|
|
|
Keskustelualueet
Keskustelualueet
|
|
|
Suoritinkäyttö 100% jatkuvasti
|
|
|
Lihamesta
Newbie
|
13. heinäkuuta 2008 @ 18:18 |
Linkki tähän viestiin
|
Ongelmana on että suoritinkäyttö on 70-100% jatkuvasti vaikka ei teekkään mitään. Kun selaa esimerkiksi nettiä tai pelaa on suoritinkäyttö jatkuvasti 100%. Toisen ytimen käyttö on 80-100% jatkuvasti. Kone on ollut käytössä vasta viikon, mutta aluksi ongelmaa ei esiintynyt. Kone on HP Pavilion Elite m9151. Viruksentorjuntana toimii Norton Internet Security.
Logfile of HijackThis v1.99.1
Scan saved at 18:12:04, on 13.7.2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\schtasks.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\hp\kbd\kbd.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Users\Ojanperä\Downloads\HijackThis_v1.99.1.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O23 - Service: Automaattinen LiveUpdate-ajastustoiminto (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
|
|
Lihamesta
Newbie
|
16. heinäkuuta 2008 @ 22:56 |
Linkki tähän viestiin
|
Malwarebytes' Anti-Malware 1.20
Tietokantaversio: 945
Windows 6.0.6000
23:17:48 13.7.2008
mbam-log-7-13-2008 (23-17-48).txt
Tarkistustyyppi: Täysi tarkistus (C:\|D:\|E:\|)
Tarkistetut kohteet: 127593
Kulunut aika: 38 minute(s), 37 second(s)
Saastuneita muistiprosesseja: 0
Saastuneita muistimoduuleja: 0
Saastuneita rekisteriavaimia: 0
Saastuneita rekisteriarvoja: 0
Saastuneita rekisterikohteita: 0
Saastuneita hakemistoja: 0
Saastuneita tiedostoja: 0
Saastuneita muistiprosesseja:
(Haitallisia kohteita ei löydetty)
Saastuneita muistimoduuleja:
(Haitallisia kohteita ei löydetty)
Saastuneita rekisteriavaimia:
(Haitallisia kohteita ei löydetty)
Saastuneita rekisteriarvoja:
(Haitallisia kohteita ei löydetty)
Saastuneita rekisterikohteita:
(Haitallisia kohteita ei löydetty)
Saastuneita hakemistoja:
(Haitallisia kohteita ei löydetty)
Saastuneita tiedostoja:
(Haitallisia kohteita ei löydetty)
ComboFix 08-07-15.4 - Ojanperä 2008-07-16 19:45:49.1 - NTFSx86
Microsoft® Windows Vista? Home Premium 6.0.6000.0.1252.1.1035.18.290 [GMT 3:00]
Running from: C:\Users\Ojanperä\Desktop\ComboFix.exe
.
(((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Windows\system32\cfx32.ocx
C:\Windows\system32\jusched.exe
.
((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-06-16 to 2008-07-16 )))))))))))))))))
.
