Elikkäs musiikki pätkii jos kuormittaa konetta ja pelejen fps on huono. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:06:45, on 4.6.2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\Internet Explorer\ieuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O13 - Gopher Prefix: O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cab O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 5620 bytes
Lataa Malwarebytes' Anti-Malware työpöydällesi. 1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman. 2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish. 3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version. 4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan. 5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset. 6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected. 7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt 8. Lähetä lokin sisältö seuraavassa viestissäsi.
Malwarebytes' Anti-Malware 1.14 Tietokantaversio: 827 18:37:33 5.6.2008 mbam-log-6-5-2008 (18-37-33).txt Tarkistustyyppi: Täysi tarkistus (C:\|D:\|) Tarkistetut kohteet: 139465 Kulunut aika: 23 minute(s), 31 second(s) Saastuneita muistiprosesseja: 0 Saastuneita muistimoduuleja: 0 Saastuneita rekisteriavaimia: 0 Saastuneita rekisteriarvoja: 0 Saastuneita rekisterikohteita: 0 Saastuneita hakemistoja: 0 Saastuneita tiedostoja: 0 Saastuneita muistiprosesseja: (Haitallisia kohteita ei löydetty) Saastuneita muistimoduuleja: (Haitallisia kohteita ei löydetty) Saastuneita rekisteriavaimia: (Haitallisia kohteita ei löydetty) Saastuneita rekisteriarvoja: (Haitallisia kohteita ei löydetty) Saastuneita rekisterikohteita: (Haitallisia kohteita ei löydetty) Saastuneita hakemistoja: (Haitallisia kohteita ei löydetty) Saastuneita tiedostoja: (Haitallisia kohteita ei löydetty)
1.Lataa combofix.exe työpöydällesi yhdestä linkistä: combofix1 combofix2 2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia. 3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi. Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
ComboFix 08-06-05.3 - Omistaja 2008-06-05 23:44:22.1 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1035.18.1323 [GMT 3:00] Running from: C:\Users\Omistaja\Desktop\ComboFix.exe * Created a new restore point . ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-05-05 to 2008-06-05 ))))))))))))))))) . 2008-06-05 18:12 . 2008-06-05 18:12 <KANSIO> d-------- C:\Users\Omistaja\AppData\Roaming\Malwarebytes 2008-06-05 18:12 . 2008-06-05 18:12 <KANSIO> d-------- C:\Users\All Users\Malwarebytes 2008-06-05 18:12 . 2008-06-05 18:12 <KANSIO> d-------- C:\ProgramData\Malwarebytes 2008-06-05 18:12 . 2008-06-05 18:12 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-05 18:12 . 2008-05-30 01:06 34,296 --a------ C:\Windows\System32\drivers\mbamcatchme.sys 2008-06-05 18:12 . 2008-05-30 01:06 15,864 --a------ C:\Windows\System32\drivers\mbam.sys 2008-06-04 14:04 . 2008-06-04 14:04 <KANSIO> d-------- C:\Program Files\Trend Micro 2008-06-04 13:54 . 2008-06-04 13:54 <KANSIO> d-------- C:\Program Files\ToniArts 2008-06-04 13:20 . 2008-06-04 13:20 <KANSIO> d-------- C:\Users\Omistaja\AppData\Roaming\Uniblue 2008-05-28 13:44 . 2008-03-08 05:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll 2008-05-28 13:44 . 2008-03-08 07:21 1,695,744 --a------ C:\Windows\System32\gameux.dll 2008-05-26 21:54 . 2008-05-26 21:54 <KANSIO> d-------- C:\AeriaGames 2008-05-14 04:29 . 