hjt logi

Discussion in 'Virukset ja haittaohjelmat' started by maustus, Jan 18, 2006.

  1. maustus

    maustus Member

    Joined:
    Jan 18, 2006
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    11
    Kertoiskos joku viisaampi mulle löytyykö tältä rakkineelta jotain ylimääräistä? =) Mulla hyppii kokoajan pop-uppeja vaikka on esto päällä... mese plus!:an mukana tuli vahingossa se sponsori ohjelma joskus 3 kuukautta sitten, mutta sain sen poistettua poista/lisää sovelluksen kautta. Sit meni hyvin tähän asti... Nyt löysin täältä tän hijak systeemin ja kyselisin viisaammilta apua... =)


    Logfile of HijackThis v1.99.1
    Scan saved at 18:06:59, on 18.1.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    D:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Ahead\InCD\InCD.exe
    D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    C:\Program Files\MessengerPlus! 3\MsgPlus.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    D:\Winamp\winampa.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\PROGRA~1\MSNMES~1\msnmsgr.exe
    C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Henna Huttunen\Local Settings\Temporary Internet Files\Content.IE5\W5UV8H23\HijackThis[1].exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pponetti.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Pohjanmaan Puhelinosuuskunta
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL
    O2 - BHO: (no name) - {611236EA-E603-7085-9CFE-D0B7C51EEC41} - C:\DOCUME~1\HENNAH~1\APPLIC~1\BYTEKN~1\savestore.exe
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [DartTeamPhoneDrv] C:\Documents and Settings\All Users\Application Data\Else film dart team\bytemp3.exe
    O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [Memo this] C:\DOCUME~1\HENNAH~1\APPLIC~1\PLAYBR~1\viewmfcd.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
    O4 - Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE
    O4 - Startup: NaturalColorLoad.lnk = ?
    O4 - Global Startup: EPSON Status Monitor 3 Ympäristötarkistus 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE
    O4 - Global Startup: NaturalColorLoad.lnk = ?
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm795YYFI
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - http://www.net2phone.com/ (file missing)
    O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - http://www.net2phone.com/ (file missing)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://pponetti.com
    O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
    O16 - DPF: {463ED66E-431B-11D2-ADB0-0080C83DA4EB} (AcceptWM Class) - https://w3s.webmoney.ru/WMAcceptor.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1095808492031
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - http://static.zangocash.com/cab/Zango/ie/bridge-c10.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{35059436-0304-4803-8339-3315CE3C6D36}: NameServer = 212.50.192.227,212.50.192.226
    O17 - HKLM\System\CS1\Services\Tcpip\..\{35059436-0304-4803-8339-3315CE3C6D36}: NameServer = 212.50.192.227,212.50.192.226
    O17 - HKLM\System\CS2\Services\Tcpip\..\{35059436-0304-4803-8339-3315CE3C6D36}: NameServer = 212.50.192.227,212.50.192.226
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
     
    maustus, Jan 18, 2006
    #1
  2. Zipp2

    Zipp2 Regular member

    Joined:
    Sep 30, 2005
    Messages:
    376
    Likes Received:
    0
    Trophy Points:
    26
    Siirrä ensin se Hijackki omaan kansioon tonne
    C:\HjT\HijackThis.exe

    Poista ohjauspaneelista jos näkyy

    MyWebSearch
    MessengerPlus3

    Merkkaa nuo sulje selain ja paina Fix checked

    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL
    O2 - BHO: (no name) - {611236EA-E603-7085-9CFE-D0B7C51EEC41} - C:\DOCUME~1\HENNAH~1\APPLIC~1\BYTEKN~1\savestore.exe
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [DartTeamPhoneDrv] C:\Documents and Settings\All Users\Application Data\Else film dart team\bytemp3.exe
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [Memo this] C:\DOCUME~1\HENNAH~1\APPLIC~1\PLAYBR~1\viewmfcd.exe
    O4 - Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE
    O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm795YYFI
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCent...
    O16 - DPF: {463ED66E-431B-11D2-ADB0-0080C83DA4EB} (AcceptWM Class) - https://w3s.webmoney.ru/WMAcceptor.dll
    O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - http://static.zangocash.com/cab/Zango/ie/bridge-c10.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab

    Käynnistä sitte vikasietotilassa ja piiotiedostot näkyvillä poista jos löytyy

    C:\Program Files\MyWebSearch\ < kansio
    C:\Program Files\MessengerPlus! 3 < kansio
    C:\Documents and Settings\All Users\Application Data\Else film dart team\ < kansio
    C:\DOCUME~1\HENNAH~1\APPLIC~1\PLAYBR~1\ < kansio

    älä käytä Etsi toimintoo vaan seuraa noita polkuja .
    Käynnistä sitte normalisti ja uus logi.







