User Käyttäjä Salasana  
   
keskiviikko 12.11.2025 / 19:38
Hae keskustelualueilta:        In English   Suomeksi   På svenska
afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat - hijackthis -logit > resurssien hallinta kaatuilee, jotain vikaa?
Näytä aiheet
 
Keskustelualueet
Keskustelualueet
Resurssien hallinta kaatuilee, jotain vikaa?
  Siirry:
 
Kirjoittaja Viesti
Gorga
Newbie
_
5. maaliskuuta 2008 @ 20:34 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Elikkä tää Vistan resurssien hallinta takkuilee ja on koko lailla epästabiili, joten menee hermo ja aattelin gurujen tieto taitoa kalastella ja tossa ois HJT logi, jos siitä ois apuja.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:18:00, on 5.3.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Comodo\CBOClean\BOC425.EXE
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\conime.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...ilion&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...ilion&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F3 - REG:win.ini: load=
F3 - REG:win.ini: run=
O1 - Hosts: ::1 localhost
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [BOC-425] C:\PROGRA~1\Comodo\CBOClean\BOC425.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10504 bytes
Hujo
Suspended permanently
_
5. maaliskuuta 2008 @ 21:49 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
combofix1
combofix2

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.


Voiko tietsikka koskaan toimia?
Gorga
Newbie
_
6. maaliskuuta 2008 @ 20:01 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Näyttäisi siltä, ettei tää mun kone(vista) ei tykkää tosta Combofix ohjelmasta yhtään, koska se jumii myös eikä välillä käynnixty ollenkaan. olen kokeillut käynnistää sitä kaikin mahdollisin keinoin, jotka tiedän, eli järjestelmän valvojana, XP yhteen sopivana ja noitten yhdistelmänä, mut ilman toimivaa tulosta
Gorga
Newbie
_
6. maaliskuuta 2008 @ 21:29 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
No nyt rupes toimimaan, kun aikansa käynnisteli tota eli tossapa ois logia


ComboFix 08-03-05.3 - Käyttäjä 2008-03-06 20:03:46.1 - NTFSx86
Microsoft® Windows Vista? Home Premium 6.0.6000.0.1252.1.1035.18.1007 [GMT 2:00]
Running from: C:\Downloads\Bit\ComboFix.exe
* Created a new restore point
.

((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-02-06 to 2008-03-06 )))))))))))))))))
.

