Jumitus ja hidastelu

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Hilll, Feb 24, 2008.

  1. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Moro.

    En tiiä mikä on tullu koneeseen, kun pätkii ja jumittelee aika kivaan malliin välillä ja plus kaikkee muuta pikku häsläystä.
    Suoritinkäyttökkin pomppii aika isoilla luvuilla välillä vaikka mitää isompaa ei tee/ohjelmia auki.

    Netti taas jumittaa sitäkin enemmän. Operaan tulee vähän väliä ei vastaa sanoma, ja sivuille siirtyminen kestää.

    Osaatteko auttaa? Tässä logi:

    ----

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:09:45, on 24.2.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\RtHDVCpl.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\System32\mobsync.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Opera\Opera.exe
    C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe" -delete
    O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing)
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\System32\ZoneLabs\vsmon.exe

    --
    End of file - 7618 bytes
     
  2. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Löytyiskö ketään joka vois tsekata ton login
    , että mitä häikkää löytyy. Itse kun en osaa...
    Kone on alkanut nyt myös välillä uudelleen käynnistymään itsestään, kun ensin heittää bluescreenin. Lisäkin musiikin kuuntelu pätkii jotenkin oudosti?

    Olisin kiitollinen jos joku vaivautuisi kattoon ton login :) Pitäis saada työt tehtyä, mutta koneen käyttäytyimen vähän hankaloittaa sitä tällä hetkellä.

    Kiitos!
     
  3. Hujo

    Hujo Guest

    1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
    combofix1
    combofix2

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    Älä sitten tee hommia tännä aikana anna touhuta yksistään tämä ohjelma
     
  4. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Noniin eli tässä:

    ComboFix 08-02-24.4 - Joomas 2008-02-25 18:01:12.1 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.2124 [GMT 2:00]
    Running from: C:\Users\Joomas.HURJA\Desktop\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
    C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat

    ----- BITS: Possible infected sites -----

    hxxp://vzccestwwspro.cce.hp.com
    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-01-25 to 2008-02-25 )))))))))))))))))
    .

