HiJackThis -log

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by DjTarzan, Aug 29, 2008.

  1. DjTarzan

    DjTarzan Member

    Joined:
    Nov 27, 2007
    Messages:
    47
    Likes Received:
    0
    Trophy Points:
    16
    Elikkäs tyttöystävän kannettava on hieman sekaisin. Koneen käynnistyksen yhteydessä tulee virheilmoitus aasialaisin kirjaimin, joten sen selvittäminen ei oikeen ole vahvin alani. Prosesseja käynnistyy n.55kpl ja kone on melko hidas. Malwarebytes on asennettu ja ajettu, mutta mitään ei löytynyt.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:11:42, on 29.8.2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
    C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\PROGRA~1\LAUNCH~1\LManager.exe
    C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
    C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\WINDOWS\system32\wbem\unsecapp.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    F:\PhoneConnectorVMC.exe
    C:\Program Files\vodafone\vmclite\vmc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.intl.acer.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fi.intl.acer.yahoo.com/
    F3 - REG:win.ini: load=??? ?, ? ????? ?????????????????
    F3 - REG:win.ini: run=??? ?, ? ????? ?????????????????
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
    O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
    O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
    O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
    O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
    O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{19C46FF8-9979-4255-8229-CFF9AFE15411}: NameServer = 193.229.0.40 193.229.0.42
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    --
    End of file - 8094 bytes
     
    DjTarzan, Aug 29, 2008
    #1
  2. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina Fix checked

    F3 - REG:win.ini: load=??? ?, ? ????? ?????????????????
    F3 - REG:win.ini: run=??? ?, ? ????? ?????????????????
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler

    =====================

    1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
    combofix1
    combofix2

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    ===========

    Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.

    Käynnistä koneesi vikasietotilaan:

    sammuta ja käynnistä
    käynnistyksen yhteydessä hakkaa F8 nappia
    valitse nuolinäppäimellä vikasietotila
    paina enter ja enter
    valitse käyttäjätilisi
    paina kyllä

    Jossakin koneissa hakataan F8:sin sijasta F5:tä

    " Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix.
    " Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
    " Paina Y käynnistääksesi skriptin.
    " Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
    " Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
    " Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
    " Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
    " Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
    " Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis:n lokin kera.
     
    Hujo, Aug 29, 2008
    #2
  3. DjTarzan

    DjTarzan Member

    Joined:
    Nov 27, 2007
    Messages:
    47
    Likes Received:
    0
    Trophy Points:
    16
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:08:28, on 29.8.2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
    C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\PROGRA~1\LAUNCH~1\LManager.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
    C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\WINDOWS\system32\wbem\unsecapp.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\system32\taskmgr.exe
    F:\PhoneConnectorVMC.exe
    C:\Program Files\vodafone\vmclite\vmc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fi.intl.acer.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fi.intl.acer.yahoo.com/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
    O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
    O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
    O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
    O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
    O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Documents and Settings\Jouko Karvonen\Desktop\Hanna\Ohjelmat\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{19C46FF8-9979-4255-8229-CFF9AFE15411}: NameServer = 193.229.0.40 193.229.0.42
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    --
    End of file - 7462 bytes


    SDFix: Version 1.179
    Run by Jouko Karvonen on pe 29.08.2008 at 12:56

    Microsoft Windows XP [versio 5.1.2600]
    Running From: C:\DOCUME~1\JOUKOK~1\Desktop\SDFix\SDFix

    Checking Services :


    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting


    Checking Files :

    No Trojan Files Found






    Removing Temp Files

    ADS Check :



    Final Check :

    catchme 0.3.1353.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-29 13:03:47
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    scanning hidden processes ...

    scanning hidden services ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0


    Remaining Services :




    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
    "C:\\Program Files\\Elisa\\Avustaja\\Elisa.exe"="C:\\Program Files\\Elisa\\Avustaja\\Elisa.exe:*:Enabled:Elisa Avustaja"
    "C:\\Documents and Settings\\Jouko Karvonen\\Desktop\\Hanna\\Ohjelmat\\BitComet\\BitComet.exe"="C:\\Documents and Settings\\Jouko Karvonen\\Desktop\\Hanna\\Ohjelmat\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
    "C:\\Documents and Settings\\Jouko Karvonen\\Desktop\\Hanna\\CS1.6\\hl.exe"="C:\\Documents and Settings\\Jouko Karvonen\\Desktop\\Hanna\\CS1.6\\hl.exe:*:Enabled:Half-Life Launcher"
    "C:\\Program Files\\Team Factor\\tf.exe"="C:\\Program Files\\Team Factor\\tf.exe:*:Enabled:tf"
    "C:\\Program Files\\Messenger\\MSMSGS.EXE"="C:\\Program Files\\Messenger\\MSMSGS.EXE:*:Enabled:Windows Messenger"
    "C:\\Program Files\\Infogrames\\Line of Sight - Vietnam\\Vietnam.exe"="C:\\Program Files\\Infogrames\\Line of Sight - Vietnam\\Vietnam.exe:*:Enabled:Vietnam"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    Remaining Files :


    File Backups: - C:\DOCUME~1\JOUKOK~1\Desktop\SDFix\SDFix\backups\backups.zip

    Files with Hidden Attributes :