2008-03-06 19:39 . 2008-03-06 19:43 <KANSIO> d-------- C:\ComboFix(2)
2008-03-05 20:04 . 2008-03-05 20:04 <KANSIO> d-------- C:\Program Files\Trend Micro
2008-02-25 18:39 . 2008-02-25 18:37 838,094 --a------ C:\Windows\System32\oem68.inf
2008-02-25 18:36 . 2008-02-25 18:35 3,231,744 --a------ C:\Windows\System32\bcmihvsrv.dll
2008-02-25 18:36 . 2008-02-25 18:35 2,895,872 --a------ C:\Windows\System32\bcmihvui.dll
2008-02-25 18:36 . 2008-02-25 18:35 87,328 --a------ C:\Windows\System32\bcmwlcoi.dll
2008-02-25 18:33 . 2008-02-25 18:33 <KANSIO> d-------- C:\Program Files\HP DVB-T TV Tuner
2008-02-25 18:33 . 2008-02-25 18:33 <KANSIO> d-------- C:\Program Files\Common Files\LightScribe
2008-02-25 18:17 . 2007-03-21 22:02 37,376 --a------ C:\Windows\System32\drivers\rixdptsk.sys
2008-02-25 18:11 . 2008-02-25 18:11 <KANSIO> d-------- C:\Windows\System32\Hauppauge
2008-02-25 18:11 . 2008-02-25 18:11 <KANSIO> d-------- C:\Program Files\WinTV
2008-02-25 18:11 . 2007-05-01 15:26 258,104 --a------ C:\Windows\System32\hcwpnp32.dll
2008-02-25 18:11 . 2006-10-10 10:15 98,360 --a------ C:\Windows\System32\hcwi2c32.dll
2008-02-25 18:11 . 2006-10-10 17:47 36,921 --a------ C:\Windows\System32\hcwutl32_priv.dll
2008-02-25 18:11 . 2006-10-10 18:47 36,921 --a------ C:\Windows\System32\hcwutl32.dll
2008-02-24 22:54 . 2008-02-24 22:54 <KANSIO> d-------- C:\Users\All Users\Windows Genuine Advantage
2008-02-24 13:40 . 2008-02-24 13:41 <KANSIO> d-------- C:\Program Files\World of Warcraft
2008-02-24 13:40 . 2008-02-24 14:04 <KANSIO> d-------- C:\Program Files\Common Files\Blizzard Entertainment
2008-02-22 20:58 . 2008-02-22 20:58 <KANSIO> d-------- C:\Program Files\Microsoft Silverlight
2008-02-22 10:11 . 2008-02-22 10:11 194,560 --a------ C:\Windows\System32\WebClnt.dll
2008-02-22 10:11 . 2008-02-22 10:11 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys
2008-02-22 10:09 . 2008-02-22 10:09 1,585,664 --a------ C:\Windows\System32\setupapi.dll
2008-02-22 10:09 . 2008-02-22 10:09 613,888 --a------ C:\Windows\System32\wpd_ci.dll
2008-02-22 10:09 . 2008-02-22 10:09 558,080 --a------ C:\Windows\System32\oleaut32.dll
2008-02-22 10:09 . 2008-02-22 10:09 260,096 --a------ C:\Windows\System32\dpx.dll
2008-02-22 10:09 . 2008-02-22 10:09 224,824 --a------ C:\Windows\System32\clfs.sys
2008-02-22 10:09 . 2008-02-22 10:09 221,696 --a------ C:\Windows\System32\umpnpmgr.dll
2008-02-22 10:09 . 2008-02-22 10:09 101,888 --a------ C:\Windows\System32\drvinst.exe
2008-02-22 10:09 . 2008-02-22 10:09 35,384 --a------ C:\Windows\System32\drivers\WdfLdr.sys
2008-02-22 10:09 . 2008-02-22 10:09 19,456 --a------ C:\Windows\System32\cfgmgr32.dll
2008-02-22 10:09 . 2008-02-22 10:09 6,656 --a------ C:\Windows\System32\kbd106n.dll
2008-02-22 10:06 . 2008-02-22 10:06 3,504,696 --a------ C:\Windows\System32\ntkrnlpa.exe
2008-02-22 10:06 . 2008-02-22 10:06 3,470,392 --a------ C:\Windows\System32\ntoskrnl.exe
2008-02-22 10:06 . 2008-02-22 10:06 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-02-22 10:06 . 2008-02-22 10:06 109,624 --a------ C:\Windows\System32\drivers\ataport.sys
2008-02-22 10:06 . 2008-02-22 10:06 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-02-22 10:06 . 2008-02-22 10:06 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-02-22 10:06 . 2008-02-22 10:06 15,928 --a------ C:\Windows\System32\drivers\pciide.sys
2008-02-22 10:05 . 2008-02-22 10:05 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-22 10:05 . 2008-02-22 10:05 1,686,528 --a------ C:\Windows\System32\gameux.dll
2008-02-22 10:05 . 2008-02-22 10:05 806,400 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-02-22 10:05 . 2008-02-22 10:05 217,144 --a------ C:\Windows\System32\drivers\netio.sys
2008-02-22 10:05 . 2008-02-22 10:05 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-02-22 10:05 . 2008-02-22 10:05 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-02-22 10:05 . 2008-02-22 10:05 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-02-22 09:59 . 2008-02-22 09:59 1,244,672 --a------ C:\Windows\System32\mcmde.dll
2008-02-10 13:00 . 2008-02-10 14:36 <KANSIO> d-------- C:\temp