    2008-02-25 17:59 . 2008-02-25 17:59 6,736 --a------ C:\WINDOWS\System32\drivers\PROCEXP90.SYS
    2008-02-24 23:28 . 2008-02-24 23:40 214,736,740 --a------ C:\WINDOWS\MEMORY.DMP
    2008-02-24 02:01 . 2008-02-24 02:01 <KANSIO> d-------- C:\Program Files\Common Files\Java
    2008-02-23 14:38 . 2008-02-23 14:38 <KANSIO> d-------- C:\Users\All Users\SUPERAntiSpyware.com
    2008-02-23 14:38 . 2008-02-23 14:38 <KANSIO> d-------- C:\ProgramData\SUPERAntiSpyware.com
    2008-02-23 14:37 . 2008-02-23 14:37 <KANSIO> d-------- C:\Users\Joomas.HURJA\AppData\Roaming\SUPERAntiSpyware.com
    2008-02-23 14:37 . 2008-02-25 17:01 <KANSIO> d-------- C:\Program Files\SUPERAntiSpyware
    2008-02-23 14:28 . 2008-02-23 14:28 <KANSIO> d-------- C:\Program Files\Trend Micro
    2008-02-23 10:28 . 2008-02-23 10:30 <KANSIO> d-------- C:\Program Files\Subdownloader
    2008-02-23 09:27 . 2008-02-23 09:27 <KANSIO> d-------- C:\Users\All Users\FLEXnet
    2008-02-23 09:27 . 2008-02-23 09:27 <KANSIO> d-------- C:\ProgramData\FLEXnet
    2008-02-23 09:14 . 2008-02-23 09:14 <KANSIO> d-------- C:\Program Files\Common Files\Macrovision Shared
    2008-02-23 02:31 . 2007-12-04 15:04 837,496 --a------ C:\WINDOWS\System32\aswBoot.exe
    2008-02-23 02:31 . 2004-01-09 11:13 380,928 --a------ C:\WINDOWS\System32\actskin4.ocx
    2008-02-23 02:31 . 2007-12-04 14:54 95,608 --a------ C:\WINDOWS\System32\AvastSS.scr
    2008-02-23 02:31 . 2007-12-04 16:52 45,648 --a------ C:\WINDOWS\System32\drivers\aswMonFlt.sys
    2008-02-23 02:31 . 2007-12-04 16:51 42,912 --a------ C:\WINDOWS\System32\drivers\aswTdi.sys
    2008-02-23 02:31 . 2007-12-04 16:53 23,152 --a------ C:\WINDOWS\System32\drivers\aswRdr.sys
    2008-02-23 02:30 . 2008-02-23 02:30 <KANSIO> d-------- C:\Program Files\Alwil Software
    2008-02-23 02:16 . 2008-02-23 02:16 <KANSIO> d-------- C:\Users\All Users\Avg7
    2008-02-23 02:16 . 2008-02-23 02:16 <KANSIO> d-------- C:\ProgramData\Avg7
    2008-02-23 01:55 . 2008-02-23 01:55 47,104 --a------ C:\WINDOWS\System32\drivers\avgwfp.sys
    2008-02-23 01:47 . 2008-02-23 01:47 <KANSIO> d-------- C:\Program Files\iTunes
    2008-02-23 01:45 . 2008-02-23 01:45 <KANSIO> d-------- C:\Program Files\Bonjour
    2008-02-23 01:43 . 2008-02-23 01:47 <KANSIO> d-------- C:\Users\All Users\Apple Computer
    2008-02-23 01:43 . 2008-02-23 01:47 <KANSIO> d-------- C:\ProgramData\Apple Computer
    2008-02-23 01:42 . 2008-02-23 01:42 <KANSIO> d-------- C:\Program Files\Apple Software Update
    2008-02-23 01:41 . 2008-02-23 01:41 <KANSIO> d-------- C:\Users\All Users\Apple
    2008-02-23 01:41 . 2008-02-23 01:41 <KANSIO> d-------- C:\ProgramData\Apple
    2008-02-23 01:41 . 2008-02-23 01:41 <KANSIO> d-------- C:\Program Files\Common Files\Apple
    2008-02-23 01:33 . 2008-02-23 01:33 <KANSIO> d-------- C:\Users\Joomas.HURJA\AppData\Roaming\vlc
    2008-02-23 00:27 . 2008-02-23 00:27 <KANSIO> d-------- C:\Program Files\MagicISO
    2008-02-23 00:16 . 2008-02-23 00:16 <KANSIO> d-------- C:\Program Files\Yahoo!
    2008-02-23 00:16 . 2008-02-23 00:17 <KANSIO> d-------- C:\Program Files\FLV Player
