HJT and mbam logit troijalaisten jälkeen ... APUA!!!

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by anything7, Feb 7, 2009.

  1. anything7

    anything7 Member

    Joined:
    Feb 4, 2009
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    Hei,

    Koneelta löytyi kaksi troijalaista. Trojan.LOP.H ja Trojan.downloader.

    Tässä olisi logit =) Malwarebyte skannauksen jälkeen tyhjensin quarantine sekä roskakorin. Paljon ois varmaan vielä tehtävää jotta vehje rupeaa näyttämään taas koneelta :) Siis mitäs pitäis seuraavaksi tehdä??

    Malwarebytes' Anti-Malware 1.33
    Database version: 1736
    Windows 6.0.6001 Service Pack 1

    2/7/2009 3:27:20 PM
    mbam-log-2009-02-07 (15-26-52).txt

    Scan type: Full Scan (C:\|H:\|)
    Objects scanned: 199092
    Time elapsed: 2 hour(s), 23 minute(s), 29 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 1
    Folders Infected: 0
    Files Infected: 3

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    HKEY_CLASSES_ROOT\regfile\shell\open\command\ (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    H:\Program Files\sony_keygen\keygen.exe (Trojan.Downloader) -> No action taken.
    H:\Program Files\Nero 8 Ultra Edition 8.3.6.0\Keygen.exe (Trojan.Agent) -> No action taken.
    C:\Users\saurabh\AppData\Roaming\REX Shared Library.dll (Trojan.Lop.H) -> No action taken.




    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 8:40:41 PM, on 2/7/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Program Files\Sony\VCM Manager Setting\VcmMgrNotification.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Sony\ISB Utility\ISBMgr.exe
    C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
    C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
    C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
    C:\Program Files\McAfee\Common Framework\UdaterUI.exe
    C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe
    C:\Windows\WindowsMobile\wmdSync.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    H:\Program Files\Netbooster Client\Configurator\ventcfg.exe
    C:\Windows\CPQHKey.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Windows\ehome\ehtray.exe
    H:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Compaq\Easy Access Button Support\CPQEAKSYSTEMTRAY.EXE
    C:\Program Files\Protector Suite QL\psqltray.exe
    C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
    C:\Program Files\McAfee\Common Framework\McTray.exe
    C:\Compaq\EAKDRV\EAUSBKBD.EXE
    C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://vaio-online.sony.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
    O4 - HKLM\..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Protector Suite QL\launcher.exe" /startup
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [CloneCDTray] "g:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
    O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
    O4 - HKLM\..\Run: [Skytel] Skytel.exe
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Venturi Configurator] h:\Program Files\Netbooster Client\Configurator\ventcfg.exe -nomsgbox
    O4 - HKLM\..\Run: [CPQAPP] CPQHKey.exe
    O4 - HKLM\..\Run: [SetKbd] SetKbd.exe
    O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "H:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [RGSC] H:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [BALL NURB] "C:\ProgramData\plus surf surf.sbxfzn"
    O4 - HKCU\..\Run: [Grey pop cake audio] "C:\ProgramData\grim meta pure.eb2m4"
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - Global Startup: Bluetooth.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O8 - Extra context menu item: Transfer by Image Converter 3 - C:\Program Files\Sony\Image Converter 3\menu.htm
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O13 - Gopher Prefix:
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - G:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe (file missing)
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\Image Converter 3\ICScsiSV.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 3\IcVzMon.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
    O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
    O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
    O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
    O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe
    O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: Venturi Client (VenturiClient) - Venturi Wireless - h:\Program Files\Netbooster Client\Client\ventc.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 14842 bytes
     
    anything7, Feb 7, 2009
    #1
  2. Hujo

    Hujo Guest

    1.Lataa Combofix.exe työpöydällesi yhdestä linkistä:
    Combofix1
    Combofix2

    Älä asenna palautus Consolia
    2. Tuplaklikkaa Combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
     
    Hujo, Feb 7, 2009
    #2
  3. anything7

    anything7 Member

    Joined:
    Feb 4, 2009
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    Tässä tämä nyt olisi =)

    ComboFix 09-02-06.04 - saurabh 2009-02-08 0:30:24.1 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2046.805 [GMT 5.5:30]
    Running from: c:\users\saurabh\Downloads\ComboFix.exe
    AV: VirusScan Enterprise + AntiSpyware Enterprise *On-access scanning enabled* (Updated)
    * Created a new restore point
    * Resident AV is active

    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\x64
    H:\resycled

    .
    ((((((((((((((((((((((((( Files Created from 2009-01-07 to 2009-02-07 )))))))))))))))))))))))))))))))
    .

