|
Keskustelualueet
Keskustelualueet
|
|
Hidastunut netti
|
|
Khuz
Newbie
|
15. kesäkuuta 2007 @ 10:04 |
Linkki tähän viestiin
|
Logfile of HijackThis v1.99.1
Scan saved at 13:56:53, on 15.6.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\diisgqje.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\DOCUME~1\HP_OMI~1\LOCALS~1\Temp\Tilapäinen kansio 1 HijackThis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6} - C:\WINDOWS\system\bzmtcs32.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2D2A157F-A2BD-45CC-971D-F6C7D78D8994} - c:\windows\system32\mfcamfc.dll
O2 - BHO: (no name) - {67B04E76-D9E1-4FA6-A920-DEC576C5BF40} - c:\windows\system32\gelfqher.dll
O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - C:\WINDOWS\system32\ipv6monr.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ccApp] -
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NAV CfgWiz] "c:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [diisgqje] C:\WINDOWS\system32\diisgqje.exe
O4 - HKCU\..\Run: [diisgqje] C:\WINDOWS\system32\diisgqje.exe
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MS_update_0612_KB74062.exe
O4 - Global Startup: MS_update_0704_KB74073.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\SpyCatcher 2006\Protector.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - Winlogon Notify: dvkwfpyo - C:\WINDOWS\SYSTEM32\mfcamfc.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
|
Member
|
15. kesäkuuta 2007 @ 10:52 |
Linkki tähän viestiin
|
Ihmekkään kun hidastelee - täynnä örkkejä.
Aja nämä ohjelmat tässä järjestyksessä:
1. Dr.Web
2. Combofix
3. HijackThis
====
* Lataa Dr.Web CureIt työpöydälle:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
* Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan
* Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan.
* Kun scan on valmis, merkkaa asemat, jotka haluat scannata.
* Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu.
* Klikaa vihreää nuolta oikealla ja scan alkaa.
* Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston.
* Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä: 
* Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa:

Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon.
* Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list
* Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv
* Sulje Dr.Web Cureit.
* Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä.
* Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.
====
1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
combofix.exe
combofix.exe
2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
====
Lähetä uusi HjT loki, Dr.Web.csv ja C:\combofix.txt
Oon viikonlopun muualla joten vastaan sitten sunnuntaina
Virustorjunta.net asiantuntevaa palvelua ilman peeloilua.
Hjt-lokit tänne
|
Khuz
Newbie
|
15. kesäkuuta 2007 @ 13:11 |
Linkki tähän viestiin
|
Noni tässä on nyt nämä logit:
HjT
Combofix
Drweb
tos järjestykses
Logfile of HijackThis v1.99.1
Scan saved at 17:08:24, on 15.6.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\DOCUME~1\HP_OMI~1\LOCALS~1\Temp\Tilapäinen kansio 1 HijackThis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6} - C:\WINDOWS\system\bzmtcs32.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {67B04E76-D9E1-4FA6-A920-DEC576C5BF40} - c:\windows\system32\gelfqher.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [ccApp] -
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NAV CfgWiz] "c:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MS_update_0612_KB74062.exe
O4 - Global Startup: MS_update_0704_KB74073.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\SpyCatcher 2006\Protector.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
ComboFix 07-06-13.3 - C:\Documents and Settings\HP_Omistaja\Ty?p?yt?\ComboFix.exe
"HP_Omistaja" - 2007-06-15 16:50:11 - Service Pack 2 NTFS
(((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))
C:\WINDOWS\system32\mfcamfc.dll
* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\WINDOWS\system32\drivers\bfmmhdim.sys
C:\WINDOWS\system32\mfcamfc.dll
C:\WINDOWS\system32\mfcamfc.dll.bak
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
-------\LEGACY_EMBHWDGM
-------\LEGACY_PYJLQICD
-------\embhwdgm
-------\pyjlqicd
((((((((((((((((((((((((( Files Created from 2007-05-15 to 2007-06-15 )))))))))))))))))))))))))))))))
2007-06-15 16:50 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\vgrsqfxs.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\vcasslcl.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\sksoaaaa.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\plxhbupf.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\plkrshna.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\mfxbcaaa.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jryssasq.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jrvvgnko.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jrmpspyx.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\duedaaaa.exe
2007-06-15 15:03 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\DoctorWeb
2007-06-15 14:43 <KANSIO> d-------- C:\Program Files\Yahoo!