    Tue 27 Jun 2006 1,024 ...HR --- "C:\WINDOWS\system32\NTICDMK7.dll"
    Tue 27 Jun 2006 1,024 ...HR --- "C:\WINDOWS\system32\NTIMP3.dll"
    Tue 27 Jun 2006 1,024 ...HR --- "C:\WINDOWS\system32\NTIMPEG2.dll"
    Tue 27 Jun 2006 1,024 ...HR --- "C:\WINDOWS\system32\NTIFCD3.dll"
    Tue 27 Jun 2006 1,024 ...HR --- "C:\WINDOWS\system32\NTIBUN4.dll"
    Thu 20 Sep 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\6669d04be19822840dc12f3a3a5047fc\BITB.tmp"
    Tue 6 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\fd0264849c01086f3c6b505dc02dbd44\BIT1.tmp"

    Finished!
     
    DjTarzan, Aug 29, 2008
    #3
  4. Hujo

    Hujo Guest

    combofix loki

    ==============

    Javan päivitys ja välimuistin tyhjennys:

    Lataa JavaRa ja pura se työpöydällesi.

    ***Sulje kaikki päällä olevat Internet Explorerin ikkunat ennen jatkamista!***

    * Tuplaklikkaa JavaRa.exeä käynnistääksesi ohjelma.
    * Valitse English pudotusvalikosta valitaksesi kieleksi englannin ja klikkaa Select.
    * Klikkaa Remove Older Versions poistaaksesi vanhat Java-versiot koneeltasi.
    * Klikkaa Yes kun pyydetään. Kun JavaRa on valmis, se ilmoittaa, että lokitiedosto on luotu. Klikkaa OK.
    * Lokitiedosto avautuu. Lähetä sen sisältö seuraavassa viestissäsi.
    4. Asenna uusin Java päivitys seuraavasta linkistä..

    http://java.sun.com/javase/downloads/index.jsp

    Rullaa alas kohteeseen Java Runtime Environment (JRE) 6 Update 7
    Paina Download
    Laita Platform -kohtaan Windows
    Ruksaa I agree to the Java SE Runtime Environment 6 License Agreement ja paina Continue
    Paina Windows Offline Installationin alapuolella jre-6u4-windows-i586-p.exe

    Tallenna tiedosto vaikka työpöydälle ja asenna se.

    5. Käynnistä kone uudelleen asennuksen jälkeen.
    6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
    7. General-välilehdellä klikkaa Settings. Vedä liukusäädintä (Disk Space) pienemmälle.

    (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
    Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle).

    8. Klikkaa Delete Files -nappia. Varmista että kaikki kaksi valintaa ovat rastitettuja:
    * Applications and Applets
    * Trace and Log Files

    Ja paina OK -nappia
    Huomaa: Tämä poistaa kaikki ladatut sovellukset ja appletit VÄLIMUISTISTA.

    9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.
    10. Välilehti Update: ota ruksi pois kohdasta Check for Updates automatically
    Valitse Never check
    11. Klikkaa Apply ja OK jättääksesi Java asetusikkunasi.
     
    Hujo, Aug 29, 2008
    #4
  5. DjTarzan

    DjTarzan Member

    Joined:
    Nov 27, 2007
    Messages:
    47
    Likes Received:
    0
    Trophy Points:
    16
    ComboFix 08-08-28.06 - Jouko Karvonen 2008-08-29 12:41:53.2 - FAT32x86
    Microsoft Windows XP Professional 5.1.2600.2.1252.358.1033.18.629 [GMT 3:00]
    Running from: C:\Documents and Settings\Jouko Karvonen\Desktop\ComboFix.exe
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((( Files Created from 2008-07-28 to 2008-08-29 )))))))))))))))))))))))))))))))
    .

