Hjt-loki tarkastettavaksi.

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Kalzu90, Aug 25, 2008.

  1. Kalzu90

    Kalzu90 Guest

    Epäilen tosiaan että jotain shaissea nyt koneelle päässy.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:08:56, on 20.2.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\Ati2evxx.exe
    C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
    C:\Program Files\Norman\Npm\Bin\Zanda.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\RtHDVCpl.exe
    C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    C:\Program Files\Norman\Npm\Bin\Zlh.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\RocketDock\RocketDock.exe
    c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Norman\Nvc\BIN\NIP.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Windows\system32\svchost.exe
    C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
    C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
    C:\Program Files\Norman\Nvc\bin\nvcoas.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Norman\Nvc\bin\cclaw.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKCU\..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [Steam] C:\Program Files\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

    --
    End of file - 8109 bytes
     
    Kalzu90, Aug 25, 2008
    #1
  2. agi321

    agi321 Regular member

    Joined:
    Jul 3, 2008
    Messages:
    172
    Likes Received:
    0
    Trophy Points:
    26
    mitä ongelmaa sulla sitten on?
     
    agi321, Aug 25, 2008
    #2
  3. Kalzu90

    Kalzu90 Guest

    Jos ei ole mitään järkevämpää sanottavaa niin voi olla sanomatta.
    Kone tosiaan hitaampi ku etana.
     
    Kalzu90, Aug 25, 2008
    #3
  4. Kalzu90

    Kalzu90 Guest

    Ei löydy mitään epätavallista?
    vai onko tätä edes ketään katsonut?
     
    Kalzu90, Aug 25, 2008
    #4
  5. agi321

    agi321 Regular member

    Joined:
    Jul 3, 2008
    Messages:
    172
    Likes Received:
    0
    Trophy Points:
    26
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    valittet ton kohan ja painat Fix Checked
     
    agi321, Aug 25, 2008
    #5
  6. Kalzu90

    Kalzu90 Guest

    Eipä katoa minnekkään :eek:
     
    Kalzu90, Aug 25, 2008
    #6
  7. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina fix checked

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    ==========

    1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
    combofix1
    combofix2

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    =============

    Lataa Malwarebytes' Anti-Malware työpöydällesi.

    1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
    2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja
    Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish.
    3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
    4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan.
    5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
    6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.
    7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
    löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
    Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
    8. Lähetä lokin sisältö seuraavassa viestissäsi.
     
    Hujo, Aug 25, 2008
    #7
  8. Kalzu90

    Kalzu90 Guest

    moro tässä nää lokit

    ComboFix 08-08-25.01 - Kalµ 2008-08-26 16:45:44.2 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1167 [GMT 3:00]
    Running from: C:\Users\Kalµ\Desktop\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Users\Kalµ\AppData\Roaming\macromedia\Flash Player\#SharedObjects\6VHFWFDM\bin.clearspring.com
    C:\Users\Kalµ\AppData\Roaming\macromedia\Flash Player\#SharedObjects\6VHFWFDM\bin.clearspring.com\clearspring.sol
    C:\Users\Kalµ\AppData\Roaming\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com
    C:\Users\Kalµ\AppData\Roaming\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-07-26 to 2008-08-26 )))))))))))))))))
    .