2007-06-15 14:43 <KANSIO> d-------- C:\Program Files\CCleaner
2007-06-15 14:39 <KANSIO> d-------- C:\VundoFix Backups
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\vxwcoaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\phwyfwiw.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\phjwtxpq.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\jnbpfhfn.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\jjabaaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsqsaaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsnukaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsaahogv.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\dqatbaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\ahofibnl.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\vgmuqtbr.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\soqexaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\sogaavcb.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvvppaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvuoalik.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvhwwpwr.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvgetaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\gbaekaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\dyjunslq.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\apjepndq.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\vcqeaaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\phuaaaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\phiudaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\mfvotlju.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\mfugaaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\jrdyijeb.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\gsfvuaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\dqrjiaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\aliojvov.exe
2007-06-15 13:49 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
2007-06-15 12:35 <KANSIO> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-06-15 04:24 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-06-15 04:24 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-06-15 04:24 129,784 --------- C:\WINDOWS\system32\pxafs.dll
2007-06-15 04:21 684,567 --a------ C:\WINDOWS\system32\libeay32.dll
2007-06-15 04:21 147,729 --a------ C:\WINDOWS\system32\libssl32.dll
2007-06-15 04:17 91,136 --a------ C:\WINDOWS\system32\wbyzxnsd.dll
2007-06-15 04:17 750,592 --a------ C:\WINDOWS\system32\pllspvuc.dll
2007-06-15 04:17 59,392 --a------ C:\WINDOWS\system32\gelfqher.dll
2007-06-15 04:17 42,496 --a------ C:\WINDOWS\system32\fjxrozbp.dll
2007-06-15 04:17 139,264 --a------ C:\WINDOWS\system32\pohpvdxg.dll
2007-06-15 04:14 <KANSIO> d-------- C:\WINDOWS\0F0447B46DDD4831933A1EDF52091150.TMP
2007-06-15 04:11 74,752 --a------ C:\WINDOWS\system32\kkcakkc.dll
2007-06-15 04:11 16,384 --a------ C:\WINDOWS\system32\sxwunaaa.exe
2007-06-15 04:11 140,288 --a------ C:\WINDOWS\system32\jjxfwtvl.exe
2007-06-15 04:11 140,288 --a------ C:\WINDOWS\system32\dmbnuaaa.exe
2007-06-15 04:11 10,240 --a------ C:\WINDOWS\system\bzmtcs32.dll
2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\vtqbnaaa.exe
2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\pyvflccd.exe
2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\jfkpqxxf.exe
2007-06-15 04:11 <KANSIO> dr-hs---- C:\cmdcons
2007-06-15 04:11 <KANSIO> d-------- C:\WINDOWS\setupupd
2007-06-15 04:10 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-06-15 04:09 1,835,008 --a------ C:\DOCUME~1\HP_OMI~1\NTUSER.DAT
2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\Suosikit
2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\Omat tiedostot
2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\K?ynnist?-valikko
2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Verkkoymp?rist?
2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Tulostinymp?rist?
2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Mallit
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\WINDOWS
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\Ty?p?yt?