2008-07-16 19:45 . 2008-07-16 19:45 6,736 --a------ C:\Windows\System32\drivers\PROCEXP90.SYS
2008-07-16 19:42 . 2008-07-16 19:42 <KANSIO> d-------- C:\327882R2FWJFW
2008-07-16 01:37 . 2008-07-16 17:25 312,430,580 --a------ C:\Windows\MEMORY.DMP
2008-07-14 15:13 . 2008-07-14 15:16 <KANSIO> d-------- C:\Users\All Users\Lavasoft
2008-07-14 15:13 . 2008-07-14 15:16 <KANSIO> d-------- C:\ProgramData\Lavasoft
2008-07-14 15:13 . 2008-07-14 15:13 <KANSIO> d-------- C:\Program Files\Lavasoft
2008-07-14 15:12 . 2008-07-14 15:12 <KANSIO> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-07-14 14:51 . 2008-06-11 14:48 188,960 --a------ C:\Windows\System32\nvapps.xml
2008-07-14 14:50 . 2008-07-14 15:11 <KANSIO> d-------- C:\NVIDIA
2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Malwarebytes
2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\Users\All Users\Malwarebytes
2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\ProgramData\Malwarebytes
2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-13 22:20 . 2008-07-07 17:35 34,296 --a------ C:\Windows\System32\drivers\mbamcatchme.sys
2008-07-13 22:20 . 2008-07-07 17:35 17,144 --a------ C:\Windows\System32\drivers\mbam.sys
2008-07-08 22:42 . 2008-07-08 22:42 0 --ah----- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-07-08 05:53 . 2008-07-10 19:22 107,832 --a------ C:\Windows\System32\PnkBstrB.exe
2008-07-08 05:53 . 2008-07-08 05:53 66,872 --a------ C:\Windows\System32\PnkBstrA.exe
2008-07-08 05:53 . 2008-07-10 19:22 22,328 --a------ C:\Windows\System32\drivers\PnkBstrK.sys
2008-07-08 05:26 . 2008-07-08 05:26 <KANSIO> d-------- C:\Program Files\America's Army Server Manager
2008-07-08 05:22 . 2008-07-08 05:37 <KANSIO> d-------- C:\Program Files\America's Army
2008-07-08 05:00 . 2008-07-08 05:00 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\WinRAR
2008-07-08 03:04 . 2008-07-08 03:04 <KANSIO> d-------- C:\Program Files\MSXML 4.0
2008-07-08 01:11 . 2008-07-08 01:11 <KANSIO> d-------- C:\Program Files\Common Files\PCSuite
2008-07-08 01:11 . 2008-07-08 01:11 <KANSIO> d-------- C:\Program Files\Common Files\Nokia
2008-07-08 01:10 . 2008-07-08 01:10 <KANSIO> d-------- C:\Program Files\DIFX
2008-07-08 01:10 . 2007-09-17 15:53 21,632 --a------ C:\Windows\System32\drivers\pccsmcfd.sys
2008-07-08 01:09 . 2008-07-08 01:10 <KANSIO> d----c--- C:\Windows\System32\DRVSTORE
2008-07-08 01:09 . 2008-07-13 20:18 <KANSIO> d-------- C:\Program Files\PC Connectivity Solution
2008-07-08 01:06 . 2008-07-08 01:06 <KANSIO> d-------- C:\Users\All Users\Installations
2008-07-08 01:06 . 2008-07-08 01:06 <KANSIO> d-------- C:\ProgramData\Installations
2008-07-08 01:06 . 2008-07-08 01:11 <KANSIO> d-------- C:\Program Files\Nokia
2008-07-08 00:39 . 2008-07-08 22:43 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Nokia
2008-07-08 00:33 . 2008-07-08 22:43 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\PC Suite
2008-07-08 00:33 . 2008-07-08 22:43 <KANSIO> d-------- C:\Users\All Users\PC Suite
2008-07-08 00:33 . 2008-07-08 22:43 <KANSIO> d-------- C:\ProgramData\PC Suite
2008-07-08 00:31 . 2008-05-07 07:38 90,624 --a------ C:\Windows\System32\nmwcdcls.dll
2008-07-07 21:38 . 2008-07-10 23:04 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\uTorrent
2008-07-07 21:38 . 2008-07-07 21:38 <KANSIO> d-------- C:\Program Files\uTorrent
2008-07-07 19:58 . 2008-07-07 19:58 <KANSIO> d-------- C:\Program Files\Seagate Software
2008-07-07 19:58 . 2008-07-07 19:58 <KANSIO> d-------- C:\Program Files\Common Files\Borland Shared
2008-07-07 19:44 . 2008-07-07 19:44 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Music
2008-07-07 19:04 . 2008-07-07 19:04 <KANSIO> d-------- C:\Windows\PCHEALTH
2008-07-07 19:03 . 2008-07-10 22:50 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Adobe
