HJT Log

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Xerema, Oct 10, 2007.

  1. Xerema

    Xerema Member

    Joined:
    Oct 10, 2007
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    11
    Elikkä siis, counter strike 1.6 ja kaikki muutkin pelit esim world of warcraft ja dofus, pyörivät huonosti. FPS ei pysy isona, se on vähänaikaa koht iso, ja sitten putoaa, nousee, putoaa, kokoajan samaa.
    Joten, voisitte suositella mitä teen formatoinnin jälkeen estääkseni "huonot" asiat tästä logista:

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 15:25:30, on 10.10.2007
    Platform: Windows XP (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\WINDOWS\tsitra1044.exe
    C:\PROGRA~1\COMMON~1\SMBOLS~1\nslookup.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\wbem\wmiapsrv.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\System32\bfbxbgir.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\System32\msiexec.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Documents and Settings\Nikke\Työpöytä\HiJackThis_v2.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {19B108C9-D953-4EF0-8096-51B5650A08D1} - C:\WINDOWS\System32\mljgg.dll
    O2 - BHO: (no name) - {58757870-B19A-996F-E1C1-B26EFAEE9491} - C:\WINDOWS\System32\tlmwnw.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {CF46BFB3-2ACC-441b-B82B-36B9562C7FF1} - C:\WINDOWS\System32\viekrrsw.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\System32\awrfyhjq.dll",sitypnow
    O4 - HKLM\..\RunOnce: [WMC_RebootCheck] C:\WINDOWS\inf\unregmp2.exe /FixUps
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Steam] C:\Program Files\Steam\Steam.exe -silent
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O20 - Winlogon Notify: xxyvvvs - C:\WINDOWS\SYSTEM32\xxyvvvs.dll
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: DomainService - - C:\WINDOWS\System32\bfbxbgir.exe
    O23 - Service: Tapahtumaloki (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe
    O23 - Service: NetMeeting etätyöpöydän jakaminen (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
    O23 - Service: Verkon DDE (NetDDE) - Unknown owner - C:\WINDOWS\system32\netdde.exe
    O23 - Service: Verkon DDE DSDM (NetDDEdsdm) - Unknown owner - C:\WINDOWS\system32\netdde.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Etätyöpöydän ohjeen istunnonhallinta (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Älykortti-apuohjelma (SCardDrv) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Älykortti (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O23 - Service: Resurssilokit ja -hälytykset (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\System32\tlntsvr.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Aseman tilannevedos (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: WMI resurssisovitin (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe

    --
    End of file - 5842 bytes
     
    Xerema, Oct 10, 2007
    #1
  2. Etzo

    Etzo Regular member

    Joined:
    Feb 8, 2007
    Messages:
    489
    Likes Received:
    0
    Trophy Points:
    26
    onkos windowsis piraatti?

    Jos ei niin hommaa hyvä mies äkkiä SP1 !

    1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
    combofix.exe
    combofix.exe

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    uusi hjt ja C\combofix.txt kiiitos.
     
    Etzo, Oct 10, 2007
    #2
  3. Xerema

    Xerema Member

    Joined:
    Oct 10, 2007
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    11
    Eli siis, formatoin koneen koska kaveri neuvoi ja niin sanottiin muropaketti.comissa, mutta vaikka formatoin, niin silti peleissä huono fps.. Muttä tässä ne tulokset..

    ComboFix 07-10-09.3 - Profeetta 2007-10-10 18:08:42.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.0.1252.1.1035.18.1157 [GMT 3:00]
    Running from: C:\Documents and Settings\Profeetta\Application Data\Opera\Opera\ComboFix.exe
    * Created a new restore point
    .

    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2007-09-10 to 2007-10-10 )))))))))))))))))
    .