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Symantec
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\SampleView
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Intervideo
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Apple Computer
2007-06-15 04:07 21,060 --------- C:\WINDOWS\system32\drivers\iviaspi.sys
2007-06-15 04:07 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys
2007-06-15 03:54 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2007-06-15 03:54 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-06-15 03:54 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-06-15 03:54 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2007-06-15 03:54 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2007-06-15 03:54 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2007-06-15 03:53 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-06-15 03:53 61,056 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys
2007-06-15 03:53 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-06-15 03:53 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-06-15 03:53 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2007-06-15 03:53 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-06-15 03:53 53,248 --a------ C:\WINDOWS\system32\drivers\1394bus.sys
2007-06-15 03:53 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-06-15 03:53 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-06-15 03:53 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-06-15 03:53 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-06-15 13:48:40 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-06-15 13:48:40 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Hamachi
2007-06-15 11:14:35 -------- d-----w C:\Program Files\MSN Messenger
2007-06-15 11:07:17 -------- d-----w C:\Program Files\World of Warcraft
2007-06-15 09:46:09 -------- d-----w C:\Program Files\Windows NT
2007-06-15 09:46:00 -------- d-----w C:\Program Files\Movie Maker
2007-06-15 09:45:59 -------- d-----w C:\Program Files\Messenger
2007-06-15 01:28:08 -------- d-----w C:\Program Files\DivX
2007-06-15 01:11:42 356,362 ----a-w C:\WINDOWS\system32\perfh00B.dat
2007-06-15 01:11:41 65,898 ----a-w C:\WINDOWS\system32\perfc00B.dat
2007-06-15 00:59:34 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-06-14 23:20:00 -------- d-----w C:\Program Files\Warcraft III
2007-06-14 23:11:57 -------- d-----w C:\Program Files\Bethesda Softworks(2)
2007-06-14 23:11:34 -------- d-----w C:\Program Files\Starcraft(2)
2007-06-14 23:08:11 -------- d-----w C:\Program Files\Uthgard Launcher
2007-06-14 23:07:01 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Xfire
2007-06-14 22:30:26 -------- d-----w C:\Program Files\Intel
2007-06-14 22:29:50 -------- d-----w C:\Program Files\DAEMON Tools
2007-06-14 22:29:44 -------- d-----w C:\Program Files\Macrogaming
2007-05-25 08:40:36 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\AdobeUM
2007-05-12 18:35:16 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Electronic Arts
2007-05-06 15:04:12 12,240 ----a-w C:\WINDOWS\scunin.dat
2007-05-02 19:38:05 54,675 ----a-w C:\WINDOWS\War3Unin.dat
2007-05-02 17:09:07 12,288 ----a-w C:\WINDOWS\winhp32cln.exe
2007-05-01 18:35:43 -------- d-----w C:\Program Files\Hamachi
2007-05-01 18:17:44 2,829 ----a-w C:\WINDOWS\War3Unin.pif
2007-05-01 18:17:44 139,264 ----a-w C:\WINDOWS\War3Unin.exe
2007-05-01 18:01:39 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\WinRAR
2007-05-01 17:37:00 -------- d-----w C:\Program Files\Ocean Technology
2007-04-27 13:30:40 3,555 -c--a-w C:\WINDOWS\mozver.dat
2007-04-26 20:43:47 -------- d-----w C:\Program Files\TechSmith
2007-04-26 20:41:35 -------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-04-23 00:15:29 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-04-23 00:15:18 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-04-23 00:15:18 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-04-23 00:02:34 73,728 ----a-w C:\WINDOWS\system32\dpl100.dll
2007-04-23 00:02:34 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2007-04-23 00:02:33 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-04-23 00:02:31 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-04-23 00:02:31 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2007-04-23 00:02:31 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2007-04-23 00:02:31 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2007-04-23 00:02:31 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2007-04-23 00:01:47 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-04-23 00:01:46 124,472 ----a-w C:\WINDOWS\system32\DivXCodecUpdateChecker.exe