.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-05 16:12 --------- d-----w C:\Program Files\IObit
2008-03-05 13:17 --------- d-----w C:\Program Files\CCleaner
2008-03-02 15:41 --------- d-----w C:\ProgramData\NVIDIA
2008-02-27 12:22 --------- d-----w C:\Program Files\Yahoo!
2008-02-27 12:21 --------- d-----w C:\Program Files\Movie Joiner
2008-02-25 16:35 1,044,984 ----a-w C:\Windows\system32\drivers\BCMWL6.SYS
2008-02-25 16:17 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-22 16:31 --------- d-----w C:\ProgramData\Microsoft Help
2008-02-22 14:35 --------- d-----w C:\Program Files\ffdshow
2008-02-22 12:41 --------- d-----w C:\Program Files\a-squared Free
2008-02-22 08:09 495,160 ----a-w C:\Windows\system32\drivers\Wdf01000.sys
2008-02-22 08:05 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-02-22 08:05 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-02-22 08:05 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-02-22 08:05 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-02-22 08:01 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-22 08:01 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-22 08:01 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-22 08:01 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-10 12:15 --------- d-----w C:\ProgramData\Media Center Programs
2008-01-26 10:12 --------- d-----w C:\Program Files\Microsoft Works
2008-01-26 10:11 --------- d-----w C:\Program Files\MSBuild
2008-01-26 10:07 --------- d-----w C:\Program Files\Microsoft.NET
2008-01-26 10:00 --------- d-----w C:\Program Files\Microsoft Visual Studio 8
2008-01-24 13:23 --------- d-----w C:\ProgramData\Installations
2008-01-22 17:33 --------- d-----w C:\ProgramData\Uniblue
2008-01-22 17:29 --------- d-----w C:\Program Files\Uniblue
2008-01-22 17:23 --------- d-----w C:\Program Files\Kate's Video Joiner
2008-01-14 14:02 --------- d-----w C:\Program Files\Microsoft Games
2008-01-10 16:54 43,520 ----a-w C:\Windows\System32\CmdLineExt03.dll
2008-01-10 16:45 21,840 ----a-w C:\Windows\System32\SIntfNT.dll
2008-01-10 16:45 17,212 ----a-w C:\Windows\System32\SIntf32.dll
2008-01-10 16:45 12,067 ----a-w C:\Windows\System32\SIntf16.dll
2008-01-10 16:31 94,208 ----a-w C:\Windows\DIIUnin.exe
2008-01-10 06:41 --------- d-----w C:\Program Files\Windows Mail
2008-01-09 20:58 1,060,920 ----a-w C:\Windows\system32\drivers\ntfs.sys
2008-01-09 20:55 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys
2008-01-09 20:55 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-09 20:54 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-01-08 15:19 --------- d-----w C:\Program Files\Nokia
2008-01-08 15:19 --------- d-----w C:\Program Files\Common Files\Nokia
2007-12-24 11:49 7,680 ----a-w C:\Windows\System32\ff_vfw.dll
2007-12-22 17:43 669,184 ----a-w C:\Windows\System32\pbsvc.exe
2007-12-22 17:43 66,872 ----a-w C:\Windows\System32\PnkBstrA.exe
2007-12-22 17:43 103,736 ----a-w C:\Windows\System32\PnkBstrB.exe
2007-12-12 13:47 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2007-12-12 13:47 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2007-12-12 13:47 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2007-11-20 12:51 32 ----a-w C:\Users\All Users\ezsid.dat
2007-11-20 12:51 32 ----a-w C:\ProgramData\ezsid.dat
2007-09-20 17:03 174 --sha-w C:\Program Files\desktop.ini
2006-03-20 12:37 5,689,344 ----a-w C:\Program Files\mplayerc.exe
.

