hjt log

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by k0mansi, Dec 25, 2006.

  1. k0mansi

    k0mansi Member

    Joined:
    May 27, 2006
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    11
    Tässä pari päivää sitten koneeni alkoi tökkimään ja hidastui melkoisesti, mitä pitäs tehä;

    Logfile of HijackThis v1.99.1
    Scan saved at 16:50:03, on 25.12.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe
    C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
    C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Valve\Steam\Steam.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
    C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
    C:\Program Files\Samurize\Client.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\configs\nams\oma\HijackThis.exe
    C:\Program Files\Mozilla Firefox\firefox.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;localhost;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [ProBNC] "C:\Program Files\Arkku IP Updater\sysupdate.exe"
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
    O10 - Hijacked Internet access by New.Net
    O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {33288993-5664-11D4-8B5B-00D0B73B3518} (ell Class) - http://www.easports.com/downloads/games/common/ieell.cab
    O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129137543826
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {94EB57FE-2720-496C-B33F-D9353C6E23F7} (F-Secure Online Scanner 2.1) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O18 - Protocol: bw+0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
     
    k0mansi, Dec 25, 2006
    #1
  2. hannu71

    hannu71 Regular member

    Joined:
    Feb 9, 2006
    Messages:
    256
    Likes Received:
    0
    Trophy Points:
    26
    Ensin lataa LSPfix.exe sopivaan sijaintiin (kuten C:\Program Files\LSPFix tai vaikkapa työpöydälle). ÄLÄ aja tätä ohjelmaa vielä. Tätä tulee käyttää VAIN jos internetyhteys häviää NewDotNetin poiston jäljiltä.

    NewDotNetin poisto; Mene;

    Käynnistä > Ohjauspaneeli > Lisää/Poista sovellus ja hävitä seuraava jos näkyy;

    WeatherBug
    New.Net Applications tai New.Net Domains (Mitä vain mikä sanoo New.Net)

    Jos Lisää/Poista sovelluksessa ei ole New.Net listattu, toimi näin.

    Varmista että anti-virus ja anti-spyware ohjelmat ovat suljettuna poiston ajan.

    Ne saattavat estää New.Netin poiston.

    Lataa NNuninstall.exe :
    • Tallenna se työpöydällesi.
    • Tupla-klikkaa NNuninstall.exe filua.
    • Ohjelma kysyy haluatko poistaa kaikki New.Netin nimet ja osat.
    • Klikkaa Yes.
    • Klikkaa poiston jälkeen OK.
    • Käynnistä kone uudelleen ("Yes - Restart now") ellei jäänyt mitään muuta kesken, jos jäi, jätä kone päälle ("No - I will restart later).

    Jos poisto ei onnistu ja virustorjuntaohjelma(t) estävät poisto-ohjelman ajon kokonaan tai
    osittain, tee näin: Irrota koneen verkko- tai modeemijohto koneesta siten, ettei sillä
    ole yhteyttä internettiin. Sulje tämän jälkeen virustorjuntaohjelma(t) ja aja
    NNuninstall.exe. Laita tämän jälkeen virustorjuntaohjelma(t) takaisin päälle ja
    vasta sitten kytke verkko- tai modeemijohto takaisin koneeseen.

    Tyhjennä roskakori.

    JOS menetät nettiyhteytesi kun olet New.Netin poistanut, tupla-klikkaa LSPFix.exe jonka latasit aiemmin. Rastita "I know what I'm doing" valinta. Näet kaksi paneelia; Jos on jotain listattu "Remove" paneeliin oikealla puolella, anna sen olla ja klikkaa "Finish>>". Seuraavaksi käynnistä uudelleen ja netin pitäisi toimia hyvin. Jos mitään ei ole listattu "Remove" paneeliin, ÄLÄ tee MITÄÄN - sulje LSPFix. Tule joltain toiselta koneelta hakemaan lisää neuvoa. (Tämä on vain varotoimenpide, useimmiten netti pysyy ihan kunnossa ;))