    2008-08-26 16:42 . 2008-08-26 16:42 204,965,977 --a------ C:\Windows\MEMORY.DMP
    2008-08-26 16:38 . 2008-08-26 16:45 <KANSIO> d-------- C:\327882R2FWJFW
    2008-08-15 13:05 . 2008-07-16 02:48 2,048 --a------ C:\Windows\System32\tzres.dll
    2008-08-14 15:33 . 2008-06-19 06:25 361,984 --a------ C:\Windows\System32\IPSECSVC.DLL
    2008-08-14 15:33 . 2008-06-19 06:25 272,896 --a------ C:\Windows\System32\polstore.dll
    2008-08-14 15:33 . 2008-06-19 06:25 61,440 --a------ C:\Windows\System32\winipsec.dll
    2008-08-14 15:33 . 2008-06-19 06:25 28,672 --a------ C:\Windows\System32\FwRemoteSvr.dll
    2008-08-14 15:28 . 2008-04-19 11:13 268,800 --a------ C:\Windows\System32\es.dll
    2008-08-14 15:25 . 2008-04-10 08:01 737,792 --a------ C:\Windows\System32\inetcomm.dll
    2008-08-14 15:25 . 2008-04-10 05:43 84,480 --a------ C:\Windows\System32\INETRES.dll
    2008-08-09 22:30 . 2008-08-09 22:30 <KANSIO> d-------- C:\ProgramData\TVU Networks
    2008-08-09 22:30 . 2008-08-09 22:30 <KANSIO> d-------- C:\Program Files\TVUPlayer
    2008-08-05 21:25 . 2008-08-05 21:25 <KANSIO> d-------- C:\3gptemp
    2008-08-05 15:00 . 2008-08-05 15:00 <KANSIO> d-------- C:\Program Files\MIKSOFT
    2008-07-29 20:19 . 2008-08-05 14:51 1,440 --a------ C:\Users\Kalµ\AppData\Roaming\filterclsid.dat
    2008-07-29 20:15 . 2008-07-29 20:15 <KANSIO> d-------- C:\Users\Kalµ\AppData\Roaming\SAMSUNG
    2008-07-29 18:41 . 2007-07-03 16:58 106,792 --a------ C:\Windows\System32\drivers\sscdmdm.sys
    2008-07-29 18:41 . 2007-07-03 16:54 80,552 --a------ C:\Windows\System32\drivers\sscdbus.sys
    2008-07-29 18:41 . 2007-07-03 16:57 11,944 --a------ C:\Windows\System32\drivers\sscdmdfl.sys
    2008-07-29 18:41 . 2007-07-03 17:00 9,256 --a------ C:\Windows\System32\drivers\sscdwhnt.sys
    2008-07-29 18:41 . 2007-07-03 17:00 9,256 --a------ C:\Windows\System32\drivers\sscdwh.sys
    2008-07-29 18:41 . 2007-07-03 16:56 9,256 --a------ C:\Windows\System32\drivers\sscdcmnt.sys
    2008-07-29 18:41 . 2007-07-03 16:56 9,256 --a------ C:\Windows\System32\drivers\sscdcm.sys
    2008-07-27 21:59 . 2008-07-19 17:36 51,280 --a------ C:\Windows\System32\drivers\aswMonFlt.sys
    2008-07-27 21:35 . 2008-07-27 21:50 <KANSIO> d-------- C:\ProgramData\avg8
    2008-07-27 21:35 . 2008-07-27 21:35 <KANSIO> d-------- C:\Program Files\AVG

