Kone jumittuu.Hiiri ei liiku,windowsin kello pysähtyy,mistään ei tapahdu
mitään.Ei auta kuin pakkosammutus.Olen ajanut AVG:n spywaren,vundon,SDfixin,cureit:n,levyn tarkastuksen,eheyttänyt,CCleanerin.Voisiko joku viisaampi katsoa löytyiskö HjT-lokissa mitään mistä voisi johtua ja mitä on HjT-lokissa olevat 018-protocollat.
C:\Documents and Settings\Omistaja\Työpöytä\VIRUS JA VAKOILU\HijackThis_v1.99.1.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {0EAEF1C5-DD76-43B1-BA5A-4F8CF45AC1F3} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {2A685C07-6126-4A75-AFDB-A017F236D968} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {6AFFA35D-0BEE-41E7-8BAF-740900FCA8F2} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared...01/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1176661253468
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: bw+0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {E8B050D1-01F8-4F88-B085-0EBBCF2FC171} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: Avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (file missing)
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

Tämmöisen lokin antoi
"Omistaja" - 07-04-29 17:20:24 Service Pack 2
ComboFix 07-04-25.4V - Running from: "C:\Documents and Settings\Omistaja\Ty?p?yt?\"


((((((((((((((((((((((((((((((( Files Created from 2007-03-28 to 2007-04-29 ))))))))))))))))))))))))))))))))))


