Örkkejä- HJT-logi

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Kajo, Jan 11, 2007.

  1. Kajo

    Kajo Member

    Joined:
    Jan 11, 2007
    Messages:
    53
    Likes Received:
    0
    Trophy Points:
    16
    kolmaskerta toden sanoo, apu tarpeen...

    Logfile of HijackThis v1.99.1
    Scan saved at 15:38:20, on 11.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
    C:\PROGRA~1\SwiftBtn\SwiftBtn.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    D:\Program Files\Ahead\InCD\InCD.exe
    C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
    C:\WINDOWS\system32\carpserv.exe
    D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    D:\Program Files\F-Secure\Common\FSM32.EXE
    d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    d:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\bgsvcgen.exe
    D:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    D:\Program Files\F-Secure\Common\FSMA32.EXE
    D:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
    D:\Program Files\F-Secure\Common\FSMB32.EXE
    D:\Program Files\Spyware Doctor\sdhelp.exe
    D:\Program Files\F-Secure\Common\FCH32.EXE
    C:\WINDOWS\System32\svchost.exe
    D:\Program Files\F-Secure\Common\FAMEH32.EXE
    D:\Program Files\F-Secure\Anti-Virus\fsqh.exe
    D:\Program Files\F-Secure\FSPC\fspc.exe
    C:\Program Files\iPod\bin\iPodService.exe
    D:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    D:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    D:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    d:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    d:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\alg.exe
    D:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    D:\Program Files\F-Secure\FSGUI\fsguidll.exe
    C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
    D:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
    O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [QT4StBtn] C:\PROGRA~1\SwiftBtn\SwiftBtn.EXE
    O4 - HKLM\..\Run: [OM_Monitor] D:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSBAR.DLL,S
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [InCD] "D:\Program Files\Ahead\InCD\InCD.exe"
    O4 - HKLM\..\Run: [GhostStartTrayApp] "C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe"
    O4 - HKLM\..\Run: [CARPService] carpserv.exe
    O4 - HKLM\..\Run: [avast!] d:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [OM_Monitor] D:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
    O4 - HKCU\..\Run: [Spyware Doctor] "D:\Program Files\Spyware Doctor\swdoctor.exe" /Q
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?d6a3c65b57ff46b199d95787f28ffc22
    O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?d6a3c65b57ff46b199d95787f28ffc22
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O9 - Extra button: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - D:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - D:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{21D34BB5-2117-4B1C-AB2E-3A22750FFA93}: NameServer = 85.255.115.59,85.255.112.77
    O17 - HKLM\System\CCS\Services\Tcpip\..\{45078885-FD5F-4FA7-BA66-F2BB4F4B933C}: NameServer = 85.255.115.59,85.255.112.77
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.59 85.255.112.77
    O17 - HKLM\System\CS1\Services\Tcpip\..\{21D34BB5-2117-4B1C-AB2E-3A22750FFA93}: NameServer = 85.255.115.59,85.255.112.77
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.59 85.255.112.77
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - D:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - D:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - D:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Program Files\Spyware Doctor\sdhelp.exe
     
    Kajo, Jan 11, 2007
    #1
  2. Gaobot

    Gaobot Member

    Joined:
    Jan 8, 2007
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    Kumpaa virustorjuntaa käytät, F-secure vai Avast? Poista jompikumpi koneelta.

    Merkkaa ja paina fix checked:

    O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSBAR.DLL,S
    O17 - HKLM\System\CCS\Services\Tcpip\..\{21D34BB5-2117-4B1C-AB2E-3A22750FFA93}: NameServer = 85.255.115.59,85.255.112.77
    O17 - HKLM\System\CCS\Services\Tcpip\..\{45078885-FD5F-4FA7-BA66-F2BB4F4B933C}: NameServer = 85.255.115.59,85.255.112.77
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.59 85.255.112.77
    O17 - HKLM\System\CS1\Services\Tcpip\..\{21D34BB5-2117-4B1C-AB2E-3A22750FFA93}: NameServer = 85.255.115.59,85.255.112.77
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.59 85.255.112.77

    Jos oot Spy sweeperin poistanut niin fixaa tuokin:

    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

    Poista tuo kansio:

    C:\PROGRA~1\--->MYWEBS~1<---

    Lataa fixwareout.exe jommastakummasta osotteesta:

    http://downloads.subratam.org/Fixwareout.exe
    http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

    -Tallenna se työpöydälle
    -Tuplaklikkaa ohjelman kuvaketta ja seuraa ohjeita.
    -Klikkaa Next.
    -sitten Install ja varmistu, että "Run fixit" on valittu.
    -Käynnistä kone uudelleen kun ohjelma niin pyytää.
    -Kun kone on käynnistynyt, aja Fixwareout uudelleen samalla tavalla.