    2008-08-14 15:43 . 2008-08-14 15:43 <KANSIO> d-------- C:\Program Files\EA Games
    2008-08-02 20:48 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-07-30 17:07 17,144 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
    2008-07-18 20:54 --------- d-----w C:\Program Files\Betsson
    2008-07-16 13:01 --------- d-----w C:\Program Files\Infogrames
    2008-07-12 17:08 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
    2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll
    2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\dllcache\es.dll
    2008-07-05 00:02 --------- d-----w C:\Program Files\temp
    2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
    2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\dllcache\mscms.dll
    2008-06-23 16:12 667,136 ----a-w C:\WINDOWS\system32\wininet.dll
    2008-06-23 16:12 667,136 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
    2008-06-23 16:12 618,496 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
    2008-06-23 16:12 532,480 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
    2008-06-23 16:12 474,112 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
    2008-06-23 16:12 449,024 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
    2008-06-23 16:12 39,424 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    2008-06-23 16:12 146,432 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
    2008-06-23 16:12 1,499,136 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
    2008-06-23 16:11 96,256 ----a-w C:\WINDOWS\system32\dllcache\inseng.dll
    2008-06-23 16:11 55,808 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll
    2008-06-23 16:11 357,888 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    2008-06-23 16:11 3,067,392 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2008-06-23 16:11 251,904 ----a-w C:\WINDOWS\system32\dllcache\iepeers.dll
    2008-06-23 16:11 205,312 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
    2008-06-23 16:11 16,384 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
    2008-06-23 16:11 151,040 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll
    2008-06-23 16:11 1,054,208 ----a-w C:\WINDOWS\system32\dllcache\danim.dll
    2008-06-23 16:11 1,024,000 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll
    2008-06-23 09:53 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe
    2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
    2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\dllcache\mswsock.dll
    2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
    2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\dllcache\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
    2008-06-13 13:10 272,128 ------w C:\WINDOWS\system32\dllcache\bthport.sys
    2007-04-09 09:07 87,608 ----a-w C:\Documents and Settings\Jouko Karvonen\Application Data\ezpinst.exe
    2007-04-09 09:07 47,360 ----a-w C:\Documents and Settings\Jouko Karvonen\Application Data\pcouffin.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-05-05_14.48.48,79 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-01-23 04:56:22 554,008 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:12 518,944 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:12 326,432 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:12 1,516,568 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:12 355,112 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-27 07:39:14 151,583 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:14 432,928 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:14 322,336 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:14 559,904 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:14 264,992 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:14 838,432 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-12-10 12:41:14 621,344 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ------w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:22:36 14,048 ------w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:22:42 213,216 ------w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:23:00 716,000 ------w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:23:52 371,424 ------w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-21 06:44:30 3,066,880 ------w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\mshtml.dll
    + 2008-04-21 06:44:30 666,112 ------w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll
    + 2008-04-21 06:24:02 3,067,392 ------w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll
    + 2008-04-21 06:24:02 666,624 ------w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll
    + 2007-11-30 12:39:22 17,272 ------w C:\WINDOWS\$hf_mig$\KB950759\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$hf_mig$\KB950759\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ------w C:\WINDOWS\$hf_mig$\KB950759\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ------w C:\WINDOWS\$hf_mig$\KB950759\update\update.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$hf_mig$\KB950759\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ------w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ------w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ------w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:52 203,008 ------w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ------w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:18 203,136 ------w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:22 17,272 ------w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ------w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ------w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-06-13 09:52:16 272,128 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-13 11:05:52 272,128 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-13 11:27:44 272,128 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:18:52 17,272 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:18:52 231,288 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:18:52 26,488 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:18:52 755,576 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:18:52 382,840 ------w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-04-14 11:00:16 272,128 ------w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
    + 2008-04-14 12:30:50 272,128 ------w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
    + 2008-04-14 12:36:36 272,128 ------w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
    + 2007-11-30 11:18:52 17,272 ------w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
    + 2007-11-30 11:18:52 231,288 ------w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
    + 2007-11-30 11:18:52 26,488 ------w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
    + 2007-11-30 11:18:52 755,576 ------w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
    + 2007-11-30 11:18:52 382,840 ------w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
    + 2008-05-07 05:12:40 1,288,192 ------w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:16 1,288,192 ------w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:18:52 17,272 ------w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:18:52 231,288 ------w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:18:52 26,488 ------w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ------w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:08:32 100,352 ------w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ------w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:36:12 147,968 ------w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:36:12 245,248 ------w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ------w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:40 225,920 ------w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
