HiJack Logi

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by optimoi, Sep 28, 2009.

  1. optimoi

    optimoi Member

    Joined:
    Sep 28, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Koneeni tuli erittäin hitaaksi eilen. Syytä en tiedä mutta olisikos logista mitään nähtävissä?

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:04:45, on 28.9.2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\WINDOWS\CNYHKey.exe
    C:\WINDOWS\StopHid.exe
    C:\Program Files\Creative\Desktop Wireless\mouse_2k.exe
    C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Picasa2\PicasaMediaDetector.exe
    C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
    C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\WLAN\802.11 Wireless LAN\WWlanMonitor.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\WINDOWS\system32\svchost.exe
     
    optimoi, Sep 28, 2009
    #1
  2. optimoi

    optimoi Member

    Joined:
    Sep 28, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Voisikos joku katsoa tämän läpi. Kiitokset!
     
    optimoi, Sep 28, 2009
    #2
  3. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    Ei voi katsoa !!!
    HJT logista olet lähettänyt vain yhden kolmanneksen.
    :D
    .
     
    kalminen, Sep 29, 2009
    #3
  4. optimoi

    optimoi Member

    Joined:
    Sep 28, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Hups... :)
    Myönnetään pieni moka.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:55:15, on 29.9.2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16876)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\WINDOWS\CNYHKey.exe
    C:\WINDOWS\StopHid.exe
    C:\Program Files\Creative\Desktop Wireless\mouse_2k.exe
    C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Picasa2\PicasaMediaDetector.exe
    C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
    C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\WLAN\802.11 Wireless LAN\WWlanMonitor.exe
    C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FI_FI&c=74&bd=smb&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ircdown.com/fi/index.php?rvs=hompag&d=79918969e=6150
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [CNYHKey] CNYHKey.exe
    O4 - HKLM\..\Run: [StopHid] StopHid.exe
    O4 - HKLM\..\Run: [CreativeMouse ] C:\Program Files\Creative\Desktop Wireless\mouse_2k.exe
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=101209 serial=DR12CEP-2346345-CNM lang=EN
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
    O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
    O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
    O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
    O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
    O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    O4 - Global Startup: WLAN Monitor Utility.lnk = C:\Program Files\WLAN\802.11 Wireless LAN\WWlanMonitor.exe
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1232823459281
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1225354330343
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\WINDOWS\System32\diactfrm32.dll
    O20 - Winlogon Notify: 7ea7d17f684 - C:\WINDOWS\System32\diactfrm32.dll
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

    --
    End of file - 12675 bytes
     
    optimoi, Sep 29, 2009
    #4
  5. optimoi

    optimoi Member

    Joined:
    Sep 28, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Ja vielä hieman oireita:
    Kon eon hidastunut yhtäkkiä, varsinkin nettiselaimen osalta.
    Alla oleva työkalupalkki katoaa välillä kokonaan, samoin työpöydän kuvakkeet.

    Vaikka käytössäni on Firefox niin välillä Explorer pomppaa itsestään auki ja esillä on mainos??

    SIinä oireita nyt alkuun.
     
    optimoi, Sep 29, 2009
    #5
  6. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    Se on hävinnyt joka tunnustaa HI

    -----------------------------------------------

    Asenna koneellesi YKSI palomuuriohjelma:

    1) ZoneAlarm
    (Asennuksessa poista rasti kohdasta "Include a ZoneAlarm Spy Blocker", koska tämä työkalupalkki ei ole suositeltava.
    2) Agnitum
    4) Comodo
    (Asennuksessa poista rasti kohdista "Install Comodo SafeSurf..", Make Comodo my default
    search provider" ja "Make Comodo Search my homepage". Nämä eivät ole suositeltavia.
    Ota asennuksessa rasti myös pois kohdasta "Install Comodo Antivirus", jos käytät muuta
    virustorjuntaa.)

    Jos käytät sisäänrakennettua Windowsin palomuuria, se ei ole suositeltua sillä se ei
    estä koneelta ulosmeneviä yhteyksiä. Tämä tarkoittaa että mikä tahansa haittaohjelma
    koneellasi on vapaa tekemään mitä tahansa internet -yhteydelläsi. Yksinkertaisesti
    sanottuna, Windows XP sisältää keskivertoa huonomman palomuurin. Tämä palomuuri EI ole
    mikään korvike omistautuneelle palomuuriratkaisulle. Muista käyttää vain yhtä
    palomuuria kerrallaan.

