Kone aivan tukossa. HJT-logi

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Arthor, Jul 23, 2010.

Thread Status:
Not open for further replies.
  1. Arthor

    Arthor Member

    Joined:
    Dec 24, 2006
    Messages:
    18
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 19:09:42, on 23.7.2010
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
    C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page

    = http://www.shareware-fi.com/fi/index.php?rvs=hompag
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page

    = http://www.shareware-fi.com/fi/index.php?rvs=hompag
    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Page_URL =

    http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Search_URL =

    http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page

    = http://www.shareware-fi.com/fi/index.php?rvs=hompag
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page

    = http://www.shareware-fi.com/fi/index.php?rvs=hompag
    R0 - HKCU\Software\Microsoft\Internet

    Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper -

    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

    Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} -

    C:\Program Files\AskBarDis\bar\bin\askBar.dll
    O2 - BHO: SSVHelper Class -

    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

    Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper -

    {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program

    Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO -

    {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program

    Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch -

    {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program

    Files\Google\Google

    Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -

    C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Ask Toolbar -

    {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program

    Files\AskBarDis\bar\bin\askBar.dll
    O3 - Toolbar: Google Toolbar -

    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program

    Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI

    Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program

    Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program

    Files\D-Link\AirPlus G\AirGCFG.exe
    O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program

    Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir

    PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program

    Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [NeroFilterCheck]

    C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program

    Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol

    Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program

    Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom

    HOME 2\TomTomHOMERunner.exe"
    O4 - HKCU\..\Run: [swg] C:\Program

    Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE]

    C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program

    Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User

    'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE]

    C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Start Firewall.lnk =

    C:\WINDOWS\system32\net.exe
    O9 - Extra button: (no name) -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: @C:\Program

    Files\Messenger\Msgslang.dll,-61144 -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: @C:\Program

    Files\Messenger\Msgslang.dll,-61144 -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O18 - Protocol: skype4com -

    {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

    C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} -

    C:\Program Files\Google\Google

    Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program

    Files\SUPERAntiSpyware\SASWINLO.dll
    O22 - SharedTaskScheduler: Browseui preloader -

    {438755C2-A8BA-11D1-B96B-00A0C90312E1} -

    C:\WINDOWS\System32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon -

    {8C7461EF-2B13-11d2-BE35-3078302C2030} -

    C:\WINDOWS\System32\browseui.dll
    O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha

    Networks Inc. - C:\Program Files\ANI\ANIWZCS2

    Service\ANIWZCSdS.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler

    (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir

    PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard

    (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir

    PersonalEdition Classic\avguard.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -

    C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner -

    C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. -

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu

    (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Tapahtumaloki (Eventlog) - Unknown owner -

    C:\WINDOWS\system32\services.exe
    O23 - Service: Google Software Updater (gusvc) - Google -

    C:\Program Files\Google\Common\Google

    Updater\GoogleUpdaterService.exe
    O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu

    (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) -

    Sunbelt Software - C:\Program Files\Sunbelt Software\Personal

    Firewall\kpf4ss.exe
    O23 - Service: NetMeeting etätyöpöydän jakaminen (mnmsrvc) -

    Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
    O23 - Service: Verkon DDE (NetDDE) - Unknown owner -

    C:\WINDOWS\system32\netdde.exe
    O23 - Service: Verkon DDE DSDM (NetDDEdsdm) - Unknown owner -

    C:\WINDOWS\system32\netdde.exe
    O23 - Service: Plug and Play (PlugPlay) - Unknown owner -

    C:\WINDOWS\system32\services.exe
    O23 - Service: Etätyöpöydän ohjeen istunnonhallinta (RDSessMgr)

    - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Älykortti-apuohjelma (SCardDrv) - Unknown owner

    - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Älykortti (SCardSvr) - Unknown owner -

    C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC

    Connectivity Solution\ServiceLayer.exe
    O23 - Service: Resurssilokit ja -hälytykset (SysmonLog) -

    Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Telnet (TlntSvr) - Unknown owner -

    C:\WINDOWS\System32\tlntsvr.exe
    O23 - Service: TomTomHOMEService - TomTom - C:\Program

    Files\TomTom HOME 2\TomTomHOMEService.exe
    O23 - Service: Aseman tilannevedos (VSS) - Unknown owner -

    C:\WINDOWS\System32\vssvc.exe
    O23 - Service: WMI resurssisovitin (WmiApSrv) - Unknown owner -

    C:\WINDOWS\System32\wbem\wmiapsrv.exe

    --
    End of file - 9029 bytes
     
    Arthor, Jul 23, 2010
    #1
Thread Status:
Not open for further replies.

Share This Page