    + 2008-06-20 17:46:58 147,968 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:46:58 245,248 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:28 225,856 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:04 138,496 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:43:06 147,968 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:43:06 245,248 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ------w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:22 17,272 ------w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ------w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ------w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:20 382,840 ------w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
    + 2004-08-10 17:00:00 561,179 ------w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll
    + 2004-08-10 17:00:00 512,029 ------w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
    + 2004-08-10 17:00:00 319,517 ------w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
    + 2004-08-10 17:00:00 1,507,356 ------w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
    + 2004-08-10 17:00:00 358,976 ------w C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll
    + 2004-08-10 17:00:00 358,976 ------w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
    + 2004-08-10 17:00:00 151,583 ------w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
    + 2004-08-10 17:00:00 53,279 ------w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
    + 2004-08-10 17:00:00 241,693 ------w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
    + 2004-08-10 17:00:00 213,023 ------w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
    + 2004-08-10 17:00:00 348,189 ------w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
    + 2004-08-10 17:00:00 421,919 ------w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
    + 2004-08-10 17:00:00 315,423 ------w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
    + 2004-08-10 17:00:00 552,989 ------w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
    + 2004-08-10 17:00:00 258,077 ------w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
    + 2004-08-10 17:00:00 831,519 ------w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
    + 2004-08-10 17:00:00 614,429 ------w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
    + 2004-08-10 17:00:00 348,189 ------w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
    + 2007-03-06 01:22:42 213,216 ------w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
    + 2007-03-06 01:23:52 371,424 ------w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
    + 2008-02-16 09:32:04 1,024,000 ------w C:\WINDOWS\$NtUninstallKB950759$\browseui.dll
    + 2008-02-16 09:32:04 151,040 ------w C:\WINDOWS\$NtUninstallKB950759$\cdfview.dll
    + 2008-02-16 09:32:04 1,054,208 ------w C:\WINDOWS\$NtUninstallKB950759$\danim.dll
    + 2008-02-16 09:32:04 357,888 ------w C:\WINDOWS\$NtUninstallKB950759$\dxtmsft.dll
    + 2008-02-16 09:32:04 205,312 ------w C:\WINDOWS\$NtUninstallKB950759$\dxtrans.dll
    + 2008-02-16 09:32:04 55,808 ------w C:\WINDOWS\$NtUninstallKB950759$\extmgr.dll
    + 2008-02-15 09:07:54 18,432 ------w C:\WINDOWS\$NtUninstallKB950759$\iedw.exe
    + 2008-02-16 09:32:04 251,904 ------w C:\WINDOWS\$NtUninstallKB950759$\iepeers.dll
    + 2008-02-16 09:32:04 96,256 ------w C:\WINDOWS\$NtUninstallKB950759$\inseng.dll
    + 2008-02-16 09:32:04 16,384 ------w C:\WINDOWS\$NtUninstallKB950759$\jsproxy.dll
    + 2008-02-16 09:32:06 3,066,880 ------w C:\WINDOWS\$NtUninstallKB950759$\mshtml.dll
    + 2008-02-16 09:32:06 449,024 ------w C:\WINDOWS\$NtUninstallKB950759$\mshtmled.dll
    + 2008-02-16 09:32:06 146,432 ------w C:\WINDOWS\$NtUninstallKB950759$\msrating.dll
    + 2008-02-16 09:32:08 532,480 ------w C:\WINDOWS\$NtUninstallKB950759$\mstime.dll
    + 2008-02-16 09:32:08 39,424 ------w C:\WINDOWS\$NtUninstallKB950759$\pngfilt.dll
    + 2008-02-16 09:32:08 1,499,136 ------w C:\WINDOWS\$NtUninstallKB950759$\shdocvw.dll
    + 2008-02-16 09:32:08 474,112 ------w C:\WINDOWS\$NtUninstallKB950759$\shlwapi.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$NtUninstallKB950759$\spuninst\updspapi.dll
    + 2008-02-16 09:32:08 618,496 ------w C:\WINDOWS\$NtUninstallKB950759$\urlmon.dll
    + 2008-02-16 09:32:10 666,112 ------w C:\WINDOWS\$NtUninstallKB950759$\wininet.dll
    + 2008-02-15 09:06:22 351,744 ------w C:\WINDOWS\$NtUninstallKB950759$\xpsp3res.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
    + 2006-07-13 07:48:58 202,240 ------w C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$NtUninstallKB950762$\spuninst\updspapi.dll
    + 2008-04-14 11:01:02 272,128 ------w C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys
    + 2007-11-30 11:18:52 231,288 ------w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
    + 2007-11-30 11:18:52 382,840 ------w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
    + 2007-11-30 11:18:52 231,288 ------w C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe
    + 2007-11-30 11:18:52 382,840 ------w C:\WINDOWS\$NtUninstallKB951376$\spuninst\updspapi.dll
    + 2007-10-29 21:35:14 1,287,680 ------w C:\WINDOWS\$NtUninstallKB951698$\quartz.dll
    + 2007-11-30 11:18:52 231,288 ------w C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 ------w C:\WINDOWS\$NtUninstallKB951698$\spuninst\updspapi.dll
    + 2004-08-10 17:00:00 138,496 ------w C:\WINDOWS\$NtUninstallKB951748$\afd.sys
    + 2008-02-20 05:32:44 148,992 ------w C:\WINDOWS\$NtUninstallKB951748$\dnsapi.dll
    + 2004-08-10 17:00:00 245,248 ------w C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 ------w C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe
    + 2007-11-30 12:39:20 382,840 ------w C:\WINDOWS\$NtUninstallKB951748$\spuninst\updspapi.dll
    + 2007-10-30 16:20:56 360,064 ------w C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
    + 2006-08-16 08:37:30 225,664 ------w C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys
    - 2008-04-08 20:18:44 593,920 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\accicons.exe
    + 2008-08-14 09:03:44 593,920 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\accicons.exe
    - 2008-04-08 20:18:44 12,288 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2008-08-14 09:03:44 12,288 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2008-04-08 20:18:44 86,016 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\inficon.exe
    + 2008-08-14 09:03:44 86,016 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\inficon.exe
    - 2008-04-08 20:18:44 135,168 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-08-14 09:03:44 135,168 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2008-04-08 20:18:44 11,264 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2008-08-14 09:03:44 11,264 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2008-04-08 20:18:44 27,136 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2008-08-14 09:03:44 27,136 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2008-04-08 20:18:44 4,096 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2008-08-14 09:03:44 4,096 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2008-04-08 20:18:44 794,624 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2008-08-14 09:03:44 794,624 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2008-04-08 20:18:44 249,856 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2008-08-14 09:03:44 249,856 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2008-04-08 20:18:44 61,440 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\pubs.exe
    + 2008-08-14 09:03:44 61,440 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\pubs.exe
    - 2008-04-08 20:18:44 23,040 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-08-14 09:03:44 23,040 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2008-04-08 20:18:44 286,720 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2008-08-14 09:03:44 286,720 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2008-04-08 20:18:44 409,600 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-08-14 09:03:42 409,600 ----a-r C:\WINDOWS\Installer\{9011040B-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-06-02 14:51:24 2,806 ----a-r C:\WINDOWS\Installer\{B5761811-28F3-4257-B537-815C5EEF472C}\ARPPRODUCTICON.exe