    2009-02-08 00:25 . 2009-02-08 00:26 <DIR> d-------- C:\32788R22FWJFW
    2009-02-07 12:45 . 2009-02-07 12:45 <DIR> d-------- c:\users\saurabh\AppData\Roaming\Malwarebytes
    2009-02-07 12:45 . 2009-02-07 12:45 <DIR> d-------- c:\users\All Users\Malwarebytes
    2009-02-07 12:45 . 2009-02-07 12:45 <DIR> d-------- c:\programdata\Malwarebytes
    2009-02-07 12:45 . 2009-02-07 12:45 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
    2009-02-07 12:45 . 2009-01-14 16:11 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
    2009-02-07 12:45 . 2009-01-14 16:11 15,504 --a------ c:\windows\System32\drivers\mbam.sys
    2009-02-07 12:29 . 2009-02-07 12:29 <DIR> d-------- c:\program files\Trend Micro
    2009-02-04 22:47 . 2009-02-04 22:47 <DIR> d-------- c:\users\All Users\Elaborate Bytes
    2009-02-04 22:47 . 2009-02-04 22:47 <DIR> d-------- c:\programdata\Elaborate Bytes
    2009-02-04 22:15 . 2009-02-04 22:15 <DIR> d-------- c:\program files\Windows Live Safety Center
    2009-01-25 20:47 . 2009-01-25 20:47 <DIR> d-------- c:\windows\System32\Adobe
    2009-01-24 00:38 . 2009-01-24 00:40 <DIR> d-------- c:\users\saurabh\AppData\Roaming\dvdcss
    2009-01-23 23:59 . 2009-01-23 23:59 <DIR> d-------- c:\users\saurabh\AppData\Roaming\NeroDigital™
    2009-01-23 23:24 . 2009-01-23 23:24 <DIR> d-------- C:\CloneDVDTemp
    2009-01-22 15:44 . 2009-01-22 15:44 <DIR> d-------- c:\program files\Nero
    2009-01-22 15:25 . 2008-06-24 13:45 1,414,440 --a------ c:\windows\System32\ShellManager310E2D762.dll
    2009-01-22 15:25 . 2008-06-23 17:36 773,120 --a------ c:\windows\System32\NEROINSTAEC43759.DB
    2009-01-22 14:05 . 2009-01-22 14:05 <DIR> d-------- c:\users\saurabh\AppData\Roaming\Nero
    2009-01-22 14:01 . 2009-01-22 15:44 <DIR> d-------- c:\users\All Users\Nero
    2009-01-22 14:01 . 2009-01-22 15:44 <DIR> d-------- c:\programdata\Nero
    2009-01-22 14:01 . 2009-01-22 15:47 <DIR> d-------- c:\program files\Common Files\Nero
    2009-01-21 22:08 . 2009-01-21 22:08 <DIR> d-------- c:\program files\Bonjour
    2009-01-20 05:44 . 2009-01-20 05:44 <DIR> d-------- c:\program files\Microsoft Silverlight
    2009-01-20 05:44 . 2009-01-20 05:44 <DIR> d-------- c:\program files\Microsoft Office Outlook Connector
    2009-01-20 05:43 . 2008-12-08 17:01 55,264 --a------ c:\windows\System32\drivers\fssfltr.sys
    2009-01-20 05:42 . 2009-01-20 05:42 <DIR> d-------- c:\program files\Microsoft Sync Framework
    2009-01-20 05:38 . 2009-01-20 05:38 <DIR> d-------- c:\program files\Windows Live SkyDrive
    2009-01-20 04:48 . 2009-01-20 04:48 <DIR> d-------- C:\inetpub
    2009-01-15 16:25 . 2008-12-16 08:12 288,768 --a------ c:\windows\System32\drivers\srv.sys
    2009-01-13 16:26 . 2009-01-13 16:26 <DIR> d-------- c:\users\saurabh\AppData\Roaming\SlySoft
    2009-01-09 18:15 . 2009-01-09 18:15 107,888 --a------ c:\windows\System32\CmdLineExt.dll
    2009-01-09 18:13 . 2009-01-09 18:13 <DIR> d-------- c:\windows\System32\xlive
    2009-01-09 18:13 . 2009-01-09 19:38 <DIR> d-------- c:\program files\Microsoft Games for Windows - LIVE
    2009-01-09 18:13 . 2008-03-05 15:56 3,786,760 --a------ c:\windows\System32\D3DX9_37.dll
    2009-01-09 18:13 . 2008-03-05 15:56 1,420,824 --a------ c:\windows\System32\D3DCompiler_37.dll
    2009-01-09 18:13 . 2008-02-05 23:07 462,864 --a------ c:\windows\System32\d3dx10_37.dll
    2009-01-09 18:13 . 2007-04-04 18:53 81,768 --a------ c:\windows\System32\xinput1_3.dll
    2009-01-09 15:03 . 2009-01-09 15:03 <DIR> d-------- c:\program files\DAEMON Tools Toolbar
    2009-01-09 14:57 . 2009-01-09 14:57 <DIR> d-------- c:\users\saurabh\AppData\Roaming\DAEMON Tools
    2009-01-09 14:57 . 2009-01-09 14:57 717,296 --a------ c:\windows\System32\drivers\sptd.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-07 17:53 --------- d-----w c:\users\saurabh\AppData\Roaming\uTorrent
    2009-02-07 15:01 --------- d---a-w c:\programdata\TEMP
    2009-02-07 07:51 --------- d-----w c:\programdata\itchcornfour
