1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

F-Securen virustarkistuksen jälkeen....(troijalaisia)

Discussion in 'Virukset ja haittaohjelmat' started by mawdrgn, Jan 19, 2006.

Page 2 of 3
  1. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    loki näyttää puhtaalta, toi filu on väh suspecti
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
     
    spuge9, Jan 21, 2006
    #21
  2. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    No hyvä. Että varmaankin vaan joitai pikkuvikoja on(jos on)?

    Kiitos spuge9 pienoisesta helpotuksesta, kun sain tietää että suht puhdas loki ;)

    Jos tämän joku jaksaa sitten päivien mittaan tässä vilkaista, niin voi ilmoittaa että tarviiko vaikka tuo spuge9:n löytämä filu fixata.

    Kiitos kuitenkin avusta jo tässä vaiheessa jokaiselle! Hyviä linkkejö laitoitte tällaiselle tietokoneiden kanssa mämmikouralle :)
     
    mawdrgn, Jan 21, 2006
    #22
  3. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    tää jäi vähän puolitiehen, fixaa viel toi filu ja Boottaa kone



    lataappa tämä hosts filu myös: http://mvps.org/winhelp2002/hosts.htm ns lisäpalikka firefoxiin ;)

    tallenna se tänne :C:\WINDOWS\SYSTEM32\DRIVERS\ETC


     
    Last edited: Jan 21, 2006
    spuge9, Jan 21, 2006
    #23
  4. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    Tässä tulevat ohjeet:

    Ohjauspaneeli
    Lisää/poista sovellus
    Poista jos löytyy:
    "MyWay - My bar"


    Fixaa seuraava, eli do a system scan only, laita rasti seuraavaan ja fix checked:
    O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
    O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/012acc0774fda69d5005/netzip/RdxIE601.cab
    O16 - DPF: {9E98E84C-79E1-49C3-82EB-798FCD552EFB} (VacPro.internazionale_ver4) - http://advnt01.com/dialer/internazionale_ver4.CAB

    Poista kansio:
    C:\Program Files\->MyWay<-

    Tee tarkistus ewidolla
    -> http://keskustelu.afterdawn.com/thread_view.cfm/269186
    Tee ohjeiden mukaisesti ja lähetä lopuksi sen raportti tänne!

    @spuge9
    Sovitaanko että et mene sanomaan että loki on puhdas kun asiaan perehtynyt ei vielä ole tarkistanut sitä.
     
    aaxxeell, Jan 22, 2006
    #24
  5. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Lisää/Poista sovelluksessa ei ollut MyWay - MyBar
    mutta siellä oli [bold]My Search Bar[/bold]. Poistanko?

    Ja olet aaxxeel varma noista fiksauksista?

    Ja EDIT: Tarvitseeko kone [bold]käynnistää uudelleen[/bold] tuon Hijack This:in ja Ewidon käytön välissä, vai vasta sitten, kun on HJT-fixaukset tehty ja eWidolla skannattu ja örkit poistettu?
     
    Last edited: Jan 22, 2006
    mawdrgn, Jan 22, 2006
    #25
  6. anssi

    anssi Regular member

    Joined:
    Jan 20, 2006
    Messages:
    226
    Likes Received:
    0
    Trophy Points:
    26
    Hei jos huomasitte niin hänellä oli sama O10 kuin minulla en oikein tiädä mikä se on mutta mua neuvottiin "poistaa" se LSPFix:sillä et ehkä hänenkin kannattais neuvokaa te järkevämmät (spuge9, spertti ja aaxxeel nyt varmaan ainakin osaavat)
     
    anssi, Jan 22, 2006
    #26
  7. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Yritin poistaa tuota [bold]My Search Bar[/bold] ja siihen tuli koko ruudun täyttävä ikkuna nimeltä: Uninstall My Search Bar ja teksti Preparing Uninstallation. Samalla jokin ihme Application Host yritti päästä nettiin, mutta en sallinut. Painoin ikkunan raksista pois, kun uninstallointi tuntui jämähtävän siihen "Preparing Uninstallation..."-kohtaan. Tulin takaisin Lisää/Poista sovellus-ikkunaan.

    Säikähdin tuotakin kivasti. Eli annanko minä sen ihme ohjelman ottaa yhteyttä internettiin kun uninstallaan tämän My Search Bar:in?

    Ja sitten teen fiksit HJT:llä?

    Hitto kun en nyt osaa ollenkaan... Voisiko joku vielä neuvoa mitä tehdä(anteeksi vaiva :( )
     
    mawdrgn, Jan 22, 2006
    #27
  8. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    Koitappa poistaa se vikasieto tilassa , '' my search bar ''. poista myös sen kansio C:\Program Files\->MyWay<- jos vain löytyy
     
    Last edited: Jan 22, 2006
    spuge9, Jan 22, 2006
    #28
  9. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    My Search Bar on saatava sieltä pois kyllä. Voit kyllä luottaa neuvoihin. -> http://keskustelu.afterdawn.com/thread_view.cfm/292129
    [bold]Älä anna missään nimessä mennä nettiin[/bold] tuon My Search Bar filun kun se kerran koskee tuota poistoa, varmuudeksi jopa netti yhteys pois päältä niin et saa lisää örkkejä, tämä on ihan normaalia.