    2008-02-23 00:14 . 2008-02-23 00:14 716,272 --a------ C:\WINDOWS\System32\drivers\sptd.sys
    2008-02-23 00:08 . 2008-02-23 00:08 <KANSIO> d-------- C:\Users\All Users\Lavasoft
    2008-02-23 00:08 . 2008-02-23 00:08 <KANSIO> d-------- C:\ProgramData\Lavasoft
    2008-02-23 00:08 . 2008-02-23 00:08 <KANSIO> d-------- C:\Program Files\Lavasoft
    2008-02-23 00:08 . 2008-02-23 14:36 <KANSIO> d-------- C:\Program Files\Common Files\Wise Installation Wizard
    2008-02-23 00:02 . 2008-02-23 11:56 <KANSIO> d-------- C:\Program Files\CCleaner
    2008-02-22 23:54 . 2008-02-22 23:54 <KANSIO> d-------- C:\Downloads
    2008-02-22 23:37 . 2008-02-22 23:37 <KANSIO> d-------- C:\Program Files\Zone Labs
    2008-02-22 23:37 . 2008-01-09 03:31 1,086,952 --a------ C:\WINDOWS\System32\zpeng24.dll
    2008-02-22 23:36 . 2008-02-22 23:37 <KANSIO> d-------- C:\WINDOWS\System32\ZoneLabs
    2008-02-22 23:36 . 2008-02-22 23:36 <KANSIO> d-------- C:\Users\All Users\CheckPoint
    2008-02-22 23:36 . 2008-02-22 23:36 <KANSIO> d-------- C:\ProgramData\CheckPoint
    2008-02-22 23:36 . 2008-02-25 00:13 352,615 --ah----- C:\WINDOWS\System32\drivers\vsconfig.xml
    2008-02-22 23:36 . 2008-02-23 08:09 352,615 --ah----- C:\WINDOWS\System32\drivers\vsconfig(58).xml
    2008-02-22 23:36 . 2008-01-09 03:32 276,368 --------- C:\WINDOWS\System32\drivers\vsdatant.sys
    2008-02-22 23:36 . 2008-01-09 03:32 276,368 --a------ C:\WINDOWS\System32\drivers\~GLH0014.TMP
    2008-02-22 23:35 . 2008-02-25 18:02 <KANSIO> d-------- C:\WINDOWS\Internet Logs
    2008-02-22 23:12 . 2008-02-22 23:12 <KANSIO> dr------- C:\Users\Joomas.HURJA\Searches
    2008-02-22 23:11 . 2008-02-22 23:12 <KANSIO> dr------- C:\Users\Joomas.HURJA\Videos
    2008-02-22 23:11 . 2008-02-22 23:12 <KANSIO> dr------- C:\Users\Joomas.HURJA\Saved Games
    2008-02-22 23:11 . 2008-02-22 23:12 <KANSIO> dr------- C:\Users\Joomas.HURJA\Pictures
    2008-02-22 23:11 . 2008-02-25 13:11 <KANSIO> dr------- C:\Users\Joomas.HURJA\Music
    2008-02-22 23:11 . 2008-02-22 23:19 <KANSIO> dr------- C:\Users\Joomas.HURJA\Links
    2008-02-22 23:11 . 2008-02-22 23:12 <KANSIO> dr------- C:\Users\Joomas.HURJA\Downloads
    2008-02-22 23:11 . 2008-02-24 15:59 <KANSIO> dr------- C:\Users\Joomas.HURJA\Documents
    2008-02-22 23:11 . 2008-02-22 23:11 <KANSIO> dr------- C:\Users\Joomas.HURJA\Contacts
    2008-02-22 23:11 . 2006-11-02 14:37 <KANSIO> d-------- C:\Users\Joomas.HURJA\AppData\Roaming\Media Center Programs
    2008-02-22 23:11 . 2008-02-04 20:02 <KANSIO> d-------- C:\Users\Joomas.HURJA\AppData\Roaming\Apple Computer
    2008-02-22 23:11 . 2008-02-22 23:12 <KANSIO> d--h----- C:\Users\Joomas.HURJA\AppData
    2008-02-22 17:11 . 2008-02-22 17:11 <KANSIO> dr------- C:\WINDOWS\System32\config\systemprofile\Music
    2008-02-22 17:06 . 2008-02-22 17:06 194,560 --a------ C:\WINDOWS\System32\WebClnt.dll
    2008-02-22 17:06 . 2008-02-22 17:06 110,080 --a------ C:\WINDOWS\System32\drivers\mrxdav.sys
    2008-02-22 17:04 . 2008-02-22 17:04 3,505,720 --a------ C:\WINDOWS\System32\ntkrnlpa.exe
    2008-02-22 17:04 . 2008-02-22 17:04 3,471,928 --a------ C:\WINDOWS\System32\ntoskrnl.exe
