehTray.exe
      WMPNSCFG = C:\Program Files\Windows Media Player\WMPNSCFG.exe
      Google Update = "C:\Users\tero\AppData\Local\Google\Update\GoogleUpdate.exe" /c

      --------------------------------------------------

      Autorun entries in Registry subkeys of:
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run

      [OptionalComponents]
      =

      --------------------------------------------------

      Shell & screensaver key from C:\Windows\SYSTEM.INI:

      Shell=*INI section not found*
      SCRNSAVE.EXE=*INI section not found*
      drivers=*INI section not found*

      Shell & screensaver key from Registry:

      Shell=explorer.exe
      SCRNSAVE.EXE=C:\Windows\system32\ssText3d.scr
      drivers=*Registry value not found*

      Policies Shell key:

      HKCU\..\Policies: Shell=*Registry value not found*
      HKLM\..\Policies: Shell=*Registry value not found*

      --------------------------------------------------


      Enumerating Browser Helper Objects:

      (no name) - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll - {053F9267-DC04-4294-A72C-58F732D338C0}
      AcroIEHelperStub - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
      (no name) - (no file) - {7E853D72-626A-48EC-A868-BA8D5E23E045}
      (no name) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
      (no name) - C:\Program Files\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}

      --------------------------------------------------

      Enumerating Task Scheduler jobs:

      GoogleUpdateTaskUserS-1-5-21-3963032493-2078746346-1596459663-1000.job
      RegTool Scan.job
      RegTool Startup.job

      --------------------------------------------------

      Enumerating Download Program Files:

      [Symantec AntiVirus scanner]
      InProcServer32 = C:\Windows\Downloaded Program Files\avsniff.dll
      CODEBASE = http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab

      [Windows Live OneCare safety scanner control]
      InProcServer32 = %ProgramFiles%\Windows Live Safety Center\wlscCtrl2.dll
      CODEBASE = http://cdn.scan.onecare.live.com/resource/download/scanner/fi-FI/wlscctrl2.cab

      [Symantec RuFSI Utility Class]
      InProcServer32 = C:\Windows\Downloaded Program Files\rufsi.dll
      CODEBASE = http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

      [F-Secure Online Scanner 3.3]
      InProcServer32 = C:\Windows\Downloaded Program Files\fscax.dll
      CODEBASE = http://support.f-secure.com/ols/fscax.cab

      --------------------------------------------------

      Enumerating Winsock LSP files:

      NameSpace #1: C:\Windows\system32\NLAapi.dll
      NameSpace #2: C:\Windows\system32\napinsp.dll
      NameSpace #3: C:\Windows\system32\pnrpnsp.dll
      NameSpace #4: C:\Windows\system32\pnrpnsp.dll
      Protocol #1: C:\Windows\system32\wpclsp.dll
      Protocol #2: C:\Windows\system32\wpclsp.dll
      Protocol #3: C:\Windows\system32\wpclsp.dll
      Protocol #4: C:\Windows\system32\wpclsp.dll
      Protocol #5: C:\Windows\system32\wpclsp.dll
      Protocol #6: C:\Windows\system32\wpclsp.dll
      Protocol #7: C:\Windows\system32\wpclsp.dll
      Protocol #8: C:\Windows\system32\wpclsp.dll
      Protocol #19: C:\Windows\system32\wpclsp.dll

      --------------------------------------------------

      Enumerating ShellServiceObjectDelayLoad items:

      WebCheck: C:\Windows\system32\webcheck.dll

      --------------------------------------------------
      End of report, 6 747 bytes
      Report generated in 0,031 seconds

      Command line options:
      /verbose - to add additional info on each section
      /complete - to include empty sections and unsuspicious data
      /full - to include several rarely-important sections
      /force9x - to include Win9x-only startups even if running on WinNT
      /forcent - to include WinNT-only startups even if running on Win9x
      /forceall - to include all Win9x and WinNT startups, regardless of platform
      /history - to list version history only

    • osaakos

      joku nyt kattoo onko toi Ok, vai näkyykö siinä joku ökki mönkiäinen tms, ?

      • muut...

        on tullut järkiinsä ja siirtyneet käyttään Linuxia.

    Ketjusta on poistettu 0 sääntöjenvastaista viestiä.

    Takaisin ylös

    Luetuimmat keskustelut

    1. Kuinkahan paljon taas itken tulevina öinä

      meitä ja sitä, miten kaikki meni. Miten rikki se repi sydäntä ja jäljelle jäi pysyvä suru. En vain pääse siitä, ei hetke
      Ikävä
      75
      9649

    2. Kitaristi Esa Pulliainen laihtunut

      Tietääkö kukaan minkä takia Esa Pulliainen on laihtunut lyhyessä ajassa ainakin 60 kiloa. Esa Pulliainen laihtunut 😳
      Laihdutus
      138
      5112

    3. Pienimäki ei anna haastatteluja

      medialle Ähtärin kunnan velka sotkuista, kertovat luotettavat lähteet.
      Ähtäri
      17
      3928

    4. Sinuun ei tehoa mikään

      Annan periksi. En vain jaksa tuulimyllyä vastaan taistella. Miehelle
      Ikävä
      37
      3731

    5. Onko Kuhmolaiset tyytyväisiä?

      Kun pääsivät eroon huijari Polvisesta?
      Kuhmo
      22
      3130

    6. Huomenta ja hyvää tiistaita

      Huomenta ja hyvää tiistaita. ❄️🐺☕❄️
      Ikävä
      88
      1951

    7. En tiedä mitä ajatella

      Petaatko perjantaille jotain. Ei meidän kannata minun sydän on viety. Se joka sen vei ei ole mieheni, etkä se ole sinä.
      Tunteet
      36
      1772

    8. Hyviä vinkkejä täällä

      Eli kaivattua vain kädestä kiinni ja jos vastustelee niin sanoo, että hei beibi beibi nyt mennään vaan. Näin he elivät e
      Ikävä
      17
      1637

    9. voitaisiinko unohtaa se sotku?

      Olisiko mahdollista aloittaa puhtaalta pöydältä vielä? Ikävä sua ****
      Ikävä
      16
      1609

    10. Naisten ulkonäkö, jos miehiä ei olisi?

      Mä meinasin ensiksi, että en aloittaisi tätä keskustelua, ainan nyt, mutta huomasin tossa toisessa ketjussa, että tämä s
      Sinkut
      245
      1599
    Aihe
    TietosuojaselosteKäyttöehdotEvästeasetuksetSäännöt