Hjt-loki.

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by simuna, May 22, 2007.

  1. simuna

    simuna Guest

    Koneelleni on iskenyt troijalainen nimeltä W32/Banload.gen9 ja huomasin sen Bsplayeriä käynnistäessäni sillä norman siirsi sen karanteeniin. Tässä olisi hjt loki.

    Logfile of HijackThis v1.99.1
    Scan saved at 21:23:33, on 22.5.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16441)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\NORMAN\Npm\bin\ELOGSVC.EXE
    C:\NORMAN\Npm\Bin\Zanda.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\NORMAN\Npf\BIN\NPFSVICE.EXE
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\NORMAN\Npm\bin\NJEEVES.EXE
    C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    C:\NORMAN\Nvc\bin\nvcoas.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\NORMAN\Npm\bin\ZLH.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
    C:\PROGRA~1\MI948F~1\GAMECO~1\Common\SWTrayV4.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\program files\valve\steam\steam.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\NORMAN\Nvc\BIN\NIP.EXE
    C:\NORMAN\Npf\BIN\npfmsg2.exe
    C:\NORMAN\Nvc\bin\cclaw.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (file missing)
    O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll (file missing)
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\Npm\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [SideWinderTrayV4] C:\PROGRA~1\MI948F~1\GAMECO~1\Common\SWTrayV4.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.6\THGuard.exe"
    O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Microsoft Office Pikahaku.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = ?
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logitech SetPoint.lnk = ?
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by122fd.bay122.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1138548415843
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: bw+0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw+0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw-0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw-0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw00 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw00s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw10 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw10s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw20 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw20s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw30 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw30s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw40 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw40s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw50 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw50s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw60 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw60s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw70 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw70s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw80 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw80s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw90 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw90s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwa0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwa0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwb0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwb0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwc0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwc0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwd0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwd0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwe0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwe0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwf0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwf0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwg0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwh0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwh0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwi0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwi0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwj0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwj0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwk0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwk0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwl0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwl0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwm0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwm0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwn0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwn0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwo0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwo0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwp0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwp0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwq0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwq0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwr0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwr0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bws0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bws0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwt0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwt0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwu0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwu0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwv0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwv0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bww0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bww0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwx0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwx0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwy0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwy0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwz0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwz0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O20 - AppInit_DLLs: MsgPlusLoader.dll,wbsys.dll
    O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\NORMAN\Npm\bin\ELOGSVC.EXE
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN\Npm\bin\NJEEVES.EXE
    O23 - Service: Norman Type-R - Unknown owner - C:\NORMAN\Npf\BIN\NPFSVICE.EXE
    O23 - Service: Norman ZANDA - Norman ASA - C:\NORMAN\Npm\Bin\Zanda.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
     
    simuna, May 22, 2007
    #1
  2. Hujo

    Hujo Guest

    Koneella norman ja avast poista toinen lisää poista sovelutuksesta
    poista vielä Logitech Desktop Messenger

    scannaa hjt:llä merkkaa paina Fix checked

    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
    O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

    ================

    Ohje AVG:n Anti-Spyware 7.5:n käyttöön
    Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis:n työkalun toimintaa.

    Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

    Lataa AVG:n Anti-Spyware 7.5:n
    ja tallenna ohjelma työpöydällesi.
    o Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
    o Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
    o Käynnistä AVG:n Anti-Spyware.
    o Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.

    o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.

    o Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
    o Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".

    o Sitten "Reports" valikon alta:
    o Laita täppi kohtaan "Automatically generate report after every scan"
    o Ota täppi pois kohdasta"Only if threats were found"

    o Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
    o "Resident shield is", muuta tila active:sta inactive:ksi
    o Sulje ohjelma, ÄLÄ skannaa vielä.

    Käynnistä koneesi vikasietotilaan,
    sammuta ja käynnistä
    käynnistyksen yhteydessä naputtele F8
    valitse nuoli näppäimellä vikasietotila
    paina enter ja enter

    HUOM! Älä käytä muita ohjelmia AVG:n skannauksen aikana, tämä saattaa häiritä skannausta.
    o Kun vikasietotilassa, käynnistä AVG:n Anti-Spyware.
    o Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
    o Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

    Kun skannaus on valmis:
    TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
    o Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
    o Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
    [​IMG]
    o Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
    o Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
    o Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.
     