    2008-02-22 17:04 . 2008-02-22 17:04 1,060,920 --a------ C:\WINDOWS\System32\drivers\ntfs.sys
    2008-02-22 17:04 . 2008-02-22 17:04 211,000 --a------ C:\WINDOWS\System32\drivers\volsnap.sys
    2008-02-22 17:04 . 2008-02-22 17:04 154,624 --a------ C:\WINDOWS\System32\drivers\nwifi.sys
    2008-02-22 17:04 . 2008-02-22 17:04 109,624 --a------ C:\WINDOWS\System32\drivers\ataport.sys
    2008-02-22 17:04 . 2008-02-22 17:04 45,112 --a------ C:\WINDOWS\System32\drivers\pciidex.sys
    2008-02-22 17:04 . 2008-02-22 17:04 21,560 --a------ C:\WINDOWS\System32\drivers\atapi.sys
    2008-02-22 17:04 . 2008-02-22 17:04 15,928 --a------ C:\WINDOWS\System32\drivers\pciide.sys
    2008-02-22 17:02 . 2008-02-22 17:02 130,048 --a------ C:\WINDOWS\System32\drivers\srv2.sys
    2008-02-22 17:02 . 2008-02-22 17:02 101,888 --a------ C:\WINDOWS\System32\drivers\mrxsmb.sys
    2008-02-22 17:02 . 2008-02-22 17:02 84,992 --a------ C:\WINDOWS\System32\drivers\srvnet.sys
    2008-02-22 17:02 . 2008-02-22 17:02 58,368 --a------ C:\WINDOWS\System32\drivers\mrxsmb20.sys
    2008-02-22 17:02 . 2008-02-22 17:02 11,776 --a------ C:\WINDOWS\System32\sbunattend.exe
    2008-02-22 17:01 . 2008-02-22 17:01 2,048 --a------ C:\WINDOWS\System32\tzres.dll
    2008-02-22 16:56 . 2008-02-22 16:56 1,244,672 --a------ C:\WINDOWS\System32\mcmde.dll
    2008-02-22 16:43 . 2008-02-22 16:43 1,712,984 --a------ C:\WINDOWS\System32\wuaueng.dll
    2008-02-22 16:43 . 2008-02-22 16:43 1,524,224 --a------ C:\WINDOWS\System32\wucltux.dll
    2008-02-22 16:43 . 2008-02-22 16:43 549,720 --a------ C:\WINDOWS\System32\wuapi.dll
    2008-02-22 16:43 . 2008-02-22 16:43 80,896 --a------ C:\WINDOWS\System32\wudriver.dll
    2008-02-22 16:43 . 2008-02-22 16:43 53,080 --a------ C:\WINDOWS\System32\wuauclt.exe
    2008-02-22 16:43 . 2008-02-22 16:43 43,352 --a------ C:\WINDOWS\System32\wups2.dll
    2008-02-22 16:43 . 2008-02-22 16:43 33,624 --a------ C:\WINDOWS\System32\wups.dll
    2008-02-22 16:41 . 2008-02-22 16:41 163,000 --a------ C:\WINDOWS\System32\wuwebv.dll
    2008-02-22 16:41 . 2008-02-22 16:41 31,232 --a------ C:\WINDOWS\System32\wuapp.exe
    2008-02-22 16:41 . 2008-02-22 16:41 1,838 --a------ C:\WINDOWS\System32\responseBody.xml
    2008-02-22 16:41 . 2008-02-22 16:41 984 --a------ C:\WINDOWS\System32\requestBody.xml
    2008-02-22 16:41 . 2008-02-22 16:41 449 --a------ C:\WINDOWS\System32\request.gzip
    2008-02-22 16:37 . 2002-04-04 11:14 26,493 --a------ C:\WINDOWS\System32\drivers\ADM851x.SYS
    2008-02-22 16:17 . 2008-02-23 02:16 <KANSIO> d-------- C:\Users\All Users\Grisoft
    2008-02-22 16:17 . 2008-02-23 02:16 <KANSIO> d-------- C:\ProgramData\Grisoft
    2008-02-22 16:05 . 2008-02-22 16:05 44 --a------ C:\WINDOWS\system\hpsysdrv.dat
    2008-02-22 16:02 . 2008-02-22 16:02 1,980 -rahs---- C:\WINDOWS\System32\drivers\103C_HP_CPC_KA909AA-UUW m9151.sc_YC_0Pavi_QCZH750_E81FIv3PrA2_49_INARRA2_SASUSTek Computer INC._V2.00_B5.13_T071029_WUH0_L40B_M3071_J500_7AMD_8Athlon 64 X2 Dual Core_92.6_#080130_N10DE03EF_Z_G10DE0402.MRK
    2008-02-22 16:01 . 2008-02-23 08:02 <KANSIO> d--h----- C:\Users\Joonas\AppData