    Lähetä FixWareout loppuraportti, löytyy yleensä sijainnista c:\fixwareout\report.txt, lähetä myös uusi HJT logi.
     
    Last edited: Jan 11, 2007
    Gaobot, Jan 11, 2007
    #2
  3. -kemisti-

    -kemisti- Active member

    Joined:
    Jun 6, 2005
    Messages:
    6,305
    Likes Received:
    0
    Trophy Points:
    96
    Niin se My Web Search varmaankin ensin poistetaan ohjauspaneelin kautta, jos siellä näkyy, kun se sieltä lähtee...
     
    -kemisti-, Jan 11, 2007
    #3
  4. Gaobot

    Gaobot Member

    Joined:
    Jan 8, 2007
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    @-kemisti-

    Niin, voihan sen niinkin tehdä..;)
     
    Gaobot, Jan 11, 2007
    #4
  5. -kemisti-

    -kemisti- Active member

    Joined:
    Jun 6, 2005
    Messages:
    6,305
    Likes Received:
    0
    Trophy Points:
    96
    @Gaobot: Ei vaan se on ainoa oikea tapa :) Jos sovelluksen voi poistaa ohjauspaneelista, niin se poistetaan. Hakemiston poisto jättää rekisteriin p*skaa.
     
    -kemisti-, Jan 11, 2007
    #5
  6. Kajo

    Kajo Member

    Joined:
    Jan 11, 2007
    Messages:
    53
    Likes Received:
    0
    Trophy Points:
    16
    Täältä tulee...


    Fixwareout
    Last edited 1/1/2006
    Post this report in the forums please
    ...
    Prerun check
    »»»»» HKLM run and Winlogon System values
    »»»»» System restarted
    ...
    Reg Entries that were deleted
    ...
    Random Runs removed from HKLM
    ...

    PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

    »»»»» Searching by size/names...

    »»»»»
    Search five digit cs, dm kd and jb files.
    This WILL/CAN also list Legit Files, Submit them at Virustotal

    Other suspects.

    »»»»» Misc files.

    »»»»» Checking for older varients covered by the Rem3 tool.

    »»»»» Postrun check
    »»»»» HKLM run
    »»»»» Winlogon System value
    "system"=""
    »»»»»

    ja lisää..

    Logfile of HijackThis v1.99.1
    Scan saved at 22:11:52, on 11.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    d:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\bgsvcgen.exe
    D:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    D:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    D:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
    D:\Program Files\Spyware Doctor\sdhelp.exe
    D:\Program Files\F-Secure\Common\FSMB32.EXE
    D:\Program Files\F-Secure\Common\FCH32.EXE
    C:\WINDOWS\System32\svchost.exe
    D:\Program Files\F-Secure\Common\FAMEH32.EXE
    D:\Program Files\F-Secure\Anti-Virus\fsqh.exe
    D:\Program Files\F-Secure\FSPC\fspc.exe
    D:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    D:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    D:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\WINDOWS\System32\alg.exe
    D:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\SwiftBtn\SwiftBtn.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    D:\Program Files\Ahead\InCD\InCD.exe
    C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
    C:\Program Files\iPod\bin\iPodService.exe
    D:\Program Files\F-Secure\Common\FSM32.EXE
    C:\WINDOWS\system32\carpserv.exe
    D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    D:\Program Files\Spyware Doctor\swdoctor.exe
    D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    D:\Program Files\F-Secure\FSGUI\fsguidll.exe
    D:\HJT\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
    O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [QT4StBtn] C:\PROGRA~1\SwiftBtn\SwiftBtn.EXE
    O4 - HKLM\..\Run: [OM_Monitor] D:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [InCD] "D:\Program Files\Ahead\InCD\InCD.exe"
    O4 - HKLM\..\Run: [GhostStartTrayApp] "C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe"
    O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [CARPService] carpserv.exe
    O4 - HKLM\..\Run: [avast!] d:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [Spyware Doctor] "D:\Program Files\Spyware Doctor\swdoctor.exe" /Q
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [OM_Monitor] D:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?d6a3c65b57ff46b199d95787f28ffc22
    O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?d6a3c65b57ff46b199d95787f28ffc22
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - D:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - D:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O10 - Unknown file in Winsock LSP: d:\program files\f-secure\fsps\program\fslsp.dll
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - D:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - D:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - D:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Program Files\Spyware Doctor\sdhelp.exe

    Kiitoksia teille.
    Aamun
     
    Kajo, Jan 11, 2007
    #6
  7. Hujo

    Hujo Guest

    avast ja F-secure koneella poista toinen lisää poista sovelutuksesta.
     
    Hujo, Jan 12, 2007
    #7

Share This Page