svchost vie n. 50% suoritinkyvystä koko ajan ja F-secure ei toimi ja Windows defender ilmoittaa vähän väliä viruksesta. Tuossa HJT-loki ja F-securen online skannerin-loki jos kykenisi joku avittamaan.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:05:44, on 31.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\Drivers\bwcsrv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Documents and Settings\Ari-Pekka\Käynnistä-valikko\Ohjelmat\Käynnistys\siszyd32.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Trend Micro\HijackThis\skanneri.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mastermark.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.compaq.com/4q00cdt/040B/kb2.asp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache.inet.fi:800
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; www.finhockey.*;<local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: BHO - {CFCAAF92-3665-4aa3-BD88-5BFFE7C5C000} - C:\Documents and Settings\Ari-Pekka\Työpöytä\winfh.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-21-1270078839-299905979-4186024301-500\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Järjestelmänvalvoja')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: siszyd32.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Program Files\UnibetpokerMPP\MPPoker.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: CarbonPoker - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Program Files\CarbonPoker\Poker.exe (file missing) (HKCU)
O15 - Trusted Zone: *.frame.crazywinnings.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-se.../fslauncher.cab
O16 - DPF: {22945A69-1191-4DCF-9E6F-409BDE94D101} - http://louk.solidworks.com/htdocs/pdownl...elsStandard.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1126598208656
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Mes...nt.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com...obat/nos/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8818838-3CCD-4C82-AFE5-6E0DF60A987E}: NameServer = 193.229.0.40,193.229.0.42
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BUFFALO Wireless Configuration Service (bwcsrv) - Unknown owner - C:\WINDOWS\system32\Drivers\bwcsrv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe

--
End of file - 12067 bytes






Scanning Report
Thursday, December 31, 2009 22:08:02 - 06:01:36
Computer name: MSKXPWKS01
Scanning type: Scan system for malware, spyware and rootkits
Target: C:\

3 malware found
TrackingCookie.Webtrends (spyware)
· System (Disinfected)
Trojan.Proxy.MSO (spyware)
· System (Disinfected)
Trojan.Proxy.MSO (virus)
· C:\WINDOWS\TEMP\~TM226.tmp (Not cleaned)