    2009-02-04 18:13 --------- d-----w c:\programdata\Part Hide Grey Pop
    2009-01-22 15:54 --------- d-----w c:\users\saurabh\AppData\Roaming\Sony Corporation
    2009-01-22 15:54 --------- d-----w c:\programdata\Sony Corporation
    2009-01-20 00:14 --------- d-----w c:\program files\Microsoft
    2009-01-20 00:13 --------- d-----w c:\program files\Windows Live
    2009-01-16 19:54 --------- d-----w c:\programdata\Microsoft Help
    2009-01-16 19:54 --------- d-----w c:\program files\Windows Mail
    2009-01-13 10:52 --------- d-----w c:\programdata\Roxio
    2009-01-09 16:19 --------- d--h--w c:\program files\InstallShield Installation Information
    2009-01-04 06:09 31 ----a-w c:\users\saurabh\jagex_runescape_preferences.dat
    2008-12-18 16:30 --------- d-----w c:\users\saurabh\AppData\Roaming\Sony
    2008-12-18 15:03 --------- d-----w c:\program files\Common Files\Adobe Systems Shared
    2008-12-18 15:01 --------- d-----w c:\program files\Common Files\Adobe
    2008-12-11 23:53 --------- d-----w c:\program files\Image-Line
    2008-12-11 23:43 --------- d-----w c:\program files\Outsim
    2008-12-04 17:25 307,560 ----a-w c:\windows\WLXPGSS.SCR
    2008-11-26 13:10 174 --sha-w c:\program files\desktop.ini
    2008-11-20 12:35 225,280 ----a-w c:\users\saurabh\AppData\Roaming\Rewire.dll
    2008-11-16 21:57 2,560 ----a-w c:\windows\AppPatch\AcRes.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]
    @="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"
    [HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]
    2007-06-06 12:46 2955264 --a------ c:\program files\Protector Suite QL\farchns.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]
    @="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"
    [HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]
    2007-06-06 12:46 2955264 --a------ c:\program files\Protector Suite QL\farchns.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "BALL NURB"="c:\programdata\plus surf surf.sbxfzn" [X]
    "Grey pop cake audio"="c:\programdata\grim meta pure.eb2m4" [X]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2008-12-02 3882312]
    "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
    "DAEMON Tools Lite"="h:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-17 490952]
    "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-10 835584]
    "ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2007-09-20 311296]
    "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-11 90112]
    "PSQLLauncher"="c:\program files\Protector Suite QL\launcher.exe" [2007-06-06 49168]
    "ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2007-10-16 111952]
    "McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2007-10-25 136512]
    "CPQEASYACC"="c:\program files\COMPAQ\Easy Access Button Support\StartEAK.exe" [2001-12-14 32768]
    "Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
    "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
    "Venturi Configurator"="h:\program files\Netbooster Client\Configurator\ventcfg.exe" [2007-02-05 923272]
    "fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2008-12-08 453984]
    "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
    "RtHDVCpl"="RtHDVCpl.exe" [2007-04-08 c:\windows\RtHDVCpl.exe]
    "Skytel"="Skytel.exe" [2007-04-08 c:\windows\SkyTel.exe]
    "CPQAPP"="CPQHKey.exe" [2003-01-22 c:\windows\CPQHKey.exe]
    "SetKbd"="SetKbd.exe" [2003-01-22 c:\windows\SetKbd.exe]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-10-31 748072]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "DisableCAD"= 1 (0x1)
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
    2007-06-06 12:33 90112 c:\windows\System32\psqlpwd.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
    2007-08-15 09:35 98304 c:\windows\System32\VESWinlogon.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.dvsd"= c:\program files\Common Files\Sony Shared\VideoLib\sonydv.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Notification Packages REG_MULTI_SZ scecli psqlpwd

