---

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:33:08, on 28.1.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal



Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

F:\Ohjelmat\Ad Aware 2008\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

F:\Ohjelmat\Avira\AntiVir PersonalEdition Classic\sched.exe

F:\Ohjelmat\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

F:\Ohjelmat\Avira\AntiVir PersonalEdition Classic\avgnt.exe

F:\Ohjelmat\Winamp\winampa.exe

C:\Program Files\ASUS\Six Engine\SixEngine.exe

F:\Ohjelmat\ZoneAlarm\zlclient.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Microsoft IntelliType Pro\itype.exe

F:\Ohjelmat\RivaTuner v2.22\RivaTuner.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

F:\Ohjelmat\DAEMON Tools Lite\daemon.exe

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

F:\Ohjelmat\CoreTemp\Core Temp.exe

F:\Ohjelmat\uTorrent\uTorrent.exe

F:\ohjelmat\steam\steam.exe

F:\Ohjelmat\Logitech SetPoint\SetPoint\SetPoint.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

F:\Ohjelmat\Opera 9.6\opera.exe

F:\Ohjelmat\Hijack This\HijackThis.exe



R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\Ohjelmat\SPYBOT~1\SDHelper.dll

O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

O4 - HKLM\..\Run: [avgnt] "F:\Ohjelmat\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [WinampAgent] F:\Ohjelmat\Winamp\winampa.exe

O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\Six Engine\SixEngine.exe" -r

O4 - HKLM\..\Run: [ZoneAlarm Client] "F:\Ohjelmat\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Ohjelmat\Adobe Reader 9\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"

O4 - HKLM\..\Run: [RivaTuner] "F:\Ohjelmat\RivaTuner v2.22\RivaTuner.exe" /T

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "F:\Ohjelmat\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Core Temp] "F:\Ohjelmat\CoreTemp\Core Temp.exe"

O4 - HKCU\..\Run: [uTorrent] "F:\Ohjelmat\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [Steam] "f:\ohjelmat\steam\steam.exe" -silent

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Logitech SetPoint.lnk = F:\Ohjelmat\Logitech SetPoint\SetPoint\SetPoint.exe

O8 - Extra context menu item: V&ie Microsoft Exceliin - res://F:\Ohjelmat\MSOFFI~1\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\Ohjelmat\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\Ohjelmat\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - F:\Ohjelmat\Ad Aware 2008\aawservice.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - F:\Ohjelmat\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - F:\Ohjelmat\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe



--

End of file - 7145 bytes

---

---

Windows:            	Windows XP5.1 (Build 2600) Service Pack 3

Internet Explorer:  	6.0.2900.5512

Memory (RAM):       	3327 MB

CPU Info:           	Intel(R) Core(TM)2 Duo CPU     E8500  @ 3.16GHz

CPU Speed:          	3166,9 MHz

Sound card:         	Realtek HD Audio output

Display Adapters:   	ATI Radeon HD 4800 Series | ATI Radeon HD 4800 Series | NetMeeting driver | RDPDD Chained DD

Monitors:           	2

Screen Resolution:  	1680 X 1050 - 32 bit

Network:            	Network Present

Network Adapters:   	Atheros AR8121/AR8113 PCI-E Ethernet Controller - Paketinajoituksen miniportti

CD / DVD Drives:    	D: TSSTcorpCDDVDW SH-S223F  | H: GNKBKXM 2BSH6305         | I: GNKBKXM 2BSH6305

COM Ports:          	COM1

LPT Ports:          	NOT Present

Mouse:              	16 Button Wheel Mouse Present

Hard Disks:         	C:  29,3GB | E:  29,3GB | F:  219,7GB | G:  317,9GB | J:  293,4GB | K:  302,7GB

Hard Disks - Free:  	C:  17,5GB | E:  29,2GB | F:  39,8GB | G:  70,6GB | J:  72,4GB | K:  45,1GB

USB Controllers:    	8 host controllers.

Firewire (1394):    	1 host controllers.

PCMCIA (Laptops):   	Not Installed

Manufacturer:       	American Megatrends Inc.

Product Make:       	P5Q-PRO

AC Power Status:    	OnLine

BIOS Info:          	AT/AT COMPATIBLE | 08/20/08 | A_M_I_ - 8000820

Time Zone:          	Normaaliaika

Battery:            	No Battery

Motherboard:        	ASUSTeK Computer INC. P5Q-PRO

Modem:              	Not detected

:                   	

---

---

Näytönohjaimen ajurit 8.561.0.0 (1.12.2008)

ATI CCC ajurit 2008.1201.1504.27008 (1.12.2008)

RealTek HD ajurit 5.10.0.5628 (20.5.2008)

ffdshow Nov 28 2006

AC3Filter 1.51a

ZoneAlarm 7.0.483.000

Avira AntiVir 8.2.0.337

NET Framework 2.0, 3.0, 3.5

Direct X 9.0c

Windows Live Messanger v. 2008 (8.5.1302.1018) 

---