Statistics
Scanned:
· Files: 215562
· System: 3906
· Not scanned: 427
Actions:
· Disinfected: 2
· Renamed: 0
· Deleted: 0
· Not cleaned: 1
· Submitted: 0
Files not scanned:
· C:\PAGEFILE.SYS
· C:\WINDOWS\WINSXS\X86_SYSTEM.ENTERPRISESERVICES_B03F5F7F11D50A3A_2.0.0.0_X-WW_7D5F3790\SYSTEM.ENTERPRISESERVICES.WRAPPER.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.NETWORKING.RTCRES_6595B64144CCF1DF_5.2.2.3_FI_7DEF5406\RTCRES.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.NETWORKING.RTCDLL_6595B64144CCF1DF_5.2.2.3_X-WW_D6BD8B95\RTCDLL.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.NETWORKING.DXMRTP_6595B64144CCF1DF_5.2.2.3_X-WW_468466A7\DXMRTP.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.2600.5581_X-WW_DFBC4FC4\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.2600.5512_X-WW_DFB54E0C\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.2600.3352_X-WW_81AF8E88\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.2600.2180_X-WW_522F9F82\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.2600.1360_X-WW_24A2ED47\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.10.0_X-WW_712BEFD8\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.0.0.0_X-WW_8D353F13\GDIPLUS.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.CPLUSPLUSRUNTIME_6595B64144CCF1DF_7.0.2600.5512_X-WW_3FD60D63\MSVCIRT.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.CPLUSPLUSRUNTIME_6595B64144CCF1DF_7.0.2600.2180_X-WW_B2505ED9\MSVCIRT.DLL
· C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.CPLUSPLUSRUNTIME_6595B64144CCF1DF_7.0.0.0_X-WW_2726E76A\MSVCIRT.DLL
· C:\WINDOWS\WINDOWS UPDATE SETUP FILES\IE6SETUP.EXE
· C:\WINDOWS\TEMP\PERFLIB_PERFDATA_20C.DAT
· C:\WINDOWS\SYSTEM32\ATI3DUAG.DLL
· C:\WINDOWS\SYSTEM32\D3DIM.DLL
· C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG
· C:\WINDOWS\SYSTEM32\CONFIG\SAM
· C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG
· C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
· C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
· C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG
· C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
· C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG
· C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
· C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG
· C:\WINDOWS\SYSTEM32\CATROOT2\EDB.LOG
· C:\WINDOWS\SYSTEM32\CATROOT2\TMP.EDB
· C:\WINDOWS\SERVICEPACKFILES\I386\SENDMAIL.DLL
· C:\WINDOWS\$NTUNINSTALLQ828026$\WMPCORE.DLL
· C:\WINDOWS\$NTUNINSTALLQ828026$\MSDXM.OCX
· C:\WINDOWS\$NTUNINSTALLKB828028$\MSASN1.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\ACCWIZ.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\CRYPT32.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\CRYPTSVC.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\HHSETUP.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\ITSS.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\HTML32.CNV
· C:\WINDOWS\$NTUNINSTALLKB826939$\LOCATOR.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\MIGWIZ.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\MAGNIFY.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\MSCONV97.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\NARRATOR.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\MRXSMB.SYS
· C:\WINDOWS\$NTUNINSTALLKB826939$\NTDLL.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\NTKRNLPA.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\NEWDEV.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\NTOSKRNL.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\OSK.EXE
· C:\WINDOWS\$NTUNINSTALLKB826939$\RASPPTP.SYS
· C:\WINDOWS\$NTUNINSTALLKB826939$\PCHSHELL.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\SHELL32.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\SRRSTR.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\SYSMAIN.SDB
· C:\WINDOWS\$NTUNINSTALLKB826939$\SRV.SYS
· C:\WINDOWS\$NTUNINSTALLKB826939$\USER32.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\WINSRV.DLL
· C:\WINDOWS\$NTUNINSTALLKB826939$\WIN32K.SYS
· C:\WINDOWS\$NTUNINSTALLKB826939$\ZIPFLDR.DLL
· C:\WINDOWS\$NTUNINSTALLKB824141$\USER32.DLL
· C:\WINDOWS\$NTUNINSTALLKB824141$\WIN32K.SYS
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\axdist.inf
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\hlink.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\hlinkprx.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\inloader.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\oleaut32.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\schannel.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\stdole2.tlb
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\urlmon.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\wininet.dll
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\ADVPACK.DLL
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\W95INF32.DLL
· C:\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\W95INF16.DLL
· C:\PROGRAM FILES\VIDEOLAN\VLC\VLC-0.9.6-WIN32.EXE
· C:\PROGRAM FILES\VALVE\STEAM\STEAM.EXE
· C:\PROGRAM FILES\REGTOOL\REGTOOL.EXE
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\axdist.inf
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\hlink.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\hlinkprx.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\inloader.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\oleaut32.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\schannel.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\stdole2.tlb
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\urlmon.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\wininet.dll
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\ADVPACK.DLL
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\W95INF32.DLL
· C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\W95INF16.DLL
· C:\PROGRAM FILES\F-SECURE\COMMON\POLICY.IPF
· C:\PROGRAM FILES\F-SECURE\BACKWEB\7681197\USERS\DEFAULT\DATA\CHANDIR.IDX
· C:\PROGRAM FILES\F-SECURE\BACKWEB\7681197\PROGRAM\BWCHELPR-7681197.DLL
· C:\PROGRAM FILES\F-SECURE\BACKWEB\7681197\PROGRAM\BWDLG-7681197.DLL
· C:\PROGRAM FILES\EA SPORTS\TOTAL CLUB MANAGER 2005\TCM2005.EXE
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\axdist.inf
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\hlink.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\hlinkprx.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\inloader.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\oleaut32.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\schannel.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\stdole2.tlb
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\urlmon.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\wininet.dll
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\ADVPACK.DLL
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\W95INF32.DLL
· C:\fsecure\setup\fsavcs_6.00-11251.package.fip\rifs\AXDIST.EXE\W95INF16.DLL
· C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\NTUSER.DAT
· C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\NTUSER.DAT.LOG
· C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT
· C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG
· C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT
· C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT.LOG
· C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT
· C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\NTUSER.DAT
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\NTUSER.DAT.LOG
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DF195D.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DF1832.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\EAUNINSTALL.EXE
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DF6935.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DFAB0F.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DFAA62.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DFABBF.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DFAB6D.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DFAB7D.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\~DFABD4.TMP
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\TEMP\ONLINESCANNER\UPDATES\OLS_33_BIN\FSGK.SYS
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT
· C:\DOCUMENTS AND SETTINGS\ARI-PEKKA\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdmilliService.zip\ide21201.vxd
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdmilliService.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AlexaRelated.zip\related.htm
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AlexaRelated.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite1.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite1.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite10.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite10.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite100.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite100.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite101.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite101.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite102.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite102.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite103.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite103.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite104.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite104.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite105.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite105.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite106.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite106.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite107.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite107.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite108.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite108.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite109.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite109.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite11.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite11.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite110.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite110.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite111.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite111.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite112.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite112.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite113.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite113.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite114.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite114.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite115.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite115.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite116.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite116.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite117.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite117.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite118.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite118.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite119.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite119.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite12.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite12.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite120.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite120.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite121.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite121.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite122.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite122.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite123.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite123.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite124.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite124.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite125.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite125.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite126.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite126.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite127.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite127.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite128.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite128.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite129.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite129.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite130.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite130.