2008-07-07 18:56 . 2008-07-07 19:04 <KANSIO> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-07-07 18:55 . 2008-07-07 18:55 <KANSIO> d-------- C:\Users\All Users\WLInstaller
2008-07-07 18:55 . 2008-07-07 18:55 <KANSIO> d-------- C:\ProgramData\WLInstaller
2008-07-07 18:55 . 2008-07-07 19:04 <KANSIO> d-------- C:\Program Files\Windows Live
2008-07-07 18:49 . 2008-07-07 18:49 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-07-07 18:49 . 2008-07-07 18:49 194,560 --a------ C:\Windows\System32\WebClnt.dll
2008-07-07 18:49 . 2008-07-07 18:49 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys
2008-07-07 18:46 . 2008-07-07 18:46 1,585,664 --a------ C:\Windows\System32\setupapi.dll
2008-07-07 18:45 . 2008-07-07 18:45 2,027,008 --a------ C:\Windows\System32\win32k.sys
2008-07-07 18:45 . 2008-07-07 18:45 296,448 --a------ C:\Windows\System32\gdi32.dll
2008-07-07 18:45 . 2008-07-07 18:45 223,232 --a------ C:\Windows\System32\WMASF.DLL
2008-07-07 18:45 . 2008-07-07 18:45 113,664 --a------ C:\Windows\System32\drivers\rmcast.sys
2008-07-07 18:45 . 2008-07-07 18:45 14,848 --a------ C:\Windows\System32\wshrm.dll
2008-07-07 18:45 . 2008-07-07 18:45 9,728 --a------ C:\Windows\System32\LAPRXY.DLL
2008-07-07 18:45 . 2008-07-07 18:45 2,048 --a------ C:\Windows\System32\asferror.dll
2008-07-07 18:44 . 2008-07-07 18:44 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-07-07 18:44 . 2008-07-07 18:44 1,686,528 --a------ C:\Windows\System32\gameux.dll
2008-07-07 18:44 . 2008-07-07 18:44 11,776 --a------ C:\Windows\System32\sbunattend.exe
2008-07-07 18:43 . 2008-07-07 18:43 1,327,104 --a------ C:\Windows\System32\quartz.dll
2008-07-07 18:43 . 2008-07-07 18:43 130,048 --a------ C:\Windows\System32\drivers\srv2.sys
2008-07-07 18:43 . 2008-07-07 18:43 101,888 --a------ C:\Windows\System32\drivers\mrxsmb.sys
2008-07-07 18:43 . 2008-07-07 18:43 84,992 --a------ C:\Windows\System32\drivers\srvnet.sys
2008-07-07 18:43 . 2008-07-07 18:43 84,480 --a------ C:\Windows\System32\dnsrslvr.dll
2008-07-07 18:43 . 2008-07-07 18:43 58,368 --a------ C:\Windows\System32\drivers\mrxsmb20.sys
2008-07-07 18:43 . 2008-07-07 18:43 24,576 --a------ C:\Windows\System32\dnscacheugc.exe
2008-07-07 18:42 . 2008-07-07 18:42 1,244,672 --a------ C:\Windows\System32\mcmde.dll
2008-07-07 18:42 . 2008-07-07 18:42 428,032 --a------ C:\Windows\System32\EncDec.dll
2008-07-07 18:42 . 2008-07-07 18:42 292,352 --a------ C:\Windows\System32\psisdecd.dll
2008-07-07 18:42 . 2008-07-07 18:42 218,624 --a------ C:\Windows\System32\psisrndr.ax
2008-07-07 18:42 . 2008-07-07 18:42 80,896 --a------ C:\Windows\System32\MSNP.ax
2008-07-07 18:42 . 2008-07-07 18:42 68,608 --a------ C:\Windows\System32\Mpeg2Data.ax
2008-07-07 18:42 . 2008-07-07 18:42 57,856 --a------ C:\Windows\System32\MSDvbNP.ax
2008-07-07 18:41 . 2008-07-07 18:41 826,368 --a------ C:\Windows\System32\wininet.dll
2008-07-07 18:26 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Searches
2008-07-07 18:26 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Searches
2008-07-07 18:26 . 2008-07-07 18:26 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Symantec
2008-07-07 18:26 . 2008-07-07 18:26 <KANSIO> d--hs---- C:\$RECYCLE.BIN
2008-07-07 18:25 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Contacts
2008-07-07 18:25 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Contacts
2008-07-07 18:25 . 2008-07-07 18:25 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Identities
2008-07-07 18:25 . 2008-07-07 18:25 44 --a------ C:\Windows\system\hpsysdrv.dat
2008-07-07 18:22 . 2008-07-07 18:22 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Macromedia
2008-07-07 18:22 . 2008-07-07 18:22 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Hewlett-Packard
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Videos
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Videos