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-10-02 18:30 7,680 ----a-w C:\Windows\System32\ff_vfw.dll
    2008-10-02 18:30 60,273 ----a-w C:\Windows\System32\pthreadGC2.dll
    2008-10-02 18:30 499,712 ----a-w C:\Windows\System32\msvcp71.dll
    2008-10-02 18:30 348,160 ----a-w C:\Windows\System32\msvcr71.dll
    2008-08-26 13:39 --------- d-----w C:\Users\Kalµ\AppData\Roaming\foobar2000
    2008-08-25 20:36 --------- d-----w C:\Users\Kalµ\AppData\Roaming\uTorrent
    2008-08-22 13:37 --------- d-----w C:\Users\Kalµ\AppData\Roaming\Audacity
    2008-08-21 14:05 --------- d-----w C:\ProgramData\Skype
    2008-08-21 14:02 --------- d-----w C:\Users\Kalµ\AppData\Roaming\skypePM
    2008-08-21 14:02 --------- d-----w C:\Program Files\BitComet
    2008-08-20 19:39 --------- d-----w C:\ProgramData\eMule
    2008-08-20 19:36 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-08-19 10:00 --------- d-----w C:\Program Files\Microsoft Silverlight
    2008-08-18 19:22 --------- d-----w C:\Program Files\SopCast
    2008-08-17 10:02 --------- d-----w C:\Program Files\Microsoft Works
    2008-08-15 10:06 --------- d-----w C:\ProgramData\Microsoft Help
    2008-08-15 10:02 --------- d-----w C:\Program Files\Windows Mail
    2008-07-25 16:44 --------- d-----w C:\Program Files\AC3Filter
    2008-07-20 19:53 --------- d-----w C:\Program Files\metal oxide software
    2008-07-19 18:36 --------- d-----w C:\Program Files\Opera
    2008-07-10 17:00 --------- d-----w C:\Program Files\RocketDock
    2008-07-10 10:04 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-07-10 06:47 174 --sha-w C:\Program Files\desktop.ini
    2008-07-07 11:27 --------- d-----w C:\ProgramData\NFS Underground
    2008-07-07 11:22 --------- d-----w C:\Program Files\EA GAMES
    2008-07-02 07:22 --------- d-----w C:\Program Files\ESET
    2008-07-01 19:36 --------- d-----w C:\Program Files\Samsung
    2008-06-27 03:54 826,368 ----a-w C:\Windows\System32\wininet.dll
    2008-06-27 03:54 56,320 ----a-w C:\Windows\System32\iesetup.dll
    2008-06-27 03:54 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
    2008-06-27 03:54 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
    2008-06-26 00:34 7,964,672 ----a-w C:\Windows\System32\NlsLexicons0024.dll
    2008-06-26 00:33 9,892,864 ----a-w C:\Windows\System32\NlsLexicons000a.dll
    2008-02-23 13:54 32 ----a-w C:\ProgramData\ezsid.dat
    2008-02-15 14:05 0 ----a-w C:\Users\Kalµ\AppData\Roaming\wklnhst.dat
    2001-10-30 19:44 65,536 ----a-w C:\Program Files\in_BuzzWinampBridge.dll
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-02-16 01:09 1232896]
    "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 15:35 125440]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
    "RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 14:58 495616]
    "AlcoholAutomount"="C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" [2008-03-20 19:46 217544]
    "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 15:36 201728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 19:31 630784]
    "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-02-26 21:46 153136]
    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 12:25 6731312]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
    "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
    "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648]
    "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]
    "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 21:52 49152]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 17:38 78008]
    "RtHDVCpl"="RtHDVCpl.exe" [2007-04-10 17:01 4431872 C:\Windows\RtHDVCpl.exe]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.ac3filter"= ac3filter.acm