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite13.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite13.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite132.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite132.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite131.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite131.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite133.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite133.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite134.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite134.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite15.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite15.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite14.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite14.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite16.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite16.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite18.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite18.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite19.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite19.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite17.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite17.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite2.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite2.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite20.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite20.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite21.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite21.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite22.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite22.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite23.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite23.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite24.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite24.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite25.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite25.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite26.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite26.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite27.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite27.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite28.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite28.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite3.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite3.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite29.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite29.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite31.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite31.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite30.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite30.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite32.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite32.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite34.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite34.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite35.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite35.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite33.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite33.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite37.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite37.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite36.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite36.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite38.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite38.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite39.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite39.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite4.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite4.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite40.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite40.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite41.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite41.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite42.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite42.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite43.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite43.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite44.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite44.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite45.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite45.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite46.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite46.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite47.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite47.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite5.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite5.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite48.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite48.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite49.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite49.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite50.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite50.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite51.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite51.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite52.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite52.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite53.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite53.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite54.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite54.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite55.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite55.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite56.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite56.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite58.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite58.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite57.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite57.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite59.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite59.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite6.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite6.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite60.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite60.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite61.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite61.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite62.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite62.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite63.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite63.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite64.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite64.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite65.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite65.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite66.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite66.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite67.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite67.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite68.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite68.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite69.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite69.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite7.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite7.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite71.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite70.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite71.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite70.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite72.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite72.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite74.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite74.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite73.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite73.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite75.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite75.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite76.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite76.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite77.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite77.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite79.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite79.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite78.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite78.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite8.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite8.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite81.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite81.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite80.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite80.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite84.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite84.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite82.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite82.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite83.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite83.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite86.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite86.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite85.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite85.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite87.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite87.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite88.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite89.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite88.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite89.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite9.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite9.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite91.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite91.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite92.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite92.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite90.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite90.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite95.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite95.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite93.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite94.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite94.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite96.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite96.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite93.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite97.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite97.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite98.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite99.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite99.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite98.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch.zip\MediaAccX.dll
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch1.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch1.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch2.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch2.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch3.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch3.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch4.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch4.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch5.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearch5.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW1.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW1.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW2.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Roings.zip\objsafe.tlb
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Roings.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW2.zip\sbRecovery.ini
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW3.zip\sbRecovery.reg
· C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CoolWWWSearchWCADW3.zip\sbRecovery.ini