    + 2008-06-02 14:51:24 65,536 ----a-r C:\WINDOWS\Installer\{B5761811-28F3-4257-B537-815C5EEF472C}\NewShortcut1_5E3003BD8B2446E5BEDC66B4435E8637.exe
    + 2008-07-16 13:05:44 40,960 ----a-r C:\WINDOWS\Installer\{D9518C0C-3263-4882-93D6-B0F3935BED6B}\NewShortcut1.exe
    - 2000-08-31 05:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
    + 2000-08-31 05:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe
    - 2008-03-29 17:45:50 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
    + 2008-07-19 14:43:08 1,163,960 ----a-w C:\WINDOWS\system32\aswBoot.exe
    - 2008-03-29 17:23:22 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr
    + 2008-07-19 14:30:54 94,392 ----a-w C:\WINDOWS\system32\AVASTSS.scr
    - 2008-02-16 09:32:04 1,024,000 ----a-w C:\WINDOWS\system32\browseui.dll
    + 2008-06-23 16:11:40 1,024,000 ----a-w C:\WINDOWS\system32\browseui.dll
    - 2008-02-16 09:32:04 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll
    + 2008-06-23 16:11:40 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll
    - 2008-02-16 09:32:04 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll
    + 2008-06-23 16:11:42 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll
    - 2004-08-10 17:00:00 561,179 ----a-w C:\WINDOWS\system32\dllcache\dao360.dll
    + 2008-03-25 04:50:26 554,008 ----a-w C:\WINDOWS\system32\dllcache\dao360.dll
    - 2007-08-21 06:15:44 683,520 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
    + 2008-04-11 18:50:44 683,520 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
    - 2004-08-10 17:00:00 331,776 ----a-w C:\WINDOWS\system32\dllcache\msadce.dll
    + 2008-05-01 14:30:34 331,776 ----a-w C:\WINDOWS\system32\dllcache\msadce.dll
    - 2004-08-10 17:00:00 512,029 ----a-w C:\WINDOWS\system32\dllcache\msexch40.dll
    + 2008-03-25 04:50:28 518,944 ----a-w C:\WINDOWS\system32\dllcache\msexch40.dll
    - 2004-08-10 17:00:00 319,517 ----a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
    + 2008-03-25 04:50:30 326,432 ----a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
    - 2004-08-10 17:00:00 1,507,356 ----a-w C:\WINDOWS\system32\dllcache\msjet40.dll
    + 2008-03-25 04:50:34 1,516,568 ----a-w C:\WINDOWS\system32\dllcache\msjet40.dll
    - 2004-08-10 17:00:00 358,976 ----a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
    + 2008-03-25 04:50:40 355,112 ----a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
    - 2004-08-10 17:00:00 151,583 ----a-w C:\WINDOWS\system32\dllcache\msjint40.dll
    + 2008-03-27 08:12:54 151,583 ----a-w C:\WINDOWS\system32\dllcache\msjint40.dll
    - 2004-08-10 17:00:00 53,279 ----a-w C:\WINDOWS\system32\dllcache\msjter40.dll
    + 2008-03-25 04:50:42 60,192 ----a-w C:\WINDOWS\system32\dllcache\msjter40.dll
    - 2004-08-10 17:00:00 241,693 ----a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
    + 2008-03-25 04:50:42 248,608 ----a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
    - 2004-08-10 17:00:00 213,023 ----a-w C:\WINDOWS\system32\dllcache\msltus40.dll
    + 2008-03-25 04:50:44 219,936 ----a-w C:\WINDOWS\system32\dllcache\msltus40.dll
    - 2004-08-10 17:00:00 348,189 ----a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
    + 2008-03-25 04:50:46 355,104 ----a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
    - 2004-08-10 17:00:00 421,919 ----a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
    + 2008-03-25 04:50:48 432,928 ----a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
    - 2004-08-10 17:00:00 315,423 ----a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
    + 2008-03-25 04:50:50 322,336 ----a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
    - 2004-08-10 17:00:00 552,989 ----a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
    + 2008-03-25 04:50:52 559,904 ----a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
    - 2004-08-10 17:00:00 258,077 ----a-w C:\WINDOWS\system32\dllcache\mstext40.dll
    + 2008-03-25 04:50:56 264,992 ----a-w C:\WINDOWS\system32\dllcache\mstext40.dll
    - 2004-08-10 17:00:00 831,519 ----a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
    + 2008-03-25 04:50:58 838,432 ----a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
    - 2004-08-10 17:00:00 614,429 ----a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
    + 2008-03-25 04:50:58 621,344 ----a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
    - 2004-08-10 17:00:00 348,189 ----a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
    + 2008-03-25 04:50:58 355,104 ----a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
    - 2007-10-29 21:35:14 1,287,680 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll
    + 2008-05-07 04:55:40 1,288,192 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll
    - 2006-07-13 07:48:58 202,240 ----a-w C:\WINDOWS\system32\dllcache\rmcast.sys
    + 2008-05-08 12:28:50 202,752 ----a-w C:\WINDOWS\system32\dllcache\rmcast.sys
    - 2008-02-20 05:32:44 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
    + 2008-06-20 17:41:10 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
    - 2008-03-29 17:26:52 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
    + 2008-07-19 14:32:16 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
    - 2004-08-10 17:00:00 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    + 2008-06-20 10:44:38 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    - 2008-03-29 17:35:50 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys
    + 2008-07-19 14:37:42 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys
    - 2008-03-29 17:35:22 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
    + 2008-07-19 14:37:22 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
    - 2008-03-29 17:29:08 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
    + 2008-07-19 14:33:42 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
    - 2008-03-29 17:31:34 75,856 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys
    + 2008-07-19 14:35:18 78,416 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys
    - 2008-03-29 17:27:34 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
    + 2008-07-19 14:32:36 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
    - 2007-07-11 10:37:26 6,272 ----a-w C:\WINDOWS\system32\drivers\AWRTPD.sys
    + 2008-04-29 08:19:50 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
    - 2007-08-07 09:58:08 8,320 ----a-w C:\WINDOWS\system32\drivers\AWRTRD.sys
    + 2008-04-29 08:19:54 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
    + 2008-06-13 13:10:50 272,128 ------w C:\WINDOWS\system32\drivers\bthport.sys
    + 2007-10-15 13:27:10 101,120 ----a-r C:\WINDOWS\system32\drivers\ewusbmdm.sys
    - 2007-08-07 09:56:58 9,344 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
    + 2008-04-29 08:20:00 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
    - 2006-07-13 07:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys
    + 2008-05-08 12:28:50 202,752 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys
    - 2007-10-30 16:20:56 360,064 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    + 2008-06-20 10:45:14 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    - 2006-08-16 08:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    + 2008-06-20 09:52:06 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    - 2008-02-16 09:32:04 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
    + 2008-06-23 16:11:44 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
    - 2008-02-16 09:32:04 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
    + 2008-06-23 16:11:44 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
    - 2008-02-16 09:32:04 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
    + 2008-06-23 16:11:44 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
    - 2008-02-16 09:32:04 251,904 ----a-w C:\WINDOWS\system32\iepeers.dll
    + 2008-06-23 16:11:52 251,904 ----a-w C:\WINDOWS\system32\iepeers.dll
    - 2007-08-21 06:15:44 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
    + 2008-04-11 18:50:44 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
    - 2008-02-16 09:32:04 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
