Elikkäs kone on aika lailla hidas eikä yhdistä nettiin explorerin tai firefoxin kautta, muuten kyllä netti toimii.. Oiskohan täs jotaki outoo: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:12:03, on 22.10.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\LogMeIn Hamachi\hamachi-2.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\Launch Manager\OSD.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DriverMax_RESTART] "C:\DriverMax\devices.exe" -RESTART O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: karna.dat O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 6887 bytes
Lataa Malwarebytes' Anti-Malware työpöydällesi. Jos linkki ei toimi, voit ladata myös seuraavista linkeistä: Linkki1 Linkki2 * Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman. * Lopuksi varmistu, että seuraavat on valittu: Päivitä Malwarebytes' Anti-Malware ja Käynnistä Malwarebytes' Anti-Malware ja sen jälkeen klikkaa Lopeta. * Jos päivitys löytyy, ohjelma lataa ja asentaa uusimman version. Jos päivityksien lataaminen ei onnistu, voit ladata päivitykset tästä. Tuplaklikkaa mbam-rules.exe asentaaksesi päivitykset. * Kun ohjelma on latautunut ja päivitykset tehty, valitse Suorita täysi tarkistus ja klikkaa Tarkista. * Kun tarkistus on valmis, klikkaa OK ja sitten Näytä tulokset nähdäksesi tulokset. * Varmistu, että kaikki on merkitty ja klikkaa Poista valitut. * Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt * Lähetä lokin sisältö seuraavassa viestissäsi.[/list] Huom. Jos Mbam ei pystynyt poistamaan tiedostoa, se pyytää sinua käynnistämään koneesi uudelleen. Käynnistä koneesi silloin uudelleen heti. Mbam voi tehdä muutoksia rekisteriisi osana puhdistusta. Jos käytät suojausohjelmaa, joka havaitsee rekisterin muutokset, salli Mbamin tehdä muutokset. ---------------------------------------------------------------------------------- * Lähetä lokin sisältö seuraavassa viestissäsi + uusi hjt-loki. .
Malwarebytesin logi: Malwarebytes' Anti-Malware 1.41 Tietokantaversio: 3012 Windows 5.1.2600 Service Pack 3 22.10.2009 23:10:06 mbam-log-2009-10-22 (23-10-06).txt Tarkistustyyppi: Täysi tarkistus (C:\|) Tarkistetut kohteet: 189383 Kulunut aika: 1 hour(s), 2 minute(s), 17 second(s) Saastuneita muistiprosesseja: 0 Saastuneita muistimoduuleja: 0 Saastuneita rekisteriavaimia: 0 Saastuneita rekisteriarvoja: 0 Saastuneita rekisterikohteita: 0 Saastuneita hakemistoja: 0 Saastuneita tiedostoja: 0 Saastuneita muistiprosesseja: (Haitallisia kohteita ei löydetty) Saastuneita muistimoduuleja: (Haitallisia kohteita ei löydetty) Saastuneita rekisteriavaimia: (Haitallisia kohteita ei löydetty) Saastuneita rekisteriarvoja: (Haitallisia kohteita ei löydetty) Saastuneita rekisterikohteita: (Haitallisia kohteita ei löydetty) Saastuneita hakemistoja: (Haitallisia kohteita ei löydetty) Ja sitte HijackThis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:11:45, on 22.10.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\LogMeIn Hamachi\hamachi-2.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\Launch Manager\OSD.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Launch Manager\FanSysTray.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DriverMax_RESTART] "C:\DriverMax\devices.exe" -RESTART O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: karna.dat O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 6603 bytes Saastuneita tiedostoja: (Haitallisia kohteita ei löydetty)
Viruksia on kyllä !!! Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi. Käynnistä kone vikasietotilaan => OHJE Laita piilotiedostot näkyviin =>vikasiedossa OHJE - Tuplakilikkaa työpöydälle ladattua sdfix.exe tiedostoa. Tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM C:\SDFix Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.cmd tai RunThis.bat käynnistääksesi ohjelman. Paina Y käynnistääksesi skriptin. Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot". Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen. Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta. Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished". Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle. Lopuksi avaa SDFix kansio ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera. .
