Hidastunut netti

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Khuz, Jun 15, 2007.

  1. Khuz

    Khuz Member

    Joined:
    Jun 15, 2007
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of HijackThis v1.99.1
    Scan saved at 13:56:53, on 15.6.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\WINDOWS\system32\diisgqje.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\DOCUME~1\HP_OMI~1\LOCALS~1\Temp\Tilapäinen kansio 1 hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: (no name) - {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6} - C:\WINDOWS\system\bzmtcs32.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {2D2A157F-A2BD-45CC-971D-F6C7D78D8994} - c:\windows\system32\mfcamfc.dll
    O2 - BHO: (no name) - {67B04E76-D9E1-4FA6-A920-DEC576C5BF40} - c:\windows\system32\gelfqher.dll
    O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - C:\WINDOWS\system32\ipv6monr.dll
    O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [ccApp] -
    O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [NAV CfgWiz] "c:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
    O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
    O4 - HKLM\..\Run: [diisgqje] C:\WINDOWS\system32\diisgqje.exe
    O4 - HKCU\..\Run: [diisgqje] C:\WINDOWS\system32\diisgqje.exe
    O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: MS_update_0612_KB74062.exe
    O4 - Global Startup: MS_update_0704_KB74073.exe
    O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\SpyCatcher 2006\Protector.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O20 - Winlogon Notify: dvkwfpyo - C:\WINDOWS\SYSTEM32\mfcamfc.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
     
    Khuz, Jun 15, 2007
    #1
  2. Etzo

    Etzo Regular member

    Joined:
    Feb 8, 2007
    Messages:
    489
    Likes Received:
    0
    Trophy Points:
    26
    Ihmekkään kun hidastelee - täynnä örkkejä.


    Aja nämä ohjelmat tässä järjestyksessä:
    1. Dr.Web
    2. Combofix
    3. HijackThis
    ====
    * Lataa Dr.Web CureIt työpöydälle:
    ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

    * Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan
    * Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan.
    * Kun scan on valmis, merkkaa asemat, jotka haluat scannata.
    * Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu.
    * Klikaa vihreää nuolta oikealla ja scan alkaa.
    * Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston.
    * Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä: [​IMG]
    * Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa:
    [​IMG]
    Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon.
    * Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list
    * Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv
    * Sulje Dr.Web Cureit.
    * Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä.
    * Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.
    ====
    1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
    combofix.exe
    combofix.exe

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
    ====

    Lähetä uusi Hjt loki, Dr.Web.csv ja C:\combofix.txt

    Oon viikonlopun muualla joten vastaan sitten sunnuntaina
     
    Etzo, Jun 15, 2007
    #2
  3. Khuz

    Khuz Member

    Joined:
    Jun 15, 2007
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    11
    Noni tässä on nyt nämä logit:
    HjT
    Combofix
    Drweb
    tos järjestykses

    Logfile of HijackThis v1.99.1
    Scan saved at 17:08:24, on 15.6.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\notepad.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\WINDOWS\system32\cmd.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\DOCUME~1\HP_OMI~1\LOCALS~1\Temp\Tilapäinen kansio 1 hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q105&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: (no name) - {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6} - C:\WINDOWS\system\bzmtcs32.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {67B04E76-D9E1-4FA6-A920-DEC576C5BF40} - c:\windows\system32\gelfqher.dll
    O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [ccApp] -
    O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [NAV CfgWiz] "c:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
    O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: MS_update_0612_KB74062.exe
    O4 - Global Startup: MS_update_0704_KB74073.exe
    O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\SpyCatcher 2006\Protector.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


    ComboFix 07-06-13.3 - C:\Documents and Settings\HP_Omistaja\Ty”p”yt„\ComboFix.exe
    "HP_Omistaja" - 2007-06-15 16:50:11 - Service Pack 2 NTFS


    (((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


    C:\WINDOWS\system32\mfcamfc.dll


    * * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


    C:\WINDOWS\system32\drivers\bfmmhdim.sys
    C:\WINDOWS\system32\mfcamfc.dll
    C:\WINDOWS\system32\mfcamfc.dll.bak


    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


    -------\LEGACY_EMBHWDGM
    -------\LEGACY_PYJLQICD
    -------\embhwdgm
    -------\pyjlqicd


    ((((((((((((((((((((((((( Files Created from 2007-05-15 to 2007-06-15 )))))))))))))))))))))))))))))))


