Kone toimii todella hitaasti = / Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:13:48, on 3.9.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Tanagra\Memeo\MemeoService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\Sonera Tietoturva\Common\FSMB32.EXE C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE C:\Program Files\Sonera Tietoturva\Anti-Virus\fsqh.exe C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Media Player\WMPNetwk.exe C:\Program Files\Sonera Tietoturva\FSAUA\program\fsaua.exe C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Sonera Tietoturva\FSAUA\program\fsus.exe C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe C:\windows\system\hpsysdrv.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\AGRSMMSG.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Sonera\InternetAvustaja\bin\sprtcmd.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Macrogaming\SweetIM\SweetIM.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Nikon\PictureProject\NkbMonitor.exe C:\Program Files\Stardock\ObjectDock\ObjectDock.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE C:\Program Files\Tanagra\Memeo\MemeoBackup.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\explorer.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\installer\WLSetupSvc.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.fraps.com/register282/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file) O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: IE to GetRight Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: Little Fighter 2 Toolbar Helper - {AB41010D-4804-4793-A6A2-3B5EBE2348DD} - (no file) O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Little Fighter 2 Toolbar - {C11483F7-D7D8-4804-98D8-6055470BB989} - (no file) O3 - Toolbar: (no name) - {5D956A61-05E7-427B-A2B1-BF32FB18B1BE} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [Sonera] "C:\Program Files\Sonera\InternetAvustaja\bin\sprtcmd.exe" /P Sonera O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe O4 - HKCU\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user') O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user') O4 - Startup: Memeo Launcher.lnk = C:\Program Files\Tanagra\Memeo\MemeoLauncher.exe O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.3.102.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1180853935062 O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.11) - http://gameadvisor.futuremark.com/global/msc311.cab O16 - DPF: {E1E73B44-2D20-47A9-9CA2-B534CEBBF856} (F-Secure Health Check 1.0) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab O16 - DPF: {FFD85DC8-5261-4D11-B728-F7C59D911691} (iolo.ProductDetector) - http://www.iolo.com/app/ocx/UpgradeVerify.ocx O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Memeo (BMUService) - Memeo - C:\Program Files\Tanagra\Memeo\MemeoService.exe O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSAUA\program\fsaua.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 17300 bytes