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-02-24 00:02 --------- d-----w C:\Program Files\Java
    2008-02-23 10:22 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-02-23 04:05 1,446,912 ----a-w C:\Windows\Internet Logs\xDBF768.tmp
    2008-02-23 00:10 21,504 ----a-w C:\Windows\Internet Logs\xDBCE07.tmp
    2008-02-23 00:10 1,332,736 ----a-w C:\Windows\Internet Logs\xDBCFDC.tmp
    2008-02-23 00:05 22,016 ----a-w C:\Windows\Internet Logs\xDBF324.tmp
    2008-02-23 00:05 1,332,736 ----a-w C:\Windows\Internet Logs\xDBF3E0.tmp
    2008-02-23 00:03 17,920 ----a-w C:\Windows\Internet Logs\xDBE445.tmp
    2008-02-23 00:03 1,332,736 ----a-w C:\Windows\Internet Logs\xDBEA20.tmp
    2008-02-23 00:00 1,478,656 ----a-w C:\Windows\Internet Logs\xDBF70A.tmp
    2008-02-22 23:33 --------- d-----w C:\Users\Joomas.HURJA\AppData\Roaming\vlc
    2008-02-22 19:42 --------- d-----w C:\Program Files\WinTV
    2008-02-22 19:41 --------- d-----w C:\Program Files\PC-Doctor 5 for Windows
    2008-02-22 19:41 --------- d-----w C:\Program Files\Microsoft Works
    2008-02-22 19:40 --------- d-----w C:\Program Files\HP
    2008-02-22 16:00 --------- d-----w C:\Program Files\Common Files\Symantec Shared
    2008-02-22 15:58 --------- d-----w C:\Program Files\Windows Sidebar
    2008-02-22 15:58 --------- d-----w C:\Program Files\Windows Mail
    2008-02-22 15:07 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
    2008-02-22 15:07 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
    2008-02-22 15:07 542,720 ----a-w C:\Windows\System32\sysmain.dll
    2008-02-22 15:07 502,784 ----a-w C:\Windows\System32\wlansvc.dll
    2008-02-22 15:07 47,104 ----a-w C:\Windows\System32\wlanapi.dll
    2008-02-22 15:07 297,984 ----a-w C:\Windows\System32\wlansec.dll
    2008-02-22 15:07 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
    2008-02-22 15:07 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
    2008-02-22 15:07 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
    2008-02-22 15:07 2,923,520 ----a-w C:\Windows\explorer.exe
    2008-02-22 15:07 2,027,008 ----a-w C:\Windows\System32\win32k.sys
    2008-02-22 15:03 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
    2008-02-22 14:59 824,832 ----a-w C:\Windows\System32\wininet.dll
    2008-02-22 14:59 56,320 ----a-w C:\Windows\System32\iesetup.dll
    2008-02-22 14:59 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
    2008-02-22 14:59 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
    2008-02-22 14:28 --------- d-----w C:\ProgramData\Symantec
    2008-02-22 14:16 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-02-22 14:02 1,980 --sha-r C:\Windows\system32\drivers\103C_HP_CPC_KA909AA-UUW m9151.sc_YC_0Pavi_QCZH750_E81FIv3PrA2_49_INARRA2_SASUSTek Computer INC._V2.00_B5.13_T071029_WUH0_L40B_M3071_J500_7AMD_8Athlon 64 X2 Dual Core_92.6_#080130_N10DE03EF_Z_G10DE0402.MRK
    2008-02-22 14:02 --------- d-----w C:\ProgramData\Hewlett-Packard
    2008-02-22 13:58 --------- d-sh--w C:\ProgramData\Työpöytä
    2008-02-22 13:58 --------- d-sh--w C:\ProgramData\Tiedostot
    2008-02-22 13:58 --------- d-sh--w C:\ProgramData\Suosikit
    2008-02-22 13:58 --------- d-sh--w C:\ProgramData\Mallit
    2008-02-22 13:58 --------- d-sh--w C:\ProgramData\Käynnistä-valikko
    2008-02-22 13:58 --------- d-sh--w C:\ProgramData\Application Data
    2008-01-09 01:32 276,368 ----a-w C:\Windows\system32\drivers\~GLH0014.TMP
    2007-12-14 09:32 12,632 ----a-w C:\Windows\System32\lsdelete.exe
    2007-12-04 00:26 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
    2007-12-04 00:26 7,680 ----a-w C:\Windows\System32\spwmp.dll
    2007-12-04 00:26 4,096 ----a-w C:\Windows\System32\dxmasf.dll
    2007-12-04 00:26 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
    2007-12-04 00:25 84,480 ----a-w C:\Windows\System32\INETRES.dll
    2007-12-04 00:25 737,792 ----a-w C:\Windows\System32\inetcomm.dll
    2007-12-04 00:23 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
    2007-12-04 00:22 8,704 ----a-w C:\Windows\System32\hcrstco.dll
    2007-12-04 00:22 8,704 ----a-w C:\Windows\System32\hccoin.dll
    2007-12-04 00:22 750,080 ----a-w C:\Windows\System32\qmgr.dll
    2007-12-04 00:20 25,600 ----a-w C:\Windows\System32\LangCleanupSysprepAction.dll
    2007-12-04 00:20 23,552 ----a-w C:\Windows\System32\lpremove.exe
    2007-12-04 00:20 166,912 ----a-w C:\Windows\System32\lpksetup.exe
    2007-12-04 00:20 10,240 ----a-w C:\Windows\System32\MUILanguageCleanup.dll
    2007-12-04 00:15 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
    2007-12-04 00:15 1,191,936 ----a-w C:\Windows\System32\msxml3.dll
    2007-12-04 00:14 86,016 ----a-w C:\Windows\System32\icfupgd.dll
    2007-12-04 00:14 61,952 ----a-w C:\Windows\System32\cmifw.dll
    2007-12-04 00:14 396,800 ----a-w C:\Windows\System32\MPSSVC.dll
    2007-12-04 00:14 392,192 ----a-w C:\Windows\System32\FirewallAPI.dll