    Avaa HijackThis, klikkaa do a system scan only, merkkaa nämä rivit. Sitten sulje kaikki muut ikkunat ja paina fix checked.
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)

    poista seuraavat:
    C:\Program Files\AWS

    lähetä uusi hjt-loki
     
    hannu71, Dec 27, 2006
    #2
  3. k0mansi

    k0mansi Member

    Joined:
    May 27, 2006
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    11
    eli, en voinut ladata tuota nnunistall, koska selain ei avannut sivua ja kun koetin IE:llä niin; "sivua ei voi näyttää". poistin kaikki new.net nimiset tiedostot. Olisi vielä sellainen kysymys, että mikä tuo FSRW.exe on, ku se vie sen 97% suoritinkäytöstä. Tiedän että se liittyy f-secureen, mutta millä tavalla? Voiko sen poistaa?
    log;
    Logfile of HijackThis v1.99.1
    Scan saved at 0:40:43, on 28.12.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Samurize\Client.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe
    C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\configs\nams\oma\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;localhost;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [ProBNC] "C:\Program Files\Arkku IP Updater\sysupdate.exe"
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {33288993-5664-11D4-8B5B-00D0B73B3518} (ell Class) - http://www.easports.com/downloads/games/common/ieell.cab
    O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129137543826
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O18 - Protocol: bw+0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
     
    k0mansi, Dec 27, 2006
    #3
  4. hannu71

    hannu71 Regular member

    Joined:
    Feb 9, 2006
    Messages:
    256
    Likes Received:
    0
    Trophy Points:
    26
    FSRW.EXE is a part of the F-Secure Antivirus application. This process should not be removed to ensure that your system stays secure.Joten ei poisteta. Mutta aina voi koettaa F-securen uudelleen asennusta

    Poista Ohjauspaneelin Lisää/Poista valikon kautta seuraavat: Jos löytyy
    PartyGaming <-jos pokerin peluu on loppunut

    Avaa HijackThis, klikkaa do a system scan only, merkkaa nämä rivit. Sitten sulje kaikki muut ikkunat ja paina fix checked.
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    pokerin peluu loppunut? jos on niin nuo kans fixxiin
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)


    poista seuraavat: jos löytyy
    C:\Program Files\PartyGaming Jos pokerin peluu loppunut
    c:\program files\google


    Javan päivitys ja välimuistin tyhjennys

    Klikkaa Käynnistä > Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa.
    Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... )
    Niissä pitäisi olla seuraava kuva vieressä:
    Valitse kaikki entiset Java versiosi ja valitse Poista.
    Asenna uusin Java päivitys seuraavasta linkistä..

    http://java.sun.com/javase/downloads/index.jsp

    Rullaa alas kohteeseen Java Runtime Environment (JRE) 6
    ja asenna se

    Käynnistä tietokoneesi uudelleen

    Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
    Temporary Internet Files -osion alla, klikkaa Delete Files nappia.
    Varmista että kaikki kolme valintaa ovat rastitettuja:

    Downloaded Applets
    Downloaded Applications
    Other Files

    Klikkaa OK "Delete Temporary Internet Files" -ikkunassasi.
    Huomaa: Tämä poistaa kaikki ladatut sovellukset ja appletit VÄLIMUISTISTA.
    Klikkaa OK jättääksesi Java asetusikkunasi.

    Hae eScan
    http://koti.mbnet.fi/pattaya1/escanmwav.htm
    Tee ohjeiden mukaan päivitys ja aja koko kone läpi.

    Lopuksi lähetä uusi hjt loki ja eScan örkki tulokset eli se alempi laatikko.
     