ComboFix 08-03-30.3 - HP_Omistaja 2008-03-31 20:08:27.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.686 [GMT 3:00] Running from: C:\Documents and Settings\HP_Omistaja\Työpöytä\ComboFix.exe * Created a new restore point * Resident AV is active . The following files were disabled during the run: C:\Program Files\iolo\Common\Lib\ioloHL.dll (((((((((((((((((((((((((((((((((((((( Muut poistot )))))))))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat D:\Autorun.inf ----- BITS: Possible infected sites ----- hxxp://sync.avustaja.sonera.fi . ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-02-28 to 2008-03-31 ))))))))))))))))) . 2008-03-30 18:25 . 2008-03-30 18:25 <KANSIO> d-------- C:\Program Files\Trend Micro 2008-03-30 00:53 . 2008-03-30 00:53 <KANSIO> d-------- C:\Program Files\AdVantage 2008-03-30 00:53 . 2008-03-30 01:06 <KANSIO> d-------- C:\Documents and Settings\HP_Omistaja\Application Data\BSplayer 2008-03-29 15:20 . 2008-03-29 15:20 <KANSIO> d-------- C:\Documents and Settings\LocalService\Application Data\Xfire 2008-03-29 15:09 . 2008-03-29 15:09 <KANSIO> d-------- C:\Program Files\Defraggler 2008-03-27 20:20 . 2008-03-27 20:20 <KANSIO> d-------- C:\Documents and Settings\HP_Omistaja\Application Data\Grisoft 2008-03-27 19:56 . 2008-03-27 19:56 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-03-27 19:56 . 2007-05-30 15:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-03-27 19:51 . 2008-03-27 19:51 <KANSIO> d-------- C:\Program Files\CCleaner 2008-03-27 12:58 . 2008-03-28 15:56 1,441 --a------ C:\WINDOWS\cdPlayer.ini 2008-03-23 19:07 . 2008-03-26 18:48 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-03-23 19:07 . 2008-03-23 19:07 1,409 --a------ C:\WINDOWS\QTFont.for 2008-03-22 01:10 . 2008-03-22 01:10 <KANSIO> d-------- C:\Program Files\Realtek AC97 2008-03-22 01:07 . 2007-12-04 16:44 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS 2008-03-22 01:03 . 2008-03-22 01:15 <KANSIO> d-------- C:\Program Files\Setup Files 2008-03-22 00:59 . 2008-03-22 00:59 <KANSIO> d-------- C:\Program Files\MSI 2008-03-22 00:53 . 2008-03-22 00:53 <KANSIO> d-------- C:\Program Files\Lavalys 2008-03-21 22:48 . 2008-03-21 22:48 <KANSIO> d-------- C:\Program Files\Stardock 2008-03-21 22:48 . 2008-03-21 22:48 <KANSIO> d-------- C:\Program Files\Common Files\Stardock 2008-03-21 22:32 . 2001-01-13 00:37 294,912 --a------ C:\WINDOWS\system32\Helios.scr 2008-03-21 22:29 . 2001-12-15 13:10 294,912 --a------ C:\WINDOWS\system32\Euphoria.scr 2008-03-21 17:49 . 2008-03-21 17:51 <KANSIO> d-------- C:\Program Files\game explorer 2008-03-21 17:48 . 2008-03-21 17:48 286,720 --------- C:\WINDOWS\Setup1.exe 2008-03-21 17:48 . 2008-03-21 17:48 73,216 --a------ C:\WINDOWS\ST6UNST.EXE 2008-03-21 17:24 . 2008-03-21 17:24 <KANSIO> d-------- C:\Program Files\vista games 2008-03-21 16:42 . 2008-03-21 16:42 <KANSIO> d-------- C:\Program Files\VAIOXP 2008-03-21 16:19 . 2007-05-17 12:55 61,440 --a------ C:\WINDOWS\system32\Vista.Emulation.dll 2008-03-21 15:55 . 2008-03-21 16:05 <KANSIO> d-------- C:\Documents and Settings\HP_Omistaja\Application Data\Real Desktop 2008-03-21 15:54 . 2008-03-21 16:03 <KANSIO> d-------- C:\Program Files\Real Desktop 2008-03-14 02:06 . 2008-03-14 02:06 41,296 --a------ C:\WINDOWS\system32\xfcodec.dll 2008-03-02 00:21 . 2008-03-02 00:21 <KANSIO> d-------- C:\Program Files\Valve 2008-02-29 19:15 . 2008-02-29 19:15 <KANSIO> d-------- C:\Documents and Settings\HP_Omistaja\Application Data\FileZilla 2008-02-28 14:51 . 2004-09-14 17:12 116,224 --a------ C:\WINDOWS\system32\dllcache\xrxwiadr.dll 2008-02-28 14:51 . 2001-08-18 07:37 99,865 --a------ C:\WINDOWS\system32\dllcache\xlog.exe 2008-02-28 14:51 . 2001-10-05 17:32 27,648 --a------ C:\WINDOWS\system32\dllcache\xrxftplt.exe 2008-02-28 14:51 . 