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "TCP Query User{3CA9D6F7-23B2-4344-AA97-710641175AA9}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
    "UDP Query User{B02962E4-C8CE-45AA-BF08-3CB4437B9937}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
    "TCP Query User{7156B299-0FF9-4C36-8964-57E320528BF4}C:\\program files\\microsoft games\\halo trial\\halo.exe"= UDP:C:\program files\microsoft games\halo trial\halo.exe:Halo
    "UDP Query User{D61B94EA-6ADD-4E6D-8433-25C415354C90}C:\\program files\\microsoft games\\halo trial\\halo.exe"= TCP:C:\program files\microsoft games\halo trial\halo.exe:Halo
    "{02C80318-BF93-4818-B5E8-CD2619F2EEF3}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{844E6DBA-7113-4CD0-99A6-A3F7A05B0FB4}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{524BC591-9BC0-48F8-8DFF-EDC00FB2750B}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "TCP Query User{F8C23B25-243A-4340-8B85-EEC720D400FD}C:\\program files\\steam\\steamapps\\reaper215\\counter-strike\\hl.exe"= UDP:C:\program files\steam\steamapps\reaper215\counter-strike\hl.exe:Half-Life Launcher
    "UDP Query User{4894E6BC-5F40-4700-AA7D-56EBC7A78759}C:\\program files\\steam\\steamapps\\reaper215\\counter-strike\\hl.exe"= TCP:C:\program files\steam\steamapps\reaper215\counter-strike\hl.exe:Half-Life Launcher
    "TCP Query User{319BD685-1AC7-4714-8BA7-ECCDC3609DED}C:\\program files\\b2bpoker\\pokerihuone\\jre\\bin\\javaw.exe"= UDP:C:\program files\b2bpoker\pokerihuone\jre\bin\javaw.exe:Java(TM) 2 Platform Standard Edition binary
    "UDP Query User{66EF91A8-A69A-4541-9FA8-C6E8D8D13FCB}C:\\program files\\b2bpoker\\pokerihuone\\jre\\bin\\javaw.exe"= TCP:C:\program files\b2bpoker\pokerihuone\jre\bin\javaw.exe:Java(TM) 2 Platform Standard Edition binary
    "TCP Query User{85FA3E17-85FA-4D81-B9F2-43E519AFBD1B}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "UDP Query User{96057F7C-C34D-492D-AD79-A0716DDC3FE8}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "TCP Query User{1C714B32-F9D5-4D57-9DB9-6D7593DE3182}C:\\program files\\participatory culture foundation\\miro\\miro_downloader.exe"= UDP:C:\program files\participatory culture foundation\miro\miro_downloader.exe:Miro_Downloader
    "UDP Query User{4CD619B1-4CA8-4A2E-8F1E-A2EF1A20E152}C:\\program files\\participatory culture foundation\\miro\\miro_downloader.exe"= TCP:C:\program files\participatory culture foundation\miro\miro_downloader.exe:Miro_Downloader
    "TCP Query User{81726F63-66EF-41BC-A7C4-1D13E148F0C1}C:\\program files\\skype\\phone\\skype.exe"= UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "UDP Query User{D3A59D44-E0BF-4A86-BD40-8220F70B1979}C:\\program files\\skype\\phone\\skype.exe"= TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "TCP Query User{14598890-A519-427F-A356-9066D705592F}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= UDP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
    "UDP Query User{9B10D772-A4D9-4F40-87C9-995FAEEFEBCF}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= TCP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
    "TCP Query User{CF1412BC-F005-4517-8883-E987C94EED9A}C:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:C:\program files\sopcast\adv\sopadver.exe:SopCast Adver
