|
|
|
Keskustelualueet
Keskustelualueet
|
|
|
Kone ja netti hidastunut todella paljon lähiaikoina - Hjt -logi
|
|
|
hosee
Newbie
|
23. syyskuuta 2008 @ 19:52 |
Linkki tähän viestiin
|
Eli nyt lähiaikoina on hidastunut kone huomattavasti ja nettikin on ollut uskomattoman hidas. Olen yrittänyt etsiä vikaa Spybotilla ja Ad-Awarella ja kaikella mahdollisella tuloksetta. Firefox useampaan kertaan teki niin että jumitti ladatessaan jotain sivua ja ei enää vastannut. Tämän jälkeen prosessia ei saanut lopetettua edes tehtävienhallinnasta vaan joutui käynnistämään uudestaan. Myöskin pari kertaa on kone käynnistänyt itsensä uudelleen. Jos joku viksumpi osaisi jotain sanoa tästä?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:39:46, on 23.9.2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Users\Jussi\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\Explorer.exe
C:\Windows\system32\mmc.exe
C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jussi\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fi.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [DPAgnt] D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: DPWLN - C:\Windows\system32\DPWLEvHd.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
O23 - Service: Avira AntiVir Premium Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Avira AntiVir Premium MailGuard helper service (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - D:\Program Files\DigitalPersona\Bin\DpHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 9889 bytes
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 23. syyskuuta 2008 @ 20:12
|
|
Hujo
Suspended permanently
|
24. syyskuuta 2008 @ 13:40 |
Linkki tähän viestiin
|
Luo poistolista:
? Avaa HiJackThis
? Klikkaa "Configure" valintaa oikealla alhaalla
? Klikkaa "Misc Tools"
? Klikkaa boxia joka sanoo "Uninstall Manager"
? Klikkaa valintaa "Save list"
? Kopioi ja liitä kyseinen lista muistiosta ketjuusi
===============
Lataa Malwarebytes' Anti-Malware työpöydällesi.
1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja
Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish.
3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan.
5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.
7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
8. Lähetä lokin sisältö seuraavassa viestissäsi
Voiko tietsikka koskaan toimia?
|
|
hosee
Newbie
|
24. syyskuuta 2008 @ 16:03 |
Linkki tähän viestiin
|
Uninstall lista:
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acer Arcade Deluxe
Acer Crystal Eye webcam
Acer Crystal Eye webcam
Acer eAudio Management
Acer eLock Management
Acer Empowering Technology
Acer eNet Management
Acer ePower Management
Acer ePresentation Management
Acer eSettings Management
Acer GridVista
Acer Mobility Center Plug-In
Acer ScreenSaver
Acer Tour
Acrobat.com
Acrobat.com
Activation Assistant for the 2007 Microsoft Office suites
Ad-Aware
Adobe AIR
Adobe AIR
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Default Language CS3
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe Flash Player 9 ActiveX
Adobe Flash Player Plugin
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Photoshop CS3
Adobe Reader 9
Adobe Setup
Adobe Setup
Adobe Shockwave Player 11
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
Ajokorttikoulu
ALPS Touch Pad Driver
Apple Mobile Device Support
Apple Software Update
Avira AntiVir Premium
BigRigs over the road Racing
Borland Turbo C++
Call of Duty(R) 4 - Modern Warfare(TM)
CCleaner (remove only)
Creative Jukebox Driver
Creative Software AutoUpdate
Creative System Information
Creative ZEN
DigitalPersona Password Manager 2.0.1
DivX Codec
DivX Converter
DivX Player
DivX Web Player
Easy GIF Animator 4.5 Pro
Easy GIF Animator 4.61
Google Earth
Google Gears
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
GTA San Andreas
GTA2