2001-10-05 17:31 23,040 --a------ C:\WINDOWS\system32\dllcache\xrxwbtmp.dll 2008-02-28 14:51 . 2004-08-03 23:29 19,455 --a------ C:\WINDOWS\system32\dllcache\wvchntxx.sys 2008-02-28 14:51 . 2001-10-05 17:31 17,408 --a------ C:\WINDOWS\system32\dllcache\xrxscnui.dll 2008-02-28 14:51 . 2001-08-17 21:11 16,970 --a------ C:\WINDOWS\system32\dllcache\xem336n5.sys 2008-02-28 14:51 . 2004-08-03 23:29 12,063 --a------ C:\WINDOWS\system32\dllcache\wsiintxx.sys 2008-02-28 14:51 . 2004-09-14 17:12 8,192 --a------ C:\WINDOWS\system32\dllcache\wshirda.dll 2008-02-28 14:51 . 2001-10-05 17:32 4,608 --a------ C:\WINDOWS\system32\dllcache\xrxflnch.exe 2008-02-28 14:50 . 2004-08-03 23:31 154,624 --a------ C:\WINDOWS\system32\dllcache\wlluc48.sys 2008-02-28 14:50 . 2001-10-05 17:02 34,890 --a------ C:\WINDOWS\system32\dllcache\wlandrv2.sys 2008-02-28 14:50 . 2004-08-04 00:07 8,832 --a------ C:\WINDOWS\system32\dllcache\wmiacpi.sys 2008-02-28 14:49 . 2001-08-17 22:28 771,581 --a------ C:\WINDOWS\system32\dllcache\winacisa.sys 2008-02-28 14:49 . 2001-08-17 22:28 701,386 --a------ C:\WINDOWS\system32\dllcache\wdhaalba.sys 2008-02-28 14:49 . 2001-10-05 17:31 87,040 --a------ C:\WINDOWS\system32\dllcache\wiafbdrv.dll 2008-02-28 14:49 . 2001-10-05 17:31 54,272 --a------ C:\WINDOWS\system32\dllcache\wiamsmud.dll 2008-02-28 14:49 . 2004-09-14 17:07 31,744 --a------ C:\WINDOWS\system32\dllcache\wceusbsh.sys 2008-02-28 14:49 . 2004-08-03 23:29 23,615 --a------ C:\WINDOWS\system32\dllcache\wch7xxnt.sys 2008-02-28 14:47 . 2001-08-17 22:28 765,884 --a------ C:\WINDOWS\system32\dllcache\usrti.sys 2008-02-28 14:47 . 2001-08-17 22:28 687,999 --a------ C:\WINDOWS\system32\dllcache\usrwdxjs.sys 2008-02-28 14:47 . 2001-08-17 22:28 604,253 --a------ C:\WINDOWS\system32\dllcache\vmodem.sys 2008-02-28 14:47 . 2001-08-17 21:14 249,402 --a------ C:\WINDOWS\system32\dllcache\vinwm.sys 2008-02-28 14:47 . 2004-08-04 00:07 42,240 --a------ C:\WINDOWS\system32\dllcache\viaagp.sys 2008-02-28 14:47 . 2001-08-17 22:49 24,576 --a------ C:\WINDOWS\system32\dllcache\viairda.sys 2008-02-28 14:47 . 2004-09-14 17:12 11,325 --a------ C:\WINDOWS\system32\dllcache\vchnt5.dll 2008-02-28 14:46 . 2001-08-17 22:28 794,654 --a------ C:\WINDOWS\system32\dllcache\usr1801.sys 2008-02-28 14:46 . 2001-08-17 22:28 794,399 --a------ C:\WINDOWS\system32\dllcache\usr1806v.sys 2008-02-28 14:46 . 2001-08-17 22:28 793,598 --a------ C:\WINDOWS\system32\dllcache\usr1806.sys 2008-02-28 14:46 . 2001-08-17 22:28 224,802 --a------ C:\WINDOWS\system32\dllcache\usr1807a.sys 2008-02-28 14:46 . 2001-08-17 22:28 113,762 --a------ C:\WINDOWS\system32\dllcache\usrpda.sys 2008-02-28 14:46 . 2004-08-04 00:10 78,464 --a------ C:\WINDOWS\system32\dllcache\usbvideo.sys 2008-02-28 14:46 . 2004-08-04 00:08 25,600 --a------ C:\WINDOWS\system32\dllcache\usbser.sys 2008-02-28 14:46 . 2001-08-17 22:28 7,556 --a------ C:\WINDOWS\system32\dllcache\usroslba.sys 2008-02-28 14:44 . 2001-10-05 17:31 525,568 --a------ C:\WINDOWS\system32\dllcache\tridxp.dll 2008-02-28 14:44 . 2001-10-05 17:30 440,576 --a------ C:\WINDOWS\system32\dllcache\tridkb.dll 2008-02-28 14:44 . 2001-10-05 17:30 315,520 --a------ C:\WINDOWS\system32\dllcache\trid3d.dll 2008-02-28 14:44 . 2001-08-17 21:51 222,336 --a------ C:\WINDOWS\system32\dllcache\trid3dm.sys 2008-02-28 14:44 . 2001-10-05 17:31 216,064 --a------ C:\WINDOWS\system32\dllcache\um34scan.dll 2008-02-28 14:44 . 