2008-05-14 04:29 41,296 --a------ C:\Windows\System32\xfcodec.dll . (((((((((((((((((((((((((((((((((((( Find3M-raportti )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-28 12:28 --------- d-----w C:\ProgramData\Xfire 2008-05-27 14:24 --------- d-----w C:\Users\Omistaja\AppData\Roaming\Xfire 2008-05-27 13:04 --------- d-----w C:\Program Files\Xfire 2008-05-26 18:53 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-26 12:58 --------- d-----w C:\Users\Omistaja\AppData\Roaming\IGN_DLM 2008-05-22 11:51 --------- d-----w C:\Program Files\Silkroad 2008-05-22 11:50 --------- d-----w C:\Program Files\America's Army 2008-05-20 11:50 --------- d-----w C:\Program Files\Microsoft Silverlight 2008-05-14 19:41 --------- d-----w C:\Program Files\Windows Mail 2008-05-14 13:27 --------- d-----w C:\Program Files\World of Warcraft 2008-05-12 17:07 --------- d-----w C:\Program Files\Steam 2008-05-01 13:36 --------- d-----w C:\ProgramData\NVIDIA 2008-05-01 13:24 174 --sha-w C:\Program Files\desktop.ini 2008-05-01 13:19 --------- d-----w C:\Program Files\Windows Sidebar 2008-05-01 13:19 --------- d-----w C:\Program Files\Windows Photo Gallery 2008-05-01 13:19 --------- d-----w C:\Program Files\Windows Journal 2008-05-01 13:19 --------- d-----w C:\Program Files\Windows Defender 2008-05-01 13:19 --------- d-----w C:\Program Files\Windows Collaboration 2008-05-01 13:19 --------- d-----w C:\Program Files\Windows Calendar 2008-05-01 13:02 82,432 ----a-w C:\Windows\System32\axaltocm.dll 2008-05-01 13:02 101,888 ----a-w C:\Windows\System32\ifxcardm.dll 2008-04-18 07:56 --------- d-----w C:\Program Files\Ventrilo 2008-04-18 07:56 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-04-17 15:36 --------- d-----w C:\Program Files\Java 2008-04-12 22:50 --------- d---a-w C:\ProgramData\TEMP 2008-04-12 15:09 --------- d-----w C:\Program Files\Sony 2008-04-10 11:36 --------- d-----w C:\Program Files\Common Files\Java 2008-04-05 21:31 --------- d-----w C:\Program Files\DivX 2008-04-05 21:31 --------- d-----w C:\Program Files\Common Files\PX Storage Engine 2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll 2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll 2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll 2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll 2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll 2008-03-06 01:25 12,632 ----a-w C:\Windows\System32\lsdelete.exe . ------- Sigcheck ------- . (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet ))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 10:33 1233920] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 10:33 125952] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 10:33 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="C:\Windows\JM\JMInsIDE.exe" [2006-10-30 15:44 36864] "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-15 16:54 262401] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-10 16:27 385024] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 16:34 868352] "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-12-11 18:06 86016] "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-12-11 18:06 8530464] "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-12-11 18:06 81920] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.XFR1"= xfcodec.dll "msacm.avis"= ff_acm.