2007-04-29 12:48 <KANSIO> d-------- C:\VundoFix Backups
2007-04-28 16:46 <KANSIO> d-------- C:\Program Files\MSXML 6.0
2007-04-28 16:21 <KANSIO> d-------- C:\Program Files\MSXML 4.0
2007-04-28 12:46 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2007-04-28 12:46 53,760 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-04-28 12:46 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2007-04-28 12:46 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2007-04-28 12:46 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2007-04-28 12:46 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2007-04-28 12:46 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2007-04-28 12:46 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2007-04-28 12:42 <KANSIO> d-------- C:\SXS
2007-04-28 12:41 86,016 --a------ C:\WINDOWS\system32\lvcoinst.dll
2007-04-28 12:41 57,344 --a------ C:\WINDOWS\system32\LVComC.dll
2007-04-28 12:41 5,915 --a------ C:\WINDOWS\system32\drivers\lv302af.sys
2007-04-28 12:41 360,448 --a------ C:\WINDOWS\system32\LVUI2RC.dll
2007-04-28 12:41 271,360 --a------ C:\WINDOWS\system32\drivers\LV302AV.SYS
2007-04-28 12:41 172,032 --a------ C:\WINDOWS\system32\lvcodec2.dll
2007-04-28 12:41 135,214 --a------ C:\WINDOWS\system32\LVComS.exe
2007-04-28 12:41 122,880 --a------ C:\WINDOWS\system32\LVUI2.dll
2007-04-28 12:41 12,080 --a------ C:\WINDOWS\system32\drivers\LVUSBSta.sys
2007-04-28 12:41 <KANSIO> d-------- C:\Program Files\Common Files\Labtec
2007-04-28 12:33 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2007-04-27 10:26 <KANSIO> d-------- C:\Program Files\MSN Messenger
2007-04-25 10:29 <KANSIO> d-------- C:\WINDOWS\system32\ActiveScan
2007-04-25 08:27 <KANSIO> d-------- C:\DOCUME~1\Minna\APPLIC~1\Logitech
2007-04-24 12:22 <KANSIO> d-------- C:\Program Files\CCleaner
2007-04-22 19:41 <KANSIO> d-------- C:\Picasa2
2007-04-22 19:20 <KANSIO> d-------- C:\Program Files\TypeFaster
2007-04-22 11:31 466,944 --a------ C:\WINDOWS\system32\CapabilityTable.exe
2007-04-22 11:31 208,896 --------- C:\WINDOWS\system32\nvuide.exe
2007-04-22 11:30 208,896 --a------ C:\WINDOWS\system32\nvusmb.exe
2007-04-22 10:22 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS
2007-04-21 19:05 <KANSIO> d-------- C:\CloneDVDTemp
2007-04-20 18:18 <KANSIO> d-------- C:\WINDOWS\.jagex_cache_32
2007-04-20 16:49 <KANSIO> d-------- C:\Program Files\IObit
2007-04-20 16:10 49,152 --a------ C:\WINDOWS\system32\ChCfg.exe
2007-04-20 16:09 315,392 --a------ C:\WINDOWS\alcupd.exe
2007-04-20 16:09 217,088 --a------ C:\WINDOWS\Alcrmv.exe
2007-04-20 16:09 <KANSIO> d-------- C:\Program Files\Realtek AC97
2007-04-20 13:09 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Barbie Fashion Show
2007-04-20 12:24 <KANSIO> d-------- C:\DOCUME~1\Niina\APPLIC~1\InstallShield
2007-04-20 12:12 <KANSIO> d-------- C:\DOCUME~1\Omistaja\Contacts
2007-04-19 20:49 <KANSIO> d-------- C:\JUNGLE_BOOK_2
2007-04-19 14:12 581 --a------ C:\WINDOWS\eReg.dat
2007-04-19 14:02 <KANSIO> d-------- C:\Program Files\Maxis
2007-04-19 13:55 <KANSIO> d-------- C:\Program Files\THQ
2007-04-19 13:54 86,016 --a------ C:\WINDOWS\unvise32qt.exe
2007-04-19 13:53 <KANSIO> d-------- C:\WINDOWS\system32\QuickTime
2007-04-19 13:53 <KANSIO> d-------- C:\Program Files\QuickTime
2007-04-19 13:53 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
2007-04-19 13:43 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Vivendi Universal Games
2007-04-19 13:40 <KANSIO> d-------- C:\Program Files\Common Files\Vivendi Universal Games
2007-04-19 13:40 <KANSIO> d-------- C:\Program Files\Barbie(TM)
2007-04-19 13:35 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-04-19 13:31 <KANSIO> d-------- C:\Program Files\Konami
2007-04-19 10:46 <KANSIO> d-------- C:\WINDOWS\system32\NtmsData
2007-04-19 09:17 <KANSIO> d-------- C:\DOCUME~1\Omistaja\DoctorWeb
2007-04-18 20:22 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
2007-04-18 20:16 <KANSIO> d-------- C:\Program Files\NVIDIA Corporation
2007-04-18 19:45 <KANSIO> d-------- C:\WINDOWS\Performance
2007-04-18 19:44 <KANSIO> d-------- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
2007-04-18 19:44 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Corporation
2007-04-18 17:03 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2007-04-18 17:03 262,144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2007-04-18 17:02 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2007-04-18 17:02 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2007-04-18 17:02 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2007-04-18 17:02 <KANSIO> d-------- C:\WINDOWS\system32\Futuremark
2007-04-18 17:01 <KANSIO> d-------- C:\Program Files\Futuremark
2007-04-18 16:47 <KANSIO> d-------- C:\Program Files\Lavalys
2007-04-18 15:43 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\EPSON
2007-04-18 15:39 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-04-18 07:24 <KANSIO> d-------- C:\DOCUME~1\Niina\Contacts
2007-04-17 15:59 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-04-17 15:59 <KANSIO> d-------- C:\Program Files\MSI
2007-04-17 07:25 <KANSIO> d-------- C:\DOCUME~1\Niina\APPLIC~1\Logitech
2007-04-16 21:17 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\SiteAdvisor
2007-04-16 21:17 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
2007-04-16 21:17 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
2007-04-16 20:48 <KANSIO> d-------- C:\RadarSync Downloads
2007-04-16 20:48 <KANSIO> d-------- C:\Program Files\RadarSync
2007-04-16 20:34 <KANSIO> d-------- C:\Program Files\DVD Shrink
2007-04-16 20:34 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
2007-04-16 20:21 <KANSIO> d-------- C:\Program Files\Opera
2007-04-16 20:21 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\Opera
2007-04-16 20:12 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\Template
2007-04-16 20:01 <KANSIO> d-------- C:\WINDOWS\NV4681584.TMP
2007-04-16 19:51 <KANSIO> d-------- C:\NVIDIA
2007-04-16 19:48 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\Logitech
2007-04-16 19:12 13,568 --a------ C:\WINDOWS\system32\drivers\L8042Kbd.SYS
2007-04-16 19:12 118,784 -r------- C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
2007-04-16 19:11 94,208 --------- C:\WINDOWS\KHALMNPR.Exe
2007-04-16 19:11 71,680 --a------ C:\WINDOWS\system32\drivers\LMouKE.Sys
2007-04-16 19:11 56,064 --a------ C:\WINDOWS\system32\drivers\L8042MOU.SYS
2007-04-16 19:11 53,248 --a------ C:\WINDOWS\system32\KemXML.dll
2007-04-16 19:11 3,712 --a------ C:\WINDOWS\system32\drivers\LBeepKE.sys
2007-04-16 19:11 27,264 --a------ C:\WINDOWS\system32\drivers\LHidKE.Sys
2007-04-16 19:11 155,648 --a------ C:\WINDOWS\system32\kemutb.dll
2007-04-16 19:11 126,976 --a------ C:\WINDOWS\system32\KemUtil.dll
2007-04-16 19:11 110,592 --a------ C:\WINDOWS\system32\KemWnd.dll
2007-04-16 19:11 <KANSIO> d-------- C:\Program Files\Logitech
2007-04-16 19:11 <KANSIO> d-------- C:\Program Files\Common Files\Logitech
2007-04-16 19:09 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-04-16 19:09 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-04-16 19:08 <KANSIO> d-------- C:\Program Files\Picasa2
2007-04-16 19:08 <KANSIO> d-------- C:\Program Files\Google
2007-04-16 18:41 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\Lavasoft
2007-04-16 18:37 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-04-16 18:35 <KANSIO> d-------- C:\Program Files\Lavasoft
2007-04-16 18:34 <KANSIO> d-------- C:\Program Files\CPU-Z
2007-04-16 18:18 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL
2007-04-16 18:17 79,679 --a------ C:\WINDOWS\system32\E_FLMADE.DLL
2007-04-16 18:17 64,000 --a------ C:\WINDOWS\system32\E_FBCBADE.DLL
2007-04-16 18:17 34,304 --a------ C:\WINDOWS\system32\E_FBCHADE.DLL
2007-04-16 18:09 46,080 --a------ C:\WINDOWS\system32\escimgd.dll
2007-04-16 18:09 29,696 --a------ C:\WINDOWS\system32\escwiad.dll
2007-04-16 18:09 22,016 --a------ C:\WINDOWS\system32\esccmd.dll
2007-04-16 18:08 178,408 --a------ C:\WINDOWS\system32\muweb.dll
2007-04-16 18:08 127,208 --a------ C:\WINDOWS\system32\mucltui.dll
2007-04-16 17:42 89,430 --a------ C:\WINDOWS\system32\EPPICPrinterDB.dat
2007-04-16 17:42 65,536 --a------ C:\WINDOWS\system32\EPPicMgr.dll
2007-04-16 17:42 479,232 --a------ C:\WINDOWS\system32\PICSDK.dll
2007-04-16 17:42 4,943 --a------ C:\WINDOWS\system32\EPPICPattern6.dat
2007-04-16 17:42 26,154 --a------ C:\WINDOWS\system32\EPPICPattern1.dat
2007-04-16 17:42 24,903 --a------ C:\WINDOWS\system32\EPPICPattern3.dat
2007-04-16 17:42 21,390 --a------ C:\WINDOWS\system32\EPPICPattern5.dat
2007-04-16 17:42 20,148 --a------ C:\WINDOWS\system32\EPPICPattern2.dat
2007-04-16 17:42 114,688 --a------ C:\WINDOWS\system32\EpPicPrt.dll
2007-04-16 17:42 11,811 --a------ C:\WINDOWS\system32\EPPICPattern4.dat
2007-04-16 17:42 1,146 --a------ C:\WINDOWS\system32\EPPICPresetData_DU.dat
2007-04-16 17:42 1,139 --a------ C:\WINDOWS\system32\EPPICPresetData_PT.dat
2007-04-16 17:42 1,139 --a------ C:\WINDOWS\system32\EPPICPresetData_BP.dat
2007-04-16 17:42 1,136 --a------ C:\WINDOWS\system32\EPPICPresetData_ES.dat
2007-04-16 17:42 1,129 --a------ C:\WINDOWS\system32\EPPICPresetData_FR.dat
2007-04-16 17:42 1,129 --a------ C:\WINDOWS\system32\EPPICPresetData_CF.dat
2007-04-16 17:42 1,120 --a------ C:\WINDOWS\system32\EPPICPresetData_IT.dat
2007-04-16 17:42 1,107 --a------ C:\WINDOWS\system32\EPPICPresetData_GE.dat
2007-04-16 17:42 1,104 --a------ C:\WINDOWS\system32\EPPICPresetData_EN.dat
2007-04-16 17:42 <KANSIO> d--h----- C:\Program Files\InstallShield Installation Information
2007-04-16 17:42 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
2007-04-16 17:33 <KANSIO> d-------- C:\Program Files\epson
2007-04-16 16:18 394 --a------ C:\DOCUME~1\Omistaja\APPLIC~1\wklnhst.dat
2007-04-16 15:59 <KANSIO> d-------- C:\Program Files\Microsoft Works
2007-04-16 15:53 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
2007-04-16 15:52 <KANSIO> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-04-16 15:52 <KANSIO> d-------- C:\Program Files\Windows Live Toolbar
2007-04-16 15:33 <KANSIO> d-------- C:\DOCUME~1\Minna\APPLIC~1\Thunderbird
2007-04-16 15:33 <KANSIO> d-------- C:\DOCUME~1\Minna\APPLIC~1\Talkback
2007-04-16 15:23 <KANSIO> dr------- C:\DOCUME~1\Minna\Omat tiedostot
2007-04-16 15:23 <KANSIO> d-------- C:\DOCUME~1\Minna\APPLIC~1\McAfee.com Personal Firewall
2007-04-16 15:22 1,048,576 --ah----- C:\DOCUME~1\Minna\ntuser.dat
2007-04-16 15:22 <KANSIO> dr------- C:\DOCUME~1\Minna\Suosikit
2007-04-16 15:22 <KANSIO> dr------- C:\DOCUME~1\Minna\K?ynnist?-valikko
2007-04-16 15:22 <KANSIO> d--h----- C:\DOCUME~1\Minna\Verkkoymp?rist?
2007-04-16 15:22 <KANSIO> d--h----- C:\DOCUME~1\Minna\Tulostinymp?rist?
2007-04-16 15:22 <KANSIO> d--h----- C:\DOCUME~1\Minna\Mallit
2007-04-16 15:22 <KANSIO> d-------- C:\DOCUME~1\Minna\Ty?p?yt?
2007-04-15 23:18 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-04-15 23:10 <KANSIO> d-------- C:\Program Files\Ashampoo
2007-04-15 23:00 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
2007-04-15 22:55 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes
2007-04-15 22:47 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\SlySoft
2007-04-15 22:45 <KANSIO> d-------- C:\Program Files\Elaborate Bytes
2007-04-15 22:45 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SlySoft
2007-04-15 22:44 <KANSIO> d-------- C:\Program Files\SlySoft
2007-04-15 22:31 <KANSIO> d-------- C:\DOCUME~1\Niina\APPLIC~1\Thunderbird
2007-04-15 22:30 <KANSIO> d-------- C:\DOCUME~1\Niina\APPLIC~1\Talkback
2007-04-15 22:29 2,359,296 --ah----- C:\DOCUME~1\Niina\ntuser.dat
2007-04-15 22:29 <KANSIO> dr------- C:\DOCUME~1\Niina\Suosikit
2007-04-15 22:29 <KANSIO> dr------- C:\DOCUME~1\Niina\Omat tiedostot
2007-04-15 22:29 <KANSIO> dr------- C:\DOCUME~1\Niina\K?ynnist?-valikko
2007-04-15 22:29 <KANSIO> d--h----- C:\DOCUME~1\Niina\Verkkoymp?rist?
2007-04-15 22:29 <KANSIO> d--h----- C:\DOCUME~1\Niina\Tulostinymp?rist?
2007-04-15 22:29 <KANSIO> d--h----- C:\DOCUME~1\Niina\Mallit
2007-04-15 22:29 <KANSIO> d-------- C:\DOCUME~1\Niina\Ty?p?yt?
2007-04-15 22:29 <KANSIO> d-------- C:\DOCUME~1\Niina\APPLIC~1\McAfee.com Personal Firewall
2007-04-15 22:25 <KANSIO> d-------- C:\Program Files\MSBuild
2007-04-15 22:22 <KANSIO> d-------- C:\WINDOWS\system32\XPSViewer
2007-04-15 22:22 <KANSIO> d-------- C:\Program Files\Reference Assemblies
2007-04-15 22:21 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2007-04-15 22:21 <KANSIO> d-------- C:\Program Files\Windows Media Connect 2
2007-04-15 22:21 <KANSIO> d-------- C:\6c748a570ed6779b23ab0e3440
2007-04-15 22:20 <KANSIO> d-------- C:\WINDOWS\system32\LogFiles
2007-04-15 22:20 <KANSIO> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-04-15 21:59 <KANSIO> d-------- C:\Program Files\Mozilla Thunderbird
2007-04-15 21:59 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\Thunderbird
2007-04-15 21:57 262,144 --------- C:\DOCUME~1\ALLUSE~1\ntuser.dat
2007-04-15 21:56 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
2007-04-15 21:54 <KANSIO> d--hs---- C:\RECYCLER
2007-04-15 21:42 94,552 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-04-15 21:42 90,112 --a------ C:\WINDOWS\system32\AvastSS.scr
2007-04-15 21:42 85,952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-04-15 21:42 733,824 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-04-15 21:42 499,712 --a------ C:\WINDOWS\system32\MSVCP71.DLL
2007-04-15 21:42 43,176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-04-15 21:42 26,888 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-04-15 21:42 23,416 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-04-15 21:42 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2007-04-15 21:42 <KANSIO> d-------- C:\Program Files\Alwil Software
2007-04-15 21:33 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\McAfee.com Personal Firewall
2007-04-15 21:33 <KANSIO> d-------- C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee.com Personal Firewall
2007-04-15 21:33 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com Personal Firewall
2007-04-15 21:31 67,584 --a------ C:\WINDOWS\system32\drivers\MpFirewall.sys
2007-04-15 21:31 349,760 --a------ C:\WINDOWS\system32\mcinsctl.dll
2007-04-15 21:31 277,616 --a------ C:\WINDOWS\system32\mcgdmgr.dll
2007-04-15 21:31 24,576 --a------ C:\WINDOWS\system32\MpfApi.dll
2007-04-15 21:31 <KANSIO> d-------- C:\Program Files\McAfee.com
2007-04-15 21:31 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
2007-04-15 21:29 9,728 -ra------ C:\WINDOWS\system32\sysinfoX64.sys
2007-04-15 21:29 8,192 -ra------ C:\WINDOWS\system32\sysinfo.sys
2007-04-15 21:29 69,632 -ra------ C:\WINDOWS\system32\sw24.exe
2007-04-15 21:29 53,248 -ra------ C:\WINDOWS\system32\Nvgpio.dll
2007-04-15 21:29 348,160 -ra------ C:\WINDOWS\system32\msvcr71.dll
2007-04-15 21:29 32,768 -ra------ C:\WINDOWS\system32\Auxiliary.dll
2007-04-15 21:29 262,144 -ra------ C:\WINDOWS\system32\HookShield.dll
2007-04-15 21:29 253,952 -ra------ C:\WINDOWS\system32\HookMAp.dll
2007-04-15 21:29 217,088 -ra------ C:\WINDOWS\system32\WinSys2.exe
2007-04-15 21:29 208,896 -ra------ C:\WINDOWS\system32\sw20.exe
2007-04-15 21:29 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-04-15 21:29 131,072 -ra------ C:\WINDOWS\system32\smdll.dll
2007-04-15 21:29 128,512 -ra------ C:\WINDOWS\system32\MadCHook.dll
2007-04-15 21:29 114,688 -ra------ C:\WINDOWS\system32\sysinfo.dll
2007-04-15 21:29 1,593,344 -ra------ C:\WINDOWS\system32\msicpl.dll
2007-04-15 21:29 <KANSIO> d-------- C:\WINDOWS\nview
2007-04-15 21:28 <KANSIO> d-------- C:\Program Files\Common Files\InstallShield
2007-04-15 21:27 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-04-15 21:27 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2007-04-15 21:27 <KANSIO> d-------- C:\Program Files\Common Files\Nero
2007-04-15 21:26 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2007-04-15 21:26 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2007-04-15 21:26 38,912 --------- C:\WINDOWS\system32\picn20.dll
2007-04-15 21:26 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll
2007-04-15 21:26 3,006,464 --------- C:\WINDOWS\UNNeroVision.exe
2007-04-15 21:26 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2007-04-15 21:26 24,064 --------- C:\WINDOWS\system32\msxml3a.dll
2007-04-15 21:26 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-04-15 21:26 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2007-04-15 21:26 <KANSIO> d-------- C:\Program Files\Common Files\Ahead
2007-04-15 21:26 <KANSIO> d-------- C:\Program Files\Ahead
2007-04-15 21:26 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
2007-04-15 21:24 <KANSIO> d-------- C:\WINDOWS\system32\PreInstall
2007-04-15 21:22 <KANSIO> d-------- C:\WINDOWS\system32\fi-fi
2007-04-15 21:22 <KANSIO> d-------- C:\WINDOWS\network diagnostic
2007-04-15 21:21 18,200 --a------ C:\WINDOWS\system32\wups2.dll
2007-04-15 21:21 <KANSIO> d-------- C:\WINDOWS\system32\SoftwareDistribution
2007-04-15 21:09 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-04-15 21:09 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-04-15 21:09 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-04-15 21:09 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-04-15 21:09 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-04-15 21:09 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-04-15 21:09 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-04-15 21:09 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-04-15 21:09 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-04-15 21:09 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-04-15 21:09 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-04-15 21:08 9,728 --a------ C:\WINDOWS\system32\bdco1ins.dll
2007-04-15 21:08 9,728 --a------ C:\WINDOWS\system32\bdco1.dll
2007-04-15 21:08 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-04-15 21:08 577,536 --a------ C:\WINDOWS\soundman.exe
2007-04-15 21:08 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-04-15 21:08 4,027,840 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys
2007-04-15 21:08 36,352 -ra------ C:\WINDOWS\system32\drivers\AmdK8.sys
2007-04-15 21:08 35,840 --a------ C:\WINDOWS\system32\nvconrm.dll
2007-04-15 21:08 34,176 --a------ C:\WINDOWS\system32\drivers\NVENETFD.sys
2007-04-15 21:08 305,152 --a------ C:\WINDOWS\system32\drivers\nvnrm.sys
2007-04-15 21:08 222,720 --a------ C:\WINDOWS\system32\drivers\nvsnpu.sys
2007-04-15 21:08 208,896 --a------ C:\WINDOWS\system32\nvunrm.exe
2007-04-15 21:08 203,776 --a------ C:\WINDOWS\system32\fdco1ins.dll
2007-04-15 21:08 203,776 --a------ C:\WINDOWS\system32\fdco1.dll
2007-04-15 21:08 147,456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll
2007-04-15 21:08 13,056 --a------ C:\WINDOWS\system32\drivers\nvnetbus.sys
2007-04-15 21:08 101,888 --a------ C:\WINDOWS\system32\drivers\nvtcp.sys
2007-04-15 21:08 10,528,768 --a------ C:\WINDOWS\system32\RTLCPL.exe
2007-04-15 21:07 35,840 --a------ C:\WINDOWS\system32\NVCOI.DLL
2007-04-15 21:07 289,792 -ra------ C:\WINDOWS\system32\idecoins.dll
2007-04-15 21:07 100,736 --a------ C:\WINDOWS\system32\drivers\nvata.sys
2007-04-15 21:07 <KANSIO> d-------- C:\WINDOWS\system32\ReinstallBackups
2007-04-15 21:05 <KANSIO> d--hs---- C:\DOCUME~1\Omistaja\UserData
2007-04-15 20:39 107,134 --------- C:\WINDOWS\UninstallFirefox.exe
2007-04-15 20:39 0 --------- C:\WINDOWS\nsreg.dat
2007-04-15 20:39 <KANSIO> d-------- C:\DOCUME~1\Omistaja\APPLIC~1\Talkback
2007-04-15 20:38 8,355 --a------ C:\WINDOWS\mozver.dat
2007-04-15 20:33 <KANSIO> d--h----- C:\WINDOWS\msdownld.tmp
2007-04-15 20:33 <KANSIO> d-------- C:\WINDOWS\RegisteredPackages
2007-04-15 20:16 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-04-15 20:16 <KANSIO> dr------- C:\DOCUME~1\Omistaja\Omat tiedostot
2007-04-15 20:15 724,992 --a------ C:\DOCUME~1\NETWOR~1\NTUSER.DAT
2007-04-15 20:15 724,992 --a------ C:\DOCUME~1\LOCALS~1\NTUSER.DAT
2007-04-15 20:15 3,932,160 --a------ C:\DOCUME~1\Omistaja\NTUSER.DAT
2007-04-15 20:15 <KANSIO> dr------- C:\DOCUME~1\Omistaja\K?ynnist?-valikko
2007-04-15 20:15 <KANSIO> d--h----- C:\DOCUME~1\Omistaja\Verkkoymp?rist?
2007-04-15 20:15 <KANSIO> d--h----- C:\DOCUME~1\Omistaja\Tulostinymp?rist?
2007-04-15 20:15 <KANSIO> d--h----- C:\DOCUME~1\Omistaja\Mallit
2007-04-15 20:15 <KANSIO> d-------- C:\WINDOWS\system32\URTTemp
2007-04-15 20:15 <KANSIO> d-------- C:\WINDOWS\SoftwareDistribution
2007-04-15 20:15 <KANSIO> d-------- C:\WINDOWS\Prefetch
2007-04-15 20:15 <KANSIO> d-------- C:\DOCUME~1\Omistaja\Ty?p?yt?
2007-04-15 20:15 <KANSIO> d-------- C:\DOCUME~1\Omistaja\Suosikit
2007-04-15 20:13 229,376 ---h----- C:\DOCUME~1\DEFAUL~1\NTUSER.DAT
2007-04-15 20:13 <KANSIO> d-------- C:\WINDOWS\system32\xircom
2007-04-15 20:13 <KANSIO> d-------- C:\Program Files\microsoft frontpage
2007-04-15 20:12 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-04-15 20:12 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-04-15 20:12 0 -r-hs---- C:\MSDOS.SYS
2007-04-15 20:12 0 -r-hs---- C:\IO.SYS
2007-04-15 20:12 0 --------- C:\CONFIG.SYS
2007-04-15 20:12 0 --------- C:\AUTOEXEC.BAT
2007-04-15 20:12 <KANSIO> d--h----- C:\WINDOWS\$hf_mig$
2007-04-15 20:12 <KANSIO> d-------- C:\WINDOWS\fsc
2007-04-15 20:12 <KANSIO> d-------- C:\AddOn
2007-04-15 20:11 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2007-04-15 20:11 81,920 --a------ C:\WINDOWS\system32\ils.dll
2007-04-15 20:11 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-04-15 20:11 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-04-15 20:11 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-04-15 20:11 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-04-15 20:11 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2007-04-15 20:11 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-04-15 20:11 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2007-04-15 20:11 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-04-15 20:11 64,512 --a------ C:\WINDOWS\system32\acctres.dll
2007-04-15 20:11 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-04-15 20:11 48,640 --a------ C:\WINDOWS\system32\inetres.dll
2007-04-15 20:11 465,176 --a------ C:\WINDOWS\system32\wuapi.dll
2007-04-15 20:11 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-04-15 20:11 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-04-15 20:11 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-04-15 20:11 41,240 --a------ C:\WINDOWS\system32\wups.dll
2007-04-15 20:11 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-04-15 20:11 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-04-15 20:11 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-04-15 20:11 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-04-15 20:11 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-04-15 20:11 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-04-15 20:11 278,528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-04-15 20:11 276,480 --a------ C:\WINDOWS\system32\mstask.dll
2007-04-15 20:11 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-04-15 20:11 240,640 --a------ C:\WINDOWS\system32\srrstr.dll
2007-04-15 20:11 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-04-15 20:11 21,672 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-04-15 20:11 194,840 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-04-15 20:11 190,976 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-04-15 20:11 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-04-15 20:11 173,848 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-04-15 20:11 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-04-15 20:11 170,496 --a------ C:\WINDOWS\system32\srsvc.dll
2007-04-15 20:11 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-04-15 20:11 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-04-15 20:11 128,896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-04-15 20:11 127,256 --a------ C:\WINDOWS\system32\wucltui.dll
2007-04-15 20:11 124,696 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-04-15 20:11 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-04-15 20:11 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-04-15 20:11 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2007-04-15 20:11 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-04-15 20:11 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-04-15 20:11 <KANSIO> dr------- C:\WINDOWS\Offline Web Pages
2007-04-15 20:11 <KANSIO> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM
2007-04-15 20:11 <KANSIO> d--h----- C:\Program Files\WindowsUpdate
2007-04-15 20:11 <KANSIO> d---s---- C:\WINDOWS\Tasks
2007-04-15 20:11 <KANSIO> d---s---- C:\WINDOWS\Downloaded Program Files
2007-04-15 20:11 <KANSIO> d-------- C:\WINDOWS\system32\Restore
2007-04-15 20:11 <KANSIO> d-------- C:\WINDOWS\system32\Macromed
2007-04-15 20:11 <KANSIO> d-------- C:\WINDOWS\system32\DirectX
2007-04-15 20:11 <KANSIO> d-------- C:\WINDOWS\srchasst
2007-04-15 20:11 <KANSIO> d-------- C:\WINDOWS\Registration
2007-04-15 20:11 <KANSIO> d-------- C:\Program Files\Online Services
2007-04-15 20:11 <KANSIO> d-------- C:\Program Files\Movie Maker
2007-04-15 20:11 <KANSIO> d-------- C:\Program Files\Common Files\MSSoap
2007-04-15 20:10 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-04-15 20:10 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-04-15 20:10 93,696 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-04-15 20:10 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-04-15 20:10 9,728 --a------ C:\WINDOWS\system32\reset.exe
2007-04-15 20:10 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-04-15 20:10 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-04-15 20:10 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2007-04-15 20:10 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2007-04-15 20:10 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-04-15 20:10 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-04-15 20:10 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-04-15 20:10 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-04-15 20:10 605,696 --a------ C:\WINDOWS\system32\getuname.dll
2007-04-15 20:10 60,416 --a------ C:\WINDOWS\system32\remotepg.dll
2007-04-15 20:10 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2007-04-15 20:10 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-04-15 20:10 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-04-15 20:10 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-04-15 20:10 56,832 --a------ C:\WINDOWS\system32\sol.exe
2007-04-15 20:10 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-04-15 20:10 55,296 --a------ C:\WINDOWS\system32\freecell.exe
2007-04-15 20:10 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2007-04-15 20:10 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2007-04-15 20:10 538,624 --a------ C:\WINDOWS\system32\spider.exe
2007-04-15 20:10 5,632 --a------ C:\WINDOWS\system32\write.exe
2007-04-15 20:10 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-04-15 20:10 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-04-15 20:10 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-04-15 20:10 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2007-04-15 20:10 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-04-15 20:10 404,992 --a------ C:\WINDOWS\system32\mstsc.exe
2007-04-15 20:10 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-04-15 20:10 4,096 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-04-15 20:10 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-04-15 20:10 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-04-15 20:10 350,208 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-04-15 20:10 35,328 --a------ C:\WINDOWS\system32\winchat.exe
2007-04-15 20:10 344,064 --a------ C:\WINDOWS\system32\mspaint.exe
2007-04-15 20:10 33,792 --a------ C:\WINDOWS\system32\regini.exe
2007-04-15 20:10 295,424 --a------ C:\WINDOWS\system32\termsrv.dll
2007-04-15 20:10 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-04-15 20:10 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-04-15 20:10 227,840 --a------ C:\WINDOWS\system32\avtapi.dll
2007-04-15 20:10 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-04-15 20:10 22,016 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-04-15 20:10 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-04-15 20:10 21,504 --a------ C:\WINDOWS\system32\msg.exe
2007-04-15 20:10 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2007-04-15 20:10 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-04-15 20:10 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2007-04-15 20:10 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-04-15 20:10 186,368 --a------ C:\WINDOWS\system32\accwiz.exe
2007-04-15 20:10 185,344 --a------ C:\WINDOWS\system32\cmprops.dll
2007-04-15 20:10 17,408 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-04-15 20:10 17,408 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-04-15 20:10 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-04-15 20:10 16,896 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-04-15 20:10 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2007-04-15 20:10 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-04-15 20:10 15,872 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-04-15 20:10 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-04-15 20:10 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2007-04-15 20:10 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2007-04-15 20:10 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-04-15 20:10 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-04-15 20:10 140,800 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-04-15 20:10 14,848 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-04-15 20:10 14,848 --a------ C:\WINDOWS\system32\shadow.exe
2007-04-15 20:10 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-04-15 20:10 138,752 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-04-15 20:10 131,584 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-04-15 20:10 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-04-15 20:10 126,976 --a------ C:\WINDOWS\system32\mshearts.exe
2007-04-15 20:10 123,392 --a------ C:\WINDOWS\system32\mplay32.exe
2007-04-15 20:10 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-04-15 20:10 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2007-04-15 20:10 114,688 --a------ C:\WINDOWS\system32\calc.exe
2007-04-15 20:10 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-04-15 20:10 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-04-15 20:10 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-04-15 20:10 102,400 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-04-15 20:10 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-04-15 20:10 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-04-15 20:10 <KANSIO> d-------- C:\WINDOWS\system32\MsDtc
2007-04-15 20:10 <KANSIO> d-------- C:\WINDOWS\system32\Com
2007-04-15 20:10 <KANSIO> d-------- C:\Program Files\Windows NT
2007-04-15 20:10 <KANSIO> d-------- C:\Program Files\MSN Gaming Zone
2007-04-15 20:10 <KANSIO> d-------- C:\Program Files\Messenger
2007-04-13 17:07 73,928 --a------ C:\WINDOWS\system32\drivers\AnyDVD.sys
2007-04-01 15:34 86,016 --a------ C:\WINDOWS\system32\ElbyCDIO.dll