    Last edited: Dec 28, 2006
    hannu71, Dec 28, 2006
    #4
  5. k0mansi

    k0mansi Member

    Joined:
    May 27, 2006
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    11
    Asensin f-securen uudelleen, mutta ei ollu vaikutusta

    eScan:
    File C:\WINDOWS\lbbho.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
    File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\configs\nams\oma\backups\backup-20060528-102556-154.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
    File C:\Documents and Settings\Turunen\Application Data\SecuROM\UserData\???????????p????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Turunen\Application Data\SecuROM\UserData\???????????p????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\Program Files\Common Files\{CC9E6519-06D9-1035-1021-040409300166}\services.dll tagged as not-a-virus:AdWare.Win32.Softomate.q. No Action Taken.
    File C:\Program Files\DAEMON Tools\SetupDTSB.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
    File C:\Program Files\nbs-irc\backup\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.617. No Action Taken.
    File C:\Program Files\nbs-irc\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.62. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP634\A0365177.exe tagged as not-a-virus:AdWare.Win32.Agent.y. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP694\A0407862.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP694\A0407867.dll tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP694\A0408017.exe tagged as not-a-virus:AdWare.Win32.NewDotNet.e. No Action Taken.
    File C:\WINDOWS\Downloaded Program Files\UERSJ_0001_N68M0902NetInstaller.exe tagged as not-a-virus:Downloader.Win32.WinFixer.d. No Action Taken.
    File C:\WINDOWS\lbbho.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
    File C:\WINDOWS\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.

    HjT:

    Logfile of HijackThis v1.99.1
    Scan saved at 23:06:34, on 30.12.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
    C:\Program Files\Java\jre1.6.0\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Valve\Steam\Steam.exe
    C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Samurize\Client.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe
    C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    C:\configs\nams\oma\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;localhost;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [ProBNC] "C:\Program Files\Arkku IP Updater\sysupdate.exe"
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {33288993-5664-11D4-8B5B-00D0B73B3518} (ell Class) - http://www.easports.com/downloads/games/common/ieell.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://elisajawinski.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129137543826
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O18 - Protocol: bw+0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
     
    k0mansi, Dec 30, 2006
    #5
  6. hannu71

    hannu71 Regular member

    Joined:
    Feb 9, 2006
    Messages:
    256
    Likes Received:
    0
    Trophy Points:
    26
    Putsaa järjestelmänpalautus:

    1. Klikkaa oikealla käynnistävalikon My Computer- tai oma tietokone-kuvaketta
    2. Valitse Ominaisuudet.
    3. Valitse Järjestelmän palauttaminen- välilehti.
    4. Valitse "Poista järjestelmän palauttaminen käytöstä".
    5. Paina Käytä.
    6. Paina OK.
    7. Käynnistä kone uudelleen
    8. Tee kohdat 1.-3.
    9. Ota rasti pois kohdasta "Poista järjestelmän palauttaminen käytöstä"
    10. Tee kohdat 5. ja 6.
    tee uusi palautus piste.

    Lataa Killbox http://www.downloads.subratam.org/KillBox.zip

    Huomaa: Jos sinulla on jo Killbox, tämä on uusi versio joka sinun tulee asentaa. Poista aikaisempi.

    * Tallenna työpöydällesi.
    * Tupla-klikkaa Killbox.exe ajaaksesi ohjelman.
    * Valitse:
    o Delete on Reboot
    o sitten klikkaa All Files valintaa.

    * Kopioi ja liitä alapuolella olevat tiedostopolut leikepöydälle mustaamalla KAIKKI ne ja painamalla CTRL + C (tai, mustaamisen jälkeen, oikea klikki hiirellä ja valitse kopioi):

    C:\WINDOWS\lbbho.dll
    C:\Program Files\DAEMON Tools\SetupDTSB.exe
    C:\WINDOWS\Downloaded Program Files\UERSJ_0001_N68M0902NetInstaller.exe
    C:\WINDOWS\NDNuninstall6_38.exe
    C:\configs\nams\oma\backups\backup-20060528-102556-154.dll

    * Palaa Killboxiin, mene File valikkoon, ja valitse Paste from Clipboard.

    * Klikkaa puna-valkoista Delete File valintaa. Klikkaa Yes "Delete on Reboot" pyyntöön. Klikkaa OK mihin vain PendingFileRenameOperations pyyntöön (ja anna fixaajan tietää jos jokin tälläinen tulee!).