HDAUDIO Soft Data Fax Modem with SmartCP
HijackThis 2.0.2
Hitman Blood Money
iTunes
Java(TM) 6 Update 10
Last.fm 1.5.1.29527
Launch Manager
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB929729)
Microsoft .NET Framework SDK (English) 1.1
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
MobileMe-säätöpaneeli
MSVC80_x86
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MTA:SA DM Developer Preview 2
Nokia Connectivity Cable Driver
Nokia Flashing Cable Driver
Nokia Multimedia Factory
Nokia Multimedia Factory
Nokia PC Suite
Nokia PC Suite
Nokia Software Updater
Notepad++
NTI Backup NOW! 4.7
NTI CD & DVD-Maker
NVIDIA Drivers
Opposing Force
PC Connectivity Solution
PDF Settings
PowerProducer 3.72
QuickTime
Realtek High Definition Audio Driver
RevConnect
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
Security Task Manager 1.7f
Security Update for 2007 Microsoft Office System (KB951596)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for Microsoft Office Excel 2007 (KB951546)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Word 2007 (KB950113)
SimCity? Societies
SmartFTP Client
SmartFTP Client 3.0 Setup Files (remove only)
Sony ACID Pro 6.0
Sony Media Manager 2.2
Start++
Steam
Symantec Technical Support Web Controls
System Requirements Lab
TmNationsForever
TweakNow WinSecret Professional
Uniblue RegistryBooster 2
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb956080)
Ventrilo Client
Ventrilo Server
WIDCOMM Bluetooth Software
VideoLAN VLC media player 0.8.6d
Winamp
Windows Live installer
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Liven sähköposti
Windows Media Player Firefox Plugin
Windowsin ohjainpaketti - Nokia Modem (08/03/2007 6.84.0.2)
Windowsin ohjainpaketti - Nokia Modem (10/12/2007 3.6)
WinRAR-pakkausohjelma
ZEN Media Explorer
ZENcast Organizer
ZoneAlarm
|
|
Hujo
Suspended permanently
|
24. syyskuuta 2008 @ 16:24 |
Linkki tähän viestiin
|
Voiko tietsikka koskaan toimia?
|
|
hosee
Newbie
|
24. syyskuuta 2008 @ 18:04 |
Linkki tähän viestiin
|
|
Tein kaikki nuo mitä ehdotit.
Malwarebytes loki:
Malwarebytes' Anti-Malware 1.28
Tietokantaversio: 1201
Windows 6.0.6001 Service Pack 1
24.9.2008 18:01:01
mbam-log-2008-09-24 (18-01-01).txt
Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
Tarkistetut kohteet: 213419
Kulunut aika: 1 hour(s), 42 minute(s), 9 second(s)
Saastuneita muistiprosesseja: 0
Saastuneita muistimoduuleja: 0
Saastuneita rekisteriavaimia: 0
Saastuneita rekisteriarvoja: 0
Saastuneita rekisterikohteita: 0
Saastuneita hakemistoja: 2
Saastuneita tiedostoja: 1
Saastuneita muistiprosesseja:
(Haitallisia kohteita ei löydetty)
Saastuneita muistimoduuleja:
(Haitallisia kohteita ei löydetty)
Saastuneita rekisteriavaimia:
(Haitallisia kohteita ei löydetty)
Saastuneita rekisteriarvoja:
(Haitallisia kohteita ei löydetty)
Saastuneita rekisterikohteita:
(Haitallisia kohteita ei löydetty)
Saastuneita hakemistoja:
C:\Program Files\RADIO_USA (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Live_TV (Adware.Agent) -> Quarantined and deleted successfully.
Saastuneita tiedostoja:
C:\Program Files\RADIO_USA\INSTALL.LOG (Adware.Agent) -> Quarantined and deleted successfully.
|
|
Hujo
Suspended permanently
|
24. syyskuuta 2008 @ 19:22 |
Linkki tähän viestiin
|
1.Lataa Combofix.exe työpöydällesi yhdestä linkistä:
Combofix1
Combofix2
2. Tuplaklikkaa Combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
Voiko tietsikka koskaan toimia?
|
|
hosee
Newbie
|
24. syyskuuta 2008 @ 22:42 |
Linkki tähän viestiin
|
ComboFix 08-09-24.01 - Jussi 2008-09-24 22:17:22.1 - NTFSx86
Microsoft® Windows Vista? Home Premium 6.0.6001.1.1252.1.1035.18.1021 [GMT 3:00]
Sijainti: C:\Users\Jussi\Documents\Lataukset\ComboFix.exe
* Uusi palautuspiste luotu
.
(((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\DRV\TVtuner\Liteon\Resources\_desktop.ini
C:\Windows\winhelp.ini
.