    ----------------------------------------------------------------

    * Lataa OTM by OldTimer.
    * Tallenna se työpöydällesi.
    * Tuplaklikkaa OTM.exe käynnistääksesi sen.
    * Kopioi (CTRL+C) alla olevasta laatikosta kaikki teksti.
    Code:
    :files
C:\WINDOWS\System32\diactfrm32.dll
:commands 
[emptytemp]
    * Palaa takaisin OtmoveIt3, paina oikeanpuoleista hiiren nappia Paste Instructions for Items to be Move-ikkunassa (Keltaisen palkin alla) ja paina Liitä.
    * Paina punaista MoveIt! -nappia.
    * Kopioi (CTRL+C) ja liitä (CTRL+V) Results-ikkunaan (Vihreän palkin alla) tullut teksti seuraavaan viestiisi.
    * Sulje OTM.

    Jos jotain tiedostoa/kansiota ei voitu siirtää heti, ohjelma ehdottaa koneen uudelleenkäynnistystä. Vastaa ehdotukseen Yes, jolloin OtMoveIt käynnistää koneesi uudelleen.

    *********************************************************

    Lataa Malwarebytes' Anti-Malware työpöydällesi.

    Jos linkki ei toimi, voit ladata myös seuraavista linkeistä:
    Linkki1
    Linkki2

    * Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
    * Lopuksi varmistu, että seuraavat on valittu: Päivitä Malwarebytes' Anti-Malware ja Käynnistä Malwarebytes' Anti-Malware ja sen jälkeen klikkaa Lopeta.
    * Jos päivitys löytyy, ohjelma lataa ja asentaa uusimman version. Jos päivityksien lataaminen ei onnistu, voit ladata päivitykset tästä. Tuplaklikkaa mbam-rules.exe asentaaksesi päivitykset.
    * Kun ohjelma on latautunut ja päivitykset tehty, valitse Suorita täysi tarkistus ja klikkaa Tarkista.
    * Kun tarkistus on valmis, klikkaa OK ja sitten Näytä tulokset nähdäksesi tulokset.
    * Varmistu, että kaikki on merkitty ja klikkaa Poista valitut.
    * Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
    * Lähetä lokin sisältö seuraavassa viestissäsi.[/list]

    Huom. Jos Mbam ei pystynyt poistamaan tiedostoa, se pyytää sinua käynnistämään koneesi uudelleen. Käynnistä koneesi silloin uudelleen heti. Mbam voi tehdä muutoksia rekisteriisi osana puhdistusta. Jos käytät suojausohjelmaa, joka havaitsee rekisterin muutokset, salli Mbamin tehdä muutokset.

    ----------------------------------------------------------------------------------

    Poista ne rivit jotka ovat vielä jäljellä:

    Sammuta selain ja muut ohjelmat Fixin ajaksi. (ei virustorjuntaa)
    Käynnistä HijackThis:ja Scan ja ruksaa seuraavat punaisella listatut tiedostot
    (HJT sammuttaa ohjelman ei poista)

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
    O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
    O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
    O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
    O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
    O20 - AppInit_DLLs: C:\WINDOWS\System32\diactfrm32.dll
    O20 - Winlogon Notify: 7ea7d17f684 - C:\WINDOWS\System32\diactfrm32.dll

    sekä sammuta ne.(fix Chekked) napista.

    Tyhjennä roskakori ja käynnistä koneesi uudelleen.

    Postita tänne seuraavat lokit:
    * Tuore HijackThis loki (Otetaan viimeisenä ennen postitusta)
    * Malwarebytes' Anti-Malware\Logs\log-päiväys.txt raportti
    * OTMoveIt logi.
    * Auttoiko yhtään ???
    *
     
    kalminen, Sep 29, 2009
    #6
  7. optimoi

    optimoi Member

    Joined:
    Sep 28, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    All processes killed
    ========== FILES ==========
    DllUnregisterServer procedure not found in C:\WINDOWS\System32\diactfrm32.dll
    C:\WINDOWS\System32\diactfrm32.dll NOT unregistered.
    C:\WINDOWS\System32\diactfrm32.dll moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes

    User: Järjestelmänvalvoja
    File delete failed. C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\~DFE07F.tmp scheduled to be deleted on reboot.
    ->Temp folder emptied: -1355851798 bytes
    ->Temporary Internet Files folder emptied: 6574445 bytes
    ->Java cache emptied: 658355 bytes
    ->FireFox cache emptied: 49964594 bytes

    User: LocalService
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
    ->Temp folder emptied: 66016 bytes
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    ->Temporary Internet Files folder emptied: 34790 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 1417823 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 19569 bytes
    %systemroot%\System32 .tmp files removed: 4900182 bytes
    File delete failed. C:\WINDOWS\temp\ZLT02823.TMP scheduled to be deleted on reboot.
    Windows Temp folder emptied: 67758987 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = -1167,70 mb


    OTM by OldTimer - Version 3.0.0.6 log created on 09292009_125834

    Files moved on Reboot...
    C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\~DFE07F.tmp moved successfully.
    File C:\WINDOWS\temp\ZLT02823.TMP not found!