    + 2008-06-23 16:11:52 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
    - 2008-02-16 09:32:04 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
    + 2008-06-23 16:11:52 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
    - 2008-01-12 12:40:36 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe
    + 2008-05-16 08:58:04 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe
    + 2000-03-17 03:56:18 536,576 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\Control.dll
    + 2000-03-17 03:09:16 1,245,184 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\dirapi.dll
    + 2000-03-17 03:56:22 24,576 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\DynaPlayer.dll
    + 2000-03-17 03:03:30 552,960 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\iml32.dll
    + 2000-03-17 03:53:42 253,952 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\Plugin.dll
    + 2000-03-17 03:54:18 409,600 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\PluginPing.dll
    + 2000-03-17 03:33:54 135,168 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\Proj.dll
    + 2000-03-17 01:09:46 43,520 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\QuitRemote.exe
    + 2000-03-17 04:18:02 86,016 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\SwInit.exe
    + 2000-03-17 03:53:24 86,016 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\SwMenu.dll
    + 2000-03-17 04:18:04 106,496 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\SwOnce.dll
    + 1999-06-25 08:55:30 149,504 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 8\UNWISE.EXE
    - 2008-04-06 05:56:20 19,836,024 ----a-w C:\WINDOWS\system32\MRT.exe
    + 2008-08-05 18:11:02 15,888,504 ----a-w C:\WINDOWS\system32\MRT.exe
    - 2004-08-10 17:00:00 512,029 ----a-w C:\WINDOWS\system32\msexch40.dll
    + 2008-03-25 04:50:28 518,944 ----a-w C:\WINDOWS\system32\msexch40.dll
    - 2004-08-10 17:00:00 319,517 ----a-w C:\WINDOWS\system32\msexcl40.dll
    + 2008-03-25 04:50:30 326,432 ----a-w C:\WINDOWS\system32\msexcl40.dll
    - 2008-02-16 09:32:06 3,066,880 ----a-w C:\WINDOWS\system32\mshtml.dll
    + 2008-06-23 16:11:58 3,067,392 ----a-w C:\WINDOWS\system32\mshtml.dll
    - 2008-02-16 09:32:06 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
    + 2008-06-23 16:12:00 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
    - 2004-08-10 17:00:00 1,507,356 ----a-w C:\WINDOWS\system32\msjet40.dll
    + 2008-03-25 04:50:34 1,516,568 ----a-w C:\WINDOWS\system32\msjet40.dll
    - 2004-08-10 17:00:00 358,976 ----a-w C:\WINDOWS\system32\msjetoledb40.dll
    + 2008-03-25 04:50:40 355,112 ----a-w C:\WINDOWS\system32\msjetoledb40.dll
    - 2004-08-10 17:00:00 151,583 ----a-w C:\WINDOWS\system32\msjint40.dll
    + 2008-03-27 08:12:54 151,583 ----a-w C:\WINDOWS\system32\msjint40.dll
    - 2004-08-10 17:00:00 53,279 ----a-w C:\WINDOWS\system32\msjter40.dll
    + 2008-03-25 04:50:42 60,192 ----a-w C:\WINDOWS\system32\msjter40.dll
    - 2004-08-10 17:00:00 241,693 ----a-w C:\WINDOWS\system32\msjtes40.dll
    + 2008-03-25 04:50:42 248,608 ----a-w C:\WINDOWS\system32\msjtes40.dll
    - 2004-08-10 17:00:00 213,023 ----a-w C:\WINDOWS\system32\msltus40.dll
    + 2008-03-25 04:50:44 219,936 ----a-w C:\WINDOWS\system32\msltus40.dll
    - 2004-08-10 17:00:00 348,189 ----a-w C:\WINDOWS\system32\mspbde40.dll
    + 2008-03-25 04:50:46 355,104 ----a-w C:\WINDOWS\system32\mspbde40.dll
    - 2008-02-16 09:32:06 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
    + 2008-06-23 16:12:02 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
    - 2004-08-10 17:00:00 421,919 ----a-w C:\WINDOWS\system32\msrd2x40.dll
    + 2008-03-25 04:50:48 432,928 ----a-w C:\WINDOWS\system32\msrd2x40.dll
    - 2004-08-10 17:00:00 315,423 ----a-w C:\WINDOWS\system32\msrd3x40.dll
    + 2008-03-25 04:50:50 322,336 ----a-w C:\WINDOWS\system32\msrd3x40.dll
    - 2004-08-10 17:00:00 552,989 ----a-w C:\WINDOWS\system32\msrepl40.dll
    + 2008-03-25 04:50:52 559,904 ----a-w C:\WINDOWS\system32\msrepl40.dll
    - 2004-08-10 17:00:00 258,077 ----a-w C:\WINDOWS\system32\mstext40.dll
    + 2008-03-25 04:50:56 264,992 ----a-w C:\WINDOWS\system32\mstext40.dll
    - 2008-02-16 09:32:08 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
    + 2008-06-23 16:12:02 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
    - 2004-08-10 17:00:00 831,519 ----a-w C:\WINDOWS\system32\mswdat10.dll
    + 2008-03-25 04:50:58 838,432 ----a-w C:\WINDOWS\system32\mswdat10.dll
    - 2004-08-10 17:00:00 614,429 ----a-w C:\WINDOWS\system32\mswstr10.dll
    + 2008-03-25 04:50:58 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
    - 2004-08-10 17:00:00 348,189 ----a-w C:\WINDOWS\system32\msxbde40.dll
    + 2008-03-25 04:50:58 355,104 ----a-w C:\WINDOWS\system32\msxbde40.dll
    - 2008-02-16 09:32:08 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
    + 2008-06-23 16:12:02 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
    - 2007-10-29 21:35:14 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
    + 2008-05-07 04:55:40 1,288,192 ----a-w C:\WINDOWS\system32\quartz.dll
    + 2008-05-22 20:13:18 798,228 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat
    - 2008-02-16 09:32:08 1,499,136 ----a-w C:\WINDOWS\system32\shdocvw.dll
    + 2008-06-23 16:12:06 1,499,136 ----a-w C:\WINDOWS\system32\shdocvw.dll
    - 2008-02-16 09:32:08 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll
    + 2008-06-23 16:12:06 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll
    - 2006-11-17 12:14:30 14,640 ------w C:\WINDOWS\system32\spmsg.dll
    + 2007-11-30 12:39:22 17,272 ------w C:\WINDOWS\system32\spmsg.dll
    - 2007-11-13 10:31:12 60,416 ------w C:\WINDOWS\system32\tzchange.exe
    + 2008-07-14 11:09:18 62,976 ------w C:\WINDOWS\system32\tzchange.exe
    - 2008-02-16 09:32:08 618,496 ----a-w C:\WINDOWS\system32\urlmon.dll
    + 2008-06-23 16:12:06 618,496 ----a-w C:\WINDOWS\system32\urlmon.dll
    - 2008-02-15 09:06:22 351,744 ----a-w C:\WINDOWS\system32\xpsp3res.dll
    + 2008-07-03 09:14:02 351,744 ----a-w C:\WINDOWS\system32\xpsp3res.dll
    + 2008-08-29 09:03:18 16,384 ----a-w C:\WINDOWS\Temp\Perflib_Perfdata_248.dat
    + 2008-08-29 09:03:10 16,384 ----a-w C:\WINDOWS\Temp\Perflib_Perfdata_67c.dat
    + 2008-08-29 09:04:32 16,384 ----a-w C:\WINDOWS\Temp\Perflib_Perfdata_aa0.dat
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 17:38 78008]
    "AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2006-04-14 22:35 53248]
    "Acer ePresentation HPD"="C:\Acer\Empowering Technology\ePresentation\ePresentation.exe" [2006-03-31 16:39 204800]
    "ePower_DMC"="C:\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-05-30 12:11 421888]
    "Boot"="C:\Acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 22:12 579584]
    "eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 14:40 413696]
    "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 13:07 761946]
    "ntiMUI"="C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 17:15 45056]
    "LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2006-06-23 06:59 602112]
    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 11:12 90112]
    "RTHDCPL"="RTHDCPL.EXE" [2006-06-27 23:54 16248320 C:\WINDOWS\RTHDCPL.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 20:00 15360]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2006-03-27 11:37:58 45056]
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 23:23:26 282624]
    Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\MSN Messenger\\livecall.exe"=
    "C:\\Program Files\\Elisa\\Avustaja\\Elisa.exe"=
    "C:\\Documents and Settings\\Jouko Karvonen\\Desktop\\Hanna\\Ohjelmat\\BitComet\\BitComet.exe"=
    "C:\\Documents and Settings\\Jouko Karvonen\\Desktop\\Hanna\\CS1.6\\hl.exe"=
    "C:\\Program Files\\Team Factor\\tf.exe"=
    "C:\\Program Files\\Messenger\\MSMSGS.EXE"=
    "C:\\Program Files\\Infogrames\\Line of Sight - Vietnam\\Vietnam.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "8056:TCP"= 8056:TCP:BitComet 8056 TCP
    "8056:UDP"= 8056:UDP:BitComet 8056 UDP
    "13535:TCP"= 13535:TCP:BitComet 13535 TCP
    "13535:UDP"= 13535:UDP:BitComet 13535 UDP