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2007-04-22 11:38 83594 --a------ C:\WINDOWS\system32\perfc00b.dat
2007-04-22 11:38 410768 --a------ C:\WINDOWS\system32\perfh00b.dat
2007-04-20 13:09 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-03-23 06:07 583504 --------- C:\WINDOWS\system32\xpsshhdr.dll
2007-03-23 06:07 1683280 --------- C:\WINDOWS\system32\xpssvcs.dll
2007-03-22 20:25 124928 --------- C:\WINDOWS\system32\prntvpt.dll
2007-03-17 16:44 292864 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-08 18:38 578048 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 18:37 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 18:37 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 18:34 1843840 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-28 23:56 15440 --a------ C:\WINDOWS\system32\drivers\ElbyCDIO.sys
2007-02-05 23:19 185344 --a------ C:\WINDOWS\system32\upnphost.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"SW20"="C:\\WINDOWS\\system32\\sw20.exe"
"SW24"="C:\\WINDOWS\\system32\\sw24.exe"
"WinSys2"="C:\\WINDOWS\\system32\\winsys2.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"MPFExe"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe"
"MCAgentExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"
"MCUpdateExe"="C:\\PROGRA~1\\mcafee.com\\agent\\mcupdate.exe"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"EPSON Stylus DX4800 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIADE.EXE /P26 \"EPSON Stylus DX4800 Series\" /O6 \"USB001\" /M \"Stylus DX4800\""
"Picasa Media Detector"="C:\\Picasa2\\PicasaMediaDetector.exe"
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"SoundMan"="SOUNDMAN.EXE"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"NVIDIA nTune"="\"C:\\Program Files\\NVIDIA Corporation\\nTune\\nTuneCmd.exe\" clear"
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe"
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"
"AnyDVD"="C:\\Program Files\\SlySoft\\AnyDVD\\AnyDVD.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"LinkResolveIgnoreLinkInfo"=dword:00000000
"NoResolveSearch"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"LinkResolveIgnoreLinkInfo"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0