    "UDP Query User{6F2BA4D5-E231-4917-99FF-472FA8EEA052}C:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:C:\program files\sopcast\adv\sopadver.exe:SopCast Adver
    "TCP Query User{97AF07C9-4B24-418E-8E8E-92A345AB9EAA}C:\\program files\\sopcast\\sopcast.exe"= UDP:C:\program files\sopcast\sopcast.exe:SopCast Main Application
    "UDP Query User{B67D6D53-EDF0-4A44-BBBA-523147329CE7}C:\\program files\\sopcast\\sopcast.exe"= TCP:C:\program files\sopcast\sopcast.exe:SopCast Main Application
    "TCP Query User{4E6CDC56-A439-465A-B003-75E1C079890A}C:\\program files\\dc++\\dcplusplus.exe"= UDP:C:\program files\dc++\dcplusplus.exe:DC++
    "UDP Query User{2F157EA7-9B84-4A0F-8BE4-BECACA7134A7}C:\\program files\\dc++\\dcplusplus.exe"= TCP:C:\program files\dc++\dcplusplus.exe:DC++
    "TCP Query User{60507641-B474-467E-9FB0-0DFCFB7B686B}C:\\program files\\sopcast\\sopvod.exe"= UDP:C:\program files\sopcast\sopvod.exe:sopvod
    "UDP Query User{A4A6944B-C507-489E-B0A8-87BBD15A8D2C}C:\\program files\\sopcast\\sopvod.exe"= TCP:C:\program files\sopcast\sopvod.exe:sopvod
    "TCP Query User{05E906F1-0ADC-4CA4-9E8D-D8596F1A4F5E}C:\\program files\\revconnect\\dcplusplus.exe"= UDP:C:\program files\revconnect\dcplusplus.exe:DC++
    "UDP Query User{FAE84715-E69F-4F70-929C-08B47DDC7310}C:\\program files\\revconnect\\dcplusplus.exe"= TCP:C:\program files\revconnect\dcplusplus.exe:DC++
    "TCP Query User{21FF6F11-13DC-4EA4-BFDA-70F74F7DA20E}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
    "UDP Query User{41A4BA27-2D0C-4BF5-AC08-7CF40464DDDB}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
    "TCP Query User{F7F7DCD2-177C-44A7-9033-C6035B7E77CB}C:\\program files\\ares\\ares.exe"= UDP:C:\program files\ares\ares.exe:Ares p2p for windows
    "UDP Query User{94C6D429-72A8-49E1-94D0-C6B9034D5E55}C:\\program files\\ares\\ares.exe"= TCP:C:\program files\ares\ares.exe:Ares p2p for windows
    "TCP Query User{9AAE48FE-2204-439B-8C4B-E0A564594378}C:\\program files\\skype\\phone\\skype.exe"= UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "UDP Query User{32CCD2B2-601E-45A1-9D64-AC45DF5552A9}C:\\program files\\skype\\phone\\skype.exe"= TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "TCP Query User{1102C3D7-C48B-421B-88E3-5E51EE0A6D56}C:\\program files\\bitcomet\\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
    "UDP Query User{CEA5C5DB-81F6-4B12-9429-B95D55E06A9E}C:\\program files\\bitcomet\\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
    "TCP Query User{92E49330-3AFB-4DE1-9CC5-144AC3625C9F}C:\\program files\\bitcomet\\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
    "UDP Query User{5177BA30-16FB-44BB-A3DD-F9252427BB5E}C:\\program files\\bitcomet\\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
    "TCP Query User{2DADE770-D5FC-4D22-9FD6-69422DCED763}C:\\program files\\dc++\\dcplusplus.exe"= UDP:C:\program files\dc++\dcplusplus.exe:DC++
    "UDP Query User{B31653FE-EEC7-4BE7-B4E8-7C786B060CC4}C:\\program files\\dc++\\dcplusplus.exe"= TCP:C:\program files\dc++\dcplusplus.exe:DC++
    "{663F87B2-6D99-4B21-859E-7834FFB58DE2}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "TCP Query User{EA327B3B-77D1-4925-AB3B-E0B98A3709FF}C:\\program files\\bitlord\\bitlord.exe"= UDP:C:\program files\bitlord\bitlord.exe:BitLord