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Saved Games
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Saved Games
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Pictures
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Pictures
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Music
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Music
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Links
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Links
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Favorites
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Favorites
2008-07-07 18:20 . 2008-07-15 00:07 <KANSIO> dr------- C:\Users\Ojanperä\Downloads
2008-07-07 18:20 . 2008-07-15 00:07 <KANSIO> dr------- C:\Users\Ojanperä\Downloads
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Documents
2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Documents
2008-07-07 18:20 . 2008-07-16 19:38 <KANSIO> dr------- C:\Users\Ojanperä\Desktop
2008-07-07 18:20 . 2008-07-16 19:38 <KANSIO> dr------- C:\Users\Ojanperä\Desktop
2008-07-07 18:20 . 2008-07-13 17:06 <KANSIO> d---s---- C:\Users\Ojanperä\AppData\Roaming\Microsoft
2008-07-07 18:20 . 2006-11-02 15:37 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Media Center Programs
2008-07-07 18:20 . 2008-07-07 18:20 <KANSIO> d--h----- C:\Users\Ojanperä\AppData
2008-07-07 18:20 . 2008-07-07 18:20 <KANSIO> d--h----- C:\Users\Ojanperä\AppData
2008-07-07 18:20 . 2008-07-14 15:06 <KANSIO> d-------- C:\Users\Ojanperä
2008-07-07 18:20 . 2008-07-16 19:50 1,048,576 --ahs---- C:\Users\Ojanperä\ntuser.dat
2008-07-07 18:20 . 2008-07-16 19:50 1,048,576 --ahs---- C:\Users\Ojanperä\ntuser.dat
2008-07-07 18:20 . 2008-07-07 18:21 1,927 -rahs---- C:\Windows\System32\drivers\103C_HP_CPC_KA909AA-UUW m9151.sc_YC_0Pavi_QCZH802_E81FIv3PrA2_49_INARRA2_SASUSTek Computer INC._V2.00_B5.13_T071029_WUH0_L40B_M3071_J500_7AMD_8Athlon 64 X2 Dual Core_92.6_#080707_N10DE03EF_Z_G10DE0402.MRK
2008-07-07 18:18 . 2008-07-07 18:18 1,712,984 --a------ C:\Windows\System32\wuaueng.dll
2008-07-07 18:18 . 2008-07-07 18:18 1,524,224 --a------ C:\Windows\System32\wucltux.dll
2008-07-07 18:18 . 2008-07-07 18:18 53,080 --a------ C:\Windows\System32\wuauclt.exe
2008-07-07 18:18 . 2008-07-07 18:18 43,352 --a------ C:\Windows\System32\wups2.dll
2008-07-07 18:17 . 2008-07-07 18:17 549,720 --a------ C:\Windows\System32\wuapi.dll
2008-07-07 18:17 . 2008-07-07 18:17 163,000 --a------ C:\Windows\System32\wuwebv.dll
2008-07-07 18:17 . 2008-07-07 18:17 80,896 --a------ C:\Windows\System32\wudriver.dll
2008-07-07 18:17 . 2008-07-07 18:17 33,624 --a------ C:\Windows\System32\wups.dll
2008-07-07 18:17 . 2008-07-07 18:17 31,232 --a------ C:\Windows\System32\wuapp.exe
2008-07-07 18:16 . 2008-07-07 18:16 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Contacts
.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-16 16:50 1,048,576 --sha-w C:\Users\Ojanperä\ntuser.dat
2008-07-16 16:50 1,048,576 --sha-w C:\Users\Ojanperä\ntuser.dat
2008-07-16 13:51 --------- d-----w C:\ProgramData\Symantec
2008-07-14 15:59 --------- d-----w C:\ProgramData\NVIDIA
2008-07-13 19:20 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Malwarebytes
2008-07-13 19:20 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-07-13 17:18 --------- d-----w C:\Program Files\Microsoft Works
2008-07-13 14:06 --------- d-s---w C:\Users\Ojanperä\AppData\Roaming\Microsoft
2008-07-10 20:04 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\uTorrent
2008-07-10 19:50 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Adobe
2008-07-10 06:35 174 --sha-w C:\Program Files\desktop.ini
2008-07-10 06:27 --------- d-----w C:\Program Files\Windows Mail
2008-07-08 19:43 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\PC Suite