[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0

*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_NVR0DEV

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-04-29 17:22:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


********************************************************************

Completion time: 07-04-29 17:22:09
C:\ComboFix-quarantined-files.txt ... 07-04-29 17:22

aja escan

Ohjeet tuolla sivulla.
http://koti.mbnet.fi/pattaya1/escanmwav.htm
lataa tuosta
http://www.spywareinfo.dk/download/mwav.exe
päivitä tuosta
http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat
laita täpit merkkauksien mukaan
http://koti.mbnet.fi/pattaya1/eScan6.jpg

scannaa

jos ala luukkuun tulee jotain niin kopioi se näin:
Käytä komentoa Ctrl+A.
Kopioi rivit komennolla Ctrl+C.
Liitä rivit komennolla Ctrl+V.

Laita virus log tänne.

==============

Poista lisää poista sovelutuksesta
Logitech Desktop Messenger tuosta tulee nuo 018 rivit

=============

sitten siellä on avasti ja McAfee pyörimässä samassa hiekkalaatikossa

============

Laita sitten kokonainen HjT loki

Escannin alalaatikkoon ei tullut mitään.Tässä uusi HjT-loki:Logfile of HijackThis v1.99.1
Scan saved at 20:13:57, on 29.4.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\winsys2.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\WINDOWS\system32\LVComS.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Omistaja\Työpöytä\VIRUS JA VAKOILU\HijackThis_v1.99.1.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {0EAEF1C5-DD76-43B1-BA5A-4F8CF45AC1F3} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {2A685C07-6126-4A75-AFDB-A017F236D968} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {6AFFA35D-0BEE-41E7-8BAF-740900FCA8F2} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared...01/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1176661253468
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: Avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (file missing)
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Eikö McAfeen palomuuri käy avastin kanssa?

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

fixaa tää rivi:

*******

Lataa Killbox Option^Explicitiltä.

Huomaa: Jos sinulla on jo Killbox, tämä on uusi versio joka sinun tulee asentaa. Poista aikaisempi.

[*]Tallenna työpöydällesi.
[*] Tupla-klikkaa Killbox.exe ajaaksesi ohjelman.
[*] Valitse: [*]Delete on Reboot[*] sitten klikkaa All Files valintaa.
[*]Kopioi ja liitä alapuolella olevat tiedostopolut leikepöydälle mustaamalla KAIKKI ne ja painamalla CTRL + C (tai, mustaamisen jälkeen, oikea klikki hiirellä ja valitse kopioi):

C:\WINDOWS\system32\winsys2.exe

[*] Palaa Killboxiin, mene File valikkoon, ja valitse Paste from Clipboard.

[*]Klikkaa puna-valkoista Delete File valintaa. Klikkaa Yes "Delete on Reboot" pyyntöön. Klikkaa OK mihin vain PendingFileRenameOperations pyyntöön (ja anna fixaajan tietää jos jokin tälläinen tulee!).
Käynnistä koneesi itse jos se ei sitä automaattisesti tee

Jos saat tälläisen viestin: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." Kun yrität ajaa KillBoxia, klikkaa tätä ladataksesi ja ajaaksesi Missingfilessetup.exe;n. Sitten koita KillBoxia uudestaan.

*********
Lataa ja tallenna Blacklight työpöydällesi;

Tupla-klikkaa fsbl.exe, hyväksy sopimus, klikkaa -> Scan, sitten -> Next

Näet listan kaikesta mitä löytyi. Työpöydällesi myös ilmestyy loki jonka nimi on fsbl.xxxxxxx.log (xxxxxxx;n tilalla on luultavimmin numeroita).

Kopioi ja liitä tämä loki seuraavaan vastaukseesi. Älä valitse "Rename" optiota vielä! Haluamme nähdä login ensin, koska hyviä tiedostoja saattaa olla mukana, kuten "wbemtest.exe".

Hujo luuli että sull on kaks viruksentorjuntaohjelmistoa :)

Ei tullu mitään mihi piti painaa ok
Tässä BlackLightin loki:04/29/07 21:01:36 [Info]: BlackLight Engine 1.0.61 initialized
04/29/07 21:01:36 [Info]: OS: 5.1 build 2600 (Service Pack 2)
04/29/07 21:01:36 [Note]: 7019 4
04/29/07 21:01:36 [Note]: 7005 0
04/29/07 21:01:41 [Note]: 7006 0
04/29/07 21:01:41 [Note]: 7011 1908
04/29/07 21:01:41 [Note]: 7026 0
04/29/07 21:01:41 [Note]: 7026 0
04/29/07 21:01:43 [Note]: FSRAW library version 1.7.1021
04/29/07 21:08:55 [Note]: 2000 1012
04/29/07 21:08:55 [Note]: 2000 1012
04/29/07 21:08:55 [Note]: 2000 1012
Laitan vielä uuden hjt:Logfile of HijackThis v1.99.1
Scan saved at 21:17:35, on 29.4.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\LVComS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Omistaja\Työpöytä\fsbl.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Omistaja\Työpöytä\VIRUS JA VAKOILU\HijackThis_v1.99.1.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {0EAEF1C5-DD76-43B1-BA5A-4F8CF45AC1F3} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {2A685C07-6126-4A75-AFDB-A017F236D968} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {6AFFA35D-0BEE-41E7-8BAF-740900FCA8F2} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared...01/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1176661253468
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: Avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (file missing)
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

tutkitaan viel varmuudeks

Lataa Deckard's System Scanner Työpöydällesi.

Huomioi: Sinulla tulee olla Järjestelmänvalvojan oikeudet ajaaksesi ohjelman.

[*]Sulje kaikki avoimet ikkunat ja ohjelmat.
[*]Tupla Klikkaa Dss.exe tiedostoa ajaaksesi ohjelman, seuraa ohjeita.
[*]Kun Scannaus on valmis 2 textitiedostoa pitäisi avautua, Main.txt ja extra.txt
[*]Näppäile Kopioi ( CTRL+A -> CTRL + C ) ja liitä ( CTRL + V )
[*]kopioi ja liitä Extra.txt & Main.txt sisältö seuraavaan vastaukseesi.

********

1,Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi. Jos sinulla on jo kyseinen ohjelma siirry suoraan kohtaan 2!

[*]Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
[*]Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.

2. [*]Käynnistä AVG eAnti-Spyware.
[*]Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
[*]Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
[*]Paina hetken kuluttua uudestaan "Start Update" , jos päivitykset eivät heti onnistu
[*]Jos automaattipäivitys ei jostain syystä toimi, niin tunnisteet voi ladata manuaalisesti http://www.ewido.net/en/download/updates/ -linkin takaa.
[*]Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
[*]Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
[*]Sitten "Reports" valikon alta:
[*]Laita täppi kohtaan "Automatically generate report after every scan"
[*]Ota täppi pois kohdasta"Only if threats were found"
[*]Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
[*]"Resident shield is", muuta tila active:sta inactive:ksi
[*]Sulje ohjelma, ÄLÄ skannaa vielä.