    Registry entries deleted on Reboot...
     
    optimoi, Sep 29, 2009
    #7
  8. optimoi

    optimoi Member

    Joined:
    Sep 28, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Vähän auttoi tämä kaikki. Ei vieläkään ole kuitenkaan entisensä tämä kone.

    Malwarebytes' Anti-Malware 1.41
    Tietokantaversio: 2870
    Windows 5.1.2600 Service Pack 3

    29.9.2009 18:40:51
    mbam-log-2009-09-29 (18-40-51).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|D:\|E:\|G:\|H:\|)
    Tarkistetut kohteet: 642321
    Kulunut aika: 5 hour(s), 27 minute(s), 29 second(s)

    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 1
    Saastuneita rekisteriavaimia: 6
    Saastuneita rekisteriarvoja: 0
    Saastuneita rekisterikohteita: 2
    Saastuneita hakemistoja: 7
    Saastuneita tiedostoja: 265

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    C:\WINDOWS\system32\diactfrm32.dll (Trojan.Agent) -> Delete on reboot.

    Saastuneita rekisteriavaimia:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b69a9db4-d0a1-4722-b56b-f20757a29cdf} (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\7ea7d17f684 (Trojan.Agent) -> Delete on reboot.
    HKEY_CLASSES_ROOT\sexvid (Trojan.DNSChanger) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.

    Saastuneita rekisteriarvoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisterikohteita:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Agent) -> Data: c:\windows\system32\diactfrm32.dll -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Agent) -> Data: system32\diactfrm32.dll -> Delete on reboot.

    Saastuneita hakemistoja:
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\Logs (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240 (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140 (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\resycled (Trojan.DNSChanger) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService (Worm.Archive) -> Quarantined and deleted successfully.

    Saastuneita tiedostoja:
    C:\Program Files\Adobe CS3\adobe-master-cs3-keygen.exe (Malware.Tool) -> Quarantined and deleted successfully.
    G:\System Volume Information\_restore{3FF3AB9A-DC99-46FE-9C64-5079A65C86E6}\RP356\A0053148.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
    G:\System Volume Information\_restore{3FF3AB9A-DC99-46FE-9C64-5079A65C86E6}\RP356\A0053151.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\resultsw.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\Logs\2009-03-01 14-29-120.log (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\Logs\2009-03-02 12-00-000.log (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\Logs\2009-03-02 12-00-001.log (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\Logs\2009-03-03 19-43-510.log (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-10.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-100.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-101.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-102.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-103.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-104.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-105.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-106.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-107.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-108.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-109.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-11.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-110.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-111.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-112.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-113.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-114.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-115.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-116.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-117.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-118.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-119.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-12.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-120.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-121.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-122.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-123.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-124.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-125.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-126.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-127.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-128.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-129.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-13.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-130.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-131.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-132.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-133.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-134.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-135.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-136.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-137.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-138.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-139.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-14.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-140.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-141.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-142.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-143.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-144.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-145.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-146.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-147.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-148.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-149.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-15.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-150.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-151.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-152.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-153.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-154.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-155.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-156.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-157.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-158.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-159.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-16.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-160.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-161.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-162.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-163.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-164.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-165.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-166.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-167.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-168.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-169.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-17.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-170.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-171.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-172.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-173.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-174.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-175.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-176.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-177.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-178.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-179.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-18.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-180.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-181.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-182.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-183.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-184.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-185.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-186.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-187.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-188.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-189.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-19.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-190.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-191.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-192.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-193.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-194.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-195.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-196.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-197.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-198.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-199.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-20.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-200.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-201.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-202.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-203.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-204.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-205.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-206.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-207.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-208.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-209.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-21.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-210.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-211.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-212.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-213.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-214.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-215.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-216.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-217.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-218.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-219.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-22.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-220.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-221.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-222.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-223.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-224.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-225.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-226.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-227.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-228.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-229.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-23.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-230.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-231.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-24.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-25.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-26.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-27.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-28.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-29.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-30.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-31.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-32.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-33.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-34.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-35.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-36.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-37.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-38.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-39.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-40.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-41.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-42.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-43.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-44.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-45.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-46.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-47.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-48.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-49.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-50.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-51.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-52.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-53.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-54.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-55.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-56.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-57.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-58.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-59.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-6.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-60.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-61.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-62.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-63.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-64.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-65.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-66.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-67.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-68.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-69.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-7.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-70.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-71.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-72.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-73.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-74.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-75.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-76.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-77.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-78.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-79.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-8.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-80.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-81.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-82.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-83.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-84.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-85.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-86.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-87.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-88.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-89.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-9.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-90.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-91.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-92.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-93.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-94.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-95.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-96.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-97.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-98.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-01 14-30-240\regb-99.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Järjestelmänvalvoja\Application Data\RegTool\QuarantineW\2009-03-02 15-35-140\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\305.crack.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\305.crack.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\306.keygen.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\306.keygen.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\307.serial.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\307.serial.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\308.setup.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\308.setup.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\309.music.au.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\310.music2.au.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\311.music3.au.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LocalService\312.music4.au.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\Program Files\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\diactfrm32.dll (Trojan.Agent) -> Delete on reboot.
    C:\WINDOWS\system32\GroupPolicy000.dat (Malware.Trace) -> Quarantined and deleted successfully.
    C:\WINDOWS\GnuHashes.ini (Malware.Trace) -> Quarantined and deleted successfully.
    C:\WINDOWS\Tasks\RegTool Scan.job (Rogue.RegTool) -> Quarantined and deleted successfully.