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a------ 2008-10-15 01:04 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{A8CA6F9D-DCD8-4B0B-8674-C1AB7ADA97BE}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
    "{93C3EE92-ABED-4FC9-B319-CCA79ACDBAFB}"= Disabled:UDP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media
    "{56D5B27B-234E-4364-8377-76448462DF00}"= Disabled:TCP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media
    "{C9E6286A-9F47-4F64-8CC2-01687D55B4D9}"= UDP:c:\program files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service
    "{EF0EE143-9EB5-4A1C-823E-46ACE21D257E}"= TCP:c:\program files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service
    "{9F206ECE-3A80-4BDE-AB74-81A6BBF5EE11}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
    "{0EBEEE58-2B06-41A7-8B0D-E6E348599A32}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
    "{8F7C59C5-59A8-469A-9E38-7C4CF95B7091}"= UDP:990:LocalSubnet:LocalSubnet|IF={846CE119-0487-450B-87FA-5D858287B8B9}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:mad:%systemroot%\WindowsMobile\wmdSync.exe,-4001
    "{D064C571-01F2-48E8-BB14-7AFC2E831F29}"= UDP:990:LocalSubnet:LocalSubnet|IF={846CE119-0487-450B-87FA-5D858287B8B9}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:mad:%systemroot%\WindowsMobile\wmdSync.exe,-4001
    "{183EAAAE-1852-4978-863B-6040BF13B008}"= UDP:990:LocalSubnet:LocalSubnet|IF={846CE119-0487-450B-87FA-5D858287B8B9}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:mad:%systemroot%\WindowsMobile\wmdSync.exe,-4001
    "{1EEF48F0-78F9-4978-A6BF-DE31AB6EACDA}"= Disabled:UDP:g:\program files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
    "{A6A976BB-60F1-433D-9FCC-2E0B35D0707D}"= Disabled:TCP:g:\program files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
    "{D092174E-7E79-431C-94E9-BB4413F17C54}"= UDP:g:\program files\iTunes\iTunes.exe:iTunes
    "{325A04CC-A0F7-4B55-BB4A-8DA65EE6D7F3}"= TCP:g:\program files\iTunes\iTunes.exe:iTunes
    "{96A4D484-AF50-4FE8-BEB5-C0D909C59464}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
    "{F2FC102F-1CFD-4A65-AA1A-7A47DF255D41}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
    "TCP Query User{020D863B-A7AB-4F7B-8294-CDF85B305880}h:\\program files\\netbooster client\\client\\ventc.exe"= UDP:h:\program files\netbooster client\client\ventc.exe:Venturi Client
    "UDP Query User{54BED208-1543-439C-AAD9-43114CE97AF4}h:\\program files\\netbooster client\\client\\ventc.exe"= TCP:h:\program files\netbooster client\client\ventc.exe:Venturi Client
    "{19744F69-F236-4E12-86A5-04233CF4A996}"= Disabled:UDP:h:\program files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
    "{0AE0B153-D65F-4875-B9A4-0FBCD192C234}"= Disabled:TCP:h:\program files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
    "{6FE4F779-3D68-4925-9CE1-DBD43AA1E830}"= UDP:h:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
    "{939C1A67-66A5-41A0-B235-1E2B3704112C}"= TCP:h:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
    "{6FF54A51-1E31-4BC2-9D33-E699A5339750}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
    "{5E50454A-CE80-4CE4-92E8-0C918A2B8DE4}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
    "{0D1821B8-83B9-4170-94CA-E6748970B55D}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
    "TCP Query User{982FFB07-8A01-4158-BA53-D8A0C12AB13E}c:\\users\\saurabh\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= UDP:c:\users\saurabh\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
    "UDP Query User{039C89EC-1310-45EE-88F4-6DFA031169DB}c:\\users\\saurabh\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= TCP:c:\users\saurabh\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
    "TCP Query User{5CC3D2A6-4200-4D21-896F-A5C0EFDD4995}c:\\program files\\nero\\nero8\\nero showtime\\showtime.exe"= UDP:c:\program files\nero\nero8\nero showtime\showtime.exe:Nero ShowTime
    "UDP Query User{A97AFF37-9FBD-40F0-92F4-2A4D160F1FF0}c:\\program files\\nero\\nero8\\nero showtime\\showtime.exe"= TCP:c:\program files\nero\nero8\nero showtime\showtime.exe:Nero ShowTime