Käynnistä tietokone vikasietotilaan:
1. Käynnistä tietokone uudelleen.
2. Kun tietokone käynnistyy, paina F8-näppäintä.
3. Näyttöön tulee erilaisia käynnistysvaihtoehtoja.
4. Valitse näppäimistön nuolinäppäinten avulla Vikasietotila.
5. Paina ENTER-näppäintä.

HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
[*]Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
[*]Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
[*]AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
[*]Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
[*]Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"


[*]Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
[*]Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
[*]Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

Extra.txt:Deckard's System Scanner v20070426.43
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: Other (040B) - see http://preview.tinyurl.com/mhhp6

CPU 0: AMD Athlon(tm) 64 Processor 3400+
Percentage of Memory in Use: 37%
Physical Memory (total/avail): 1023.48 MiB / 640.87 MiB
Pagefile Memory (total/avail): 2462.1 MiB / 2132.72 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1961.36 MiB

C: is Fixed (NTFS) - 186.31 GiB total, 165.47 GiB free.
E: is CDROM (No Media)


-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FirstRunDisabled is set.
AntiVirusDisableNotify is set.
FirewallDisableNotify is set.

FW: Personal Firewall Plus v (McAfee)
FW: NVIDIA Firewall v1.0 (NVIDIA Corporation) Disabled
AV: Avast! antivirus 4.7.986 [VPS 000736-2] v4.7.986 (ALWIL Software)


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Omistaja\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=KOTI
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Omistaja
LOGONSERVER=\\KOTI
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=2f02
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Omistaja\LOCALS~1\Temp
TMP=C:\DOCUME~1\Omistaja\LOCALS~1\Temp
USERDOMAIN=KOTI
USERNAME=Omistaja
USERPROFILE=C:\Documents and Settings\Omistaja
windir=C:\WINDOWS
__COMPAT_LAYER=EnableNXShowUI


-- User Profiles ---------------------------------------------------------------

Omistaja (admin)
Niina
Minna


-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3DMark06 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -l0x9 -removeonly
Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8 - Suomi --> MsiExec.exe /I{AC76BA86-7AD7-1035-7B44-A80000000000}
Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Advanced WindowsCare 2.30 Personal --> "C:\Program Files\IObit\Advanced WindowsCare V2\unins000.exe"
AnyDVD --> "C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"
Ashampoo WinOptimizer 4.35 --> "C:\Program Files\Ashampoo\Ashampoo WinOptimizer 4\unins000.exe"
avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Barbie(TM) Fashion Show(TM) CD-ROM --> C:\Program Files\Common Files\Vivendi Universal Games\Uninstall\FashionUn.exe
Barbie(TM) ja Pegasoksen taika --> C:\Program Files\Common Files\Vivendi Universal Games\Uninstall\PegasusUnFI.exe
Barbie(TM) Joutsenlampi --> C:\Program Files\Common Files\Vivendi Universal Games\Uninstall\SwanLakeUn.exe
BRATZ - Rock Angelz --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C92937F-7E79-4A32-AB80-BD7637146308}\setup.exe" -l0x9 -uninst
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
CloneDVD2 --> "C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
CPU-Z 1.37 --> "C:\Program Files\CPU-Z\SETUP\setup.exe" /u
DVD Shrink 3.2 --> "C:\Program Files\DVD Shrink\unins000.exe"
EPSON-tulostinohjelma --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Attach To Email --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall
EPSON Easy Photo Print --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}\SETUP.EXE" -l0x9 UNINST
EPSON File Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x9 UNINST
EPSON Image Clip Palette --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{314F6D08-A8B7-11D8-8446-0050BA1D384D}\Setup.exe" -l0x9 -u
EPSON Scan --> C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Scan Assistant --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x9 -u
EPSON Web-To-Page --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x9 -anything
ESDX4800_4200 Käyttöopas --> C:\Program Files\EPSON\TPMANUAL\ESDX4800_4200\USE_G\DOCUNINS.EXE
EVEREST Home Edition v2.20 --> "C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
High Definition Audio - KB888111 -->
HijackThis 1.99.1 --> C:\Documents and Settings\Omistaja\Työpöytä\HijackThis.exe /uninstall
Hotfix-päivitys Windows XP:lle (KB914440) --> "C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
KhalSetup --> MsiExec.exe /I{EE7B9A8D-19F0-450D-8E94-3E391E6044CD}
Labtec WebCam --> MsiExec.exe /I{58E653BE-BD68-4D68-BB2E-3AE1B925AAD0}
Labtec® WebCam -ohjain --> "C:\Program Files\Common Files\Labtec\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
Language pack for Ad-Aware SE --> C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
Logitech SetPoint --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0xb -removeonly
McAfee Personal Firewall Plus --> C:\PROGRA~1\McAfee.com\PERSON~1\MpfUninstall.exe
McAfee SecurityCenter --> C:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=msc /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\screm.ui::uninstall.htm
Microsoft Base Smart Card Cryptographic Service Provider Package --> "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Works --> MsiExec.exe /I{2EF8368A-5670-45C0-82F1-D7B00F7E7AB8}
Mozilla Firefox (2.0.0.3) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (1.5) --> C:\Program Files\Mozilla Thunderbird\uninstall\uninstall.exe /ua "1.5 (fi)"
MSN Messenger 7.5 --> MsiExec.exe /I{9A379B72-03EC-11DA-BFBD-00065BBDC0B5}
MSXML 6.0 Parser --> MsiExec.exe /I{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}
Nero Suite --> C:\Program Files\Common Files\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""
NVIDIA Drivers --> C:\WINDOWS\system32\nvuide.exe UninstallGUI
NVIDIA ForceWare Network Access Manager --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{1F6423DE-7959-4178-80E0-023C7EAA5347} /l1033
NVIDIA nTune --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF} /l1035
Opera 9.20 --> MsiExec.exe /X{FC0C72DD-A491-43FF-B377-67273E4D94D7}
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
Picasa 2 --> "C:\Picasa2\Uninstall.exe"
PIF DESIGNER --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x9 anything
Päivitys Windows XP:lle (KB894391) --> "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB898461) --> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB900485) --> "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB904942) --> "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB908531) --> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB910437) --> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB911280) --> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB916595) --> "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB920872) --> "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB922582) --> "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB925720) --> "C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
Päivitys Windows XP:lle (KB931836) --> "C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
QuickTime --> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
RadarSync 2007 Standalone (remove only) --> "C:\Program Files\RadarSync\RadarSync 2007\Uninstall.exe"
Realtek AC'97 Audio --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0xb -removeonly
Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Suojauspäivitys ohjelmistolle Windows XP (KB923689) --> "C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB893756) --> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB896358) --> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB896423) --> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB896428) --> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB899587) --> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB899591) --> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB900725) --> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB901017) --> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB901214) --> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB902400) --> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB904706) --> "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB905414) --> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB905749) --> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB908519) --> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB911562) --> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB911927) --> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB913580) --> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB914388) --> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB914389) --> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB917344) --> "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB917422) --> "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB917953) --> "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB918118) --> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB918439) --> "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB919007) --> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB920213) --> "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB920670) --> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB920683) --> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB920685) --> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB922819) --> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB923191) --> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB923414) --> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB923694) --> "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB923980) --> "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB924191) --> "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB924270) --> "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB924496) --> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB924667) --> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB925902) --> "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB926255) --> "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB926436) --> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB927779) --> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB927802) --> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB928090) --> "C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB928255) --> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB928843) --> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB930178) --> "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB931261) --> "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB931784) --> "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Suojauspäivitys Windows XP:lle (KB932168) --> "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
The Sims Deluxe Edition --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10798AE3-DCBB-43C3-9C93-C23512427E25}\setup.exe" -l0009
TypeFaster Typing Tutor --> "C:\Program Files\TypeFaster\uninstall.exe"
Windows Communication Foundation --> MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format SDK Hotfix - KB891122 --> "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Presentation Foundation --> MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Presentation Foundation Language Pack (FIN) --> MsiExec.exe /X{935FADCB-C25B-4F62-B9B4-F22C40431642}
Windows Varmuuskopiointi --> MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
Windows Vista Upgrade Advisor --> MsiExec.exe /I{A442A10F-B6AE-456C-AB3D-AF20586E3C94}
Windows Workflow Foundation --> MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows Workflow Foundation FI Language Pack --> MsiExec.exe /I{8E5D0B52-BB72-46C6-8AB8-2B041D959594}
Winx Club --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{14CB43A6-27F8-4F6A-A755-782ABD04B0EA}\setup.exe" -l0x9
XML Paper Specification Shared Components Language Pack 1.0 --> "C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Pack 1.0 -->


-- End of Deckard's System Scanner: finished at 2007-04-29 at 21:38:56 ---------

Deckard's System Scanner v20070426.43
Run by Omistaja on 2007-04-29 at 21:37:32
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
5: 2007-04-29 18:37:38 UTC - RP5 - Deckard's System Scanner Restore Point
4: 2007-04-29 16:40:35 UTC - RP4 - Poistettu Logitech Desktop Messenger
3: 2007-04-29 09:25:38 UTC - RP3 - Removed J2SE Runtime Environment 5.0
2: 2007-04-28 19:12:05 UTC - RP2 - edellisten jälkeen
1: 2007-04-28 19:11:24 UTC - RP1 - Järjestelmän tarkistuspiste


Backed up registry hives.

Performed disk cleanup.