2008-07-08 19:43 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Nokia
2008-07-08 02:00 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\WinRAR
2008-07-07 17:13 --------- d-----w C:\Program Files\Norton Internet Security
2008-07-07 17:11 --------- d-----w C:\Program Files\Windows Sidebar
2008-07-07 16:58 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-07 16:10 --------- d-----w C:\Program Files\Common Files\Adobe
2008-07-07 15:50 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-07-07 15:50 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2008-07-07 15:50 542,720 ----a-w C:\Windows\System32\sysmain.dll
2008-07-07 15:50 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2008-07-07 15:50 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2008-07-07 15:50 297,984 ----a-w C:\Windows\System32\wlansec.dll
2008-07-07 15:50 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2008-07-07 15:50 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2008-07-07 15:50 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2008-07-07 15:50 2,923,520 ----a-w C:\Windows\explorer.exe
2008-07-07 15:46 944,184 ----a-w C:\Windows\System32\winload.exe
2008-07-07 15:44 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-07-07 15:44 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-07-07 15:44 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2008-07-07 15:44 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-07-07 15:44 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-07-07 15:43 805 ----a-w C:\Windows\system32\drivers\SYMEVENT.INF
2008-07-07 15:43 123,952 ----a-w C:\Windows\system32\drivers\SYMEVENT.SYS
2008-07-07 15:43 10,671 ----a-w C:\Windows\system32\drivers\SYMEVENT.CAT
2008-07-07 15:43 --------- d-----w C:\Program Files\Symantec
2008-07-07 15:41 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-07-07 15:40 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-07-07 15:40 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-07-07 15:40 2,048 ----a-w C:\Windows\System32\tzres.dll
2008-07-07 15:26 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Symantec
2008-07-07 15:25 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Identities
2008-07-07 15:22 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Macromedia
2008-07-07 15:22 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Hewlett-Packard
2008-07-07 15:20 --------- d-----w C:\ProgramData\Hewlett-Packard
2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Työpöytä
2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Tiedostot
2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Suosikit
2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Mallit
2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Käynnistä-valikko
2008-06-13 11:14 24,112 ----a-w C:\Windows\system32\drivers\SymIMV.sys
2008-06-13 11:14 13,093 ----a-w C:\Windows\system32\drivers\SymRedir.cat
2008-06-13 11:14 1,611 ----a-w C:\Windows\system32\drivers\SymRedir.inf
2008-06-13 11:13 96,432 ----a-w C:\Windows\system32\drivers\symfw.sys
2008-06-13 11:13 41,008 ----a-w C:\Windows\system32\drivers\symndisv.sys
2008-06-13 11:13 38,576 ----a-w C:\Windows\system32\drivers\symids.sys
2008-06-13 11:13 22,320 ----a-w C:\Windows\system32\drivers\symredrv.sys
2008-06-13 11:13 184,240 ----a-w C:\Windows\system32\drivers\symtdi.sys
2008-06-13 11:13 13,616 ----a-w C:\Windows\system32\drivers\symdns.sys
2008-06-06 06:24 8,064 ----a-w C:\Windows\system32\drivers\usbser_lowerflt.sys
2008-05-20 07:32 831,048 ----a-w C:\Windows\System32\WudfUpdate_01005.dll
2008-05-16 08:58 12,632 ----a-w C:\Windows\System32\lsdelete.exe
2008-05-16 08:48 446,464 ----a-w C:\Windows\System32\nvuninst.exe
2008-05-07 04:39 1,419,232 ----a-w C:\Windows\System32\wdfcoinstaller01005.dll
2008-05-07 04:38 659,968 ----a-w C:\Windows\System32\nmwcdcocls.dll
.