((((( Tiedostot, jotka on luotu seuraavalla aikavolillo: 2008-08-24 to 2008-09-24 )))))))))))))))))
.
2008-09-24 22:13 . 2008-09-24 22:14 <KANSIO> d-------- C:\32788R22FWJFW
2008-09-24 22:04 . 2008-09-24 22:12 <KANSIO> d-------- C:\Windows\System32\drivers\Avg
2008-09-24 22:04 . 2008-09-24 22:04 <KANSIO> d-------- C:\ProgramData\avg8
2008-09-24 22:04 . 2008-09-24 22:04 <KANSIO> d-------- C:\Program Files\AVG
2008-09-24 22:04 . 2008-09-24 22:04 97,928 --a------ C:\Windows\System32\drivers\avgldx86.sys
2008-09-24 22:04 . 2008-09-24 22:04 10,520 --a------ C:\Windows\System32\avgrsstx.dll
2008-09-24 21:23 . 2008-09-24 21:23 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Comodo
2008-09-24 21:23 . 2008-09-24 21:30 <KANSIO> d-------- C:\ProgramData\comodo
2008-09-24 21:23 . 2008-09-24 21:23 <KANSIO> d-------- C:\Program Files\COMODO
2008-09-24 21:23 . 2008-09-24 21:23 143,104 --a------ C:\Windows\System32\guard32.dll
2008-09-24 21:23 . 2008-09-24 21:23 85,008 --a------ C:\Windows\System32\drivers\cmdguard.sys
2008-09-24 21:23 . 2008-09-24 21:23 25,104 --a------ C:\Windows\System32\drivers\cmdhlp.sys
2008-09-24 20:26 . 2008-09-24 20:26 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\SystemRequirementsLab
2008-09-24 16:28 . 2008-09-24 16:28 <KANSIO> d-------- C:\ProgramData\NortonInstaller
2008-09-24 16:04 . 2008-09-24 16:04 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Malwarebytes
2008-09-24 16:04 . 2008-09-24 16:04 <KANSIO> d-------- C:\ProgramData\Malwarebytes
2008-09-24 16:04 . 2008-09-24 16:06 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-09-24 16:04 . 2008-09-10 00:04 38,528 --a------ C:\Windows\System32\drivers\mbamswissarmy.sys
2008-09-24 16:04 . 2008-09-10 00:03 17,200 --a------ C:\Windows\System32\drivers\mbam.sys
2008-09-21 16:15 . 2008-09-21 16:15 <KANSIO> d-------- C:\ProgramData\CheckPoint
2008-09-21 16:15 . 2008-03-03 15:06 279,440 --a------ C:\Windows\System32\drivers\~GLH0014.TMP
2008-09-21 16:13 . 2008-09-24 21:03 <KANSIO> d-------- C:\Windows\Internet Logs
2008-09-21 15:06 . 2008-09-24 19:28 <KANSIO> d-------- C:\ProgramData\SecTaskMan
2008-09-21 14:58 . 2008-09-21 14:58 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Locktime
2008-09-21 14:53 . 2008-09-21 14:53 <KANSIO> d-------- C:\ProgramData\Locktime
2008-09-21 01:03 . 2008-09-21 01:11 <KANSIO> d-------- C:\Users\Jussi\AppData\Roaming\Notepad++
2008-09-21 01:03 . 2008-09-21 01:07 <KANSIO> d-------- C:\Program Files\Notepad++
2008-09-17 00:07 . 2008-09-17 00:07 <KANSIO> d-------- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-09-17 00:07 . 2008-09-22 20:56 <KANSIO> d-------- C:\Program Files\iPod
2008-09-17 00:07 . 2008-04-17 13:12 107,368 --a------ C:\Windows\System32\GEARAspi.dll
2008-09-17 00:07 . 2008-04-17 13:12 15,464 --a------ C:\Windows\System32\drivers\GEARAspiWDM.sys
2008-09-17 00:05 . 2008-09-17 00:06 <KANSIO> d-------- C:\Program Files\QuickTime
2008-09-15 21:15 . 2008-09-15 21:15 0 --ah----- C:\Windows\System32\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