2001-08-17 21:51 166,784 --a------ C:\WINDOWS\system32\dllcache\tridxpm.sys 2008-02-28 14:44 . 2001-08-17 21:51 159,232 --a------ C:\WINDOWS\system32\dllcache\tridkbm.sys 2008-02-28 14:44 . 2004-08-04 00:07 44,672 --a------ C:\WINDOWS\system32\dllcache\uagp35.sys 2008-02-28 14:44 . 2001-08-17 22:52 36,736 --a------ C:\WINDOWS\system32\dllcache\ultra.sys 2008-02-28 14:44 . 2001-08-17 21:12 34,375 --a------ C:\WINDOWS\system32\dllcache\tpro4.sys 2008-02-28 14:44 . 2001-08-17 22:48 11,520 --a------ C:\WINDOWS\system32\dllcache\twotrack.sys 2008-02-28 14:42 . 2001-10-05 17:30 172,768 --a------ C:\WINDOWS\system32\dllcache\t2r4disp.dll 2008-02-28 14:41 . 2001-10-05 16:45 285,760 --a------ C:\WINDOWS\system32\dllcache\stlnata.sys 2008-02-28 14:41 . 2001-10-05 17:31 155,648 --a------ C:\WINDOWS\system32\dllcache\stlnprop.dll 2008-02-28 14:41 . 2001-10-05 17:31 99,328 --a------ C:\WINDOWS\system32\dllcache\srusd.dll 2008-02-28 14:41 . 2001-10-05 17:31 53,760 --a------ C:\WINDOWS\system32\dllcache\sw_wheel.dll 2008-02-28 14:41 . 2001-10-05 17:31 53,248 --a------ C:\WINDOWS\system32\dllcache\stlncoin.dll 2008-02-28 14:41 . 2001-08-17 21:11 48,736 --a------ C:\WINDOWS\system32\dllcache\srwlnd5.sys 2008-02-28 14:41 . 2001-10-05 17:31 41,472 --a------ C:\WINDOWS\system32\dllcache\sw_effct.dll 2008-02-28 14:41 . 2001-10-05 17:31 24,660 --a------ C:\WINDOWS\system32\dllcache\spxupchk.dll 2008-02-28 14:41 . 2001-10-05 16:45 16,896 --a------ C:\WINDOWS\system32\dllcache\stcusb.sys 2008-02-28 14:41 . 2001-10-05 17:31 10,240 --a------ C:\WINDOWS\system32\dllcache\swpidflt.dll 2008-02-28 14:41 . 2001-10-05 17:31 10,240 --a------ C:\WINDOWS\system32\dllcache\swpdflt2.dll 2008-02-28 14:39 . 2004-08-03 23:41 404,990 --a------ C:\WINDOWS\system32\dllcache\slntamr.sys 2008-02-28 14:38 . 2001-10-05 17:30 386,560 --a------ C:\WINDOWS\system32\dllcache\sgiul50.dll 2008-02-28 14:37 . 2001-10-05 17:29 495,616 --a------ C:\WINDOWS\system32\dllcache\sblfx.dll 2008-02-28 14:36 . 2004-09-14 17:11 397,056 --a------ C:\WINDOWS\system32\dllcache\s3gnb.dll 2008-02-28 14:35 . 2001-10-05 17:03 899,210 --a------ C:\WINDOWS\system32\dllcache\r2mdkxga.sys 2008-02-28 14:34 . 2004-09-14 17:11 363,520 --a------ C:\WINDOWS\system32\dllcache\psisdecd.dll 2008-02-28 14:33 . 2004-09-14 17:11 259,328 --a------ C:\WINDOWS\system32\dllcache\perm3dd.dll 2008-02-28 14:32 . 2001-08-17 23:05 351,616 --a------ C:\WINDOWS\system32\dllcache\ovcodek2.sys 2008-02-28 14:31 . 2004-09-14 17:11 4,274,816 --a------ C:\WINDOWS\system32\dllcache\nv4_disp.dll 2008-02-28 14:30 . 2004-09-14 17:08 132,695 --a------ C:\WINDOWS\system32\dllcache\netwlan5.sys 2008-02-28 14:29 . 2004-09-14 17:11 1,737,856 --a------ C:\WINDOWS\system32\dllcache\mtxparhd.dll . (((((((((((((((((((((((((((((((((((( Find3M-raportti )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-03-31 04:03 --------- d-----w C:\Documents and Settings\HP_Omistaja\Application Data\Azureus 2008-03-29 12:21 --------- d-----w C:\Documents and Settings\HP_Omistaja\Application Data\Xfire 2008-03-29 08:05 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-03-29 01:06 99,904 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2008-03-28 11:15 --------- d-----w C:\Program Files\Windows Live Safety Center 2008-03-27 22:03 --------- d-----w C:\Program Files\Cheat Engine 2008-03-27 20:14 --------- d-----w C:\Program Files\Sonera 