    2007-10-10 17:59 123,264 --a--c--- C:\WINDOWS\system32\dllcache\usbport.sys
    2007-10-10 17:59 67,072 --a--c--- C:\WINDOWS\system32\dllcache\usbui.dll
    2007-10-10 17:59 50,688 --a--c--- C:\WINDOWS\system32\dllcache\usbhub.sys
    2007-10-10 17:04 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-10-10 17:04 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
    2007-10-10 17:02 774,144 --a--c--- C:\WINDOWS\system32\dllcache\spttseng.dll
    2007-10-10 17:02 696,320 --a--c--- C:\WINDOWS\system32\dllcache\sapi.dll
    2007-10-10 17:02 77,824 --a--c--- C:\WINDOWS\system32\dllcache\spcommon.dll
    2007-10-10 17:02 61,440 --a--c--- C:\WINDOWS\system32\dllcache\spcplui.dll
    2007-10-10 17:02 36,864 --a--c--- C:\WINDOWS\system32\dllcache\sapisvr.exe
    2007-10-10 17:01 <KANSIO> d--h----- C:\Documents and Settings\Default User\Verkkoymp&#8222;rist&#8221;
    2007-10-10 17:01 <KANSIO> d-------- C:\Documents and Settings\Default User\Ty&#8221;p&#8221;yt&#8222;
    2007-10-10 17:01 <KANSIO> d--h----- C:\Documents and Settings\Default User\Tulostinymp&#8222;rist&#8221;
    2007-10-10 17:01 <KANSIO> d-------- C:\Documents and Settings\Default User\Suosikit
    2007-10-10 17:01 <KANSIO> d--h----- C:\Documents and Settings\Default User\Mallit
    2007-10-10 17:01 <KANSIO> dr------- C:\Documents and Settings\Default User\K&#8222;ynnist&#8222;-valikko
    2007-10-10 17:01 <KANSIO> d-------- C:\Documents and Settings\All Users\Ty&#8221;p&#8221;yt&#8222;
    2007-10-10 17:01 <KANSIO> dr------- C:\Documents and Settings\All Users\Tiedostot
    2007-10-10 17:01 <KANSIO> d-------- C:\Documents and Settings\All Users\Suosikit
    2007-10-10 17:01 <KANSIO> d--h----- C:\Documents and Settings\All Users\Mallit
    2007-10-10 17:01 <KANSIO> dr------- C:\Documents and Settings\All Users\K&#8222;ynnist&#8222;-valikko