    ____________________________

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:54:51, on 29.9.2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16876)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\WINDOWS\mHotkey.exe
    C:\WINDOWS\CNYHKey.exe
    C:\WINDOWS\StopHid.exe
    C:\Program Files\Creative\Desktop Wireless\mouse_2k.exe
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Picasa2\PicasaMediaDetector.exe
    C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\WLAN\802.11 Wireless LAN\WWlanMonitor.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FI_FI&c=74&bd=smb&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ircdown.com/fi/index.php?rvs=hompag&d=79918969e=6150
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [CNYHKey] CNYHKey.exe
    O4 - HKLM\..\Run: [StopHid] StopHid.exe
    O4 - HKLM\..\Run: [CreativeMouse ] C:\Program Files\Creative\Desktop Wireless\mouse_2k.exe
    O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=101209 serial=DR12CEP-2346345-CNM lang=EN
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    O4 - Global Startup: WLAN Monitor Utility.lnk = C:\Program Files\WLAN\802.11 Wireless LAN\WWlanMonitor.exe
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe CS3\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1232823459281
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1225354330343
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    --
    End of file - 10626 bytes
     
    optimoi, Sep 29, 2009
    #8
  9. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    Tämän voit poistaa HJT:llä =>

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

    ---------------------------------------------------------------------------

    Seuraavaksi poistamme kaikki käytetyt työkalut roskineen.

    * TuplaklikkaaOTM.exe.
    * Klikkaa CleanUp!.
    * Valitse Yes kun kysytään "Begin cleanup Process?".
    * Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.

    ------------------------------------------------------------------------------

    Käynnistä Malwarebytes => Karanteeni välileti ja tyhjennä roskat.

    **********************************************************

    Lataus ja siivous ohjeet: TÄÄLLÄ

    ----------------------------------------------------------

    Lataa levyn eheytys: DiskDefrag Työpöydälle ja käynnistä install.
    Käynnistä työpöydältä AusLogics Disk Defrag ohjelma. Valitse C:\ jos se on
    käyttöjärjestelmä asennus asema. ==> NEXT

    :D
    .
     
    kalminen, Sep 30, 2009
    #9
  10. Kovo85

    Kovo85 Member

    Joined:
    Dec 29, 2007
    Messages:
    67
    Likes Received:
    0
    Trophy Points:
    16

    Kalminen, onko seuraava totta myös Vistalla. Itse käytän windowsin omaa palomuuria. Kannattaako minun vaihtaa ja mihin?
     
    Kovo85, Sep 30, 2009
    #10
  11. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    Kyllä Optimoilla on => ZoneAlarm.

    Väittämä pätee vain XP:ssä

    Vistassa on kaksisuuntainen palomuuri, joka
    kyselee jopa saako uTorentti liikennöidä HI
    (edellyttäen, että vistan päivitykset hoidetaan (SP2))

    Mulla oli Puoli vuotta vistan muuri käytössä. Ei ongelmia !!!

    Vistan muuri joutuu pannaan sitten vasta kun se testeissä
    kelvottomaksi todetaan.

    PS.
    95% viruksia tulee hiiren vasemman napin kautta.
    Kaivakaa se pois ja riski saastua pienenee ratkaisevasti.

    :D
    .
     
    kalminen, Sep 30, 2009
    #11

Share This Page