    "UDP Query User{978A8815-2DE5-40D8-A9A0-2F399FA315D4}C:\\program files\\bitlord\\bitlord.exe"= TCP:C:\program files\bitlord\bitlord.exe:BitLord
    "TCP Query User{F267D1A1-B819-48A9-93BF-0046E8147023}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= UDP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
    "UDP Query User{D6FE1C32-841B-40EA-AC63-881D3E514DD5}C:\\program files\\joost\\xulrunner\\tvprunner.exe"= TCP:C:\program files\joost\xulrunner\tvprunner.exe:tvprunner
    "TCP Query User{7BA5FCBD-FDF0-4D4A-AF1D-D3F3528249EA}C:\\program files\\wolfenstein - enemy territory\\et.exe"= UDP:C:\program files\wolfenstein - enemy territory\et.exe:ET
    "UDP Query User{41FB2529-34AF-4D98-84B0-59DE61A4D065}C:\\program files\\wolfenstein - enemy territory\\et.exe"= TCP:C:\program files\wolfenstein - enemy territory\et.exe:ET
    "TCP Query User{1E0D69A7-0F05-4695-BDEC-C4F8A4372B3C}C:\\program files\\azureus\\azureus.exe"= UDP:C:\program files\azureus\azureus.exe:Azureus
    "UDP Query User{31546A61-A735-429F-A71D-53320877BC85}C:\\program files\\azureus\\azureus.exe"= TCP:C:\program files\azureus\azureus.exe:Azureus
    "{643EDAB1-AA74-479C-9089-D0AB1DF6D46F}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "{732A014B-86FC-45F1-8522-303AA843BD7D}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "TCP Query User{947A46CD-0888-47E5-AFAD-9E27B8B64BA2}C:\\users\\mara\\program files\\utorrent\\utorrent.exe"= UDP:C:\users\mara\program files\utorrent\utorrent.exe:utorrent.exe
    "UDP Query User{00812C3B-7500-4E44-83D9-7F291DD27379}C:\\users\\mara\\program files\\utorrent\\utorrent.exe"= TCP:C:\users\mara\program files\utorrent\utorrent.exe:utorrent.exe
    "TCP Query User{C904273F-00EF-4A8B-B526-84CC01FBD14E}C:\\program files\\ares\\ares.exe"= UDP:C:\program files\ares\ares.exe:Ares p2p for windows
    "UDP Query User{A6F2A5DD-4994-4AA1-8D6F-2CF059991953}C:\\program files\\ares\\ares.exe"= TCP:C:\program files\ares\ares.exe:Ares p2p for windows
    "TCP Query User{D5C3C275-AF92-4FE6-8D28-9D68AD2B0BD1}C:\\program files\\soulseek-test\\slsk.exe"= UDP:C:\program files\soulseek-test\slsk.exe:SoulSeek
    "UDP Query User{4677F039-28ED-4B27-8D82-DD4429547559}C:\\program files\\soulseek-test\\slsk.exe"= TCP:C:\program files\soulseek-test\slsk.exe:SoulSeek
    "TCP Query User{0997630C-6625-49D7-A4F7-0D6E0FA8AA92}C:\\program files\\revconnect\\dcplusplus.exe"= UDP:C:\program files\revconnect\dcplusplus.exe:DC++
    "UDP Query User{19E66306-13EE-45E6-A8B8-28056EC449FA}C:\\program files\\revconnect\\dcplusplus.exe"= TCP:C:\program files\revconnect\dcplusplus.exe:DC++
    "TCP Query User{758BE8AD-089C-472D-9E6A-9B2F4E9816BD}C:\\program files\\soulseek-test\\slsk.exe"= UDP:C:\program files\soulseek-test\slsk.exe:SoulSeek
    "UDP Query User{BA6EEBD8-1449-4AE1-AF0F-488D97E1C999}C:\\program files\\soulseek-test\\slsk.exe"= TCP:C:\program files\soulseek-test\slsk.exe:SoulSeek
    "TCP Query User{FAED9738-D0EB-4619-B528-F610CA1E5A0B}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "UDP Query User{D03ED520-0CDA-42AB-B3D7-1E7030A2D3D6}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "TCP Query User{64049A5C-856D-4D96-B74D-C7A3CC8CBA89}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule
    "UDP Query User{08EEB396-44E2-46EE-9B4B-C7866DD751F3}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule
    "{53BA483D-96E4-4A80-90BE-38C0BA50485A}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
    "{D5A8ADA1-21C7-4607-8402-26705BA2A852}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{D0EAD5FD-96E0-437D-B644-D13FACC29EEE}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{01A0817A-E9BA-4AEC-A366-F40315A83BAD}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{134E9800-219F-4BC5-98E2-8E360BE37CC4}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{BC9A0A04-8D60-485B-B4CF-80DB39EBD646}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
    "{1A90B653-C3A1-4152-BC8E-DCBA86B6BDDD}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
    "TCP Query User{F7704B1D-8955-4F3D-B96A-223202500B12}C:\\users\\kalµ\\desktop\\cdcc\\strongdc.exe"= UDP:C:\users\kalµ\desktop\cdcc\strongdc.exe:strongdc.exe
    "UDP Query User{70D15E3C-BD19-4C21-BD71-C14FF7FB7550}C:\\users\\kalµ\\desktop\\cdcc\\strongdc.exe"= TCP:C:\users\kalµ\desktop\cdcc\strongdc.exe:strongdc.exe
    "TCP Query User{3386FF7D-B880-438A-85B5-521BCDE8DA8E}C:\\program files\\metal oxide software\\downhill pakoon! 2.many unlimited 2009\\pakoon2.exe"= UDP:C:\program files\metal oxide software\downhill pakoon! 2.many unlimited 2009\pakoon2.exe:downhill Pakoon2.MANY unlimited 2009
    "UDP Query User{75796814-C844-4AF8-99A4-8F18AF0EA2D6}C:\\program files\\metal oxide software\\downhill pakoon! 2.many unlimited 2009\\pakoon2.exe"= TCP:C:\program files\metal oxide software\downhill pakoon! 2.many unlimited 2009\pakoon2.exe:downhill Pakoon2.MANY unlimited 2009
    "TCP Query User{CE1761AD-71AD-42ED-ACA9-69B026E421F7}C:\\users\\kalµ\\desktop\\eris\\fishing.exe"= UDP:C:\users\kalµ\desktop\eris\fishing.exe:fishing.exe
    "UDP Query User{CDE4A4D0-685C-43AA-9DAD-88477E016834}C:\\users\\kalµ\\desktop\\eris\\fishing.exe"= TCP:C:\users\kalµ\desktop\eris\fishing.exe:fishing.exe
    "TCP Query User{4094C89C-90D0-4387-A860-7A4F747492CC}C:\\program files\\tvuplayer\\tvuplayer.exe"= UDP:C:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
    "UDP Query User{37DAA1EF-EE6D-4B5E-AE02-64DD6ABFA1DE}C:\\program files\\tvuplayer\\tvuplayer.exe"= TCP:C:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
    "TCP Query User{5F637F13-A5E2-482C-8657-C08FF91787D6}C:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:C:\program files\sopcast\adv\sopadver.exe:SopCast Adver
    "UDP Query User{1BA70492-FFC9-478D-B7D0-07A0381B5438}C:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:C:\program files\sopcast\adv\sopadver.exe:SopCast Adver
    "TCP Query User{D9D391BD-9204-40A1-B54D-8F0D495AB610}C:\\program files\\sopcast\\sopcast.exe"= UDP:C:\program files\sopcast\sopcast.exe:SopCast Main Application
    "UDP Query User{72B3A5CF-505B-441B-A233-9B3F3F215845}C:\\program files\\sopcast\\sopcast.exe"= TCP:C:\program files\sopcast\sopcast.exe:SopCast Main Application
    "TCP Query User{A09CD69A-5C4F-4494-89B1-92148BC1F23B}C:\\program files\\opera\\opera.exe"= UDP:C:\program files\opera\opera.exe:Opera Internet Browser
    "UDP Query User{2C2270AA-2E7A-422E-AE86-D542D4D50E30}C:\\program files\\opera\\opera.exe"= TCP:C:\program files\opera\opera.exe:Opera Internet Browser