(((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-07-07 18:44 1232896]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 15:35 125440]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" [2008-06-17 16:00 1249280]
"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-06-18 14:31 1122816]
"WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 15:34 2159104 C:\Windows\System32\oobefldr.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 18:01 65536]
"KBD"="C:\HP\KBD\KbdStub.EXE" [2006-12-08 19:16 65536]
"OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 14:59 118784]
"SunJavaUpdateReg"="C:\Windows\system32\jureg.exe" [2007-04-07 03:56 54936]
"HP Software Update"="c:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 17:24 54840]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-02-14 11:01 51048]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"ALUAlert"="c:\Program Files\Symantec\LiveUpdate\ALuNotify.exe" [2007-08-23 09:35 152952]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2008-05-16 14:01 13535776]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2008-05-16 14:01 92704]
"RtHDVCpl"="RtHDVCpl.exe" [2007-10-25 16:52 4702208 C:\Windows\RtHDVCpl.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3codecp"= l3codecp.acm
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{A96B629F-8044-4782-8987-D7081B4D61BC}"= C:\Program Files\HP\DVDPlay\DVDPlay.exe:DVD Play
"{1C3BD497-C000-47D2-A089-7E54E5D20641}"= C:\Program Files\HP\DVDPlay\DPService.exe:DVD Play Resident Program
"{48B8D2D7-DB8B-4C7F-937E-9BA9BAB56AEA}"= c:\Program Files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{2CFE772C-2E99-4CC1-B40F-C65671DA750B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20080715.002\IDSvix86.sys [2008-06-04 18:26]
R2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263};C:\Program Files\HP\DVDPlay\000.fcl [2007-10-09 12:07]
R2 HPBtnSrv;HP Chasis Button Service;c:\hp\HPEZBTN\HPBtnSrv.exe [2007-05-29 18:19]
R2 LiveUpdate Notice;LiveUpdate Notice;c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-14 11:02]
R3 COH_Mon;COH_Mon;C:\Windows\system32\Drivers\COH_Mon.sys [2008-03-06 21:32]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;C:\Windows\system32\drivers\HCW85BDA.sys [2007-10-01 12:21]
R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;C:\Windows\system32\DRIVERS\netr73.sys [2007-09-24 14:09]
R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2008-06-13 14:13]
*Newly Created Service* - CATCHME
*Newly Created Service* - COMHOST
*Newly Created Service* - PROCEXP90
.
'Ajoitetut tehtävät'-kansion sisältö
"2008-07-14 17:12:21 C:\Windows\Tasks\Norton Internet Security - Suorita täysi järjestelmäntarkistus - Ojanperä.job"
- c:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-07-15 17:13:25 C:\Windows\Tasks\User_Feed_Synchronization-{46BF87CF-1C7D-4384-BF9A-F0A5C8751071}.job"
- C:\Windows\system32\msfeedssync.exe
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-HP Health Check Scheduler - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-16 19:50:39
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-07-16 19:52:58
ComboFix-quarantined-files.txt 2008-07-16 16:52:35
Pre-Run: 425,092,956,160 tavua vapaana
Post-Run: 425,142,464,512 tavua vapaana
290 --- E O F --- 2008-07-14 12:06:59
Ei tehonnut Anti-Malware eikä Compofix. Eli sama ongelma jatkuu.
|
|
Lada1500s
Member
26 tuotearviota
|
16. heinäkuuta 2008 @ 23:30 |
Linkki tähän viestiin
|
|
Eli jos kone on suoraan kaupasta tullu ja menny viikos tohon kuntoon, eiköhä kannattas kattoa, että veis koko romun takas kauppaa?
Koneen pitäisi 3 gigan muistin kans toimia hyvin, koneen tehojen pitäisi olla enemmän kuin tarpeeksi...
Mitä ohjelmia olet koneesees asentanu?