(((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VirtualExpanderFile.1]
@={E4000AC4-5E5F-4956-807A-C5854405D64F}

[HKEY_CLASSES_ROOT\CLSID\{E4000AC4-5E5F-4956-807A-C5854405D64F}]
C:\Users\Käyttäjä\AppData\Local\Sony Corporation\VirtualExpander\VEShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-09 22:54 1232896]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-27 13:21 1006264]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-15 02:50 1021224]
"QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-02-13 10:38 159744]
"hpWirelessAssistant"="C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 12:18 472776]
"WAWifiMessage"="C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 15:12 317128]
"BOC-425"="C:\PROGRA~1\Comodo\CBOClean\BOC425.exe" [2007-08-08 18:49 338432]
"SynTPStart"="C:\Program Files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 02:29 102400]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-30 19:14 579072]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\cfp.exe" [2007-11-22 10:31 1481984]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-11-07 08:05 8534560]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-11-07 08:05 81920]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="%WINDIR%\SMINST\launcher.exe" [ ]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-11-03 14:45 219136]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
avgwlntf.dll 2007-11-03 14:45 9216 C:\Windows\System32\avgwlntf.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"= C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2005-02-16 22:11 49152 C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2006-01-12 14:40 155648 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2007-11-07 08:05 8534560 C:\Windows\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1218168287-3316355153-1681125236-1001]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{25114BCA-57F7-4E92-B6CD-4EE175652815}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)|Edge=TRUE|
"{0F285AD1-2E05-4079-ABAB-F2C438235721}"= C:\Program Files\HP\QuickPlay\QP.exe:Quick Play|Desc=Quick Play
"{A20445C7-8B0D-4B18-A009-64A3B28732AE}"= C:\Program Files\HP\QuickPlay\QPService.exe:Quick Play Resident Program|Desc=Quick Play Resident Program
"{D6D351F0-4BFA-4AB9-8B52-09AFAC69C676}"= %ProgramFiles%\Elisa\Avustaja\Elisa.exe:Elisa Avustaja
"TCP Query User{F17CFB18-67AC-4DD5-9252-40882053F154}C:\program files\internet explorer\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer|Desc=Internet Explorer
"UDP Query User{AE18205D-31D7-4878-B837-07542893015D}C:\program files\internet explorer\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer|Desc=Internet Explorer
"TCP Query User{A0B96BE4-BABF-48B9-B9BC-1877114E3732}C:\program files\mirc\mirc.exe"= UDP:C:\program files\mirc\mirc.exe:mIRC|Desc=mIRC
"UDP Query User{43E84F97-BB09-450D-B3BA-C38B46384DC9}C:\program files\mirc\mirc.exe"= TCP:C:\program files\mirc\mirc.exe:mIRC|Desc=mIRC
"{65C307DA-5314-42F7-B079-18AC1780F07E}"= UDP:D:\Games\BF2\BF2.exe:Battlefield 2
"{DAD24CB4-BE70-455E-BDF2-344831FE82D5}"= TCP:D:\Games\BF2\BF2.exe:Battlefield 2
"{04167BD7-C7FE-4DE0-828B-1D8192D37491}"= UDP:D:\Games\NWN2\nwn2main.exe:Neverwinter Nights 2 Main
"{832D2CBD-B080-4DB7-8F41-3AF2DC1AB9E4}"= TCP:D:\Games\NWN2\nwn2main.exe:Neverwinter Nights 2 Main
"{605767F2-3E60-470C-B095-9F99CB98AC16}"= UDP:D:\Games\NWN2\nwn2main_amdxp.exe:Neverwinter Nights 2 AMD
"{68F2F303-DB73-4343-BB1F-E9F0FD8313D8}"= TCP:D:\Games\NWN2\nwn2main_amdxp.exe:Neverwinter Nights 2 AMD
"{53DB3F74-967E-4C2E-B5A3-B8DDEE51E748}"= UDP:D:\Games\NWN2\nwupdate.exe:Neverwinter Nights 2 Updater
"{0B13ADDD-F0B5-4FEE-A793-929C30B3D62D}"= TCP:D:\Games\NWN2\nwupdate.exe:Neverwinter Nights 2 Updater
"{4C6C3973-8F45-46AF-B3DE-28FB416F2C92}"= UDP:D:\Games\NWN2\nwn2server.exe:Neverwinter Nights 2 Server
"{FF84F8AF-5CD7-4C49-8C54-34396698BABD}"= TCP:D:\Games\NWN2\nwn2server.exe:Neverwinter Nights 2 Server
"TCP Query User{E3B41205-9980-43A2-BD27-E01FE5114137}C:\program files\bitcomet\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client|Desc=BitComet - a BitTorrent Client
"UDP Query User{D751EB0C-D71B-489B-A4B2-0E391F9BF2D4}C:\program files\bitcomet\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client|Desc=BitComet - a BitTorrent Client
"{10236174-EABB-4B68-9D5A-026795BE57C8}"= UDP:8027:BitComet 8027 TCP
"{8079A542-7CEB-40B9-9D1D-AE2767330225}"= TCP:8027:BitComet 8027 UDP
"TCP Query User{331CEB12-7E02-42F9-901C-9E6E6AA62E70}D:\games\the lord of the rings online\lotroclient.exe"= UDP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
"UDP Query User{09DE62D0-790F-4E99-A0B5-F3B78FA50F6A}D:\games\the lord of the rings online\lotroclient.exe"= TCP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