    R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; [x]
    R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2007-11-15 28464]
    R3 ICScsiSV;Image Converter SCSI Service;c:\program files\Sony\Image Converter 3\ICScsiSV.exe [2007-06-15 75952]
    R3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-02-26 29183504]
    R3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-11 745472]
    R3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-08-09 397312]
    R3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-08-09 1089536]
    R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2007-09-21 79136]
    S2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service;c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-11 30312]
    S2 fssfltr;fssfltr;c:\windows\system32\DRIVERS\fssfltr.sys [2008-12-08 55264]
    S2 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
    S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-18 11032]
    S2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
    S2 uCamMonitor;CamMonitor;c:\program files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe [2007-10-31 125440]
    S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-09-29 292128]
    S2 VenturiClient;Venturi Client;h:\program files\Netbooster Client\Client\ventc.exe [2007-02-05 2410080]
    S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2007-10-30 17920]
    S3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\system32\Drivers\R5U870FLx86.sys [2007-10-17 73472]
    S3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\system32\Drivers\R5U870FUx86.sys [2007-10-17 43904]
    S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2007-08-29 9344]
    S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-11-16 818688]
    S3 zteusbser;ZTE USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\CT_ZTEMT_U_USBSER.sys [2008-09-01 104320]


    --- Other Services/Drivers In Memory ---

    *Deregistered* - sptd

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    WindowsMobile REG_MULTI_SZ wcescomm rapimgr
    LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
    rsmsvcs REG_MULTI_SZ ntmssvc
    .
    Contents of the 'Scheduled Tasks' folder

    2009-02-07 c:\windows\Tasks\User_Feed_Synchronization-{7E7E64CB-B714-44CB-8064-85D510E98309}.job
    - c:\windows\system32\msfeedssync.exe [2008-01-19 13:03]
    .
    - - - - ORPHANS REMOVED - - - -