Emo: ASUS M4N72-E; Prossu: AMD Phenom II 955; Muistit: 4Gt Kingston 800MHz DDR2; Näyttis: ASUS Geforce 9800GTX+; Äänikortti: SoundBlaster Audigy; Virtalähde: Antec Earthwatts 500w; Kotelo: Antec Sonata III; Näyttö: LG:n 22" 22LS4D 1650x1050
|
|
ikenbitti
Suspended due to non-functional email address
|
17. heinäkuuta 2008 @ 01:21 |
Linkki tähän viestiin
|
en usko, että laitteessa on vikaa; itselläni on sama ongelma joka ilmaantui äskettäin 2 ja ½ vuotta vanhaan kannettavaan koneeseen. Eiköhän vain lie joku tuholainen, mutta mikä?
HJT näyttää tältä, onko jotain yhteneväistä?
Logfile of HijackThis v1.99.1
Scan saved at 1:02:15, on 17.7.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Acer\Empowering Technology\admServ.exe
c:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\CAP3RSK.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\rundll32.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\acer\Empowering Technology\ePower\epm-dm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
c:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.savonkaraokeyhdistys.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [CAP3ON] C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [epm-dm] c:\acer\Empowering Technology\ePower\epm-dm.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [updateMgr] c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [Uniblue SpeedUpMyPC] C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe -s
O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - c:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.hp.com (HKLM)
O16 - DPF: {3B36B017-7E49-426B-95B0-B5CECD83C2E2} (IfolorUploader Control) - http://fika-web.ifolor.net/OrderingGener...loader_fika.cab
O16 - DPF: {A8B02DCA-7648-46D6-95A8-B84EC80CA49D} (JamShellLinkX Control) - http://kotisivukone.zoner.fi/applet/SWHTTPUploaderProj.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: HPDCS - {BA135F49-A12C-4E26-A2C4-6EA945999072} - C:\Program Files\Common Files\Hewlett-Packard\HP Device Communication Services\APP\hpdcsapp.dll
O18 - Protocol: hppfile - {C4E2084B-ED27-4893-A43D-488CA3F370E2} - C:\Program Files\Hewlett-Packard\HP Easy Printer Care\HPPCtrls.dll
O18 - Protocol: hppsam - {C4E2084B-ED27-4893-A43D-488CA3F370E2} - C:\Program Files\Hewlett-Packard\HP Easy Printer Care\HPPCtrls.dll
O18 - Protocol: hppzip - {C4E2084B-ED27-4893-A43D-488CA3F370E2} - C:\Program Files\Hewlett-Packard\HP Easy Printer Care\HPPCtrls.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
EKI
|
|
Lihamesta
Newbie
|
17. heinäkuuta 2008 @ 13:34 |
Linkki tähän viestiin
|
Haiskahtais vähän joltain uudelta tuholaiselta? Virusohjelmat ei vielä löydä sitä?
Muutaman ohjelman oon asentanut.
uTorrent
Windows Live Messenger
Winrar
Ad-Aware
Nokia PC Suite
Americas Army
Abode Reader
Malwarebytes Anti-Malware
Loput ohjelmat olivat esiasennettuna koneelle.
|
|
Mainos
|
 |
|
Member
1 tuotearvio
|
3. elokuuta 2008 @ 23:21 |
Linkki tähän viestiin
|
Olisiko se teidän tuholainen toi Adobe Reader?, itselläni oli Adobe Readerin kanssa sama ongelma ja tehtävien hallinnassa oli nimi "Adobe Updater" suoritinkäyttönä 99-100%, noh etsin netistä apua ja löysin myös ja niissä luki näin
c:\Program Files\Adobe\Reader 8.0\Reader\plug_ins ja sieltä poistatte Plugin kuvalla olevan Updater-kuvakkeen.
ja sitte toinen C:\Program Files\Common Files\Adobe\Updater5 ja poistatte Adobe Updater.exe, kuvassa on valkealla pohjalla nuolet ympyränä.
Nämä poistamalla itseltäni ainakin loppui toi suorittimen käytön korkeus.
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 3. elokuuta 2008 @ 23:23
|
|