    2007-12-04 00:14 39,936 ----a-w C:\Windows\System32\dwmapi.dll
    2007-12-04 00:14 374,456 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll
    2007-12-04 00:14 2,016,256 ----a-w C:\Windows\System32\milcore.dll
    2007-12-04 00:14 178,688 ----a-w C:\Windows\System32\iphlpsvc.dll
    2007-12-04 00:14 16,896 ----a-w C:\Windows\System32\wfapigp.dll
    2007-12-04 00:12 57,856 ----a-w C:\Windows\System32\SLUINotify.dll
    2007-12-04 00:12 566,784 ----a-w C:\Windows\System32\SLCommDlg.dll
    2007-12-04 00:12 39,936 ----a-w C:\Windows\System32\slcinst.dll
    2007-12-04 00:12 351,232 ----a-w C:\Windows\System32\SLUI.exe
    2007-12-04 00:12 33,280 ----a-w C:\Windows\System32\slwmi.dll
    2007-12-04 00:12 268,288 ----a-w C:\Windows\System32\mcbuilder.exe
    2007-12-04 00:12 223,232 ----a-w C:\Windows\System32\SLC.dll
    2007-12-04 00:12 2,605,568 ----a-w C:\Windows\System32\SLsvc.exe
    2007-12-04 00:12 186,368 ----a-w C:\Windows\System32\SLLUA.exe
    2007-12-04 00:10 5,120 ----a-w C:\Windows\System32\wmi.dll
    2007-12-04 00:10 152,576 ----a-w C:\Windows\System32\imagehlp.dll
    2007-12-04 00:08 87,040 ----a-w C:\Windows\System32\msoert2.dll
    2007-12-04 00:08 39,424 ----a-w C:\Windows\System32\ACCTRES.dll
    2007-12-04 00:08 205,824 ----a-w C:\Windows\System32\msoeacct.dll
    2007-12-04 00:07 97,792 ----a-w C:\Windows\System32\sdshext.dll
    2007-12-04 00:07 727,040 ----a-w C:\Windows\System32\sdengin2.dll
    2007-12-04 00:07 102,912 ----a-w C:\Windows\System32\sdrsvc.dll
    2007-12-04 00:07 1,192,960 ----a-w C:\Windows\System32\sdclt.exe
    2007-12-04 00:05 49,664 ----a-w C:\Windows\System32\csrsrv.dll
    2007-12-04 00:05 376,320 ----a-w C:\Windows\System32\winsrv.dll
    2007-12-04 00:05 36,864 ----a-w C:\Windows\System32\wmdmps.dll
    2007-12-04 00:05 311,296 ----a-w C:\Windows\System32\mswmdm.dll
    2007-12-04 00:05 31,744 ----a-w C:\Windows\System32\wmdmlog.dll
    2007-12-04 00:04 633,856 ----a-w C:\Windows\System32\user32.dll
    2007-12-04 00:03 414,208 ----a-w C:\Windows\System32\msscp.dll
    2007-12-04 00:03 146,944 ----a-w C:\Windows\System32\MMDevAPI.dll
    2007-12-04 00:02 84,480 ----a-w C:\Windows\System32\dnsrslvr.dll
    2007-12-04 00:02 24,576 ----a-w C:\Windows\System32\dnscacheugc.exe
    2007-12-04 00:01 974,336 ----a-w C:\Windows\System32\crypt32.dll
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-02-22 17:02 1232896]
    "BitComet"="C:\Program Files\BitComet\BitComet.exe" [2008-02-01 09:20 2194744]
    "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06 1318912]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-12-04 02:04 1006264]
    "hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 17:01 65536]
    "KBD"="C:\HP\KBD\KbdStub.EXE" [2006-12-08 18:16 65536]
    "OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 13:59 118784]
    "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-08-27 20:59 86016]
    "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-08-27 20:59 8473120]
    "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-08-27 20:59 81920]
    "RtHDVCpl"="RtHDVCpl.exe" [2007-10-25 15:52 4702208 C:\WINDOWS\RtHDVCpl.exe]
    "HP Health Check Scheduler"="[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [ ]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048]
    "SunJavaUpdateReg"="C:\Windows\system32\jureg.exe" [2007-04-07 02:56 54936]
    "HP Software Update"="c:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 16:24 54840]
    "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-01-09 03:31 959976]
    "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 13:10 267048]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{A96B629F-8044-4782-8987-D7081B4D61BC}"= C:\Program Files\HP\DVDPlay\DVDPlay.exe:DVD Play|Desc=DVD Play
    "{1C3BD497-C000-47D2-A089-7E54E5D20641}"= C:\Program Files\HP\DVDPlay\DPService.exe:DVD Play Resident Program|Desc=DVD Play Resident Program
    "{48B8D2D7-DB8B-4C7F-937E-9BA9BAB56AEA}"= c:\Program Files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector|Desc=CyberLink PowerDirector
    "TCP Query User{49BF063B-D382-43D3-BA00-C06782B01E34}C:\program files\bitcomet\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client|Desc=BitComet - a BitTorrent Client
    "UDP Query User{1ECD8A99-8374-4099-8F0C-F311BE509525}C:\program files\bitcomet\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client|Desc=BitComet - a BitTorrent Client
    "{78217305-32EE-40A7-877E-8FD361ABA5F7}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{A592E6C8-6451-4EE8-A869-2A3C66B24FC9}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{813C3D3E-0DA9-4025-B602-CFD2861D2585}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "{1B0C3FA0-132F-450B-8352-A16DD7994A24}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
    "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
    "EnableFirewall"= 0 (0x0)