    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 17:35]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 17:37]
    S2 eLock2BurnerLockDriver;eLock2BurnerLockDriver;C:\WINDOWS\system32\eLock2BurnerLockDriver.sys []
    S2 eLock2FSCTLDriver;eLock2FSCTLDriver;C:\WINDOWS\system32\eLock2FSCTLDriver.sys []

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6053a2fe-4941-11dd-80c0-0016d44e0241}]
    \Shell\AutoRun\command - F:\StartVMCLite.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{759f0114-6780-11dd-80e2-0016d44e0241}]
    \Shell\AutoRun\command - F:\StartVMCLite.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{759f0115-6780-11dd-80e2-0016d44e0241}]
    \Shell\AutoRun\command - F:\StartVMCLite.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{84f8234a-fc90-11db-bf7f-0016d44e0241}]
    \Shell\AutoRun\command - F:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bea3939e-30b1-11dd-80a4-0016d44e0241}]
    \Shell\AutoRun\command - F:\StartVMCLite.exe
    .
    - - - - ORPHANS REMOVED - - - -

    MSConfigStartUp-CTFMON - (no file)


    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Documents and Settings\Jouko Karvonen\Application Data\Mozilla\Firefox\Profiles\es2myo2x.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fi/
    FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
    FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npmusicn.dll
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-29 12:45:16
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2008-08-29 12:46:44
    ComboFix-quarantined-files.txt 2008-08-29 09:46:34
    ComboFix2.txt 2008-05-05 11:49:26