2007-04-21 19:39:55 -------- d-----w C:\Program Files\VentSrv
2007-04-20 09:19:42 -------- d-----w C:\Program Files\LucasArts
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{02478D38-C3F9-4EFB-9B51-7695ECA05670}=C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 10:28]
{060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6}=C:\WINDOWS\system\bzmtcs32.dll [2007-06-15 04:11]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 22:17]
{67B04E76-D9E1-4FA6-A920-DEC576C5BF40}=c:\windows\system32\gelfqher.dll [2007-06-15 04:17]
{9ECB9560-04F9-4bbc-943D-298DDF1699E1}=c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [2004-02-09 15:37]
{BDF3E430-B101-42AD-A544-FADC6B084872}=c:\Program Files\Norton AntiVirus\NavShExt.dll [2004-09-03 02:23]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2005-01-01 09:50]
"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 20:34]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 21:02]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 14:03]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 14:03]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-06-17 00:38]
"VTTimer"="VTTimer.exe" []
"SiSPower"="SiSPower.dll" [2004-09-24 10:49 C:\WINDOWS\system32\SiSPower.dll]
"ccApp"="-" []
"SSC_UserPrompt"="c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-08-25 00:27]
"NAV CfgWiz"="c:\Program Files\Norton AntiVirus\CfgWiz.exe" [2004-09-03 03:23]
"IS CfgWiz"="c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe" [2004-03-01 17:44]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 C:\WINDOWS\AGRSMMSG.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-09 21:10]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 C:\WINDOWS\ALCXMNTR.EXE]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 22:54]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-09-15 00:20]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs
pyjlqicd
Contents of the 'Scheduled Tasks' folder
2007-05-25 17:00:00 C:\WINDOWS\tasks\Norton AntiVirus - Tarkista tietokone - HP_Omistaja.job
2005-01-01 07:36:42 C:\WINDOWS\tasks\Symantec NetDetect.job
2007-06-03 23:00:00 C:\WINDOWS\tasks\wrSpySweeperTrialSweep.job
**************************************************************************
catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-15 16:54:07
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
Completion time: 2007-06-15 16:54:42 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-06-15 16:54
--- E O F ---
diisgqje.exe;c:\windows\system32;BackDoor.Roam;Deleted.;
ipv6monr.dll;c:\windows\system32;Trojan.PWS.Tanspy;Will be cured after reboot.;
nsi30.tmp;C:\Documents and Settings\HP_Omistaja\Local Settings\Temp;Tool.Prockill;Incurable.Moved.;
SteamInstall.exe;C:\Documents and Settings\HP_Omistaja\Työpöytä\sälää;Win32.HLLW.MyBot;Deleted.;
ANTIFUN.EXE;C:\Documents and Settings\HP_Omistaja\Työpöytä\sälää\antifun;Probably BACKDOOR.Trojan;Incurable.Moved.;
KillWind.exe;C:\HP\bin;Tool.ProcessKill;Incurable.Moved.;
SetupDTSB.exe;C:\Program Files\DAEMON Tools;Adware.SaveNow;Incurable.Moved.;
mirc.exe;C:\Program Files\mIRC;Program.mIRC.617;Incurable.Moved.;
A0000072.exe;C:\System Volume Information\_restore{04486428-9B71-4484-9673-4493EB5E2F46}\RP2;BackDoor.Roam;Deleted.;
A0000074.exe;C:\System Volume Information\_restore{04486428-9B71-4484-9673-4493EB5E2F46}\RP2;Win32.HLLW.MyBot;Deleted.;
1809.exe;C:\WINDOWS;Trojan.PWS.Tanspy;Deleted.;
423125744.dll;C:\WINDOWS;Trojan.Click.2269;Deleted.;
winhp32.exe;C:\WINDOWS;Trojan.Hooker.175;Deleted.;
bqmtcs32.dll;C:\WINDOWS\system;Trojan.Mocalfost;Deleted.;
wmecst32.dll;C:\WINDOWS\system;BackDoor.IRC.Sdbot.1348;Deleted.;
ayacaaaa.exe;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
ipv6monr.dll;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Will be cured after reboot.;
ipv6mons.dll;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
pygvaxbl.exe;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
vpqreqgw.exe;C:\WINDOWS\system32;BackDoor.Roam;Deleted.;
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 15. kesäkuuta 2007 @ 13:13
|
Mainos
|
  |
|
Member
|
17. kesäkuuta 2007 @ 14:27 |
Linkki tähän viestiin
|
Moi!
Nyt on sellainen homma, että sun konees on niin täynnä örkkejä, että olisi paljon järkevämpää formatoida kuin alkaa väsäämään mitään.
Eli suosittelen että formatoit koneesi jos asennus-cd sulta löytyy.
Virustorjunta.net asiantuntevaa palvelua ilman peeloilua.
Hjt-lokit tänne
|
|