     
    Zipp2, Jan 18, 2006
    #2
  3. spertti

    spertti Active member

    Joined:
    Jun 1, 2005
    Messages:
    1,222
    Likes Received:
    0
    Trophy Points:
    66
    No kerpele Zipp2 = sairaan nopee =)
     
    Last edited: Jan 18, 2006
    spertti, Jan 18, 2006
    #3
  4. maustus

    maustus Member

    Joined:
    Jan 18, 2006
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    11
    Tein kaikki (toivottavasti) kuten neuvottiin. En löytänyt tuota C:\DOCUME~1\HENNAH~1\APPLIC~1\PLAYBR~1\ kansiota.. muut löytyivät..
    Täs ois nyt sit tää loki, näyttääkö yhtään paremmalta. Ainakin tää kone lopetti herjaamisen kun sammuttaa. =)


    Logfile of HijackThis v1.99.1
    Scan saved at 11:15:26, on 19.1.2006
    Platform: Windows XP SP2 (WinNT

    5.01.2600)
    MSIE: Internet Explorer v6.00 SP2

    (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program

    Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\Alwil

    Software\Avast4\aswUpdSv.exe
    D:\Program Files\Alwil

    Software\Avast4\ashServ.exe
    C:\Program Files\Common

    Files\EPSON\EBAPI\SAgent2.exe
    D:\Program Files\Alwil

    Software\Avast4\ashMaiSv.exe
    D:\Program Files\Alwil

    Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI

    Control Panel\atiptaxx.exe
    C:\Program Files\Ahead\InCD\InCD.exe
    D:\PROGRA~1\ALWILS~1\Avast4\ashDi

    sp.exe
    C:\Program

    Files\Java\jre1.5.0_06\bin\jusched.exe
    D:\Winamp\winampa.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\PROGRA~1\MSNMES~1\msnmsgr.exe
    C:\Program Files\SEC\Natural

    Color\NaturalColorLoad.exe
    C:\WINDOWS\System32\spool\DRIVERS

    \W32X86\3\E_S10IC2.EXE
    C:\Hjt\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet

    Explorer\Main,Start Page =

    http://www.mtv3.fi/
    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Page_URL =

    http://pponetti.com
    R1 - HKCU\Software\Microsoft\Internet

    Explorer\Main,Window Title = Microsoft

    Internet Explorer - toimittaja

    Pohjanmaan Puhelinosuuskunta
    R0 - HKCU\Software\Microsoft\Internet

    Explorer\Toolbar,LinksFolderName =

    Linkit
    O2 - BHO: AcroIEHlprObj Class -

    {06849E9F-C8D7-4D59-B87D-784B7D6BE0

    B3} - C:\Program Files\Adobe\Acrobat

    6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: mwsBar BHO -

    {07B18EA1-A523-4961-B6BB-170DE4475CC

    A} - C:\Program

    Files\MyWebSearch\bar\3.bin\MWSBAR

    .DLL (file missing)
    O2 - BHO: SSVHelper Class -

    {761497BB-D6F0-462C-B6EB-D4DAF1D92

    D43} - C:\Program

    Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: ST -

    {9394EDE7-C8B5-483E-8773-474BF36AF6E

    4} - C:\Program Files\MSN

    Apps\ST\01.03.0000.1005\en-xu\stmain.d

    ll
    O2 - BHO: Google Toolbar Helper -

    {AA58ED58-01DD-4d91-8333-CF10577473F

    7} - c:\program

    files\google\googletoolbar2.dll
    O2 - BHO: MSNToolBandBHO -

    {BDBD1DAD-C946-4A17-ADC1-64B5B4FF

    55D0} - C:\Program Files\MSN

    Apps\MSN

    Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: MSN -

    {BDAD1DAD-C946-4A17-ADC1-64B5B4F

    F55D0} - C:\Program Files\MSN

    Apps\MSN

    Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: &Google -

    {2318C2B1-4965-11d4-9B18-009027A5CD4F}

    - c:\program

    files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [SoundMan]

    SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA]

    C:\Program Files\ATI Technologies\ATI

    Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [NeroFilterCheck]

    C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] C:\Program

    Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [avast!]

    D:\PROGRA~1\ALWILS~1\Avast4\ashDi

    sp.exe
    O4 - HKLM\..\Run:

    [SunJavaUpdateSched] C:\Program

    Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent]

    D:\Winamp\winampa.exe
    O4 - HKCU\..\Run: [MSMSGS]

    "C:\Program Files\Messenger\msmsgs.exe"

    /background
    O4 - HKCU\..\Run: [msnmsgr]

    "C:\PROGRA~1\MSNMES~1\msnmsgr.exe

    " /background
    O4 - Startup: NaturalColorLoad.lnk = ?
    O4 - Global Startup: EPSON Status

    Monitor 3 Ympäristötarkistus 2.lnk =

    C:\WINDOWS\system32\spool\drivers\w3

    2x86\3\E_SRCV02.EXE
    O4 - Global Startup: Microsoft Office.lnk =

    C:\Program Files\Microsoft

    Office\Office\OSA9.EXE
    O4 - Global Startup: NaturalColorLoad.lnk

    = ?
    O8 - Extra context menu item: &Google

    Search - res://c:\program

    files\google\GoogleToolbar2.dll/cmsearch.