2008-09-10 10:14 . 2008-09-10 10:14 <KANSIO> d-------- C:\Users\Public\Uusi kansio
2008-09-10 10:12 . 2008-09-10 10:12 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2008-09-10 08:37 . 2008-07-31 04:13 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-09-10 08:37 . 2008-08-02 04:01 625,152 --a------ C:\Windows\System32\drivers\dxgkrnl.sys
2008-09-10 08:37 . 2008-06-26 06:29 565,248 --a------ C:\Windows\System32\emdmgmt.dll
2008-09-10 08:37 . 2008-06-26 06:29 303,616 --a------ C:\Windows\System32\wmpeffects.dll
2008-09-10 08:37 . 2008-05-08 22:21 211,968 --a------ C:\Windows\System32\drivers\mrxsmb10.sys
2008-09-10 08:37 . 2008-05-20 05:07 148,480 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-09-10 08:37 . 2008-06-26 06:29 45,056 --a------ C:\Windows\System32\dataclen.dll
2008-09-10 08:37 . 2008-08-02 06:26 36,864 --a------ C:\Windows\System32\cdd.dll
2008-09-10 08:37 . 2008-07-31 06:32 28,160 --a------ C:\Windows\System32\Apphlpdm.dll
2008-09-06 23:04 . 2008-09-06 23:04 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-09-06 15:09 . 2008-09-06 15:09 90,112 --a------ C:\Windows\System32\QuickTimeVR.qtx
2008-09-06 15:09 . 2008-09-06 15:09 57,344 --a------ C:\Windows\System32\QuickTime.qts
2008-09-05 10:08 . 2008-04-26 11:25 3,600,952 --a------ C:\Windows\System32\ntkrnlpa.exe
2008-09-04 21:54 . 2008-09-24 21:15 <KANSIO> d-------- C:\ProgramData\Avira
2008-08-29 10:18 . 2008-08-29 10:18 87,336 --a------ C:\Windows\System32\dns-sd.exe
2008-08-29 09:53 . 2008-08-29 09:53 61,440 --a------ C:\Windows\System32\dnssd.dll
2008-08-28 11:40 . 2008-07-19 08:09 1,811,656 --a------ C:\Windows\System32\wuaueng.dll
2008-08-28 11:40 . 2008-07-19 06:44 1,524,736 --a------ C:\Windows\System32\wucltux.dll
2008-08-28 11:40 . 2008-07-19 08:10 53,448 --a------ C:\Windows\System32\wuauclt.exe
2008-08-28 11:40 . 2008-07-19 08:10 45,768 --a------ C:\Windows\System32\wups2.dll
2008-08-28 11:39 . 2008-07-19 08:09 563,912 --a------ C:\Windows\System32\wuapi.dll
2008-08-28 11:39 . 2008-07-18 22:08 163,904 --a------ C:\Windows\System32\wuwebv.dll
2008-08-28 11:39 . 2008-07-19 06:44 83,456 --a------ C:\Windows\System32\wudriver.dll
2008-08-28 11:39 . 2008-07-19 08:10 36,552 --a------ C:\Windows\System32\wups.dll
2008-08-28 11:39 . 2008-07-18 20:44 31,232 --a------ C:\Windows\System32\wuapp.exe
.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-24 18:03 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-24 17:39 --------- d-----w C:\Program Files\Google
2008-09-24 17:23 --------- d-----w C:\Program Files\Windows Live
2008-09-24 17:18 --------- d-----w C:\Program Files\NewTech Infosystems
2008-09-24 17:18 --------- d-----w C:\Program Files\Common Files\NewTech Infosystems
2008-09-24 17:08 --------- d-----w C:\ProgramData\Microsoft Help
2008-09-24 16:27 --------- d-----w C:\Program Files\Nokia
2008-09-24 16:27 --------- d-----w C:\Program Files\Common Files\Nokia
2008-09-24 16:25 --------- d-----w C:\Program Files\MTA San Andreas
2008-09-24 16:19 --------- d-----w C:\Program Files\Microsoft.NET