    R2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263};C:\Program Files\HP\DVDPlay\000.fcl [2007-10-09 11:07]
    R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
    R2 HPBtnSrv;HP Chasis Button Service;c:\hp\HPEZBTN\HPBtnSrv.exe [2007-05-29 17:19]
    R3 ADM851x;ADMtek ADM8511 To Fast Ethernet Adapter;C:\Windows\system32\DRIVERS\ADM851x.SYS [2002-04-04 11:14]
    R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;C:\Windows\system32\drivers\HCW85BDA.sys [2007-10-01 11:21]
    R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;C:\Windows\system32\DRIVERS\netr73.sys [2007-09-24 13:09]

    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-02-25 18:05:38
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2008-02-25 18:06:21
    ComboFix-quarantined-files.txt 2008-02-25 16:06:19
    .
    2008-02-23 21:08:43 --- E O F ---
     
  5. Hujo

    Hujo Guest

    poista koneelta

    SUPERAntiSpyware

    =========

    Avaa Windows Defender.
    Klikkaa Tools ja General Settings.
    Selaa alas ja ota rasti pois Turn on real-time protection (recommended)-kohdasta.
    Tämän jälkeen klikkaa Save ja sulje Windows Defender.

    =========

    scannaa hjt;llä merkkaa paina Fix checked

    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
     
  6. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Hmm.. Netti tuntuu takkuilevan kyllä vieläkin tosi ikävästi kuin myös musiikin ja videoiden katselu.
    Suoritinkäyttö ei kyllä näytä enään olevan yhtä suuri.

    Noh, laitan tähän vielä uuden login:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:09:45, on 24.2.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\RtHDVCpl.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\System32\mobsync.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Opera\Opera.exe
    C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe" -delete
    O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing)
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\System32\ZoneLabs\vsmon.exe

    --
    End of file - 7618 bytes
     
  7. Hujo

    Hujo Guest

    Lataa VundoFix.exe työpöydällesi.

    Tupla-klikkaa VundoFix.exe ajaaksesi sen.
    Klikkaa Scan for Vundo valintaa.
    Kun skannaus on valmis, klikkaa Remove Vundo valintaa.
    Sinulta kysytään haluatko poistaa filut - klikkaa YES.
    Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
    Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK.
    Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö.

    Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
    Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.

    ===========

    Muuten loki on sama kuin aikaisemmin ei ole uusin
     
  8. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Vundolla ei löytynyt mitään...

    Tässä se uusi hjt logi:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:16:34, on 26.2.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\WINDOWS\System32\WerFault.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\hp\KBD\KbdStub.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\RtHDVCpl.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\BitComet\BitComet.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Opera\Opera.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe" -delete
    O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing)
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\System32\ZoneLabs\vsmon.exe

    --
    End of file - 7364 bytes
     
    Last edited: Feb 26, 2008
  9. Hujo

    Hujo Guest

    loki ok
     
  10. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Noni hyvä juttu.