-- HijackThis (run as Omistaja.exe) --------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 21:38:17, on 29.4.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\LVComS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Omistaja\Työpöytä\dss.exe
C:\DOCUME~1\Omistaja\TYPYT~1\VIRUSJ~1\Omistaja.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {0EAEF1C5-DD76-43B1-BA5A-4F8CF45AC1F3} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {2A685C07-6126-4A75-AFDB-A017F236D968} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {6AFFA35D-0BEE-41E7-8BAF-740900FCA8F2} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared...01/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1176661253468
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: Avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (file missing)
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe


-- HijackThis Fixed Entries (C:\DOCUME~1\Omistaja\TYPYT~1\VIRUSJ~1\backups\) ---

backup-20070429-204627-629 O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 MPFIREWL - c:\windows\system32\drivers\mpfirewall.sys <Not Verified; McAfee Security; McAfee Personal Firewall Plus>
R2 LBeepKE - c:\windows\system32\drivers\lbeepke.sys <Not Verified; Logitech, Inc.; Logitech SetPoint(TM)>
R3 NVR0Dev - c:\windows\nvoclock.sys <Not Verified; NVidia Corp.; NVidia System Utility Driver>

S3 ENTECH - c:\windows\system32\drivers\entech.sys <Not Verified; EnTech Taiwan; PowerStrip>
S3 GMSIPCI - e:\install\gmsipci.sys (file missing)
S3 TVICHW32 - c:\windows\system32\drivers\tvichw32.sys <Not Verified; EnTech Taiwan; TVicHW32 Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 nTuneService (nTune Service) - c:\program files\nvidia corporation\ntune\ntuneservice.exe /startservice <Not Verified; NVIDIA; NVIDIA nTune>

S2 nSvcIp (ForceWare IP service) - c:\program files\nvidia corporation\networkaccessmanager\bin\nsvcip.exe (file missing)