2008-09-24 15:17 167,685 ----a-w C:\Users\Jussi\AppData\Roaming\nvModes.dat
2008-09-24 13:27 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-09-23 19:54 --------- d-----w C:\Program Files\Steam
2008-09-23 14:42 46,811,442 ----a-w C:\Windows\Internet Logs\vsmon_on_demand_2008_09_23_16_54_46_full.dmp.zip
2008-09-23 14:41 46,802,521 ----a-w C:\Windows\Internet Logs\vsmon_on_demand_2008_09_23_16_21_12_full.dmp.zip
2008-09-23 14:41 46,798,853 ----a-w C:\Windows\Internet Logs\vsmon_on_demand_2008_09_23_16_19_03_full.dmp.zip
2008-09-23 14:29 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
2008-09-23 12:57 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-09-23 12:56 --------- d-----w C:\ProgramData\Lavasoft
2008-09-23 11:42 --------- d-----w C:\Users\Jussi\AppData\Roaming\uTorrent
2008-09-23 11:40 --------- d-----w C:\Program Files\Bonjour
2008-09-17 12:31 --------- d-----w C:\Program Files\Common Files\Steam
2008-09-16 21:07 --------- d-----w C:\Program Files\iTunes
2008-09-16 21:05 --------- d-----w C:\Program Files\Common Files\Apple
2008-09-15 22:33 --------- d-----w C:\ProgramData\Installations
2008-09-15 18:17 --------- d-----w C:\Users\Jussi\AppData\Roaming\PC Suite
2008-09-13 08:03 --------- d-----w C:\Program Files\Microsoft Works
2008-09-10 06:01 --------- d-----w C:\Program Files\RevConnect
2008-09-04 23:51 174 --sha-w C:\Program Files\desktop.ini
2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Sidebar
2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Mail
2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Defender
2008-09-04 23:40 --------- d-----w C:\Program Files\Windows Calendar
2008-09-04 23:19 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-09-04 23:19 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-08-19 20:44 --------- d-----w C:\Program Files\Apple Software Update
2008-08-19 18:46 --------- d-----w C:\Program Files\Common Files\Adobe AIR
2008-08-19 18:45 --------- d-----w C:\Program Files\Common Files\Adobe
2008-08-19 18:32 410,976 ----a-w C:\Windows\System32\deploytk.dll
2008-08-19 18:32 --------- d-----w C:\Program Files\Java
2008-08-19 17:14 --------- d-----w C:\Program Files\Creative
2008-08-19 16:56 --------- d-----w C:\Users\Jussi\AppData\Roaming\Apple Computer
2008-08-18 03:15 921,600 ----a-w C:\Windows\system32\drivers\athr.sys
2008-07-31 03:32 460,288 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-07-31 03:32 2,154,496 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-07-31 03:32 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-07-16 01:32 2,048 ----a-w C:\Windows\System32\tzres.dll
2008-06-27 04:15 827,392 ----a-w C:\Windows\System32\wininet.dll
2008-06-26 03:29 801,280 ----a-w C:\Windows\System32\NaturalLanguage6.dll
2008-06-26 01:45 2,644,480 ----a-w C:\Windows\System32\NlsLexicons0009.dll
2008-06-26 01:45 12,240,896 ----a-w C:\Windows\System32\NlsLexicons0007.dll
2008-04-14 11:45 22,328 ----a-w C:\Users\Jussi\AppData\Roaming\PnkBstrK.sys
2008-02-25 03:10 1,192 ----a-w C:\Users\Jussi\AppData\Roaming\wklnhst.dat
.