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-10-10 13:49 --------- d-----w C:\Program Files\CCleaner
    2007-10-10 13:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier
    2007-10-10 13:43 --------- d-----w C:\Documents and Settings\Profeetta\Application Data\WinRAR
    2007-10-10 13:35 --------- d-----w C:\Documents and Settings\Profeetta\Application Data\Opera
    2007-10-10 13:33 --------- d-----w C:\Program Files\Opera
    2007-10-10 13:24 --------- d-----w C:\Program Files\Alwil Software
    2007-10-10 13:17 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-10-10 13:17 --------- d-----w C:\Program Files\Intel
    2007-10-10 13:17 --------- d-----w C:\Program Files\Common Files\InstallShield
    2007-10-10 13:17 --------- d-----w C:\Program Files\Analog Devices
    2007-10-10 13:16 --------- d-----w C:\Program Files\Marvell
    2007-10-10 13:11 --------- d-----w C:\Program Files\microsoft frontpage
    2007-09-16 23:10 356,352 ----a-w C:\WINDOWS\system32\NVUNINST.EXE
    2007-09-16 22:07 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll
    2007-09-16 22:07 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll
    2007-09-16 22:07 8,491,008 ----a-w C:\WINDOWS\system32\nvcpl.dll
    2007-09-16 22:07 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe
    2007-09-16 22:07 6,853,088 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
    2007-09-16 22:07 6,746,112 ----a-w C:\WINDOWS\system32\nvoglnt.dll
    2007-09-16 22:07 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll
    2007-09-16 22:07 5,783,040 ----a-w C:\WINDOWS\system32\nv4_disp.dll
    2007-09-16 22:07 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
    2007-09-16 22:07 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
    2007-09-16 22:07 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
    2007-09-16 22:07 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
    2007-09-16 22:07 364,544 ----a-w C:\WINDOWS\system32\nvapi.dll
    2007-09-16 22:07 36,864 ----a-w C:\WINDOWS\system32\nvcodins.dll
    2007-09-16 22:07 36,864 ----a-w C:\WINDOWS\system32\nvcod.dll
    2007-09-16 22:07 356,352 ----a-w C:\WINDOWS\system32\nvudisp.exe
    2007-09-16 22:07 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll
    2007-09-16 22:07 3,551,232 ----a-w C:\WINDOWS\system32\nvvitvs.dll
    2007-09-16 22:07 3,334,144 ----a-w C:\WINDOWS\system32\nvgames.dll
    2007-09-16 22:07 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
    2007-09-16 22:07 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll
    2007-09-16 22:07 2,371,584 ----a-w C:\WINDOWS\system32\nvwss.dll
    2007-09-16 22:07 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll
    2007-09-16 22:07 155,716 ----a-w C:\WINDOWS\system32\nvsvc32.exe
    2007-09-16 22:07 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe
    2007-09-16 22:07 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
    2007-09-16 22:07 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
    2007-09-16 22:07 1,478,656 ----a-w C:\WINDOWS\system32\nview.dll
    2007-09-16 22:07 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
    2007-09-16 22:07 1,150,976 ----a-w C:\WINDOWS\system32\nvmobls.dll
    2007-09-16 22:07 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
    2007-09-06 13:14 75,248 ----a-w C:\WINDOWS\zllsputility.exe
    2007-09-06 13:14 1,086,952 ----a-w C:\WINDOWS\system32\zpeng24.dll
    2007-09-06 10:09 801,144 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-09-06 10:05 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
    2007-09-06 10:05 92,848 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
    2007-09-06 10:03 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
    2007-09-06 10:02 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
    2007-09-06 10:00 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-09-06 10:00 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
    2007-07-30 16:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
    2007-07-30 16:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
    2007-07-30 16:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
    2007-07-30 16:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
    2007-07-30 16:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
    2007-07-30 16:19 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
    2007-07-30 16:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
    2007-07-30 16:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll
    2007-07-30 16:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll
    2007-07-30 16:18 207,736 ----a-w C:\WINDOWS\system32\muweb.dll
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11]
    "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-09-23 12:41]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 13:06]
    "NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2007-09-17 01:07]
    "nwiz"="nwiz.exe" [2007-09-17 01:07 C:\WINDOWS\system32\nwiz.exe]
    "NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2007-09-17 01:07]
    "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-09-06 16:14]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 07:14]


    *Newly Created Service* - CATCHME
    .
    **************************************************************************

    catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-10-10 18:10:00
    Windows 5.1.2600 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-10-10 18:10:59
    .
    --- E O F ---


    ja

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 18:16:53, on 10.10.2007
    Platform: Windows XP (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Opera\Opera.exe
    C:\WINDOWS\explorer.exe
    C:\Documents and Settings\Profeetta\Työpöytä\HiJackThis_v2.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/wuweb_site.cab?1192023801873
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1192023792170
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Tapahtumaloki (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe
    O23 - Service: NetMeeting etätyöpöydän jakaminen (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
    O23 - Service: Verkon DDE (NetDDE) - Unknown owner - C:\WINDOWS\system32\netdde.exe
    O23 - Service: Verkon DDE DSDM (NetDDEdsdm) - Unknown owner - C:\WINDOWS\system32\netdde.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Etätyöpöydän ohjeen istunnonhallinta (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Älykortti-apuohjelma (SCardDrv) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Älykortti (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O23 - Service: Resurssilokit ja -hälytykset (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\System32\tlntsvr.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Aseman tilannevedos (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: WMI resurssisovitin (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe

    --
    End of file - 5874 bytes
     
    Xerema, Oct 10, 2007
    #3

Share This Page