Options
Scanning engines:
Scanning options:
· Scan all files
· Scan inside archives
· Use advanced heuristics

Copyright © 1998-2009 Product support | Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name. This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.

Poista Työpöydältäsi winfh.dll tiedosto

----------------------------------------------------

Käynnistä kone vikasietotilaan => OHJE

Laita piilotiedostot näkyviin => OHJE

Poista tiedosto: C:\Documents and Settings\Ari-Pekka\Käynnistä-valikko\Ohjelmat\Käynnistys\siszyd32.exe

----------------------------------------------------

Lataa Malwarebytes' Anti-Malware työpöydällesi.

Jos linkki ei toimi, voit ladata myös seuraavista linkeistä:
Linkki1
Linkki2

* Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
* Lopuksi varmistu, että seuraavat on valittu: Päivitä Malwarebytes' Anti-Malware ja Käynnistä Malwarebytes' Anti-Malware ja sen jälkeen klikkaa Lopeta.
* Jos päivitys löytyy, ohjelma lataa ja asentaa uusimman version. Jos päivityksien lataaminen ei onnistu, voit ladata päivitykset tästä. Tuplaklikkaa mbam-rules.exe asentaaksesi päivitykset.
* Kun ohjelma on latautunut ja päivitykset tehty, valitse Suorita täysi tarkistus ja klikkaa Tarkista.
* Kun tarkistus on valmis, klikkaa OK ja sitten Näytä tulokset nähdäksesi tulokset.
* Varmistu, että kaikki on merkitty ja klikkaa Poista valitut.
* Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
* Lähetä lokin sisältö seuraavassa viestissäsi.[/list]

Huom. Jos Mbam ei pystynyt poistamaan tiedostoa, se pyytää sinua käynnistämään koneesi uudelleen. Käynnistä koneesi silloin uudelleen heti. Mbam voi tehdä muutoksia rekisteriisi osana puhdistusta. Jos käytät suojausohjelmaa, joka havaitsee rekisterin muutokset, salli Mbamin tehdä muutokset.

----------------------------------------------------------------------------------

Poista ne rivit jotka ovat vielä jäljellä:

Kun käynnistät HijackThis =(HJT) ohjelman tee se hiiren oikealla napilla
(HJT sammuttaa ohjelman ei poista)
ja valitset Suorita Järjestelmänvalvojana
Sammuta selain ja muut ohjelmat Fixin ajaksi. (ei virustorjuntaa)
ja Scan ja ruksaa seuraavat punaisella listatut tiedostot sekä sammuta ne.(fix Chekked)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - Startup: siszyd32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Program Files\UnibetpokerMPP\MPPoker.exe (file missing)
O9 - Extra button: CarbonPoker - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Program Files\CarbonPoker\Poker.exe (file missing) (HKCU)
O15 - Trusted Zone: *.frame.crazywinnings.com

Tyhjennä roskakori ja käynnistä koneesi uudelleen.