2008-03-27 18:37 --------- d-----w C:\Program Files\GetRight 2008-03-22 19:25 --------- d-----w C:\Documents and Settings\HP_Omistaja\Application Data\Vso 2008-03-21 14:44 --------- d-----w C:\Program Files\Microsoft Games 2008-03-21 14:24 --------- d-----w C:\Program Files\vista games 2008-03-19 06:17 --------- d-----w C:\Program Files\Common Files\Adobe 2008-03-18 18:42 6,752 -c--a-w C:\Documents and Settings\HP_Omistaja\Application Data\wklnhst.dat 2008-03-17 11:23 --------- d-----w C:\Program Files\Sonera Tietoturva 2008-03-17 11:13 51,072 ----a-w C:\WINDOWS\system32\drivers\fsdfw.sys 2008-03-17 11:13 30,016 ----a-w C:\WINDOWS\system32\drivers\fsndis5.sys 2008-03-07 15:25 --------- d-----w C:\Program Files\Azureus 2008-02-26 05:51 2,863,616 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys 2008-02-26 05:51 2,863,616 ----a-w C:\WINDOWS\system32\dllcache\ati2mtag.sys 2008-02-26 03:12 372,736 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll 2008-02-26 03:10 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll 2008-02-26 03:10 299,520 ----a-w C:\WINDOWS\system32\ati2dvag.dll 2008-02-26 03:02 172,032 ----a-w C:\WINDOWS\system32\atipdlxx.dll 2008-02-26 03:02 126,976 ----a-w C:\WINDOWS\system32\Oemdspif.dll 2008-02-26 03:01 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll 2008-02-26 03:01 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe 2008-02-26 03:01 126,976 ----a-w C:\WINDOWS\system32\ati2evxx.dll 2008-02-26 03:00 520,192 ----a-w C:\WINDOWS\system32\ati2evxx.exe 2008-02-26 02:59 9,797,632 ----a-w C:\WINDOWS\system32\atioglx2.dll 2008-02-26 02:58 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL 2008-02-26 02:49 3,176,480 ----a-w C:\WINDOWS\system32\ati3duag.dll 2008-02-26 02:41 1,755,264 ----a-w C:\WINDOWS\system32\ativvaxx.dll 2008-02-26 02:29 46,080 ----a-w C:\WINDOWS\system32\amdpcom32.dll 2008-02-26 02:25 393,216 ----a-w C:\WINDOWS\system32\atikvmag.dll 2008-02-26 02:23 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll 2008-02-26 02:22 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll 2008-02-26 02:21 5,439,488 ----a-w C:\WINDOWS\system32\atioglxx.dll 2008-02-26 02:19 167,936 ----a-w C:\WINDOWS\system32\atiok3x2.dll 2008-02-26 02:16 520,192 ----a-w C:\WINDOWS\system32\ati2cqag.dll 2008-02-25 19:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe 2008-02-15 18:20 --------- d-----w C:\Documents and Settings\HP_Omistaja\Application Data\Audacity 2008-02-15 13:11 --------- d-----w C:\Program Files\Nokia 2008-02-15 13:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Installations 2008-02-10 02:10 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-02-10 02:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-02-10 01:25 --------- d-----w C:\Program Files\iolo 2008-02-10 01:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\iolo 2008-01-31 15:18 9,216 ----a-w C:\WINDOWS\system32\drivers\FlashSys.sys 2008-01-30 16:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Logishrd 2008-01-30 16:31 --------- d-----w C:\Program Files\Common Files\LogiShrd 2008-01-30 16:27 --------- d-----w C:\Program Files\Logitech 2008-01-30 16:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\Logitech 2008-01-30 16:26 --------- d-----w C:\Program Files\Labtec 2008-01-30 16:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Tages 2008-01-29 15:49 278,728 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys 2008-01-29 15:49 25,416 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys 2008-01-29 15:32 --------- d-----w C:\Program Files\Ubisoft 2008-01-19 13:24 86,016 ----a-w C:\WINDOWS\system32\OpenAL32.dll 2008-01-19 13:24 262,144 ----a-w C:\WINDOWS\system32\wrap_oal.dll 2008-01-11 05:37 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll 2007-12-26 15:30 679,936 ----a-w C:\WINDOWS\system32\D3DX81ab.dll 2007-12-26 15:30 1,970,176 ----a-w C:\WINDOWS\system32\d3dx9.dll 2007-12-21 03:08 272,384 ----a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll 2007-12-21 02:47 3,120,640 ----a-w C:\WINDOWS\system32\dllcache\ati3duag.dll 2007-12-21 02:36 1,661,696 ----a-w C:\WINDOWS\system32\dllcache\ativvaxx.dll 2007-12-21 02:11 499,712 ----a-w C:\WINDOWS\system32\dllcache\ati2cqag.dll 2007-12-19 22:57 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll 2007-12-18 09:51 179,584 ----a-w C:\WINDOWS\system32\dllcache\mrxdav.sys 2007-12-08 05:14 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-12-07 02:13 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll 2007-12-07 02:13 384,512 ----a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll 2007-12-07 02:13 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-12-07 02:13 230,400 ----a-w C:\WINDOWS\system32\dllcache\ieaksie.dll 2007-12-07 02:13 214,528 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-12-07 02:13 153,088 ----a-w C:\WINDOWS\system32\dllcache\ieakeng.dll 2007-12-07 02:13 133,120 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-12-07 02:13 124,928 ----a-w C:\WINDOWS\system32\dllcache\advpack.dll 2007-12-06 11:02 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2007-12-06 11:02 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe 2007-12-06 11:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-12-06 04:59 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll 2007-12-04 18:41 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll 2007-12-04 18:41 550,912 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll 2007-10-01 11:07 47,360 -c--a-w C:\Documents and Settings\HP_Omistaja\Application Data\pcouffin.sys . (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet ))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-05-16 10:27 153136] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-09-15 15:00 15360] "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-24 10:54 67128] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-02-25 16:25 171448] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-04-04 01:29 165784] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2007-08-12 12:02 103712] "SMSystemAnalyzer"="C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe" [2006-12-07 17:46 562792] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-15 11:40 204288] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 19:04 52736] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-04-06 05:05 339968] "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 20:06 88363 C:\WINDOWS\AGRSMMSG.exe] "KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 01:44 61440] "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 23:43 233472] "AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 23:47 57344 C:\WINDOWS\ALCXMNTR.EXE] "PS2"="C:\WINDOWS\system32\ps2.exe" [2004-10-26 00:17 90112] "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54 