    2007-06-15 16:50 49,152 --a------ C:\WINDOWS\nircmd.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\vgrsqfxs.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\vcasslcl.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\sksoaaaa.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\plxhbupf.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\plkrshna.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\mfxbcaaa.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jryssasq.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jrvvgnko.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jrmpspyx.exe
    2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\duedaaaa.exe
    2007-06-15 15:03 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\DoctorWeb
    2007-06-15 14:43 <KANSIO> d-------- C:\Program Files\Yahoo!
    2007-06-15 14:43 <KANSIO> d-------- C:\Program Files\CCleaner
    2007-06-15 14:39 <KANSIO> d-------- C:\VundoFix Backups
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\vxwcoaaa.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\phwyfwiw.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\phjwtxpq.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\jnbpfhfn.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\jjabaaaa.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsqsaaaa.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsnukaaa.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsaahogv.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\dqatbaaa.exe
    2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\ahofibnl.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\vgmuqtbr.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\soqexaaa.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\sogaavcb.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvvppaaa.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvuoalik.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvhwwpwr.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvgetaaa.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\gbaekaaa.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\dyjunslq.exe
    2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\apjepndq.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\vcqeaaaa.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\phuaaaaa.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\phiudaaa.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\mfvotlju.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\mfugaaaa.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\jrdyijeb.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\gsfvuaaa.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\dqrjiaaa.exe
    2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\aliojvov.exe
    2007-06-15 13:49 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
    2007-06-15 12:35 <KANSIO> dr-hsc--- C:\WINDOWS\system32\dllcache
    2007-06-15 04:24 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
    2007-06-15 04:24 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
    2007-06-15 04:24 129,784 --------- C:\WINDOWS\system32\pxafs.dll
    2007-06-15 04:21 684,567 --a------ C:\WINDOWS\system32\libeay32.dll
    2007-06-15 04:21 147,729 --a------ C:\WINDOWS\system32\libssl32.dll
    2007-06-15 04:17 91,136 --a------ C:\WINDOWS\system32\wbyzxnsd.dll
    2007-06-15 04:17 750,592 --a------ C:\WINDOWS\system32\pllspvuc.dll
    2007-06-15 04:17 59,392 --a------ C:\WINDOWS\system32\gelfqher.dll
    2007-06-15 04:17 42,496 --a------ C:\WINDOWS\system32\fjxrozbp.dll
    2007-06-15 04:17 139,264 --a------ C:\WINDOWS\system32\pohpvdxg.dll
    2007-06-15 04:14 <KANSIO> d-------- C:\WINDOWS\0F0447B46DDD4831933A1EDF52091150.TMP
    2007-06-15 04:11 74,752 --a------ C:\WINDOWS\system32\kkcakkc.dll
    2007-06-15 04:11 16,384 --a------ C:\WINDOWS\system32\sxwunaaa.exe
    2007-06-15 04:11 140,288 --a------ C:\WINDOWS\system32\jjxfwtvl.exe
    2007-06-15 04:11 140,288 --a------ C:\WINDOWS\system32\dmbnuaaa.exe
    2007-06-15 04:11 10,240 --a------ C:\WINDOWS\system\bzmtcs32.dll
    2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\vtqbnaaa.exe
    2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\pyvflccd.exe
    2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\jfkpqxxf.exe
    2007-06-15 04:11 <KANSIO> dr-hs---- C:\cmdcons
    2007-06-15 04:11 <KANSIO> d-------- C:\WINDOWS\setupupd
    2007-06-15 04:10 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
    2007-06-15 04:09 1,835,008 --a------ C:\DOCUME~1\HP_OMI~1\NTUSER.DAT
    2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\Suosikit
    2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\Omat tiedostot
    2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\K„ynnist„-valikko
    2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Verkkoymp„rist”
    2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Tulostinymp„rist”
    2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Mallit
    2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\WINDOWS
    2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\Ty”p”yt„
    2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Symantec
    2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\SampleView
    2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Intervideo
    2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Apple Computer
    2007-06-15 04:07 21,060 --------- C:\WINDOWS\system32\drivers\iviaspi.sys
    2007-06-15 04:07 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys
    2007-06-15 03:54 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
    2007-06-15 03:54 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
    2007-06-15 03:54 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
    2007-06-15 03:54 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
    2007-06-15 03:54 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
    2007-06-15 03:54 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
    2007-06-15 03:53 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
    2007-06-15 03:53 61,056 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys
    2007-06-15 03:53 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
    2007-06-15 03:53 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
    2007-06-15 03:53 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
    2007-06-15 03:53 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
    2007-06-15 03:53 53,248 --a------ C:\WINDOWS\system32\drivers\1394bus.sys
    2007-06-15 03:53 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
    2007-06-15 03:53 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
    2007-06-15 03:53 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
    2007-06-15 03:53 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys


    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    2007-06-15 13:48:40 -------- d-----w C:\Program Files\Common Files\Symantec Shared
    2007-06-15 13:48:40 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Hamachi
    2007-06-15 11:14:35 -------- d-----w C:\Program Files\MSN Messenger
    2007-06-15 11:07:17 -------- d-----w C:\Program Files\World of Warcraft
    2007-06-15 09:46:09 -------- d-----w C:\Program Files\Windows NT
    2007-06-15 09:46:00 -------- d-----w C:\Program Files\Movie Maker
    2007-06-15 09:45:59 -------- d-----w C:\Program Files\Messenger
    2007-06-15 01:28:08 -------- d-----w C:\Program Files\DivX
    2007-06-15 01:11:42 356,362 ----a-w C:\WINDOWS\system32\perfh00B.dat
    2007-06-15 01:11:41 65,898 ----a-w C:\WINDOWS\system32\perfc00B.dat
    2007-06-15 00:59:34 -------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-06-14 23:20:00 -------- d-----w C:\Program Files\Warcraft III
    2007-06-14 23:11:57 -------- d-----w C:\Program Files\Bethesda Softworks(2)
    2007-06-14 23:11:34 -------- d-----w C:\Program Files\Starcraft(2)
    2007-06-14 23:08:11 -------- d-----w C:\Program Files\Uthgard Launcher
    2007-06-14 23:07:01 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Xfire
    2007-06-14 22:30:26 -------- d-----w C:\Program Files\Intel
    2007-06-14 22:29:50 -------- d-----w C:\Program Files\DAEMON Tools
    2007-06-14 22:29:44 -------- d-----w C:\Program Files\Macrogaming
    2007-05-25 08:40:36 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\AdobeUM
    2007-05-12 18:35:16 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Electronic Arts
    2007-05-06 15:04:12 12,240 ----a-w C:\WINDOWS\scunin.dat
    2007-05-02 19:38:05 54,675 ----a-w C:\WINDOWS\War3Unin.dat
    2007-05-02 17:09:07 12,288 ----a-w C:\WINDOWS\winhp32cln.exe
    2007-05-01 18:35:43 -------- d-----w C:\Program Files\Hamachi
    2007-05-01 18:17:44 2,829 ----a-w C:\WINDOWS\War3Unin.pif
    2007-05-01 18:17:44 139,264 ----a-w C:\WINDOWS\War3Unin.exe
    2007-05-01 18:01:39 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\WinRAR
    2007-05-01 17:37:00 -------- d-----w C:\Program Files\Ocean Technology
    2007-04-27 13:30:40 3,555 -c--a-w C:\WINDOWS\mozver.dat
    2007-04-26 20:43:47 -------- d-----w C:\Program Files\TechSmith
    2007-04-26 20:41:35 -------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
    2007-04-23 00:15:29 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
    2007-04-23 00:15:18 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
    2007-04-23 00:15:18 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
    2007-04-23 00:02:34 73,728 ----a-w C:\WINDOWS\system32\dpl100.dll
    2007-04-23 00:02:34 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
    2007-04-23 00:02:33 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
    2007-04-23 00:02:31 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
    2007-04-23 00:02:31 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
    2007-04-23 00:02:31 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
    2007-04-23 00:02:31 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
    2007-04-23 00:02:31 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
    2007-04-23 00:01:47 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
    2007-04-23 00:01:46 124,472 ----a-w C:\WINDOWS\system32\DivXCodecUpdateChecker.exe
    2007-04-21 19:39:55 -------- d-----w C:\Program Files\VentSrv
    2007-04-20 09:19:42 -------- d-----w C:\Program Files\LucasArts