    Tehdään näin...

    Käynnistä kone vikasietotilassa (naputtele f8 käynnistyksen yhteydessä)

    Ohjausopaneelista poista:
    My Search Bar

    Fixaa minun näyttämät rivit:
    O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
    O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/012acc0774fda69d5005/netzip/RdxIE601.cab
    O16 - DPF: {9E98E84C-79E1-49C3-82EB-798FCD552EFB} (VacPro.internazionale_ver4) - http://advnt01.com/dialer/internazionale_ver4.CAB

    Aja vikasietotilassa myös ewido ja tallenna raportti.

    Käynnistä kone uudelleen ja lähetä hjt uusi loki ja ewido raportti.

    @anssi
    Kyllä samanlainen on 010 rivi mutta se ei ole örkki joten sen poistaminen jätetään vapaaehtoiseksi.
     
    Last edited: Jan 22, 2006
    aaxxeell, Jan 22, 2006
    #29
  10. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Okei, eli teen kaiken edellämainitun vikasietotilassa?
     
    mawdrgn, Jan 22, 2006
    #30
  11. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    Kyllä niinkuin aaxxeell kirjoitti
     
    spuge9, Jan 22, 2006
    #31
  12. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    Kyllä, tee näin. Tosiaan ettei örkki pääsi muodostamaan yhteyttä kotikoloon niin voit ottaa verkkopiuhan pois koneelta ja suorittaa näin puhdistus. Ettei tosiaan pahempaa sattuisi tuon prosessin aikana. Kun taas palaat normaalitilaan niin netti päälle :)
     
    aaxxeell, Jan 22, 2006
    #32
  13. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Vielä viimeinen varmistus:

    Suljen koneen. Otan nettipiuhan irti.

    Sitten vikasietotilaan

    Sitten poistan My Search Barin

    Fiksaan rivit Hijack This:illä

    Poistan Myway kansion

    Ajan Ewidon vikasietotilassa

    Tallennan sen raportin

    Kone kiinni. Verkkopiuha takaisin.

    Sitten raportti tänne.


    VAi tarviiko piuhaa repiä irti kun eikös netti ole toimimaton vikasietotilassa? Anyway, teen siis noin kuten listasin?
     
    mawdrgn, Jan 22, 2006
    #33
  14. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    vikasieto tila eli eng= safe mode mikään ei ole yhdistettynä nettiin, vedä se piuha irti. tee niin kun on sanottu
     
    spuge9, Jan 22, 2006
    #34
  15. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    @mawdrgn

    Oikein ymmärsit, tuo piuha irti vaan varmuudeksi, netin ei pitäisi kyllä toimia välttämättä muutenkaan.
     
    aaxxeell, Jan 22, 2006
    #35
  16. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Okei. Tässä Ewidon raportti:

    ---------------------------------------------------------
    ewido anti-malware - Scan report
    ---------------------------------------------------------

    + Created on: 18:43:45, 22.1.2006
    + Report-Checksum: 2DF7EFB1

    + Scan result:

    HKLM\SOFTWARE\Altnet -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Altnet\TopSearch -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Spyware.Altnet : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{1D6711C8-7154-40BB-8380-3DEA45B69CBF} -> Downloader.WebP2P : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C} -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{E2F2B9D0-96B9-4B25-B90C-636ECB207D18} -> Spyware.SaveNow : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{D273D427-57C6-4B12-860F-BBB8195F6E2A} -> Spyware.TOPicks : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{F720B40F-3A38-4B22-B30D-DCF095D42498} -> Spyware.P2PNetworking : Cleaned with backup
    HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer -> Spyware.P2PNetworking : Cleaned with backup
    HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer\CLSID -> Spyware.P2PNetworking : Cleaned with backup
    HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer\CurVer -> Spyware.P2PNetworking : Cleaned with backup
    HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer.1 -> Spyware.P2PNetworking : Cleaned with backup
    HKLM\SOFTWARE\Classes\WUSN.1 -> Spyware.SaveNow : Cleaned with backup
    HKLM\SOFTWARE\Cydoor -> Spyware.Cydoor : Cleaned with backup
    HKLM\SOFTWARE\Gator.com -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\AppInfo -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\CMEII -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\Gator -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\Gator\dyn -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_gs -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\PerfectNav -> Spyware.KeenValue : Cleaned with backup
    C:\Documents and Settings\Tornimörkö\Cookies\tornimörkö@tradedoubler[2].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    C:\Hijack This\backups\backup-20060122-172536-715.dll -> Dialer.Generic : Cleaned with backup
    C:\Program Files\Altnet -> Adware.Altnet : Cleaned with backup
    C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Cleaned with backup
    C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL -> Spyware.MyWay : Cleaned with backup
    C:\WINDOWS\Downloaded Program Files\WUInst.dll -> Adware.SaveNow : Cleaned with backup
    C:\WINDOWS\Temp\Altnet -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\adm.exe -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\adm25.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\adm4.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\admdata.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\admdloader.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\admfdi.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\admprog.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\Atl.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\dmfiles.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\DMinfo2.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\dminstall3.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\msvcirt.dll -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\mysearch.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\pmexe.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\pmfiles.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\pminstall.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\Setup.cab -> Adware.Altnet : Cleaned with backup
    C:\WINDOWS\Temp\Altnet\Setup.exe -> Adware.Altnet : Cleaned with backup