    Pre-Run: 26,342,621,184 bytes free
    Post-Run: 26,331,480,064 tavua vapaana

    509 --- E O F --- 2008-08-15 19:09:24
     
    DjTarzan, Aug 29, 2008
    #5
  6. Hujo

    Hujo Guest

    Lataa Tästä Ccleaner
    CCleaner v2.05.555- Standard Build, ÄLÄ aseenna Yahoo toolbaria!
    Asennuksessa poista merkki/rasti kohdasta "asenna Yahoo! toolbar/työkalupalkki".
    Asennuksen jälkeen aukaise CCleaner.
    Valitse vasemmalta pystyrivistä Options.
    Valitse viereisestä pystyrivistä Settings.
    Language kohtaan valitse Suomi.

    Puhdistaja
    Valitse vasemmalta pystyrivistä Puhdistaja.
    Paina alhaalta Tutki.
    Nyt CCleaner tutkii, mitä voidaan poistaa (tempit, cookiessit jne.).
    Kun tutkiminen on valmis, paina Aja CCleaner.
    Nyt CCleaner poistaa löydetyt tempit, cookiessit jne.

    Rekisterin virheiden korjaus
    Valitse vasemmalta pystyrivistä Rekisteri.
    Paina alhaalta Etsi rekisterin virheitä.
    Kun etsintä on valmis ja olet varma, että haluat korjata ne rivit jotka ovat merkattuja, niin paina Korjaa valitut rekisterin virheet.
    Sinulta kysytään "haluatko varmuuskopioida muutokset rekisteriin", paina Kyllä. Tallenna varmuuskopio vaikka "Omat tiedostot" -kansioon.
    Klikkaa uudesta aukeavasta ikkunasta Korjaa kaikki valitut virheet.
    Saat vielä varmistus kysymyksen, paina Ok.
    Kun virheet on korjattu, paina Sulje.
    Nyt voit sulkea CCleanerin painamalla oikealta ylhäältä punaista rastia.

    ==========

    Mites kone toimii
     
    Hujo, Aug 29, 2008
    #6
  7. DjTarzan

    DjTarzan Member

    Joined:
    Nov 27, 2007
    Messages:
    47
    Likes Received:
    0
    Trophy Points:
    16
    Elikkä nuo alun virheilmoitukset katosivat, prosessien määrä laski 51kpl ja suorittimen käyttöhistoria ei iske niin usein 100% kun ennen. Kiitoksia kovasti.
     
    DjTarzan, Aug 29, 2008
    #7
  8. Hujo

    Hujo Guest

    Lataa OTMoveIt
    OTMoveIt ja tallenna se työpöydällesi.

    Tuplaklikkaa OTMoveIt.exe.
    Klikkaa CleanUp!.
    Valitse Yes kun kysytään "Begin cleanup Process?".
    Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.

    HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.
     
    Hujo, Aug 29, 2008
    #8

Share This Page