    html
    O8 - Extra context menu item: &Translate

    English Word - res://c:\program

    files\google\GoogleToolbar2.dll/cmwordtr

    ans.html
    O8 - Extra context menu item: Backward

    Links - res://c:\program

    files\google\GoogleToolbar2.dll/cmbacklin

    ks.html
    O8 - Extra context menu item: Cached

    Snapshot of Page - res://c:\program

    files\google\GoogleToolbar2.dll/cmcache.h

    tml
    O8 - Extra context menu item: Similar

    Pages - res://c:\program

    files\google\GoogleToolbar2.dll/cmsimilar.

    html
    O8 - Extra context menu item: Translate

    Page into English - res://c:\program

    files\google\GoogleToolbar2.dll/cmtrans.ht

    ml
    O9 - Extra button: (no name) -

    {08B0E5C0-4FCB-11CF-AAA5-00401C6085

    01} - C:\Program

    Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java

    Console -

    {08B0E5C0-4FCB-11CF-AAA5-00401C6085

    01} - C:\Program

    Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Net2Phone -

    {4B30061A-5B39-11D3-80F8-0090276F843F

    } - http://www.net2phone.com/ (file

    missing)
    O9 - Extra 'Tools' menuitem: Net2Phone -

    {4B30061A-5B39-11D3-80F8-0090276F843F

    } - http://www.net2phone.com/ (file

    missing)
    O9 - Extra button: Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683}

    - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows

    Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683}

    - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF:

    START_PAGE_URL=http://pponetti.com
    O16 - DPF:

    {6414512B-B978-451D-A0D8-FCFDF33E833

    C} (WUWebControl Class) -

    http://v5.windowsupdate.microsoft.com/

    v5consumer/V5Controls/en/x86/client/wu

    web_site.cab?1095808492031
    O16 - DPF:

    {8E0D4DE5-3180-4024-A327-4DFAD1796

    A8D} (MessengerStatsClient Class) -

    http://messenger.zone.msn.com/binary/

    MessengerStatsClient.cab31267.cab
    O16 - DPF:

    {B38870E4-7ECB-40DA-8C6A-595F0A5519

    FF}

    (MsnMessengerSetupDownloadControl

    Class) -

    http://messenger.msn.com/download/Ms

    nMessengerSetupDownloader.cab
    O17 -

    HKLM\System\CCS\Services\Tcpip\..\{35

    059436-0304-4803-8339-3315CE3C6D36}:

    NameServer = 212.50.192.227,212.50.192.226
    O17 -

    HKLM\System\CS1\Services\Tcpip\..\{35

    059436-0304-4803-8339-3315CE3C6D36}:

    NameServer = 212.50.192.227,212.50.192.226
    O17 -

    HKLM\System\CS2\Services\Tcpip\..\{35

    059436-0304-4803-8339-3315CE3C6D36}:

    NameServer = 212.50.192.227,212.50.192.226
    O18 - Protocol: msnim -

    {828030A1-22C1-4009-854F-8E305202313F} -

    "C:\PROGRA~1\MSNMES~1\msgrapp.dll"

    (file missing)
    O20 - AppInit_DLLs: MsgPlusLoader.dll
    O23 - Service: avast! iAVS4 Control

    Service (aswUpdSv) - Unknown owner -

    D:\Program Files\Alwil

    Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller -

    Unknown owner -

    C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown

    owner -

    C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - Unknown

    owner - D:\Program Files\Alwil

    Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner -

    Unknown owner - D:\Program

    Files\Alwil

    Software\Avast4\ashMaiSv.exe" /service

    (file missing)
    O23 - Service: avast! Web Scanner -

    Unknown owner - D:\Program

    Files\Alwil

    Software\Avast4\ashWebSv.exe" /service

    (file missing)
    O23 - Service: EPSON Printer Status

    Agent2 (EPSONStatusAgent2) - SEIKO

    EPSON CORPORATION - C:\Program

    Files\Common

    Files\EPSON\EBAPI\SAgent2.exe
    O23 - Service: InCD Helper (InCDsrv) -

    Ahead Software AG - C:\Program

    Files\Ahead\InCD\InCDsrv.exe
     
    maustus, Jan 18, 2006
    #4
  5. maustus

    maustus Member

    Joined:
    Jan 18, 2006
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    11
    hö miksihän se noin tyhmästi sen tuohon nakkasi.. ? =/
     
    maustus, Jan 18, 2006
    #5
  6. aaxxeell

    aaxxeell Regular member

    Joined:
    Jul 28, 2005
    Messages:
    2,145
    Likes Received:
    0
    Trophy Points:
    46
    Laitahan uudelleen koska tuo on vähän hankala luettavaa :)
    Eli sieltä sinun viestin oikeasta yläreunasta painat muokkaa nappia ja liitä loki uudelleen, ei tarvitse näin samaa lokia moneen kertaan laittaa sit. Ilmeisesti muistio ollut oudossa koossa.
     
    aaxxeell, Jan 19, 2006
    #6

Share This Page