    Last edited by a moderator: May 22, 2007
    Hujo, May 22, 2007
    #2
  3. simuna

    simuna Guest

    Elikkä tässä olisi AVG:n raportti.

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 11:49:12 23.5.2007

    + Scan result:



    :mozilla.139:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.140:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.141:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.332:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.34:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\xkdynsjl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.71:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.73:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.74:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.131:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.132:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.133:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Jori.JYTYKONE\Cookies\jori@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@ad.adocean[1].txt -> TrackingCookie.Adocean : Cleaned.
    :mozilla.206:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Local Settings\Temp\Cookies\jenna@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.49:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Com : Cleaned.
    :mozilla.156:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Connextra : Cleaned.
    :mozilla.160:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Connextra : Cleaned.
    :mozilla.55:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.344:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.83:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Gemius : Cleaned.
    :mozilla.89:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Gemius : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@hit.gemius[2].txt -> TrackingCookie.Gemius : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@hit.gemius[2].txt -> TrackingCookie.Gemius : Cleaned.
    :mozilla.179:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.27:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.28:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.93:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.94:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.15:C:\Documents and Settings\Äiti.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\j225cazk.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
    C:\Documents and Settings\Jori.JYTYKONE\Cookies\jori@search.live[2].txt -> TrackingCookie.Live : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@search.live[1].txt -> TrackingCookie.Live : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@search.msn[1].txt -> TrackingCookie.Msn : Cleaned.
    :mozilla.7:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Netflame : Cleaned.
    :mozilla.199:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.201:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.202:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.224:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.154:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Paypal : Cleaned.
    :mozilla.251:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@paypopup[2].txt -> TrackingCookie.Paypopup : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@ads.realcastmedia[2].txt -> TrackingCookie.Realcastmedia : Cleaned.
    :mozilla.204:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.205:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.207:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.51:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.52:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.53:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.54:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.270:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.271:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    C:\Documents and Settings\Jori.JYTYKONE\Cookies\jori@news.skype[1].txt -> TrackingCookie.Skype : Cleaned.
    :mozilla.77:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.78:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.79:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.80:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.13:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.16:C:\Documents and Settings\Äiti.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\j225cazk.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.52:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\xkdynsjl.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.60:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.61:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Local Settings\Temp\Cookies\jenna@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\Jori.JYTYKONE\Cookies\jori@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.262:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.264:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.58:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Toplist : Cleaned.
    :mozilla.100:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.101:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.102:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.103:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.104:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.104:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.105:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.105:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.21:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\xkdynsjl.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
    :mozilla.280:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned.
    C:\Documents and Settings\Jori.JYTYKONE\Cookies\jori@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.
    C:\Documents and Settings\Äiti.JYTYKONE\Cookies\äiti@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.
    :mozilla.157:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.158:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.159:C:\Documents and Settings\Jenna.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\r25jm6kc.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.65:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\xkdynsjl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.66:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\xkdynsjl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.91:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.92:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.93:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.94:C:\Documents and Settings\Jori.JYTYKONE\Application Data\Mozilla\Firefox\Profiles\70j93fst.Oletuskäyttäjä\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    C:\Documents and Settings\Jenna.JYTYKONE\Cookies\jenna@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.


    ::Report end

     
    simuna, May 23, 2007
    #3
  4. Auttaja

    Auttaja Guest

    Laita uusi hijackthislogi!
     
    Auttaja, May 23, 2007
    #4
  5. simuna

    simuna Guest

    Tässä uusi hjt-loki.