"{427E026D-B27F-4E7D-8AFF-C2C6ED18A499}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{1A59505D-7FF0-4C3D-8E84-DB5CD433FAE5}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{86E28B12-0E2A-4CE9-9F37-0226953808FA}"= UDP:D:\Games\RTS\Company of heroes\RelicCOH.exe:Company of Heroes - Opposing Fronts
"{E26750D5-E745-4738-9A8E-FDF75A1ADC37}"= TCP:D:\Games\RTS\Company of heroes\RelicCOH.exe:Company of Heroes - Opposing Fronts
"TCP Query User{9596A72C-93E4-467B-B6AE-8863DBFF78D3}D:\games\day of defeat\steam.exe"= UDP:D:\games\day of defeat\steam.exe:Steam|Desc=Steam
"UDP Query User{BEE42A06-B48B-42B5-BA54-0E3429053219}D:\games\day of defeat\steam.exe"= TCP:D:\games\day of defeat\steam.exe:Steam|Desc=Steam
"TCP Query User{547FE48E-D512-4554-BF07-DB1BA9057774}D:\games\the lord of the rings online\lotroclient.exe"= UDP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
"UDP Query User{CAD777BE-B8A4-415A-8FF3-836DDF857FF1}D:\games\the lord of the rings online\lotroclient.exe"= TCP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
"{D81F5EC7-C6B0-4ECE-95AD-7944EBCC70DA}"= UDP:D:\Games\COD4\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{0FFDA027-7795-457B-B68C-99B024F2B04B}"= TCP:D:\Games\COD4\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{5867A4D2-D23A-45B5-855A-562CC2DEC61C}"= UDP:D:\Games\Crysis\Bin32\Crysis.exe:Crysis_32
"{6BDA8073-9B20-44C3-A7A5-B477F6314A6F}"= TCP:D:\Games\Crysis\Bin32\Crysis.exe:Crysis_32
"{2CFA3CAF-700A-4296-B550-0C348F94BCDA}"= UDP:D:\Games\Crysis\Bin32\CrysisDedicatedServer.exe:CrysisDedicatedServer_32
"{65864A89-FA73-42E1-9250-1E0C544659D0}"= TCP:D:\Games\Crysis\Bin32\CrysisDedicatedServer.exe:CrysisDedicatedServer_32
"{7F35911B-A77F-4F21-8028-03C02BE4974D}"= UDP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA
"{D9C9F077-A455-49F7-809A-3417140390DB}"= TCP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA
"{8D678519-4E9F-4F7D-95C6-ABEF88170510}"= UDP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB
"{CB7D5961-394D-4E59-AF48-5C1C94543803}"= TCP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB
"{BBAA22E8-172F-443A-8D09-EB07BC493E59}"= UDP:D:\Games\Gears of war\Binaries\WarGame-G4WLive.exe:Gears of War
"{D7F410FA-1979-4449-B08A-9127421AE5B2}"= TCP:D:\Games\Gears of war\Binaries\WarGame-G4WLive.exe:Gears of War
"{5ABCF9E8-C8DF-4F46-9569-85CF5C3661F9}"= UDP:D:\Games\Hellgate London\Launcher.exe:Hellgate: London
"{3C85E6B6-713E-4BD8-979C-FB5DA32AE126}"= TCP:D:\Games\Hellgate London\Launcher.exe:Hellgate: London
"{B0F1FCF6-AA08-4A0F-8227-3CFD205955D2}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{C46A319F-3713-4FC7-8DE8-5B18A6105CE7}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{601D7205-EF0F-4C5F-A06A-1C79282FB000}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{BA595031-8E1C-4543-9197-D6BF1E30D3B4}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{26980AF8-B0B5-49B8-8C8B-4673892DC87D}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{DE0D1835-E03B-4F4B-8C9C-FE6E70F9A258}"= UDP:D:\Games\Supreme Commander\GPGNet\GPG.Multiplayer.Client.exe:GPGNet - Supreme Commander
"{52E39E86-D080-4828-B0D4-AF77368F2D45}"= TCP:D:\Games\Supreme Commander\GPGNet\GPG.Multiplayer.Client.exe:GPGNet - Supreme Commander
"TCP Query User{E635A9EA-81DB-4C44-85AA-07C061276C4D}C:\program files\skype\phone\skype.exe"= UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath |Desc=Skype. Take a deep breath
"UDP Query User{B700D587-8314-424F-8F45-B125458AA0F0}C:\program files\skype\phone\skype.exe"= TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath |Desc=Skype. Take a deep breath
"TCP Query User{ECEDFA7B-3B76-4388-9F14-DDB34528E5A4}D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe"= UDP:D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader
"UDP Query User{5279DE98-B706-4195-81E7-DC21DA861901}D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe"= TCP:D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader
"TCP Query User{784533AC-48C5-45B1-8BB8-D78118156C0B}D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe"= UDP:D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader
"UDP Query User{3BBAF5A2-2766-4D90-A0A3-5595A8432907}D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe"= TCP:D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys [2007-11-20 22:37]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys [2007-11-20 22:37]
R2 ASBroker;Logon Session Broker;C:\Windows\System32\svchost.exe [2006-11-02 11:45]
R2 ASChannel;Local Communication Channel;C:\Windows\System32\svchost.exe [2006-11-02 11:45]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2007-07-10 05:27]
R3 nvsmu;nvsmu;C:\Windows\system32\DRIVERS\nvsmu.sys [2007-02-17 01:50]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-02-25 18:35]
S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2007-10-25 20:04]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
GPSvcGroup REG_MULTI_SZ GPSvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5e55a65a-6843-11dc-80a0-001b248d51f9}]
\shell\AutoRun\command - G:\autorun.exe