Noniin täs ois taas SDFix: Version 1.240 Run by Paksupoika on pe 23.10.2009 at 15:47 Microsoft Windows XP [versio 5.1.2600] Running From: C:\SDFix Checking Services : Restoring Default Security Values Restoring Default Hosts File Rebooting Checking Files : Trojan Files Found: C:\Program Files\Common Files\ujega._sy - Deleted Removing Temp Files ADS Check : Final Check : catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-10-23 16:10:51 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:012e81ac "s2"=dword:62ab7c73 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:8a,f7,50,ae,9c,97,8f,fa,0d,c6,23,1f,16,3e,34,28,ac,81,75,54,52,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,be,d8,01,1b,77,be,84,1a,2a,35,d0,63,3e,7e,8c,fe,30,.. "khjeh"=hex:e4,27,7b,56,b6,37,1a,d7,0b,28,88,2e,5d,7d,c2,b1,05,f8,7d,08,ca,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1b,b3,09,c8,24,d7,3e,69,64,05,56,1e,d1,82,60,cc,57,95,f4,28,b7,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:9b,ef,1f,43,4d,e4,92,a9,1e,bd,9e,f8,1b,68,9b,ac,f1,50,6a,30,84,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:8a,f7,50,ae,9c,97,8f,fa,0d,c6,23,1f,16,3e,34,28,ac,81,75,54,52,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,be,d8,01,1b,77,be,84,1a,2a,35,d0,63,3e,7e,8c,fe,30,.. "khjeh"=hex:e4,27,7b,56,b6,37,1a,d7,0b,28,88,2e,5d,7d,c2,b1,05,f8,7d,08,ca,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1b,b3,09,c8,24,d7,3e,69,64,05,56,1e,d1,82,60,cc,57,95,f4,28,b7,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:9b,ef,1f,43,4d,e4,92,a9,1e,bd,9e,f8,1b,68,9b,ac,f1,50,6a,30,84,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:8a,f7,50,ae,9c,97,8f,fa,0d,c6,23,1f,16,3e,34,28,ac,81,75,54,52,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,be,d8,01,1b,77,be,84,1a,2a,35,d0,63,3e,7e,8c,fe,30,.. "khjeh"=hex:e4,27,7b,56,b6,37,1a,d7,0b,28,88,2e,5d,7d,c2,b1,05,f8,7d,08,ca,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1b,b3,09,c8,24,d7,3e,69,64,05,56,1e,d1,82,60,cc,57,95,f4,28,b7,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:9b,ef,1f,43,4d,e4,92,a9,1e,bd,9e,f8,1b,68,9b,ac,f1,50,6a,30,84,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{077ACEC7-979C-40AB-9835-435BA1511E0D}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{077ACEC7-979C-40AB-9835-435BA1511E0D}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\MPPRE10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\mppre10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{30C7234B-6482-4A55-A11D-ECD9030313F2}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{30C7234B-6482-4A55-A11D-ECD9030313F2}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDM10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\wmdm10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{3FDF25EE-E592-4495-8391-6E9C504DAC2B}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\WMSET10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\wmset10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{60204BB3-7078-4F70-8F69-68297621941C}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{60204BB3-7078-4F70-8F69-68297621941C}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\MPSTUB10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\mpstub10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{981FB688-E76B-4246-987B-92083185B90A}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{981FB688-E76B-4246-987B-92083185B90A}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\WPD10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{A47B3654-48EE-48A5-B629-97D70175E58F}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{A47B3654-48EE-48A5-B629-97D70175E58F}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMFSDK10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmfsdk10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\DRM10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drm10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\MPCD10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\mpcd10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{DD90D410-1823-43EB-9A16-A2331BF08799}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{DD90D410-1823-43EB-9A16-A2331BF08799}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\WMP10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmp10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Mass Storage] "DeviceInterface"="{53F5630D-B6BF-11D0-94F2-00A0C91EFB8B}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Portable Audio Players] "DeviceInterface"="{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}" "FilterParameter"="UseExtendedWmdm" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE] "DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE RNDIS] "DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDevice] "DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}" "WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDeviceRNDIS] "DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}" "WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\Plugins\SCP\SCPTRANS] "ProgID"="MsScp.SCPTRANS.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB873339] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB873339" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB873339" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB873339\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB883667] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB883667" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB883667" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB883667\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884575] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB884575" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB884575" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884575\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884883] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB884883" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB884883" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884883\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885523] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885523" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885523" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885523\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885835] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885835" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885835" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885835\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885836] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885836" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885836" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885836\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885855] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885855" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885855" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885855\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885894] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885894" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885894" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885894\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886677] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB886677" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB886677" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886677\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886716] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB886716" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB886716" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886716\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887742] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB887742" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB887742" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887742\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887797] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB887797" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB887797" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887797\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888111WXPSP2] "Installed"=dword:00000001 "Comments"="High Definition Audio -ohjain KB888111" "Backup Dir"="" "Fix Description"="High Definition Audio -ohjain KB888111" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888111WXPSP2\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888113] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB888113" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB888113" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888113\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888302] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB888302" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB888302" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888302\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888402] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB888402" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB888402" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888402\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888656] "Installed"=dword:00000001 "Comments"="Windows Media Player 10 Hotfix - KB888656" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889016] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB889016" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB889016" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889016\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889527] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB889527)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB889527)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889527\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889673] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB889673" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB889673" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889673\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890046] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB890046)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB890046)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890046\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890831] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB890831" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB890831" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890831\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890859] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB890859" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB890859" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890859\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB891122] "Installed"=dword:00000001 "Comments"="Windows