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
    "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

    R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-30 18:23]
    R1 aswSP;avast! Self Protection;C:\Windows\system32\drivers\aswSP.sys [2008-07-19 17:35]
    R2 aswFsBlk;aswFsBlk;C:\Windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 17:37]
    R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-07-19 17:36]
    R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler;C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [2006-12-08 20:52]
    R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2008-05-12 19:30]
    S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-04-05 10:25]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
    \shell\AutoRun\command - F:\Setup.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
    \shell\AutoRun\command - G:\autorun.exe

    *Newly Created Service* - CATCHME
    .
    - - - - ORPHANS REMOVED - - - -

    HKCU-Run-ares - C:\Program Files\Ares\Ares.exe


    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Users\Kalµ\AppData\Roaming\Mozilla\Firefox\Profiles\8ptwf19k.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fi
    FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
    FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-26 16:49:22
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2008-08-26 16:50:52
    ComboFix-quarantined-files.txt 2008-08-26 13:50:47
    ComboFix2.txt 2008-02-21 11:50:32

    Pre-Run: 90,194,157,568 tavua vapaana
    Post-Run: 90,227,617,792 tavua vapaana

    238 --- E O F --- 2008-08-23 22:53:34
     
    Kalzu90, Aug 26, 2008
    #8
  9. Kalzu90

    Kalzu90 Guest

    ja Malwarebytes

    Malwarebytes' Anti-Malware 1.25
    Tietokantaversio: 1087
    Windows 6.0.6000

    18:35:48 26.8.2008
    mbam-log-08-26-2008 (18-35-40).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
    Tarkistetut kohteet: 168021
    Kulunut aika: 1 hour(s), 33 minute(s), 5 second(s)

    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 0
    Saastuneita rekisteriavaimia: 0
    Saastuneita rekisteriarvoja: 0
    Saastuneita rekisterikohteita: 0
    Saastuneita hakemistoja: 1
    Saastuneita tiedostoja: 0

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriavaimia:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriarvoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisterikohteita:
    (Haitallisia kohteita ei löydetty)

    Saastuneita hakemistoja:
    C:\Casino (Adware.Casino) -> No action taken.

    Saastuneita tiedostoja:
    (Haitallisia kohteita ei löydetty)
     
    Kalzu90, Aug 26, 2008
    #9
  10. Hujo

    Hujo Guest

    Lataa Tästä Ccleaner
    CCleaner v2.05.555- Standard Build, ÄLÄ aseenna Yahoo toolbaria!
    Asennuksessa poista merkki/rasti kohdasta "asenna Yahoo! toolbar/työkalupalkki".
    Asennuksen jälkeen aukaise CCleaner.
    Valitse vasemmalta pystyrivistä Options.
    Valitse viereisestä pystyrivistä Settings.
    Language kohtaan valitse Suomi.

    Puhdistaja
    Valitse vasemmalta pystyrivistä Puhdistaja.
    Paina alhaalta Tutki.
    Nyt CCleaner tutkii, mitä voidaan poistaa (tempit, cookiessit jne.).
    Kun tutkiminen on valmis, paina Aja CCleaner.
    Nyt CCleaner poistaa löydetyt tempit, cookiessit jne.

    Rekisterin virheiden korjaus
    Valitse vasemmalta pystyrivistä Rekisteri.
    Paina alhaalta Etsi rekisterin virheitä.
    Kun etsintä on valmis ja olet varma, että haluat korjata ne rivit jotka ovat merkattuja, niin paina Korjaa valitut rekisterin virheet.
    Sinulta kysytään "haluatko varmuuskopioida muutokset rekisteriin", paina Kyllä. Tallenna varmuuskopio vaikka "Omat tiedostot" -kansioon.
    Klikkaa uudesta aukeavasta ikkunasta Korjaa kaikki valitut virheet.
    Saat vielä varmistus kysymyksen, paina Ok.
    Kun virheet on korjattu, paina Sulje.
    Nyt voit sulkea CCleanerin painamalla oikealta ylhäältä punaista rastia.
     
    Hujo, Aug 26, 2008
    #10
  11. Kalzu90

    Kalzu90 Guest

    Yeah buddyy, thats it?

    Kiitti Hujo \o
     
    Kalzu90, Aug 26, 2008
    #11

Share This Page