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
.
'Ajoitetut tehtävät'-kansion sisältö
"2008-02-24 01:00:00 C:\Windows\Tasks\AdwareAlert Scheduled Scan.job"
- C:\Program Files\AdwareAlert\AdwareAlert.ex
- C:\Program Files\AdwareAlert
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-06 21:18:26
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Windows\system32\WLANExt.exe
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\Program Files\Comodo\CBOClean\BOCORE.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
C:\Windows\system32\conime.exe
C:\Program Files\Comodo\CBOClean\BOC425.EXE
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
.
**************************************************************************
.
Completion time: 2008-03-06 21:21:08 - machine was rebooted
.
2008-03-05 13:14:01 --- E O F ---

ja tossa ois HjT logia, jos sillekkin ois käyttöä

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:22:18, on 6.3.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Comodo\CBOClean\BOC425.EXE
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Comodo\Firewall\cfp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Windows\Explorer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...ilion&pf=laptop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [BOC-425] C:\PROGRA~1\Comodo\CBOClean\BOC425.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10084 bytes
Hujo
Suspended permanently
_
6. maaliskuuta 2008 @ 21:51 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
scannaa hjt:llä merkkaa paina Fix checked

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

==========

Päivitä AVG Anti-Spyware 7.5 ja aja vikasiedossa.