    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


    *Note* empty entries & legit default entries are not shown

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
    {02478D38-C3F9-4EFB-9B51-7695ECA05670}=C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 10:28]
    {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6}=C:\WINDOWS\system\bzmtcs32.dll [2007-06-15 04:11]
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 22:17]
    {67B04E76-D9E1-4FA6-A920-DEC576C5BF40}=c:\windows\system32\gelfqher.dll [2007-06-15 04:17]
    {9ECB9560-04F9-4bbc-943D-298DDF1699E1}=c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [2004-02-09 15:37]
    {BDF3E430-B101-42AD-A544-FADC6B084872}=c:\Program Files\Norton AntiVirus\NavShExt.dll [2004-09-03 02:23]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2005-01-01 09:50]
    "HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 20:34]
    "KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 21:02]
    "ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 14:03]
    "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 14:03]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-06-17 00:38]
    "VTTimer"="VTTimer.exe" []
    "SiSPower"="SiSPower.dll" [2004-09-24 10:49 C:\WINDOWS\system32\SiSPower.dll]
    "ccApp"="-" []
    "SSC_UserPrompt"="c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-08-25 00:27]
    "NAV CfgWiz"="c:\Program Files\Norton AntiVirus\CfgWiz.exe" [2004-09-03 03:23]
    "IS CfgWiz"="c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe" [2004-03-01 17:44]
    "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 C:\WINDOWS\AGRSMMSG.exe]
    "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-09 21:10]
    "AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 C:\WINDOWS\ALCXMNTR.EXE]
    "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 22:54]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-09-15 00:20]
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs
    pyjlqicd


    Contents of the 'Scheduled Tasks' folder
    2007-05-25 17:00:00 C:\WINDOWS\tasks\Norton AntiVirus - Tarkista tietokone - HP_Omistaja.job
    2005-01-01 07:36:42 C:\WINDOWS\tasks\Symantec NetDetect.job
    2007-06-03 23:00:00 C:\WINDOWS\tasks\wrSpySweeperTrialSweep.job

    **************************************************************************

    catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-06-15 16:54:07
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    Completion time: 2007-06-15 16:54:42 - machine was rebooted
    C:\ComboFix-quarantined-files.txt ... 2007-06-15 16:54

    --- E O F ---



    diisgqje.exe;c:\windows\system32;BackDoor.Roam;Deleted.;
    ipv6monr.dll;c:\windows\system32;Trojan.PWS.Tanspy;Will be cured after reboot.;
    nsi30.tmp;C:\Documents and Settings\HP_Omistaja\Local Settings\Temp;Tool.Prockill;Incurable.Moved.;
    SteamInstall.exe;C:\Documents and Settings\HP_Omistaja\Työpöytä\sälää;Win32.HLLW.MyBot;Deleted.;
    ANTIFUN.EXE;C:\Documents and Settings\HP_Omistaja\Työpöytä\sälää\antifun;Probably BACKDOOR.Trojan;Incurable.Moved.;
    KillWind.exe;C:\HP\bin;Tool.ProcessKill;Incurable.Moved.;
    SetupDTSB.exe;C:\Program Files\DAEMON Tools;Adware.SaveNow;Incurable.Moved.;
    mirc.exe;C:\Program Files\mIRC;Program.mIRC.617;Incurable.Moved.;
    A0000072.exe;C:\System Volume Information\_restore{04486428-9B71-4484-9673-4493EB5E2F46}\RP2;BackDoor.Roam;Deleted.;
    A0000074.exe;C:\System Volume Information\_restore{04486428-9B71-4484-9673-4493EB5E2F46}\RP2;Win32.HLLW.MyBot;Deleted.;
    1809.exe;C:\WINDOWS;Trojan.PWS.Tanspy;Deleted.;
    423125744.dll;C:\WINDOWS;Trojan.Click.2269;Deleted.;
    winhp32.exe;C:\WINDOWS;Trojan.Hooker.175;Deleted.;
    bqmtcs32.dll;C:\WINDOWS\system;Trojan.Mocalfost;Deleted.;
    wmecst32.dll;C:\WINDOWS\system;BackDoor.IRC.Sdbot.1348;Deleted.;
    ayacaaaa.exe;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
    ipv6monr.dll;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Will be cured after reboot.;
    ipv6mons.dll;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
    pygvaxbl.exe;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
    vpqreqgw.exe;C:\WINDOWS\system32;BackDoor.Roam;Deleted.;
     
    Last edited: Jun 15, 2007
    Khuz, Jun 15, 2007
    #3
  4. Etzo

    Etzo Regular member

    Joined:
    Feb 8, 2007
    Messages:
    489
    Likes Received:
    0
    Trophy Points:
    26
    Moi!

    Nyt on sellainen homma, että sun konees on niin täynnä örkkejä, että olisi paljon järkevämpää formatoida kuin alkaa väsäämään mitään.

    Eli suosittelen että formatoit koneesi jos asennus-cd sulta löytyy.
     
    Etzo, Jun 17, 2007
    #4

Share This Page