-- Files created between 2007-03-29 and 2007-04-29 -----------------------------

2007-04-29 20:36:10 0 d-------- C:\!KillBox
2007-04-29 19:05:52 0 d-------- C:\Downloads
2007-04-29 19:05:52 0 d-------- C:\Bases
2007-04-29 19:01:11 0 d-------- C:\Kaspersky
2007-04-29 12:48:26 0 d-------- C:\VundoFix Backups
2007-04-29 12:05:16 0 dr-h----- C:\Documents and Settings\Omistaja\Recent
2007-04-28 16:46:40 0 d-------- C:\Program Files\MSXML 6.0
2007-04-28 16:21:39 0 d-------- C:\Program Files\MSXML 4.0
2007-04-28 12:42:08 0 d-------- C:\SXS
2007-04-28 12:41:52 0 d-------- C:\Program Files\Common Files\Labtec
2007-04-27 10:26:30 0 d-------- C:\Program Files\MSN Messenger
2007-04-25 10:29:48 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-04-25 08:28:07 0 d-------- C:\Documents and Settings\Minna\Application Data\Macromedia
2007-04-25 08:27:19 0 d-------- C:\Documents and Settings\Minna\Application Data\Logitech
2007-04-24 12:22:15 0 d-------- C:\Program Files\CCleaner
2007-04-22 19:41:06 0 d-------- C:\Picasa2
2007-04-22 19:20:35 0 d-------- C:\Program Files\TypeFaster
2007-04-22 10:22:31 23600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS <Not Verified; EnTech Taiwan; TVicHW32 Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64>
2007-04-21 19:05:56 0 d-------- C:\CloneDVDTemp
2007-04-20 18:18:49 0 d-------- C:\WINDOWS\.jagex_cache_32
2007-04-20 16:49:29 0 d-------- C:\Program Files\IObit
2007-04-20 16:09:41 0 d-------- C:\Program Files\Realtek AC97
2007-04-20 16:09:38 315392 --a------ C:\WINDOWS\alcupd.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Update driver Tool>
2007-04-20 13:09:19 0 d-------- C:\Documents and Settings\All Users\Application Data\Barbie Fashion Show
2007-04-20 12:24:50 0 d-------- C:\Documents and Settings\Niina\Application Data\InstallShield
2007-04-20 12:12:52 0 d-------- C:\Documents and Settings\Omistaja\Contacts
2007-04-19 20:49:12 0 d-------- C:\JUNGLE_BOOK_2
2007-04-19 14:12:38 581 --a------ C:\WINDOWS\eReg.dat
2007-04-19 14:02:56 0 d-------- C:\Program Files\Maxis
2007-04-19 13:55:43 0 d-------- C:\Program Files\THQ
2007-04-19 13:54:01 86016 --a------ C:\WINDOWS\unvise32qt.exe <Not Verified; MindVision; Installer VISE 2.8.3>
2007-04-19 13:53:25 0 d-------- C:\WINDOWS\system32\QuickTime
2007-04-19 13:53:23 0 d-------- C:\Program Files\QuickTime
2007-04-19 13:53:09 0 d-------- C:\Documents and Settings\All Users\Application Data\QuickTime
2007-04-19 13:43:26 0 d-------- C:\Documents and Settings\All Users\Application Data\Vivendi Universal Games
2007-04-19 13:40:13 0 d-------- C:\Program Files\Barbie(TM)
2007-04-19 13:40:12 0 d-------- C:\Program Files\Common Files\Vivendi Universal Games
2007-04-19 13:35:24 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll <Not Verified; Sony DADC Austria AG.; >
2007-04-19 13:31:32 0 d-------- C:\Program Files\Konami
2007-04-19 10:46:28 0 d-------- C:\WINDOWS\system32\NtmsData
2007-04-19 09:17:34 0 d-------- C:\Documents and Settings\Omistaja\DoctorWeb
2007-04-18 20:22:00 0 d-------- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-04-18 20:16:15 0 d-------- C:\Program Files\NVIDIA Corporation
2007-04-18 19:45:08 0 d-------- C:\WINDOWS\Performance
2007-04-18 19:44:31 0 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
2007-04-18 19:44:13 0 d-------- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
2007-04-18 17:03:00 262144 --a------ C:\WINDOWS\system32\wrap_oal.dll <Not Verified; Creative Labs; Creative Labs OpenAL32>
2007-04-18 17:03:00 86016 --a------ C:\WINDOWS\system32\OpenAL32.dll <Not Verified; Portions (C) Creative Labs Inc. and NVIDIA Corp.; Standard OpenAL(TM) Library>
2007-04-18 17:02:46 0 d-------- C:\WINDOWS\system32\Futuremark
2007-04-18 17:02:46 3972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2007-04-18 17:02:46 5632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys <Not Verified; EnTech Taiwan; EnTech.sys>
2007-04-18 17:02:46 21664 --a------ C:\WINDOWS\system32\drivers\Entech.sys <Not Verified; EnTech Taiwan; PowerStrip>
2007-04-18 17:01:11 0 d-------- C:\Program Files\Futuremark
2007-04-18 16:47:43 0 d-------- C:\Program Files\Lavalys
2007-04-18 15:43:13 0 d-------- C:\Documents and Settings\Omistaja\Application Data\EPSON
2007-04-18 07:24:42 0 d-------- C:\Documents and Settings\Niina\Contacts
2007-04-17 15:59:38 0 d-------- C:\Program Files\MSI
2007-04-17 15:59:27 306688 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller>
2007-04-17 07:25:25 0 d-------- C:\Documents and Settings\Niina\Application Data\Logitech
2007-04-16 21:17:22 0 d-------- C:\Documents and Settings\Omistaja\Application Data\SiteAdvisor
2007-04-16 21:17:22 0 d-------- C:\Documents and Settings\All Users\Application Data\SiteAdvisor
2007-04-16 21:17:22 0 d-------- C:\Documents and Settings\All Users\Application Data\McAfee
2007-04-16 20:48:35 0 d-------- C:\RadarSync Downloads
2007-04-16 20:48:34 0 d-------- C:\Program Files\RadarSync
2007-04-16 20:34:20 0 d-------- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2007-04-16 20:34:19 0 d-------- C:\Program Files\DVD Shrink
2007-04-16 20:21:14 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Opera
2007-04-16 20:21:08 0 d-------- C:\Program Files\Opera
2007-04-16 20:15:52 0 d-------- C:\WINDOWS\Sun
2007-04-16 20:12:08 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Template
2007-04-16 20:01:26 0 d-------- C:\WINDOWS\NV4681584.TMP
2007-04-16 19:51:54 0 d-------- C:\NVIDIA
2007-04-16 19:48:53 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Logitech
2007-04-16 19:11:47 3712 --a------ C:\WINDOWS\system32\drivers\LBeepKE.sys <Not Verified; Logitech, Inc.; Logitech SetPoint(TM)>
2007-04-16 19:11:46 53248 --a------ C:\WINDOWS\system32\KemXML.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2007-04-16 19:11:46 110592 --a------ C:\WINDOWS\system32\KemWnd.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2007-04-16 19:11:46 126976 --a------ C:\WINDOWS\system32\KemUtil.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2007-04-16 19:11:46 155648 --a------ C:\WINDOWS\system32\kemutb.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2007-04-16 19:11:27 0 d-------- C:\Program Files\Logitech
2007-04-16 19:11:26 0 d-------- C:\Program Files\Common Files\Logitech
2007-04-16 19:08:54 0 d-------- C:\Program Files\Google
2007-04-16 19:08:48 0 d-------- C:\Program Files\Picasa2
2007-04-16 18:41:44 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Lavasoft
2007-04-16 18:37:31 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-04-16 18:35:33 0 d-------- C:\Program Files\Lavasoft
2007-04-16 18:34:44 0 d-------- C:\Program Files\CPU-Z
2007-04-16 17:42:51 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-04-16 17:42:44 0 d-------- C:\Documents and Settings\All Users\Application Data\UDL
2007-04-16 17:42:01 479232 --a------ C:\WINDOWS\system32\PICSDK.dll <Not Verified; SEIKO EPSON CORPORATION; EPSON PIC SDK>
2007-04-16 17:42:01 114688 --a------ C:\WINDOWS\system32\EpPicPrt.dll <Not Verified; SEIKO EPSON CORPORATION; EPSON PIC SDK>
2007-04-16 17:42:00 89430 --a------ C:\WINDOWS\system32\EPPICPrinterDB.dat
2007-04-16 17:42:00 1139 --a------ C:\WINDOWS\system32\EPPICPresetData_PT.dat
2007-04-16 17:42:00 1120 --a------ C:\WINDOWS\system32\EPPICPresetData_IT.dat
2007-04-16 17:42:00 1107 --a------ C:\WINDOWS\system32\EPPICPresetData_GE.dat
2007-04-16 17:42:00 1129 --a------ C:\WINDOWS\system32\EPPICPresetData_FR.dat
2007-04-16 17:42:00 1136 --a------ C:\WINDOWS\system32\EPPICPresetData_ES.dat
2007-04-16 17:42:00 1104 --a------ C:\WINDOWS\system32\EPPICPresetData_EN.dat
2007-04-16 17:42:00 1146 --a------ C:\WINDOWS\system32\EPPICPresetData_DU.dat
2007-04-16 17:42:00 1129 --a------ C:\WINDOWS\system32\EPPICPresetData_CF.dat
2007-04-16 17:42:00 1139 --a------ C:\WINDOWS\system32\EPPICPresetData_BP.dat
2007-04-16 17:42:00 4943 --a------ C:\WINDOWS\system32\EPPICPattern6.dat
2007-04-16 17:42:00 21390 --a------ C:\WINDOWS\system32\EPPICPattern5.dat
2007-04-16 17:42:00 11811 --a------ C:\WINDOWS\system32\EPPICPattern4.dat
2007-04-16 17:42:00 24903 --a------ C:\WINDOWS\system32\EPPICPattern3.dat
2007-04-16 17:42:00 20148 --a------ C:\WINDOWS\system32\EPPICPattern2.dat
2007-04-16 17:42:00 26154 --a------ C:\WINDOWS\system32\EPPICPattern1.dat
2007-04-16 17:42:00 65536 --a------ C:\WINDOWS\system32\EPPicMgr.dll <Not Verified; SEIKO EPSON CORPORATION; EPSON PIC SDK>
2007-04-16 17:33:54 0 d-------- C:\Program Files\epson
2007-04-16 16:18:43 394 --a------ C:\Documents and Settings\Omistaja\Application Data\wklnhst.dat
2007-04-16 15:59:56 0 d-------- C:\Program Files\Microsoft Works
2007-04-16 15:53:33 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
2007-04-16 15:52:39 0 d-------- C:\Program Files\Windows Live Toolbar
2007-04-16 15:52:06 0 d------c- C:\WINDOWS\system32\DRVSTORE
2007-04-16 15:33:14 0 d-------- C:\Documents and Settings\Minna\Application Data\Talkback
2007-04-16 15:33:04 0 d-------- C:\Documents and Settings\Minna\Application Data\Thunderbird
2007-04-16 15:33:04 0 d-------- C:\Documents and Settings\Minna\Application Data\Mozilla
2007-04-16 15:23:48 0 d-------- C:\Documents and Settings\Minna\Application Data\McAfee.com Personal Firewall
2007-04-16 15:23:48 0 d-------- C:\Documents and Settings\Minna\Application Data\Adobe
2007-04-16 15:23:16 0 d-------- C:\Documents and Settings\Minna\Application Data\Identities
2007-04-16 15:23:06 0 dr------- C:\Documents and Settings\Minna\Omat tiedostot
2007-04-16 15:22:55 0 d--h----- C:\Documents and Settings\Minna\Verkkoympäristö
2007-04-16 15:22:55 0 d-------- C:\Documents and Settings\Minna\Työpöytä
2007-04-16 15:22:55 0 d--h----- C:\Documents and Settings\Minna\Tulostinympäristö
2007-04-16 15:22:55 0 dr------- C:\Documents and Settings\Minna\Suosikit
2007-04-16 15:22:55 0 dr-h----- C:\Documents and Settings\Minna\SendTo
2007-04-16 15:22:55 0 dr-h----- C:\Documents and Settings\Minna\Recent
2007-04-16 15:22:55 1048576 --ah----- C:\Documents and Settings\Minna\ntuser.dat
2007-04-16 15:22:55 0 d--h----- C:\Documents and Settings\Minna\Mallit
2007-04-16 15:22:55 0 d--h----- C:\Documents and Settings\Minna\Local Settings
2007-04-16 15:22:55 0 dr------- C:\Documents and Settings\Minna\Käynnistä-valikko
2007-04-16 15:22:55 0 d--hs---- C:\Documents and Settings\Minna\Cookies
2007-04-16 15:22:55 0 dr-h----- C:\Documents and Settings\Minna\Application Data
2007-04-16 15:22:55 0 d---s---- C:\Documents and Settings\Minna\Application Data\Microsoft
2007-04-16 07:38:34 0 d-------- C:\Documents and Settings\Niina\Application Data\Sun
2007-04-16 07:29:08 0 d-------- C:\Documents and Settings\Niina\Application Data\Macromedia
2007-04-16 07:28:04 0 d-------- C:\Documents and Settings\Niina\Application Data\Adobe
2007-04-15 23:16:23 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Adobe
2007-04-15 23:15:59 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2007-04-15 23:10:28 0 d-------- C:\Program Files\Ashampoo
2007-04-15 23:01:50 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Macromedia
2007-04-15 23:00:25 0 d-------- C:\Documents and Settings\All Users\Application Data\NVIDIA
2007-04-15 22:55:26 0 d-------- C:\Documents and Settings\All Users\Application Data\Elaborate Bytes
2007-04-15 22:47:49 0 d-------- C:\Documents and Settings\Omistaja\Application Data\SlySoft
2007-04-15 22:45:16 0 d-------- C:\Documents and Settings\All Users\Application Data\SlySoft
2007-04-15 22:45:03 0 d-------- C:\Program Files\Elaborate Bytes
2007-04-15 22:44:46 0 d-------- C:\Program Files\SlySoft
2007-04-15 22:38:56 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Sun
2007-04-15 22:31:32 0 d-------- C:\Documents and Settings\Niina\Application Data\Thunderbird
2007-04-15 22:30:20 0 d-------- C:\Documents and Settings\Niina\Application Data\Talkback
2007-04-15 22:30:05 0 d-------- C:\Documents and Settings\Niina\Application Data\Mozilla
2007-04-15 22:29:19 0 d-------- C:\Documents and Settings\Niina\Application Data\McAfee.com Personal Firewall
2007-04-15 22:29:12 0 d-------- C:\Documents and Settings\Niina\Application Data\Identities
2007-04-15 22:29:09 0 dr------- C:\Documents and Settings\Niina\Omat tiedostot
2007-04-15 22:29:06 0 d--h----- C:\Documents and Settings\Niina\Verkkoympäristö
2007-04-15 22:29:06 0 d-------- C:\Documents and Settings\Niina\Työpöytä
2007-04-15 22:29:06 0 d--h----- C:\Documents and Settings\Niina\Tulostinympäristö
2007-04-15 22:29:06 0 dr------- C:\Documents and Settings\Niina\Suosikit
2007-04-15 22:29:06 0 dr-h----- C:\Documents and Settings\Niina\SendTo
2007-04-15 22:29:06 0 dr-h----- C:\Documents and Settings\Niina\Recent
2007-04-15 22:29:06 2359296 --ah----- C:\Documents and Settings\Niina\ntuser.dat
2007-04-15 22:29:06 0 d--h----- C:\Documents and Settings\Niina\Mallit
2007-04-15 22:29:06 0 d--h----- C:\Documents and Settings\Niina\Local Settings
2007-04-15 22:29:06 0 dr------- C:\Documents and Settings\Niina\Käynnistä-valikko
2007-04-15 22:29:06 0 d--hs---- C:\Documents and Settings\Niina\Cookies
2007-04-15 22:29:06 0 dr-h----- C:\Documents and Settings\Niina\Application Data
2007-04-15 22:29:06 0 d---s---- C:\Documents and Settings\Niina\Application Data\Microsoft
2007-04-15 22:25:04 0 d-------- C:\Program Files\MSBuild
2007-04-15 22:22:29 0 d-------- C:\WINDOWS\system32\XPSViewer
2007-04-15 22:22:07 0 d-------- C:\Program Files\Reference Assemblies
2007-04-15 22:21:33 0 d-------- C:\6c748a570ed6779b23ab0e3440
2007-04-15 22:21:07 0 d-------- C:\Program Files\Windows Media Connect 2
2007-04-15 22:20:20 0 d-------- C:\WINDOWS\system32\LogFiles
2007-04-15 22:20:20 0 d-------- C:\WINDOWS\system32\drivers\UMDF
2007-04-15 21:59:19 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Thunderbird
2007-04-15 21:59:06 0 d-------- C:\Program Files\Mozilla Thunderbird
2007-04-15 21:57:03 262144 -----n--- C:\Documents and Settings\All Users\ntuser.dat
2007-04-15 21:56:00 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2007-04-15 21:42:49 0 d-------- C:\Program Files\Alwil Software
2007-04-15 21:36:40 53 --a------ C:\biosinfo
2007-04-15 21:33:29 0 d-------- C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall
2007-04-15 21:33:27 0 d-------- C:\Documents and Settings\LocalService\Application Data\McAfee.com Personal Firewall
2007-04-15 21:33:26 0 d-------- C:\Documents and Settings\Omistaja\Application Data\McAfee.com Personal Firewall
2007-04-15 21:31:54 24576 --a------ C:\WINDOWS\system32\MpfApi.dll <Not Verified; McAfee Security; McAfee Personal Firewall Plus>
2007-04-15 21:31:54 67584 --a------ C:\WINDOWS\system32\drivers\MpFirewall.sys <Not Verified; McAfee Security; McAfee Personal Firewall Plus>
2007-04-15 21:31:38 0 d-------- C:\Documents and Settings\All Users\Application Data\McAfee.com
2007-04-15 21:31:29 277616 --a------ C:\WINDOWS\system32\mcgdmgr.dll <Not Verified; McAfee, Inc; McAfee Security Download Control>
2007-04-15 21:31:29 0 d-------- C:\Program Files\McAfee.com
2007-04-15 21:29:22 0 d-------- C:\WINDOWS\nview
2007-04-15 21:29:21 131072 -ra------ C:\WINDOWS\system32\smdll.dll <Not Verified; ; SMdll Dynamic Link Library>
2007-04-15 21:29:21 128512 -ra------ C:\WINDOWS\system32\MadCHook.dll <Not Verified; www.madshi.net; madCHook>
2007-04-15 21:29:19 114688 -ra------ C:\WINDOWS\system32\sysinfo.dll <Not Verified; Crystal Dew World; SysInfo>
2007-04-15 21:29:19 262144 -ra------ C:\WINDOWS\system32\HookShield.dll
2007-04-15 21:29:19 253952 -ra------ C:\WINDOWS\system32\HookMAp.dll
2007-04-15 21:29:19 32768 -ra------ C:\WINDOWS\system32\Auxiliary.dll
2007-04-15 21:29:18 9728 -ra------ C:\WINDOWS\system32\sysinfoX64.sys
2007-04-15 21:29:18 8192 -ra------ C:\WINDOWS\system32\sysinfo.sys
2007-04-15 21:29:18 69632 -ra------ C:\WINDOWS\system32\sw24.exe
2007-04-15 21:29:18 208896 -ra------ C:\WINDOWS\system32\sw20.exe <Not Verified; ; sw20 Application>
2007-04-15 21:29:17 1593344 -ra------ C:\WINDOWS\system32\msicpl.dll <Not Verified; MSI; MSI MsiCpl>
2007-04-15 21:28:43 0 d-------- C:\Program Files\Common Files\InstallShield
2007-04-15 21:27:45 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe <Not Verified; Ahead Software Gmbh; Ahead Software Gmbh NeroCheck>
2007-04-15 21:27:24 0 d-------- C:\Program Files\Common Files\Nero
2007-04-15 21:26:49 3006464 -----n--- C:\WINDOWS\UNNeroVision.exe <Not Verified; Nero AG; Nero Web Engine>
2007-04-15 21:26:19 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll <Not Verified; Pegasus Imaging Corp.; TwnLib4>
2007-04-15 21:26:19 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-04-15 21:26:19 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-04-15 21:26:19 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-04-15 21:26:19 0 d-------- C:\Documents and Settings\All Users\Application Data\Ahead
2007-04-15 21:26:18 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll <Not Verified; Pegasus Software; TWNLIB20>
2007-04-15 21:26:18 38912 -----n--- C:\WINDOWS\system32\picn20.dll <Not Verified; Pegasus Imaging Corp.; PEGASUS>
2007-04-15 21:26:14 0 d-------- C:\Program Files\Common Files\Ahead
2007-04-15 21:26:12 0 d-------- C:\Program Files\Ahead
2007-04-15 21:24:39 0 d-------- C:\WINDOWS\system32\PreInstall
2007-04-15 21:22:58 0 d-------- C:\WINDOWS\system32\fi-fi
2007-04-15 21:22:00 0 d-------- C:\WINDOWS\network diagnostic
2007-04-15 21:21:36 0 d-------- C:\WINDOWS\system32\SoftwareDistribution
2007-04-15 21:07:43 0 d-------- C:\WINDOWS\system32\ReinstallBackups
2007-04-15 21:05:57 0 d--hs---- C:\Documents and Settings\Omistaja\UserData
2007-04-15 20:39:17 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Talkback
2007-04-15 20:39:09 0 -----n--- C:\WINDOWS\nsreg.dat
2007-04-15 20:39:06 107134 -----n--- C:\WINDOWS\UninstallFirefox.exe
2007-04-15 20:38:59 8355 --a------ C:\WINDOWS\mozver.dat
2007-04-15 20:38:59 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Mozilla
2007-04-15 20:33:45 0 d-------- C:\WINDOWS\RegisteredPackages
2007-04-15 20:33:43 0 d--h----- C:\WINDOWS\msdownld.tmp
2007-04-15 20:24:13 0 d-------- C:\Program Files\Common Files\Adobe
2007-04-15 20:16:34 0 d-------- C:\Documents and Settings\Omistaja\Application Data\Identities
2007-04-15 20:16:30 0 dr------- C:\Documents and Settings\Omistaja\Omat tiedostot
2007-04-15 20:15:52 0 d-------- C:\WINDOWS\system32\URTTemp
2007-04-15 20:15:43 0 d--h----- C:\Documents and Settings\Omistaja\Verkkoympäristö
2007-04-15 20:15:43 0 d-------- C:\Documents and Settings\Omistaja\Työpöytä
2007-04-15 20:15:43 0 d--h----- C:\Documents and Settings\Omistaja\Tulostinympäristö
2007-04-15 20:15:43 0 d-------- C:\Documents and Settings\Omistaja\Suosikit
2007-04-15 20:15:43 0 dr-h----- C:\Documents and Settings\Omistaja\SendTo
2007-04-15 20:15:43 3932160 --a------ C:\Documents and Settings\Omistaja\NTUSER.DAT
2007-04-15 20:15:43 0 d--h----- C:\Documents and Settings\Omistaja\Mallit
2007-04-15 20:15:43 0 d--h----- C:\Documents and Settings\Omistaja\Local Settings
2007-04-15 20:15:43 0 dr------- C:\Documents and Settings\Omistaja\Käynnistä-valikko
2007-04-15 20:15:43 0 d--hs---- C:\Documents and Settings\Omistaja\Cookies
2007-04-15 20:15:43 0 dr-h----- C:\Documents and Settings\Omistaja\Application Data
2007-04-15 20:15:37 0 d-------- C:\WINDOWS\SoftwareDistribution
2007-04-15 20:15:36 0 d---s---- C:\WINDOWS\system32\Microsoft
2007-04-15 20:15:36 0 d-------- C:\WINDOWS\Prefetch
2007-04-15 20:15:35 724992 --a------ C:\Documents and Settings\LocalService\NTUSER.DAT
2007-04-15 20:15:35 0 d--h----- C:\Documents and Settings\LocalService\Local Settings
2007-04-15 20:15:35 0 d--hs---- C:\Documents and Settings\LocalService\Cookies
2007-04-15 20:15:35 0 d-------- C:\Documents and Settings\LocalService\Application Data
2007-04-15 20:15:35 0 d---s---- C:\Documents and Settings\LocalService\Application Data\Microsoft
2007-04-15 20:15:32 724992 --a------ C:\Documents and Settings\NetworkService\NTUSER.DAT
2007-04-15 20:15:32 0 d--h----- C:\Documents and Settings\NetworkService\Local Settings
2007-04-15 20:15:32 0 d--hs---- C:\Documents and Settings\NetworkService\Cookies
2007-04-15 20:15:32 0 d-------- C:\Documents and Settings\NetworkService\Application Data
2007-04-15 20:15:32 0 d---s---- C:\Documents and Settings\NetworkService\Application Data\Microsoft
2007-04-15 20:13:13 0 d-------- C:\WINDOWS\system32\xircom
2007-04-15 20:13:13 0 d-------- C:\Program Files\microsoft frontpage
2007-04-15 20:13:11 229376 ---h----- C:\Documents and Settings\Default User\NTUSER.DAT
2007-04-15 20:12:41 0 d-------- C:\Program Files\Java
2007-04-15 20:12:40 0 d-------- C:\Program Files\Common Files\Java
2007-04-15 20:12:34 0 d-------- C:\WINDOWS\fsc
2007-04-15 20:12:34 0 d-------- C:\AddOn
2007-04-15 20:12:32 0 d--h----- C:\WINDOWS\$hf_mig$
2007-04-15 20:12:25 0 -r-hs---- C:\MSDOS.SYS
2007-04-15 20:12:25 0 -r-hs---- C:\IO.SYS
2007-04-15 20:12:25 0 -----n--- C:\CONFIG.SYS
2007-04-15 20:12:25 0 -----n--- C:\AUTOEXEC.BAT
2007-04-15 20:11:46 0 d--hs---- C:\Documents and Settings\All Users\DRM
2007-04-15 20:11:39 0 dr------- C:\WINDOWS\Offline Web Pages
2007-04-15 20:11:39 0 d---s---- C:\WINDOWS\Downloaded Program Files
2007-04-15 20:11:31 0 d--h----- C:\Program Files\WindowsUpdate
2007-04-15 20:11:30 0 d-------- C:\Program Files\Online Services
2007-04-15 20:11:24 0 d-------- C:\WINDOWS\system32\DirectX
2007-04-15 20:11:19 0 d---s---- C:\WINDOWS\Tasks
2007-04-15 20:11:18 0 d-------- C:\WINDOWS\system32\Macromed
2007-04-15 20:11:18 0 d-------- C:\WINDOWS\srchasst
2007-04-15 20:11:18 0 d-------- C:\Program Files\Common Files\MSSoap
2007-04-15 20:11:16 0 d-------- C:\Program Files\Movie Maker
2007-04-15 20:11:14 0 d-------- C:\WINDOWS\system32\Restore
2007-04-15 20:11:10 21672 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-04-15 20:11:04 0 d-------- C:\WINDOWS\Registration
2007-04-15 20:10:44 0 d-------- C:\Program Files\MSN Gaming Zone
2007-04-15 20:10:44 0 d-------- C:\Program Files\Messenger
2007-04-15 20:10:38 0 d-------- C:\Program Files\Windows NT
2007-04-15 20:10:36 0 d-------- C:\WINDOWS\system32\MsDtc
2007-04-15 20:10:36 0 d-------- C:\WINDOWS\system32\Com
2007-04-01 15:34:21 86016 --a------ C:\WINDOWS\system32\ElbyCDIO.dll <Not Verified; Elaborate Bytes AG; Elaborate Bytes CDRTools>