    Käynnistä koneesi itse jos se ei sitä automaattisesti tee.

    Jos saat tälläisen viestin: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." Kun yrität ajaa KillBoxia, klikkaa http://www.eudaemonia.me.uk/downloads/Files/missingfilesetup.exe ladataksesi ja ajaaksesi Missingfilessetup.exe;n. Sitten koita KillBoxia uudestaan.

    päivitä escan uudestaan ja aja se.
    lähetä uusi escan loki
     
    Last edited: Dec 30, 2006
    hannu71, Dec 30, 2006
    #6
  7. k0mansi

    k0mansi Member

    Joined:
    May 27, 2006
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    11
    Onko nuo samat haitat mitkä viimeksi tarkotuksella vai olenko tehnyt jotain väärin?

    File C:\!KillBox\backup-20060528-102556-154.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
    File C:\!KillBox\lbbho.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
    File C:\!KillBox\NDNuninstall6_38.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\!KillBox\SetupDTSB.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
    File C:\!KillBox\UERSJ_0001_N68M0902NetInstaller.exe tagged as not-a-virus:Downloader.Win32.WinFixer.d. No Action Taken.
    File C:\Documents and Settings\Turunen\Application Data\SecuROM\UserData\???????????p????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Turunen\Application Data\SecuROM\UserData\???????????p????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\Program Files\Common Files\{CC9E6519-06D9-1035-1021-040409300166}\services.dll tagged as not-a-virus:AdWare.Win32.Softomate.q. No Action Taken.
    File C:\Program Files\nbs-irc\backup\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.617. No Action Taken.
    File C:\Program Files\nbs-irc\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.62. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP1\A0000006.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP1\A0000007.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP1\A0000008.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{F5D0F4AE-1589-47F9-8EAA-330832CDDDD3}\RP1\A0000009.dll tagged as not-a-virus:AdWare.Win32.Neon.a. No Action Taken.
     
    Last edited: Dec 30, 2006
    k0mansi, Dec 30, 2006
    #7
  8. hannu71

    hannu71 Regular member

    Joined:
    Feb 9, 2006
    Messages:
    256
    Likes Received:
    0
    Trophy Points:
    26
    tyhjennä tuon sisältö:
    C:\!KillBox\
    tyhjennä roskis.

    Putsaa järjestelmänpalautus:

    1. Klikkaa oikealla käynnistävalikon My Computer- tai oma tietokone-kuvaketta
    2. Valitse Ominaisuudet.
    3. Valitse Järjestelmän palauttaminen- välilehti.
    4. Valitse "Poista järjestelmän palauttaminen käytöstä".
    5. Paina Käytä.
    6. Paina OK.
    7. Sammuta ja Käynnistä kone uudelleen
    8. Tee kohdat 1.-3.
    9. Ota rasti pois kohdasta "Poista järjestelmän palauttaminen käytöstä"
    10. Tee kohdat 5. ja 6.

    tee uusi palautus piste.

    tarkista tuo jossain alla olevista C:\Program Files\Common Files\{CC9E6519-06D9-1035-1021-040409300166}\services.dll
    http://www.virustotal.com/flash/index_en.html
    http://virusscan.jotti.org/