    HKCU-Run-RGSC - h:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
    HKLM-Run-IgfxTray - c:\windows\system32\igfxtray.exe
    HKLM-Run-HotKeysCmds - c:\windows\system32\hkcmd.exe
    HKLM-Run-Persistence - c:\windows\system32\igfxpers.exe
    HKLM-Run-CloneCDTray - g:\program files\SlySoft\CloneCD\CloneCDTray.exe


    .
    ------- Supplementary Scan -------
    .
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: Transfer by Image Converter 3 - c:\program files\Sony\Image Converter 3\menu.htm
    LSP: vwlsp.dll
    FF - ProfilePath - c:\users\saurabh\AppData\Roaming\Mozilla\Firefox\Profiles\b14x6i47.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://go.microsoft.com/fwlink/?LinkId=69157
    FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - component: c:\program files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

    ---- FIREFOX POLICIES ----
    FF - user.js: yahoo.homepage.dontask - true.

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-02-08 00:37:38
    Windows 6.0.6001 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'lsass.exe'(724)
    c:\windows\system32\psqlpwd.dll
    c:\program files\Protector Suite QL\homefus2.dll
    c:\program files\Protector Suite QL\infra.dll

    - - - - - - - > 'Explorer.exe'(4188)
    c:\program files\Protector Suite QL\farchns.dll
    c:\program files\Protector Suite QL\infra.dll
    c:\windows\system32\btmmhook.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\System32\Ati2evxx.exe
    c:\windows\System32\audiodg.exe
    c:\windows\System32\Ati2evxx.exe
    c:\program files\Protector Suite QL\upeksvr.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    c:\program files\McAfee\Common Framework\FrameworkService.exe
    c:\program files\McAfee\VirusScan Enterprise\Mcshield.exe
    c:\program files\McAfee\VirusScan Enterprise\VsTskMgr.exe
    c:\program files\McAfee\Common Framework\naPrdMgr.exe
    c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
    c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    c:\windows\System32\IoctlSvc.exe
    c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
    c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    c:\program files\Sony\VAIO Event Service\VESMgr.exe
    c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    c:\program files\Sony\VAIO Event Service\VESMgrSub.exe
    c:\windows\System32\drivers\XAudio.exe
    c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    c:\windows\System32\WUDFHost.exe
    c:\program files\Sony\VAIO Power Management\SPMgr.exe
    c:\program files\Sony\VAIO Update 3\VAIOUpdt.exe
    c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe
    c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    c:\program files\Protector Suite QL\psqltray.exe
    c:\program files\COMPAQ\Easy Access Button Support\CpqEAKSystemTray.exe
    c:\program files\COMPAQ\Easy Access Button Support\CPQEADM.exe
    c:\compaq\EAKDRV\EAUSBKBD.exe
    c:\program files\McAfee\Common Framework\Mctray.exe
    c:\program files\Internet Explorer\iexplore.exe
    c:\program files\Internet Explorer\iexplore.exe
    c:\windows\ehome\ehmsas.exe
    c:\progra~1\COMPAQ\EASYAC~1\BttnServ.exe
    c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
    c:\windows\System32\wbem\unsecapp.exe
    c:\program files\iPod\bin\iPodService.exe
    c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    c:\program files\Windows Live\Contacts\wlcomm.exe
    c:\progra~1\COMMON~1\MICROS~1\DW\DW20.EXE
    c:\windows\System32\DWWIN.EXE
    c:\windows\System32\wbem\WMIADAP.exe
    c:\windows\System32\dllhost.exe
    .
    **************************************************************************
    .
    Completion time: 2009-02-08 0:44:58 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-02-07 19:14:52

    Pre-Run: 172,390,330,368 bytes free
    Post-Run: 173,978,001,408 bytes free

    302 --- E O F --- 2009-02-06 06:38:49
     
    anything7, Feb 7, 2009
    #3
  4. Hujo

    Hujo Guest

    Malwarebytes' Anti-Malware
    5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
    6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.

    =========

    scannaa hjt:llä merkkaa paina Fix checked

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

     
    Hujo, Feb 7, 2009
    #4
  5. anything7

    anything7 Member

    Joined:
    Feb 4, 2009
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    =) Kiitos...