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3137034729-1118942988-1710785902-1000] "EnableNotificationsRef"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "TCP Query User{A96AE2D8-78F0-4CC7-87D4-B551EC6B2058}C:\\program files\\world of warcraft\\backgrounddownloader.exe"= UDP:C:\program files\world of warcraft\backgrounddownloader.exe:Blizzard Downloader "UDP Query User{1BD4F394-CDD1-4F71-8C4E-6B9C556891DD}C:\\program files\\world of warcraft\\backgrounddownloader.exe"= TCP:C:\program files\world of warcraft\backgrounddownloader.exe:Blizzard Downloader "{2AFF516E-D4C3-426D-B10B-0CB4B94032A3}"= UDP:C:\Program Files\Steam\Steam.exe:Steam Client "{89A68534-6BC4-4C4D-8FAF-C7E15EFC8F92}"= TCP:C:\Program Files\Steam\Steam.exe:Steam Client "TCP Query User{CFCF1703-F326-406F-BFB8-303FC69D954D}C:\\program files\\xfire\\xfire.exe"= UDP:C:\program files\xfire\xfire.exe:Xfire "UDP Query User{4999007F-54A3-46DA-9E68-2981A9EE2BC3}C:\\program files\\xfire\\xfire.exe"= TCP:C:\program files\xfire\xfire.exe:Xfire "TCP Query User{FE137CC7-E347-4B80-823A-0235230001AC}C:\\program files\\steam\\steamapps\\punajuuri\\counter-strike\\hl.exe"= UDP:C:\program files\steam\steamapps\punajuuri\counter-strike\hl.exe:Half-Life Launcher "UDP Query User{79B967EF-2AD9-422B-B644-7E281787F154}C:\\program files\\steam\\steamapps\\punajuuri\\counter-strike\\hl.exe"= TCP:C:\program files\steam\steamapps\punajuuri\counter-strike\hl.exe:Half-Life Launcher "TCP Query User{7D00BA52-E611-4A59-A7AB-0DB2F1ABDC5C}C:\\program files\\soldier of fortune ii - double helix\\sof2mp.exe"= UDP:C:\program files\soldier of fortune ii - double helix\sof2mp.exe:SoF2MP "UDP Query User{DF42369C-1B56-487F-B2A8-0B72C0CC81D6}C:\\program files\\soldier of fortune ii - double helix\\sof2mp.exe"= TCP:C:\program files\soldier of fortune ii - double helix\sof2mp.exe:SoF2MP "TCP Query User{467D8F8F-6E8E-4639-ACBC-6174A41EADE1}C:\\program files\\america's army\\system\\armyops.exe"= UDP:C:\program files\america's army\system\armyops.exe:ArmyOps "UDP Query User{B965B06A-A69F-4F09-8BA0-EB74AB96576A}C:\\program files\\america's army\\system\\armyops.exe"= TCP:C:\program files\america's army\system\armyops.exe:ArmyOps "{DE2083E0-1933-49B3-9CB7-46AF96585AE6}"= UDP:C:\Program Files\BitTorrent\bittorrent.exe:BitTorrent "{38852581-8D2A-4743-9D87-0DEF61CBF46E}"= TCP:C:\Program Files\BitTorrent\bittorrent.exe:BitTorrent "{0CFD0B35-13D1-4790-BC27-D876BCF194CE}"= UDP:C:\Windows\System32\lxbvcoms.exe:Lexmark Communications System "{FB31539F-D3C3-41E1-93D0-EF0E16BB46C5}"= TCP:C:\Windows\System32\lxbvcoms.exe:Lexmark Communications System "TCP Query User{704D8CE5-D2D0-4F70-8677-E8AC90CC88AF}C:\\users\\omistaja\\desktop\\wow-2.3.0.7561-to-0.3.2.7627-engb-downloader.exe"= UDP:C:\users\omistaja\desktop\wow-2.3.0.7561-to-0.3.2.7627-engb-downloader.exe:wow-2.3.0.7561-to-0.3.2.7627-engb-downloader.exe "UDP Query User{9AD747BA-C40A-4790-87FB-0B088347553C}C:\\users\\omistaja\\desktop\\wow-2.3.0.7561-to-0.3.2.7627-engb-downloader.exe"= TCP:C:\users\omistaja\desktop\wow-2.3.0.7561-to-0.3.2.7627-engb-downloader.exe:wow-2.3.0.7561-to-0.3.2.7627-engb-downloader.exe "TCP Query User{2E033A0F-5767-4332-A3BC-16F4D5C2267A}C:\\users\\omistaja\\desktop\\wow-2.3.2.7741-to-0.3.3.7799-engb-downloader.exe"= UDP:C:\users\omistaja\desktop\wow-2.3.2.7741-to-0.3.3.7799-engb-downloader.exe:wow-2.3.2.7741-to-0.3.3.7799-engb-downloader.exe "UDP Query