253952] "ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 00:50 221184] "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-28 00:50 81920] "ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2005-10-19 18:19 49152] "Sonera"="C:\Program Files\Sonera\InternetAvustaja\bin\sprtcmd.exe" [2007-08-19 12:47 197880] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-05-15 01:22 35328] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-03-14 19:05 257088] "F-Secure Manager"="C:\Program Files\Sonera Tietoturva\Common\FSM32.exe" [2007-04-26 20:12 183208] "F-Secure TNB"="C:\Program Files\Sonera Tietoturva\FSGUI\TNBUtil.exe" [2007-04-26 20:10 740208] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2007-08-12 12:02 103712] "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 16:57 153136] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112] "LogitechCommunicationsManager"="C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 17:33 563984] "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 17:37 2178832] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 16:10 271360] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 12:25 6731312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [ ] "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 11:17 1241088] C:\Documents and Settings\HP_Omistaja\K„ynnist„-valikko\Ohjelmat\K„ynnistys\ Memeo Launcher.lnk - C:\Program Files\Tanagra\Memeo\MemeoLauncher.exe [2006-05-12 09:47:44 196608] Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe [2008-03-21 22:48:31 2746104] C:\Documents and Settings\All Users\K„ynnist„-valikko\Ohjelmat\K„ynnistys\ Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-06-20 17:53:08 113664] HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-05 03:28:24 258048] Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-24 10:54:37 67128] Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2006-12-08 16:05:16 450560] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 21:05:56 65588] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-06-19 15:10:33 118784] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "XPRepairPro2007"=F:\XP Repair Pro 2007\XPRepairPro.exe /r "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\LimeWire\\LimeWire.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "F:\\3DO\\Heroes3.exe"= "F:\\GameSpy Arcade\\Aphex.exe"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "F:\\Age of Empires Gold Edition\\Empires.Exe"= "F:\\Age of Empires Gold Edition\\empiresx.exe"= "F:\\Age of Empires 2 Trial\\EMPIRES2.EXE"= "F:\\Age of Empires III\\age3x.exe"= "F:\\S.T.A.L.K.E.R\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"= "F:\\S.T.A.L.K.E.R\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "F:\\Ubisoft\\THE SETTLERS - Rise of an Empire\\base\\bin\\Settlers6.exe"= "C:\\Program Files\\Bonjour\\mDNSResponder.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= R0 FSFW;F-Secure Firewall Driver;C:\WINDOWS\system32\drivers\fsdfw.sys [2008-03-17 14:13] R1 F-Secure HIPS;F-Secure HIPS;C:\Program Files\Sonera Tietoturva\HIPS\fshs.sys [2008-02-13 14:24] R2 UxTuneUp;TuneUp Design Expansion;C:\WINDOWS\System32\svchost.exe [2004-09-15 15:00] R3 F-Secure Gatekeeper;F-Secure Gatekeeper;C:\Program Files\Sonera Tietoturva\Anti-Virus\minifilter\fsgk.sys [2007-04-26 20:07] S3 dump_wmimmc;dump_wmimmc;F:\Games-Masters.com\CABAL Online (Europe)\GameGuard\dump_wmimmc.sys [] S3 PID_0920;Labtec WebCam(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS [2005-01-19 12:11] S3 XDva002;XDva002;C:\WINDOWS\system32\XDva002.sys [] S3 XDva049;XDva049;C:\WINDOWS\system32\XDva049.sys [] S4 F-Secure Filter;F-Secure File System Filter;C:\Program Files\Sonera Tietoturva\Anti-Virus\Win2K\FSfilter.sys [2007-04-26 20:08] S4 F-Secure Recognizer;F-Secure File System Recognizer;C:\Program Files\Sonera Tietoturva\Anti-Virus\Win2K\FSrec.sys [2007-04-26 20:08] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - CATCHME . 'Ajoitetut tehtävät'-kansion sisältö "2008-03-28 15:22:20 C:\WINDOWS\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe "2008-01-03 05:51:37 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-03-31 14:00:02 C:\WINDOWS\Tasks\RegCure Program Check.job" - C:\Program Files\RegCure\RegCure.exe "2008-02-28 01:45:31 C:\WINDOWS\Tasks\RegCure.job" - C:\Program Files\RegCure\RegCure.exe "2008-03-31 04:09:13 C:\WINDOWS\Tasks\Scheduled scanning task.job" - C:\PROGRA~1\SONERA~1\ANTI-V~1\fsav.exeQ /HARD /POLICY /SCHED /NOBREAK /REPORT=C:\PROGRA~1\SONERA~1\ANTI-V~1\report.txt "2008-03-31 16:44:17 C:\WINDOWS\Tasks\Tarkistetaan Windows Live -työkalurivin päivitykset.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-03-31 20:14:51 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\Program Files\iolo\Common\Lib\ioloHL.dll PROCESS: C:\WINDOWS\system32\lsass.exe -> C:\Program Files\iolo\Common\Lib\ioloHL.dll PROCESS: C:\WINDOWS\system32\csrss.exe -> C:\Program Files\iolo\Common\Lib\ioloHL.dll . Completion time: 2008-03-31 20:16:03 ComboFix-quarantined-files.txt 2008-03-31 17:15:51 Pre-Run: 23,093,587,968 tavua vapaana Post-Run: 23,080,947,712 tavua vapaana . 2008-03-12 21:27:14 --- E O F ---
Voisiko joku nyt tarkistaa tuon??.. Alkaa mennä hermot tän koneen kanssa . Messenger ja F-Secure lakkasi toimimasta
Escan Ohjeet tuolla sivulla. http://koti.mbnet.fi/pattaya1/escanmwav.htm lataa tuosta http://www.spywareinfo.dk/download/mwav.exe päivitä tuosta http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat laita täpit merkkauksien mukaan http://koti.mbnet.fi/pattaya1/eScan6.jpg scannaa jos ala luukkuun tulee jotain niin kopioi se näin: Käytä komentoa Ctrl+A. Kopioi rivit komennolla Ctrl+C. Liitä rivit komennolla Ctrl+V. Laita virus log tänne. ========== Lataa Tästä Ccleaner CCleaner v2.05.555- Standard Build, ÄLÄ aseenna Yahoo toolbaria! laita asetukset näin: Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot. aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi ========== Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi. Käynnistä koneesi vikasietotilaan: sammuta ja käynnistä käynnistyksen yhteydessä hakkaa F8 nappia valitse nuolinäppäimellä vikasietotila paina enter ja enter valitse käyttäjätilisi paina kyllä Jossakin koneissa hakataan F8:sin sijasta F5:tä " Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix. " Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman. " Paina Y käynnistääksesi skriptin. " Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot". " Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen. " Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta. " Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished". " Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle. " Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis:n lokin kera.