Postita tänne seuraavat lokit:
* Tuore HijackThis loki (Otetaan viimeisenä ennen postitusta)
* Malwarebytes' Anti-Malware\Logs\log-päiväys.txt raportti
* * Auttoiko ???
*

Ensinnäkin Malwarebytes':n lokia ei ilmaantunut näytölle eikä sitä tallentunut mihinkään enkä tiedä syytä. Tarkistus kuitenkin onnistui ja poistin kaikki sen löytämät 'saastuneet' tiedostot. Toiseksi en muista järjestelmänvalvojan salasanaa enkä ole löytänyt sitä mistään ylöskirjoitettuna jotenka en pysty tekemään kyseistä HJT sammutus toimenpidettä. Kone on nyt jo huomattavasti parempi mutta mitä nyt teen?

noniin sain homman toimimaan ja tuossa olisi nuo lokit =] toimii jo paremmin mutta en tiedä onko vielä puhdas.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:39:57, on 5.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\Drivers\bwcsrv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\skanneri.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Program Files\iPod\bin\iPodService.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mastermark.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.compaq.com/4q00cdt/040B/kb2.asp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache.inet.fi:800
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; www.finhockey.*;<local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-se.../fslauncher.cab
O16 - DPF: {22945A69-1191-4DCF-9E6F-409BDE94D101} - http://louk.solidworks.com/htdocs/pdownl...elsStandard.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1126598208656
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Mes...nt.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com...obat/nos/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8818838-3CCD-4C82-AFE5-6E0DF60A987E}: NameServer = 193.229.0.40,193.229.0.42
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BUFFALO Wireless Configuration Service (bwcsrv) - Unknown owner - C:\WINDOWS\system32\Drivers\bwcsrv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe

--
End of file - 10608 bytes




Malwarebytes' Anti-Malware 1.43
Tietokantaversio: 3491
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4.1.2010 22:02:24
mbam-log-2010-01-04 (22-02-24).txt

Tarkistustyyppi: Täysi tarkistus (A:\|C:\|D:\|)
Tarkistetut kohteet: 184922
Kulunut aika: 1 hour(s), 31 minute(s), 24 second(s)

Saastuneita muistiprosesseja: 0
Saastuneita muistimoduuleja: 0
Saastuneita rekisteriavaimia: 0
Saastuneita rekisteriarvoja: 0
Saastuneita rekisterikohteita: 0
Saastuneita hakemistoja: 19
Saastuneita tiedostoja: 0

Saastuneita muistiprosesseja:
(Haitallisia kohteita ei löydetty)

Saastuneita muistimoduuleja:
(Haitallisia kohteita ei löydetty)

Saastuneita rekisteriavaimia:
(Haitallisia kohteita ei löydetty)

Saastuneita rekisteriarvoja:
(Haitallisia kohteita ei löydetty)

Saastuneita rekisterikohteita:
(Haitallisia kohteita ei löydetty)

Saastuneita hakemistoja:
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\Logs (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-02-27 13-11-410 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-03-04 12-20-240 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-03-11 12-51-580 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-04-01 12-01-470 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-04-02 12-28-340 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-04-11 12-06-170 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-04-18 12-01-430 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-05-16 12-02-130 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-06-11 12-16-580 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-06-19 13-29-320 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-09-22 12-03-070 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-10-03 13-04-280 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-12-01 23-12-260 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Ari-Pekka\Application Data\RegTool\QuarantineW\2009-12-07 14-32-160 (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Program Files\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.

Saastuneita tiedostoja:
(Haitallisia kohteita ei löydetty)

Ne pöpöt on pois jotka logilta näkyi !!!

*************************************************************

Käynnistä Malwarebytes => Karanteeni välileti ja tyhjennä roskat.

**********************************************************

Voit varmistaa vielä =>

Lataa Atribunen ATF Cleaner

Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman. Main:n alla valitse: Select All
Klikkaa Empty Selected valintaa.

Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.

Jos käytät Operaa selaimenasi Klikkaa Opera yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa taas.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.

Klikkaa Exit päävalikosta sulkeaksesi ohjelman.