    ::Report End

     
    mawdrgn, Jan 22, 2006
    #36
  17. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Unohtui sanoa, että kun sitten koneen uudelleen nyt käynnistin normaalitilassa, kaikki toimi normaalisti:

    Mutta ewido.exe (ei ikonia) yritti ottaa yhteyden nettiin, ja sallin sen. Sen voi sallia???
     
    mawdrgn, Jan 22, 2006
    #37
  18. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    My Search Bar ilmeisesti lähti?
    Ewidon raportti kunnossa, puhdisti kaikki mitä löysi ja paljon pahaa löysikin. Salli ewidon kaltainen ohjelma nettiin vaan, se päivittää itsensä vain. Örkit ei saa päästää netttiin jos löytyvät koneelta.

    Laitahan vielä uusi hjt loki niin varmistetaan puhtaus.
     
    aaxxeell, Jan 22, 2006
    #38
  19. mawdrgn

    mawdrgn Regular member

    Joined:
    Jan 2, 2006
    Messages:
    469
    Likes Received:
    0
    Trophy Points:
    26
    Tässä näin. Ikävä myöntää, mutta unohdin poistaa sen MyWay kansion. Voiko sen tehdä normaalitilassa?

    Logfile of HijackThis v1.99.1
    Scan saved at 19:08:15, on 22.1.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\brsvc01a.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\brss01a.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\BurnQuick\BQTray.exe
    C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    E:\D-Tools\daemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\BenQ\Common\Bin\WinCinemaMgr.exe
    C:\Program Files\CASIO\Photo Loader\Plauto.exe
    C:\Program Files\Logitech\MouseWare\system\em_exec.exe
    C:\PROGRA~1\F-SECU~2\backweb\4476822\Program\SERVIC~1.EXE
    C:\WINDOWS\system32\CTSvcCDA.EXE
    C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    C:\ewido\ewido anti-malware\ewidoctrl.exe
    C:\ewido\ewido anti-malware\ewidoguard.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
    C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure Internet Security\FSGUI\fsguiexe.exe
    C:\Hijack This\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [BurnQuick Queue] C:\Program Files\BurnQuick\BQTray.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [XpDis0Conf] C:\PROGRA~1\Belkin\BELKIN~1\Tool\WinXPDisableZeroConfigation.exe VEN_14E4&DEV_4320&SUBSYS_70011799 /d
    O4 - HKLM\..\Run: [XpOpenAuto] "C:\Program Files\Belkin\Belkin 54Mbps Wireless Utility\TOOL\OpenXpAuto.exe" VEN_14E4&DEV_4320&SUBSYS_70011799
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\D-Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\BenQ\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Photo Loader supervisory.lnk = C:\Program Files\CASIO\Photo Loader\Plauto.exe
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Näytä &Web-sivuluettelo... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
    O18 - Protocol: bw+0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {C8FABA39-2B5C-4A9C-8E7E-CB300CB00EC1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: F-Secure Internet Security 2005 (BackWeb Plug-in - 4476822) - Unknown owner - C:\PROGRA~1\F-SECU~2\backweb\4476822\Program\SERVIC~1.EXE
    O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
    O23 - Service: ewido security suite control - ewido networks - C:\ewido\ewido anti-malware\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\ewido\ewido anti-malware\ewidoguard.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

     
    mawdrgn, Jan 22, 2006
    #39
  20. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    Jep, Poista se kansio niin jos lähtee.
    Muutoin loki on kunnossa ja puhdas :)

    Vapaaehtoisen varmistus tarkistuksen jos haluat/jaksat tehdä niin onnistuu eScanilla: http://koti.mbnet.fi/pattaya1/escanmwav.htm
    Ohjeet ovat mukana. Ei ole pakko mutta saattaa tehdä löytöjä vielä.
     
    Last edited: Jan 22, 2006
    aaxxeell, Jan 22, 2006
    #40
Page 2 of 3

Share This Page