(((((((((((((((((((((((((((((( Rekisterin koynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Huom* Tyhjio arvoja ja laillisia oletusarvoja ei noyteto
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 125952]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"Google Update"="C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe" [2008-09-23 133104]
"Start++"="D:\Program Files\Brandon Paddock\Start++\Start++.exe" [2008-04-26 570880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PlayMovie"="C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2007-05-24 206952]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2007-06-06 159744]
"itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe" [2006-11-21 813912]
"DPAgnt"="D:\Program Files\DigitalPersona\Bin\DPAgnt.exe" [2006-10-09 807440]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-06-06 86016]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-06-06 81920]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
"COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-09-24 1655552]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-09-24 1235736]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-18 C:\Windows\RtHDVCpl.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 1232896]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DPWLN ]
2006-10-09 17:27 99856 C:\Windows\System32\DPWLEvHd.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\Windows\system32\guard32.dll,avgrsstx.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-06-12 02:38 34672 C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncU.exe]
--a------ 2007-07-17 11:03 868352 C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eAudio]
--a------ 2007-06-11 14:54 1286144 C:\Acer\Empowering Technology\eAudio\eAudio.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-09-10 17:40 289576 C:\Program Files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
--a------ 2008-04-16 12:53 1079808 D:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSet]
--a------ 2007-04-24 12:49 45056 C:\Windows\PLFSet.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-09-06 15:09 413696 C:\Program Files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WarReg_PopUp]
--a------ 2006-11-05 22:48 57344 C:\Acer\WR_PopUp\WarReg_PopUp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2008-01-19 10:38 1008184 C:\Program Files\Windows Defender\MSASCui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
--a------ 2007-05-18 10:24 4468736 C:\Windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2906536669-2531276552-139435704-1000]
"EnableNotificationsRef"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{67C1EF2A-B860-4456-BCD1-B25F1B5C5455}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{5729045D-9D55-4D83-A466-8D9154487C09}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{7FCDF7D5-2DF9-4DC7-8DF9-04BBE324841E}"= C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
"{3E33E619-5F74-4EE6-982F-F301194ED111}"= C:\Program Files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
"{F038AAA7-F9CE-43AA-9D15-E45EECA2CABF}"= C:\Program Files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
"{2329B720-E8B2-4A1C-9043-BC9DE8902584}"= C:\Program Files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
"{2E137681-23AE-452F-8479-8CE0F3226F08}"= C:\Program Files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
"{3B4F88F6-67F1-4BA1-8E19-9F7DEF3D3218}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie
"{A875E6F7-9726-4D84-993C-B3F536589AF0}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program
"{B0FB27CA-AC40-488C-B737-9CDBD5407F4D}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{34A9F03F-1032-432E-8D35-6C78D2723D78}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"{5352D189-3566-4104-8579-855781CE14D6}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"TCP Query User{FB0B07FA-694C-413F-9E24-47D3EFFBE40B}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= UDP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
"UDP Query User{1158BC8F-2B87-4B0F-8403-636D07461638}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= TCP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
"TCP Query User{5EB6B667-8CB5-4F74-9495-96E332D35CC0}C:\\program files\\revconnect\\dcplusplus.exe"= UDP:C:\program files\revconnect\dcplusplus.exe:DC++
"UDP Query User{E8E20BAC-82EF-468D-8563-A318FE1BFF5D}C:\\program files\\revconnect\\dcplusplus.exe"= TCP:C:\program files\revconnect\dcplusplus.exe:DC++
"TCP Query User{CDB20F80-F7A8-4CC4-8EE7-BA2BF0232CA9}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{22A13D84-E7D5-4ED5-8F88-75504F2C8590}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{FBD7DA10-BD9C-45D0-9302-89852FBAD9A4}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= UDP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
"UDP Query User{3810522B-3449-4DF9-BF96-51405D258BB2}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= TCP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
"TCP Query User{6A10E53F-852F-4960-BDAD-DC00395DB241}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= UDP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
"UDP Query User{4423E493-7ECB-4229-B1A8-041E44F766FE}C:\\program files\\steam\\steamapps\\jiah\\counter-strike\\hl.exe"= TCP:C:\program files\steam\steamapps\jiah\counter-strike\hl.exe:Half-Life Launcher