-- Find3M Report ---------------------------------------------------------------

2007-04-22 11:38:24 410768 --a------ C:\WINDOWS\system32\perfh00B.dat
2007-04-22 11:38:24 83594 --a------ C:\WINDOWS\system32\perfc00B.dat
2007-03-22 20:25:02 124928 -----n--- C:\WINDOWS\system32\prntvpt.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>


-- Registry Dump ---------------------------------------------------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"SW20"="C:\\WINDOWS\\system32\\sw20.exe"
"SW24"="C:\\WINDOWS\\system32\\sw24.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"MPFExe"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe"
"MCAgentExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"
"MCUpdateExe"="C:\\PROGRA~1\\mcafee.com\\agent\\McUpdate.exe"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"EPSON Stylus DX4800 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIADE.EXE /P26 \"EPSON Stylus DX4800 Series\" /O6 \"USB001\" /M \"Stylus DX4800\""
"Picasa Media Detector"="C:\\Picasa2\\PicasaMediaDetector.exe"
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"SoundMan"="SOUNDMAN.EXE"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"NVIDIA nTune"="\"C:\\Program Files\\NVIDIA Corporation\\nTune\\nTuneCmd.exe\" clear"
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe"
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"AnyDVD"="C:\\Program Files\\SlySoft\\AnyDVD\\AnyDVD.exe"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system\Shell]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"LinkResolveIgnoreLinkInfo"=dword:00000000
"NoResolveSearch"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"LinkResolveIgnoreLinkInfo"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0


[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0



-- End of Deckard's System Scanner: finished at 2007-04-29 at 21:38:56 ---------
ja sitten AVG:
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 22:07:10 29.4.2007

+ Scan result:



C:\Documents and Settings\Omistaja\Cookies\omistaja@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.27:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\ex91hg74.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.28:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\ex91hg74.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.45:C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\kneaitvf.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.46:C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\kneaitvf.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\Niina\Cookies\niina@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.32:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\ex91hg74.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.33:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\ex91hg74.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.11:C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\kneaitvf.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.19:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\ex91hg74.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\Niina\Cookies\niina@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\Omistaja\Cookies\omistaja@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.37:C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\kneaitvf.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.38:C:\Documents and Settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\kneaitvf.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.


::Report end

Pysy puhtaana

-> Tyhjennä järjestelmänpalautus Ohjeet
Tyhjennä järjestelmänpalautuskansio ja luo uusi palautuspiste. Tämä puhdistaa palautuskansion mahdollisista haittaohjelmajäännöksistä.

-> Käytä CCleaneria -> CCleaner
Lataa ja asenna CCleaner. Puhdista väliaikaistiedostot ja -kansiot ohjelmalla säännöllisesti.

-> Asenna SpywareBlaster -> SpywareBlaster
SpywareBlaster estää haittaohjelmia asentumasta koneellesi. Ei kuluta muistia!
Opas saatavilla suomeksi! Nimimerkki Ad-Awaren opas

-> Asenna MVPS Hosts tiedosto -> MVPS Hosts
Estää koneesi yhteyden haitallisiin sivustoihin.
Opas saatavilla suomeksi! Nimimerkki Axelin opas

-> Vaihda selaimesi Firefoxiin -> Firefox
Firefox on nopeampi, turvallisempi ja parempi selain kuin Internet Explorer.

-> Pidä järjestelmäsi ajantasalla. -> Windows Update
Vieraile Windows Updatessa säännöllisesti.

-> Pidä palomuuri ja virustorjunta ajantasalla
Päivitä ja skannaa koneesi säännöllisesti virustorjuntaohjelmallasi.
ja hyvä myös escan http://koti.mbnet.fi/pattaya1/escanmwav.htm

->Pidä ohjelmistosi ajantasalla. -> Secunia Software Inspector
Secunia Software Inspector tutkii sinun järjestälmäsi ja ohjelmistosi puuttuvien turvallisuuspäivityksien osalta. Tavallinen tutkinta kestää normaalisti 5-40 sekuntia, kun läpikotainen (thorough system inspection) voi kestää useita minuutteja.

->Seuraa säännöllisesti viestintäviraston tietoja uusista haavoittuvuuksista -> CERT-FI

OK.Kiitos ja kumarrus.