User{79272525-AE6F-4385-8C0A-4CCAA7BE7732}C:\\users\\omistaja\\desktop\\wow-2.3.2.7741-to-0.3.3.7799-engb-downloader.exe"= TCP:C:\users\omistaja\desktop\wow-2.3.2.7741-to-0.3.3.7799-engb-downloader.exe:wow-2.3.2.7741-to-0.3.3.7799-engb-downloader.exe "{D20F5D1B-D67C-4A8A-925E-44BCF09737FD}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "TCP Query User{21D07593-4881-496E-955E-A5E83EEED6B5}C:\\program files\\world of warcraft\\repair.exe"= UDP:C:\program files\world of warcraft\repair.exe:Blizzard Repair Utility "UDP Query User{CE97D5BC-53F2-4176-BE90-37ED1B259BE7}C:\\program files\\world of warcraft\\repair.exe"= TCP:C:\program files\world of warcraft\repair.exe:Blizzard Repair Utility "TCP Query User{D94A8DD4-9D43-42FB-892D-05E2FC43EC74}C:\\users\\omistaja\\desktop\\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe"= UDP:C:\users\omistaja\desktop\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe:wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe "UDP Query User{4BCC0571-2B41-4F7E-933A-15748A424FD0}C:\\users\\omistaja\\desktop\\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe"= TCP:C:\users\omistaja\desktop\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe:wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe "TCP Query User{B35488A1-3DC8-40BD-8CA5-A296EE07460A}C:\\program files\\world of warcraft\\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe"= UDP:C:\program files\world of warcraft\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe:Blizzard Downloader "UDP Query User{81AFD0EE-2F01-41C1-B724-08D58393BEAD}C:\\program files\\world of warcraft\\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe"= TCP:C:\program files\world of warcraft\wow-2.3.3.7799-to-0.4.0.7897-engb-downloader.exe:Blizzard Downloader "TCP Query User{C8F194A0-A355-4105-B583-1105D6C1863A}C:\\users\\omistaja\\desktop\\lierox_v0.56_pack_1.9\\lierox v0.56 pack 1.9\\lierox.exe"= UDP:C:\users\omistaja\desktop\lierox_v0.56_pack_1.9\lierox v0.56 pack 1.9\lierox.exe:lierox.exe "UDP Query User{E567B8C0-EAC1-4920-A992-69F81BD00F7B}C:\\users\\omistaja\\desktop\\lierox_v0.56_pack_1.9\\lierox v0.56 pack 1.9\\lierox.exe"= TCP:C:\users\omistaja\desktop\lierox_v0.56_pack_1.9\lierox v0.56 pack 1.9\lierox.exe:lierox.exe "TCP Query User{91933DCC-9150-4F7F-872A-5C597386B476}C:\\program files\\sony\\station\\launchpad\\launchpad.exe"= UDP:C:\program files\sony\station\launchpad\launchpad.exe:LaunchPad "UDP Query User{68462334-066F-4E5C-801E-0FC50B0D9A89}C:\\program files\\sony\\station\\launchpad\\launchpad.exe"= TCP:C:\program files\sony\station\launchpad\launchpad.exe:LaunchPad [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List] "C:\\Program Files\\BitTorrent\\bittorrent.exe"= C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-04-04 14:06] *Newly Created Service* - CATCHME . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-05 23:46:08 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... C:\Users\Omistaja\AppData\Local\Microsoft\Messenger\murmeli-92@hotmail.com\SharingMetadata\Working\database_BE92_62BB_9262_7833\$db_clean$ 0 bytes scan completed successfully hidden files: 1 ************************************************************************** . Completion time: 2008-06-05 23:46:54 ComboFix-quarantined-files.txt 2008-06-05 20:46:45 Pre-Run: 35,972,149,248 tavua vapaana Post-Run: 37,802,098,688 tavua vapaana 141 --- E O F --- 2008-06-04 09:29:47