    ja lähetä tulokset tänne
     
    hannu71, Dec 31, 2006
    #8
  9. k0mansi

    k0mansi Member

    Joined:
    May 27, 2006
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    11
    Antivirus Version Update Result
    AntiVir 7.3.0.21 12.31.2006 ADSPY/Softomate.Q.2
    Authentium 4.93.8 12.30.2006 W32/Backdoor.PUX
    Avast 4.7.892.0 12.30.2006 Win32:Trojan-gen. {Other}
    AVG 386 12.31.2006 no virus found
    BitDefender 7.2 01.01.2007 no virus found
    CAT-QuickHeal 8.00 12.31.2006 no virus found
    ClamAV devel-20060426 01.01.2007 no virus found
    DrWeb 4.33 12.31.2006 Trojan.DownLoader.12962
    eSafe 7.0.14.0 01.01.2007 no virus found
    eTrust-InoculateIT 23.73.102 12.30.2006 no virus found
    eTrust-Vet 30.3.3289 12.29.2006 no virus found
    Ewido 4.0 01.01.2007 Adware.Softomate
    Fortinet 2.82.0.0 01.01.2007 Adware/Dloader
    F-Prot 3.16f 12.30.2006 security risk named W32/Backdoor.PUX
    F-Prot4 4.2.1.29 12.30.2006 W32/Backdoor.PUX
    Ikarus T3.1.0.27 01.01.2007 not-a-virus:AdWare.Win32.Softomate.q
    Kaspersky 4.0.2.24 01.01.2007 not-a-virus:AdWare.Win32.Softomate.q
    McAfee 4929 12.29.2006 Generic Downloader.ab
    Microsoft 1.1904 12.31.2006 no virus found
    NOD32v2 1950 01.01.2007 no virus found
    Norman 5.80.02 12.31.2007 W32/Softomate.DC
    Panda 9.0.0.4 01.01.2007 Adware/Mytoolbar
    Prevx1 V2 01.01.2007 Trojan.Downloader
    Sophos 4.13.0 12.30.2006 no virus found
    Sunbelt 2.2.907.0 12.18.2006 no virus found
    TheHacker 6.0.3.141 01.01.2007 no virus found
    VBA32 3.11.1 01.01.2007 Trojan.DownLoader.12962
    VirusBuster 4.3.19:9 01.01.2007 no virus found
     
    k0mansi, Jan 1, 2007
    #9
  10. hannu71

    hannu71 Regular member

    Joined:
    Feb 9, 2006
    Messages:
    256
    Likes Received:
    0
    Trophy Points:
    26
    Poista tuo:
    C:\Program Files\Common Files\{CC9E6519-06D9-1035-1021-040409300166}\services.dll

    Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

    Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.
    • Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
    • Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
    • Käynnistä AVG Anti-Spyware.
    • Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
      • Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
    • Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
    • Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
    • Sitten "Reports" valikon alta:
      • Laita täppi kohtaan "Automatically generate report after every scan"
      • Ota täppi pois kohdasta"Only if threats were found"
    • Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
    • "Resident shield is", muuta tila active:sta inactive:ksi
    • Sulje ohjelma, ÄLÄ skannaa vielä.
    Käynnistä koneesi vikasietotilaan, Ohje!

    HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
    • Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
    • Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
    • Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

      Kun skannaus on valmis:
      TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
    • Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
    • Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
      [​IMG]
    • Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
    • Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
    • Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.

    lähetä myös uusi hjt-loki
     
    hannu71, Jan 3, 2007
    #10
  11. k0mansi

    k0mansi Member

    Joined:
    May 27, 2006
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    11
    hjt log;

    Logfile of HijackThis v1.99.1
    Scan saved at 15:48:48, on 8.3.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16414)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
    C:\Program Files\Java\jre1.6.0\bin\jusched.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\CursorXP\CursorXP.exe
    C:\Program Files\Samurize\Client.exe
    C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
    C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
    C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe
    C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\configs\nams\oma\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;localhost;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [ProBNC] "C:\Program Files\Arkku IP Updater\sysupdate.exe"
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
    O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
    O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {33288993-5664-11D4-8B5B-00D0B73B3518} (ell Class) - http://www.easports.com/downloads/games/common/ieell.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://elisajawinski.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129137543826
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O18 - Protocol: bw+0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {F615AEA8-CA4F-43D7-93BD-2243CFA21870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    avg;

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 15:30:03 8.3.2007

    + Scan result:



    HKU\.DEFAULT\Software\New.net -> Adware.NewDotNet : Cleaned with backup (quarantined).
    HKU\S-1-5-18\Software\New.net -> Adware.NewDotNet : Cleaned with backup (quarantined).
    HKU\S-1-5-21-2000478354-1035525444-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
    C:\RECYCLER\S-1-5-21-2000478354-1035525444-1801674531-1004\Dc31\services.dll -> Adware.Softomate : Cleaned with backup (quarantined).
    HKLM\SOFTWARE\Classes\WinStatX.Installer -> Adware.WinTaskAd : Cleaned with backup (quarantined).
    C:\WINDOWS\system\DRIVER\ntsrv.exe -> Backdoor.Iroffer.14b2 : Cleaned with backup (quarantined).
    C:\WINDOWS\system\DRIVER\h.exe -> Logger.Small.dx : Cleaned with backup (quarantined).
    C:\Documents and Settings\Turunen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-14a06a71-4e12c7f4.zip/Dummy.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup (quarantined).
    :mozilla.684:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.685:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.686:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.687:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.180:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.181:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.182:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.183:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.184:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.185:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.186:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.187:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.188:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.189:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.190:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.191:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.192:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.194:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.196:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.197:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.198:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.199:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.200:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.202:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.204:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.205:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.206:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.207:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.208:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.587:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.844:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.912:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.586:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Abcsearch : Cleaned.
    :mozilla.629:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.630:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.631:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.632:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.698:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.699:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.954:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.955:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.956:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.957:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.228:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.229:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.230:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.103:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.104:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.105:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.106:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.90:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.201:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.172:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.173:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.174:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.333:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.334:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.335:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.336:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.337:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.338:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.650:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Com : Cleaned.
    :mozilla.656:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Com : Cleaned.
    :mozilla.58:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.922:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Enhance : Cleaned.
    :mozilla.178:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.179:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.193:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.195:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.161:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.162:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.163:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.164:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.165:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.166:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.167:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.168:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.169:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.170:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
    :mozilla.923:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
    :mozilla.924:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
    :mozilla.240:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.64:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.710:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.782:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.281:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.282:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.283:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.346:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.347:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.354:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.357:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.361:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.362:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.363:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.364:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.608:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.872:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.588:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    :mozilla.751:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.627:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned.
    :mozilla.628:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned.
    :mozilla.734:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.735:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.736:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.737:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.936:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.937:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.938:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.939:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.942:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.943:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.944:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.648:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.649:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.651:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.652:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.653:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.654:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.655:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.860:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.861:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.862:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.863:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.864:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.865:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.486:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.487:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.488:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.489:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.490:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.491:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.492:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.493:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.494:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.495:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.496:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.497:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.498:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.499:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.500:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.501:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.502:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.503:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.504:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.505:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.506:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.507:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.508:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.509:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.510:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.511:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.512:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.513:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.514:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.515:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.516:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.517:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.518:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.519:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.520:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.521:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.522:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.523:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.524:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.525:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.526:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.527:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.528:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.529:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.530:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.531:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.532:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.533:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.534:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.535:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.981:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.982:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.983:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.984:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.985:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.986:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.987:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.988:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.989:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.990:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
    :mozilla.226:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sextracker : Cleaned.
    :mozilla.227:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Sextracker : Cleaned.
    :mozilla.884:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
    :mozilla.969:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.971:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.244:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.245:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.246:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.247:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.248:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.249:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.250:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.251:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.252:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.253:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.254:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.255:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.256:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.257:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.258:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.259:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.260:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.261:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.262:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.263:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.264:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.265:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.266:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.267:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.268:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.269:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.270:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.271:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.272:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.273:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.274:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.275:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.276:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.277:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.480:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.481:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.919:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
    :mozilla.920:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
    :mozilla.232:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.233:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.234:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.235:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.236:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.171:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.467:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
    :mozilla.59:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
    :mozilla.885:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
    :mozilla.44:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.45:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.46:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.47:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.48:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.49:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.50:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.483:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.484:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.485:C:\Documents and Settings\Turunen\Application Data\Mozilla\Firefox\Profiles\hxg62div.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    C:\WINDOWS\system\DRIVER\SETUP.0AT -> Trojan.Zapchast : Cleaned with backup (quarantined).


    ::Report end
     
    k0mansi, Mar 8, 2007
    #11

Share This Page