    Mutta vielä tuntuu kyllä olevan inhottavan hidastelva :/ ei se ole tämmöinen ollut ennen... Mistäköhän se voisi sitten johtua? Onko ideoita?
     
  11. Hujo

    Hujo Guest

    Lataa Atribunen ATF Cleaner

    Ohjeet;

    Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All
    Klikkaa Empty Selected valintaa.
    Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
    Klikkaa Empty Selected valintaa.
    HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
    Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All
    Klikkaa Empty Selected valintaa taas.
    HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
    Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
    Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)
     
  12. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    ATF:llä poistin kaikki, mutta eipä sekään paljoa auttanut. Eli edelleen netti tökkii ja jumittelee tosi pahasti.

    Onko vielä jotain mitä voisi tehdä?
     
  13. Hujo

    Hujo Guest

    Lataa: RegSeeker.zip työpöydälle:

    Pura zip C:\RegSeeker\ kansioon. Sieltä käynnistät RegSeeker.exe ohjelman.
    Oikeasa yläkulmassa on Languages.... linkki, josta valitset Suomenkielen.
    Vasemmasta alakulmasta ruksit Luo vrmuuskopio ja sitten linkki Puhdista rekisteri
    Ruksit kaikkiin muihin kohtiin paitsi "Käyttökelvottomat.." sitten "OK" (odotat hetken).
    Ruutuun ilmestyy lista epäkelvoista rekisterimerkinnöistä, jotka alapalkista Valitse kohdasta
    klikkaat Valitse kaikki jolloin valitut saavat keltaisen pohjavärin.
    Alapalkin Toiminnot linkistä klikkaat Poista valitut kohteet
    Ponnahdusikkunaan "Kaikki valitut kohteet poistetaan ? vastaat "OK".
    Seuraavaan Ponnahdusikkunaan "Varmuuskopiot" vastaat "OK".
    Klikaa vasemmalta Lopeta RegSeeker ja käynnistä koneesi uudelleen.
     
  14. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Ei auttanut... ei taaskaan parannusta :/
     
  15. Hujo

    Hujo Guest

    Lataa Winsockfix
    työpöydällesi
    pura zip, Avaa Winsockfix paina Fix
     
  16. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Tuo Winsockfix tuntui korjaavan tuon netin ainakin joskin aikaa. Mitä tuo ohjelma tekee oikein tarkalleen?

    Mutta kuitenkin... Kun netissä jonkin aikaa surffailee ihan sujuvasti alkaa se taas tökkiä, muttei kuitenkaan yhtä paljon kuin ennen Winsockfixillä korjausta.
    Sitten jos sen ohjelman ajaa taas niin nettikin lähtee rulaan.
    Pitääkö aina ajaa se ohjelma että korjaantuis vai onko joku pysyväkin keino millä sen sais lopullisesti pysymään normaalina?

    Sitten sen olen huomannut myös, että kun avaa p2p-ohjelman netti jumittuu ihan totaalisesti, kuin myös se ohjelmakin.

    Laitampa vielä uusimman login jos auttais vaikka:


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:05:18, on 12.3.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Windows\system32\taskeng.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\RtHDVCpl.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Windows\ehome\ehmsas.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Opera\Opera.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe" -delete
    O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [Computer Alarm Clock] C:\PROGRA~1\COMPUT~1\cac.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\System32\ZoneLabs\vsmon.exe

    --
    End of file - 8714 bytes

     
  17. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    ongelma vaivaa edelleenkin... Nykyään kone on alkanu myös sammuilemaan itsekseen, heittää bluescreenin vaan näytölle ja hetken kuluttua käynnistyy uudelleen.
    Onko neuvoa`?
     
  18. Hujo

    Hujo Guest

    scannaa uusi hjt:n loki
     
  19. Hilll

    Hilll Member

    Joined:
    Feb 22, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    11
    Tässä tämä

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:36:35, on 25.3.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\RtHDVCpl.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Opera\Opera.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe" -delete
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\System32\ZoneLabs\vsmon.exe

    --
    End of file - 8969 bytes
     
  20. Hujo

    Hujo Guest

    Poista tuo Spybot - Search & Destroy koneelta
    Poista tuo Windows Defender koneelta.

    Katos ne verkoyhteyden asetukset et on oikein.
     

Share This Page