    Logfile of HijackThis v1.99.1
    Scan saved at 13:23:10, on 23.5.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16441)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\NORMAN\Npm\bin\ELOGSVC.EXE
    C:\NORMAN\Npm\Bin\Zanda.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\NORMAN\Npm\bin\ZLH.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\NORMAN\Nvc\BIN\NIP.EXE
    C:\PROGRA~1\MI948F~1\GAMECO~1\Common\SWTrayV4.exe
    C:\Program Files\Winamp\winampa.exe
    C:\NORMAN\Npf\BIN\npfmsg2.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\program files\valve\steam\steam.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\NORMAN\Npf\BIN\NPFSVICE.EXE
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\NORMAN\Npm\bin\NJEEVES.EXE
    C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    C:\NORMAN\Nvc\bin\nvcoas.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\alg.exe
    C:\NORMAN\Nvc\bin\cclaw.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (file missing)
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fi\msntb.dll (file missing)
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\Npm\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [SideWinderTrayV4] C:\PROGRA~1\MI948F~1\GAMECO~1\Common\SWTrayV4.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.6\THGuard.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Microsoft Office Pikahaku.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = ?
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logitech SetPoint.lnk = ?
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by122fd.bay122.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1138548415843
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: bw+0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw+0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw-0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw-0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw00 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw00s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw10 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw10s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw20 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw20s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw30 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw30s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw40 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw40s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw50 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw50s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw60 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw60s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw70 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw70s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw80 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw80s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw90 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw90s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwa0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwa0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwb0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwb0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwc0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwc0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwd0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwd0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwe0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwe0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwf0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwf0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwg0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwh0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwh0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwi0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwi0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwj0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwj0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwk0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwk0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwl0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwl0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwm0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwm0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwn0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwn0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwo0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwo0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwp0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwp0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwq0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwq0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwr0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwr0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bws0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bws0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwt0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwt0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwu0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwu0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwv0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwv0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bww0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bww0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwx0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwx0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwy0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwy0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwz0 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwz0s - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {1053EE66-9EC1-4CF3-9B72-81DE1DDB47B7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O20 - AppInit_DLLs: MsgPlusLoader.dll,wbsys.dll
    O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\NORMAN\Npm\bin\ELOGSVC.EXE
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN\Npm\bin\NJEEVES.EXE
    O23 - Service: Norman Type-R - Unknown owner - C:\NORMAN\Npf\BIN\NPFSVICE.EXE
    O23 - Service: Norman ZANDA - Norman ASA - C:\NORMAN\Npm\Bin\Zanda.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
     
    simuna, May 23, 2007
    #5
  6. Auttaja

    Auttaja Guest

    Pysy puhtaana

    -> Tyhjennä järjestelmänpalautus Ohjeet
    Tyhjennä järjestelmänpalautuskansio ja luo uusi palautuspiste. Tämä puhdistaa palautuskansion mahdollisista haittaohjelmajäännöksistä.

    -> Käytä CCleaneria -> CCleaner
    Lataa ja asenna CCleaner. Puhdista väliaikaistiedostot ja -kansiot ohjelmalla säännöllisesti.

    -> Asenna SpywareBlaster -> SpywareBlaster
    SpywareBlaster estää haittaohjelmia asentumasta koneellesi. Ei kuluta muistia!
    Opas saatavilla suomeksi! Nimimerkki Ad-Awaren opas

    -> Asenna MVPS Hosts tiedosto -> MVPS Hosts
    Estää koneesi yhteyden haitallisiin sivustoihin.
    Opas saatavilla suomeksi! Nimimerkki Axelin opas

    -> Vaihda selaimesi Firefoxiin -> Firefox
    Firefox on nopeampi, turvallisempi ja parempi selain kuin Internet Explorer.

    -> Pidä järjestelmäsi ajantasalla. -> Windows Update
    Vieraile Windows Updatessa säännöllisesti.

    -> Pidä palomuuri ja virustorjunta ajantasalla
    Päivitä ja skannaa koneesi säännöllisesti virustorjuntaohjelmallasi.
    ja hyvä myös escan http://koti.mbnet.fi/pattaya1/escanmwav.htm

    ->Pidä ohjelmistosi ajantasalla. -> Secunia Software Inspector
    Secunia Software Inspector tutkii sinun järjestälmäsi ja ohjelmistosi puuttuvien turvallisuuspäivityksien osalta. Tavallinen tutkinta kestää normaalisti 5-40 sekuntia, kun läpikotainen (thorough system inspection) voi kestää useita minuutteja.

    ->Seuraa säännöllisesti viestintäviraston tietoja uusista haavoittuvuuksista -> CERT-FI
     
    Auttaja, May 23, 2007
    #6

Share This Page