    Oisko jotain millä sais nopeemmaksi. välillä jähmeilee =) Vai oisko se tässä?

    KIIOTS

     
    anything7, Feb 7, 2009
    #5
  6. Hujo

    Hujo Guest

    onkos se läppäri vai pöytäkone
    paljos löytyy sitä keskusmuistia
     
    Last edited by a moderator: Feb 7, 2009
    Hujo, Feb 7, 2009
    #6
  7. anything7

    anything7 Member

    Joined:
    Feb 4, 2009
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    Tervehdys,

    Kone kyllä toimii nyt jo nopeammin. Kattelin tuolta muualta noita Java ohjeita niin se vaikutti kivasti koneeseen.

    Tämä masiina on Vaio läppäri =)
    Tässä tuosta tarrasta tietoa ;) Hard disk drive 250GB ja Memory 2 GB. Intel Core 2 Duo processor T8100 (2.10 GHz)

    Laitan nyt varmuudeksi viimeisimmän HJT log


    Kyllä tämä jo koneelta tuntuun eikä noita trojalaisiakaan näytä olevan, mutta jos pitää jotain vielä tehdä niin otan mielellläni ohjeita vastaan.


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 4:58:27 PM, on 2/8/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
    C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Sony\ISB Utility\ISBMgr.exe
    C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
    C:\Program Files\McAfee\Common Framework\UdaterUI.exe
    C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe
    C:\Windows\WindowsMobile\wmdSync.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    H:\Program Files\Netbooster Client\Configurator\ventcfg.exe
    C:\Windows\CPQHKey.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Protector Suite QL\psqltray.exe
    C:\Windows\ehome\ehtray.exe
    H:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Compaq\Easy Access Button Support\CPQEAKSYSTEMTRAY.EXE
    C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
    C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\Compaq\EAKDRV\EAUSBKBD.EXE
    C:\Program Files\McAfee\Common Framework\McTray.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\ehome\ehmsas.exe
    C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Windows\Explorer.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
    O4 - HKLM\..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Protector Suite QL\launcher.exe" /startup
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
    O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
    O4 - HKLM\..\Run: [Skytel] Skytel.exe
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Venturi Configurator] h:\Program Files\Netbooster Client\Configurator\ventcfg.exe -nomsgbox
    O4 - HKLM\..\Run: [CPQAPP] CPQHKey.exe
    O4 - HKLM\..\Run: [SetKbd] SetKbd.exe
    O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "H:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [BALL NURB] "C:\ProgramData\plus surf surf.sbxfzn"
    O4 - HKCU\..\Run: [Grey pop cake audio] "C:\ProgramData\grim meta pure.eb2m4"
    O4 - Global Startup: Bluetooth.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O8 - Extra context menu item: Transfer by Image Converter 3 - C:\Program Files\Sony\Image Converter 3\menu.htm
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O10 - Unknown file in Winsock LSP: vwlsp.dll
    O13 - Gopher Prefix:
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - G:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe (file missing)
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\Image Converter 3\ICScsiSV.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 3\IcVzMon.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
    O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
    O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
    O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
    O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe
    O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: Venturi Client (VenturiClient) - Venturi Wireless - h:\Program Files\Netbooster Client\Client\ventc.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 13180 bytes
     
    anything7, Feb 8, 2009
    #7
  8. Hujo

    Hujo Guest

    tuossa olis ohjetta

    Linkki

    ==============

    Kirjoita suorita luukuun

    ComboFix /u

    Klikkaa OK

    ==============
     
    Last edited by a moderator: Feb 8, 2009
    Hujo, Feb 8, 2009
    #8
  9. anything7

    anything7 Member

    Joined:
    Feb 4, 2009
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    KIITOS :)

    Eiköhän näillä ohjeilla rupea peli pelaamaan täydellisesti. Kiitos isosta avusta. Ilman apua olisi sormi mennyt suuhun :)

    Hyvää jakoa =)
     
    anything7, Feb 8, 2009
    #9

Share This Page