"TCP Query User{3B8A05C1-C926-41D3-89F9-0E90E4D2754C}C:\\program files\\revconnect\\dcplusplus.exe"= UDP:C:\program files\revconnect\dcplusplus.exe:DC++
"UDP Query User{41581D19-AA6F-4767-B634-A219702242F5}C:\\program files\\revconnect\\dcplusplus.exe"= TCP:C:\program files\revconnect\dcplusplus.exe:DC++
"TCP Query User{A81A442F-1293-4273-8FC3-3239126B0B46}E:\\d-link.exe"= UDP:E:\d-link.exe:Setup Wizard Template
"UDP Query User{566FD9F0-8282-43FC-8F65-4C6D8DB43B9A}E:\\d-link.exe"= TCP:E:\d-link.exe:Setup Wizard Template
"{CEA1C911-8AD5-47B5-BB3C-2EE9A7027242}"= UDP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA
"{B34DF395-FB46-496C-8006-39E21AACBF69}"= TCP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA
"{50167056-A628-4277-A088-5F057C46C8C5}"= UDP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB
"{D96AFD71-2A02-403F-B561-8886C2524A00}"= TCP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB
"{64E77DC1-09B4-4E9F-A417-E0648FB7BD71}"= UDP:C:\Program Files\SmartFTP Client\SmartFTP.exe:SmartFTP Client
"{2B7EE271-E641-42E6-9D68-258D68CCF04F}"= TCP:C:\Program Files\SmartFTP Client\SmartFTP.exe:SmartFTP Client
"TCP Query User{BCC0B0F5-DD70-4119-A923-76A17FFBD521}D:\\program files\\tmnationsforever\\tmforever.exe"= UDP:D:\program files\tmnationsforever\tmforever.exe:TmForever
"UDP Query User{4DF06FD1-408E-48F7-8103-1228F619A957}D:\\program files\\tmnationsforever\\tmforever.exe"= TCP:D:\program files\tmnationsforever\tmforever.exe:TmForever
"TCP Query User{00B598AD-6FC9-4B7D-8D4F-98E715C96EE2}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= UDP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
"UDP Query User{9D9CEC49-AFA3-4CB5-B329-8833562E0DE1}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= TCP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
"TCP Query User{04B1FC3E-9219-4A0D-8C6F-539C9D82F33D}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= UDP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
"UDP Query User{43E8F800-2754-43DE-894A-CBCCC68EB2E8}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= TCP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
"{6DAD887B-BBD0-4794-B2BC-754F736BCC3D}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{A7ED34C5-0518-431D-A81C-B41221ADE0DE}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{E65FCBBB-E4B1-4F56-AA7F-DB97797E9C0E}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{C1857E63-761F-4285-806E-5328D2A132E3}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{C8BC203D-4FE6-4F82-B4D0-6D7F6CE24E9A}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"TCP Query User{56E40373-A1FB-43AB-9228-2A952EF7E3C5}C:\\users\\jussi\\desktop\\myspacemp3gopher.exe"= UDP:C:\users\jussi\desktop\myspacemp3gopher.exe:myspacemp3gopher.exe
"UDP Query User{ED7A16A6-4807-437B-9896-6A515D0442A3}C:\\users\\jussi\\desktop\\myspacemp3gopher.exe"= TCP:C:\users\jussi\desktop\myspacemp3gopher.exe:myspacemp3gopher.exe
"TCP Query User{590A25C5-469B-4BEE-9621-CCA92D53BFB4}C:\\program files\\itunes\\itunes.exe"= UDP:C:\program files\itunes\itunes.exe:iTunes
"UDP Query User{732B5958-AB13-42F8-B148-278704FE95A0}C:\\program files\\itunes\\itunes.exe"= TCP:C:\program files\itunes\itunes.exe:iTunes
"{A5FF3AD1-4512-4C3C-950B-655D955A52A4}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{B5516F02-9C6A-4143-9036-088F16EAAC27}C:\\program files\\steam\\steamapps\\jiah\\half-life\\hl.exe"= UDP:C:\program files\steam\steamapps\jiah\half-life\hl.exe:Half-Life Launcher
"UDP Query User{E4BAE536-04C8-4E73-949E-01751F8949A7}C:\\program files\\steam\\steamapps\\jiah\\half-life\\hl.exe"= TCP:C:\program files\steam\steamapps\jiah\half-life\hl.exe:Half-Life Launcher
"{BEB66574-406B-4199-9F6C-A7CC690E64F3}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{14B82444-287A-47FB-B9B2-86689D12DDA3}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{50502A7C-8599-4CE9-BAE7-B33E1012B027}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{630D9404-4A2D-41B4-BA78-DDFC4CEAF74D}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{E79C3BCD-D89C-4649-8B50-3D2E699088FB}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-09-24 97928]
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys [2008-09-24 85008]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys [2008-09-24 25104]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 17:51 13560]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-09-24 231704]
R3 dpK0Bx01;Fingerprint Reader Filter Driver;C:\Windows\system32\DRIVERS\dpK0Bx01.sys [2006-09-16 35584]
R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-05-16 32256]
R3 usbdpfp;Fingerprint Reader Class Driver;C:\Windows\system32\DRIVERS\usbdpfp.sys [2006-09-16 47360]
S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-09-16 92656]
S3 UMPass;Microsoft UMPass-ohjain;C:\Windows\system32\DRIVERS\umpass.sys [2008-01-19 7680]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71567a02-a33f-11dc-a5de-806e6f6e6963}]
\shell\AutoRun\command - E:\asenna.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2f3f1b0-a6a2-11dc-bf8c-001b384f0933}]
\shell\AutoRun\command - F:\autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3328a34-0a0e-11dd-8ecc-001b384f0933}]
\shell\AutoRun\command - F:\setup\rsrc\Autorun.exe
\shell\dinstall\command - F:\Directx\dxsetup.exe
.