Voiko tietsikka koskaan toimia?
Gorga
Newbie
_
7. maaliskuuta 2008 @ 15:41 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
AVG 7.5 päivitetty ja ajettu vikasieto tilassa ja toi R3 rivi fixattu, mut ei tuntunu olevan apuja, vieläkin tuntuu toi resurssien hallinta kaatuvan.
Hujo
Suspended permanently
_
8. maaliskuuta 2008 @ 00:37 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
poista koneelta a-squared Free

eihän tämän AVG Anti-Spyware 7.5 logo ole kellon vieressä värillinen

Voiko tietsikka koskaan toimia?

Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 8. maaliskuuta 2008 @ 00:38

Gorga
Newbie
_
8. maaliskuuta 2008 @ 13:34 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
A-squared poistettu ja ei ole värillinen toi AVG Anti-Spyware 7.5, mutta vieläkin toi resurssienhallinta kaatuilee.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:31:41, on 8.3.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Comodo\CBOClean\BOC425.EXE
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Comodo\Firewall\cfp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\Explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Ventrilo\Ventrilo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...ilion&pf=laptop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [BOC-425] C:\PROGRA~1\Comodo\CBOClean\BOC425.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9887 bytes
Hujo
Suspended permanently
_
8. maaliskuuta 2008 @ 13:56 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Paljos koneessa on keskusmuistia

Voiko tietsikka koskaan toimia?
Gorga
Newbie
_
8. maaliskuuta 2008 @ 15:58 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
2Gt ois ram
Hujo
Suspended permanently
_
8. maaliskuuta 2008 @ 16:02 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
ok.. ihan hyvin on

Voiko tietsikka koskaan toimia?
Gorga
Newbie
_
8. maaliskuuta 2008 @ 16:06 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
joo kyl tää kone mun mielestä ihan kelvollinen on mun tarpeille, mutta ainut ongelma tuntus olevan toi vista. Taitaa joutua hyllylle toi vista ja pistää vanha kunnon XP tilalle
Hujo
Suspended permanently
_
8. maaliskuuta 2008 @ 16:23 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
niin se tuntuu toi vista olevan se suurin ongelma.


Voiko tietsikka koskaan toimia?
Mainos
_
__
 
_
Gorga
Newbie
_
8. maaliskuuta 2008 @ 18:12 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
no voi olla, että vistan uudelleen asennus vois auttaa, tai sit vaan toi XP tilalle, oli miten oli kiitoksia avusta kuitenkin.
afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat - hijackthis -logit > resurssien hallinta kaatuilee, jotain vikaa?
 

Apua ongelmiin: AfterDawnin keskustelualueet | AfterDawnin Vastaukset
Uutiset: IT-alan uutiset | Uutisia puhelimista
Musiikkia: MP3Lizard.com
Tuotearviot: Laitevertailu | Vertaa puhelimia | Vertaa kännykkäliittymiä
Pelit: Pelitiedostot, pelidemot ja trailerit
Ohjelmat: download.fi | AfterDawnin ohjelma-alueet
International: AfterDawn in English | Software downloads | Free, legal MP3s | AfterDawn på svenska
RSS -syötteet: AfterDawnin uutiset | Uusimmat ohjelmapäivitykset | Keskustelualueiden viestit
Tietoja: Tietoa AfterDawn Oy:stä | Mainosta sivuillamme | Sivuston käyttöehdot ja tietoja yksityisyydensuojasta
Ota yhteyttä: Lähetä palautetta | Ota yhteyttä mainosmyyntiimme
 
  © 1999-2025 AfterDawn Oy