----------------------------------------------

Skannaa koneesi Kaspersky Online Skannerilla

* Lue läpi vaatimukset ja yksityisyyssäännökset ja klikkaa Accept.
* Skannerin ja virustietokannan lataus alkaa. Sinulta kysytään sallitko Kasperskyltä tulevan ohjelman asentamisen. Klikkaa Aja/Run.
* Kun lataus on valmis, klikkaa Settings.
* Varmistu, että seuraavat kohdat on valittu. Jos ne eivät ole, valitse ne ja klikkaa Save: Spyware, Adware, Dialers, and other potentially dangerous programs
Archives
Mail databases

* Klikkaa Oma Tietokone, My Computer Scan-kohdan alapuolelta.
* Kun tarkistus on valmis, tulokset näytetään. Klikkaa View Scan Report.
* Näet listan saastuneista kohteista. Klikkaa Save Report As....
* Tallenna tiedosto työpöydällesi. Muuta Tiedostotyyppi/Files of type muotoon Tekstitiedosto/Text file(.txt) ennen kuin klikkaat Save.

* Kopioi ja liitä tiedoston sisältö seuraavaan vastaukseesi
* jos se löyti jotain

.

ei pysty käyttämään kasperskyä.

Kaspersky Online Scanner 7.0 download and operation require Java framework version 1.5 or later.

mulla kuitenkin on uusin java päivitys koneella että mikä mättää?
yritänkö jollain muulla online skannerilla vaiko...?

Joo sain toimimaan sen Kasperskyn eikä se löytänyt mitään. Vieläkö pitäisi tehdä jotakin?

Kyllä se puhdas on !!!
kun kaperskykään ei löytänyt mitään.

Kyllä sulla näkyy uudempi java olevan kuin 1.5

Mutta vanhat javat voi kummitella koneella.
Poistetaan

Lataa JavaRa ja pura se työpöydällesi.

***Sulje kaikki päällä olevat Internet Explorerin ikkunat ennen jatkamista!***

* Tuplaklikkaa JavaRa.exeä käynnistääksesi ohjelma.
* Valitse English pudotusvalikosta valitaksesi kieleksi englannin ja klikkaa Select.
* Klikkaa Remove Older Versions poistaaksesi vanhat Java-versiot koneeltasi.
* Klikkaa Yes kun pyydetään. Kun JavaRa on valmis, se ilmoittaa, että lokitiedosto on luotu. Klikkaa OK.
* Lokitiedosto avautuu. Lähetä sen sisältö seuraavassa viestissäsi.

Tämän jälkeen lataa ja asennaJava SE Runtime Environment (JRE) 6 Update 17.
jre-6u17-windows-i586-p.exe => 15.?? MB
Lataa työpöydälle ja sammuta kaikki selaimet ennen asennusta

------------------------------------------------------------------------------

* Vanha HOSTS tiedosto poistetaan. Käynnistä kone vikasietotilaan => OHJE
Tämä C:\WINDOWS\system32\drivers\etc\HOSTS tiedosto pois
* Käynnistä koneesi normaalitilaan.
* Lataa HOSTS: Täältä Työpöydällesi.
* Pura: hosts.zip C:\WINDOWS\system32\drivers\etc kansioon.


Lopuksi Voit varmistaa, että siellä on HOSTS niminen tiedosto ilman tiedostopäätettä. Koko n.700 kt.
Suoja activoituu seuraavan käynnistyksen yhteydessä.(ei kuormita muistia)

Houstiin päivitykset: Täältä
Mitä HOSTS tekee: Opas Täällä

-----------------------------------------------------

* Asenna SpywareBlaster!
SpywareBlaster estää haittaohjelmien asentumista koneelle.
Lataus ja ohjeet: TÄÄLTÄ


:D
.

nyt on nuo hommat tehty ja tuossa JavaRa-loki



JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Wed Jan 06 18:16:37 2010

Found and removed: C:\Program Files\Java\jre1.5.0_06

Found and removed: C:\Program Files\Java\jre1.6.0_06

Found and removed: Software\JavaSoft\Java2D\1.5.0_04

Found and removed: Software\JavaSoft\Java2D\1.5.0_06

Found and removed: Software\JavaSoft\Java2D\1.5.0_13

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_06\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_06\

------------------------------------

Finished reporting.

Oli siellä vanhat javat !!!

Nyt koneesi pitäisi olla
valmis sotaan.

:D
.

kiitos avusta