'Ajoitetut tehtovot'-kansion sisoltö
.
- - - - POISTETUT JÄMÄRIVIT - - - -
HKU-Default-Run-Acer Tour Reminder - C:\Acer\AcerTour\Reminder.exe
MSConfigStartUp-AppleSyncNotifier - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
MSConfigStartUp-swg - C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
.
------- Toydentovo tarkistus -------
.
FireFox -: Profile - C:\Users\Jussi\AppData\Roaming\Mozilla\Firefox\Profiles\fcmnel4n.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://google.fi
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
FF -: plugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF -: plugin - D:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
FF -: plugin - D:\Program Files\DivX\DivX Web Player\npdivx32.dll
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 22:30:27
Windows 6.0.6001 Service Pack 1 NTFS
tarkistaa piilotettuja prosesseja ...
tarkistaa piilotettuja koynnistysarvoja ...
tarkistaa piilotettuja tiedostoja ...
tarkistus on valmis
piilotetut tiedostot: 0
**************************************************************************
.
------------------------ Muut prosessit ------------------------
.
C:\Windows\System32\audiodg.exe
D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
D:\Program Files\DigitalPersona\Bin\DpHost.exe
C:\Program Files\Common Files\microsoft shared\VS7Debug\mdm.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Windows\System32\conime.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\ApntEx.exe
C:\Users\Jussi\AppData\Local\Temp\RtkBtMnt.exe
.
**************************************************************************
.
Valmistumisajankohta: 2008-09-24 22:37:34 - kone koynnistettiin uudelleen
ComboFix-quarantined-files.txt 2008-09-24 19:37:13
Ennen ajoa: J?rjestelm? ei l?yd? sanomaa numerolle 0x2379 ohjelman Application sanomatiedostossa.
Ajon jälkeen: 11,761,041,408 tavua vapaana
330 --- E O F --- 2008-09-18 18:36:04
|
|
Hujo
Suspended permanently
|
24. syyskuuta 2008 @ 22:53 |
Linkki tähän viestiin
|
|
scannaa uusi hjt:n loki
==========
mites kone toimii
Voiko tietsikka koskaan toimia?
|
|
hosee
Newbie
|
24. syyskuuta 2008 @ 23:20 |
Linkki tähän viestiin
|
Tuli vähän putsailtua ja poistin muutaman turhan ohjelmankin. :)
Kone on nyt huomattavasti nopeampi ja tuntuu kaikin puolin toimivan hyvin.
Tuossa uusi HjT -loki:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:18:12, on 24.9.2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\conime.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Users\Jussi\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\Explorer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\Explorer.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.intl.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [DPAgnt] D:\Program Files\DigitalPersona\Bin\DPAgnt.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jussi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Start++] "D:\Program Files\Brandon Paddock\Start++\Start++.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll,avgrsstx.dll
O20 - Winlogon Notify: DPWLN - C:\Windows\system32\DPWLEvHd.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - D:\Program Files\DigitalPersona\Bin\DpHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
--
End of file - 7682 bytes
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 24. syyskuuta 2008 @ 23:23
|
|
Mainos
|
|
|
|
Hujo
Suspended permanently
|
24. syyskuuta 2008 @ 23:27 |
Linkki tähän viestiin
|
|
scannaa hjt:llä merkkaa paina Fix checked
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
Voiko tietsikka koskaan toimia?
|
|