Media Format SDK Hotfix - KB891122" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB891781] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB891781" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB891781" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB891781\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB892627] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB892627" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB892627" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB892627\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893056] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB893056" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB893056" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893056\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893066] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB893066)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB893066)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893066\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893357] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB893357)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB893357)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893357\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893756] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB893756)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB893756)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893756\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893803v2] "Installed"=dword:00000001 "Comments"="Windows Installer 3.1" "Backup Dir"="" "Fix Description"="Windows Installer 3.1" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893803v2\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896256] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB896256)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB896256)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896256\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896358] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896358)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896358)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896358\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896422] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896422)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896422)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896422\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896423] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896423)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896423)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896423\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896424] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896424)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896424)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896424\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896427] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB896427)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB896427)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896427\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896428] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896428)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896428)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896428\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896626] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB896626" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB896626" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896626\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB897663] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB897663)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB897663)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB897663\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898461] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB898461)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB898461)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898461\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898900] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB898900)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB898900)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898900\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899587] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB899587)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB899587)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899587\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899589] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB899589)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB899589)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899589\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899591] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB899591)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB899591)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899591\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900725] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB900725)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB900725)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900725\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900930] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB900930)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB900930)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900930\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901017] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB901017)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB901017)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901017\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901214] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB901214)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB901214)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901214\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB902344] "Installed"=dword:00000001 "Comments"="Hotfix for Windows Media Format SDK (KB902344)" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB902400] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB902400)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB902400)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB902400\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB903234] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB903234)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB903234)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB903234\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904412] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB904412)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB904412)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904412\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904706] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB904706)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB904706)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904706\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905414] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB905414)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB905414)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905414\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905749] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB905749)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB905749)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905749\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905915] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB905915)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB905915)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905915\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB906569] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB906569)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB906569)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB906569\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB907865] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB907865)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB907865)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB907865\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB908521] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB908521)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB908521)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB908521\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910437] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB910437)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB910437)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910437\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910728] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB910728)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB910728)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910728\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OpenGLDrivers\ati2dvag] "Version"=dword:00000002 "DriverVersion"=dword:00000001 "Flags"=dword:00000001 "Dll"="atioglxx.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher] "TracesProcessed"=dword:00000039 "TracesSuccessful"=dword:00000038 "LastTraceFailure"=dword:00000020 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL] "LogSessionName"=str(2):"stdout" "Active"=dword:00000001 "ControlFlags"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\ApiTraceGuid] "Guid"="485e7de9-0a80-11d8-ad15-505054503030" "BitNames"=" API_TRACE_IO" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\DriverProcessTraceGuid] "Guid"="485e7ded-0a80-11d8-ad15-505054503030" "BitNames"=" DP_TRACE_API DP_TRACE_DDI DP_TRACE_GENERAL DP_TRACE_OBJECT DP_TRACE_POOL DP_TRACE_DRIVER DP_TRACE_DEVICE DP_TRACE_REQUEST DP_TRACE_FILEOBJECT DP_TRACE_IO DP_TRACE_PNP DP_TRACE_MEMORY DP_TRACE_IOTARGET DP_TRACE_FUNC DP_TRACE_STRING" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\MgrTraceGuid] "Guid"="485e7dea-0a80-11d8-ad15-505054503030" "BitNames"=" MGR_TRACE_MGR MGR_TRACE_SERVICE_KEY MGR_TRACE_DEVNODE MGR_TRACE_PROCESS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\ProcessHelperTraceGuid] "Guid"="485e7dec-0a80-11d8-ad15-505054503030" "BitNames"=" PROCHELP_TRACE_EVENT PROCHELP_TRACE_QUERY" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\RpcTraceGuid] "Guid"="485e7de8-0a80-11d8-ad15-505054503030" "BitNames"=" RPC_TRACE_AUTHENTICATION RPC_TRACE_SERVER RPC_TRACE_CLIENT RPC_TRACE_GENERAL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\TestTraceGuid] "Guid"="485e7deb-0a80-11d8-ad15-505054503030" "BitNames"=" TEST_TRACE_GENERAL TEST_TRACE_APP TEST_TRACE_TSTDRIVER TEST_TRACE_FLTRDRIVER" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] "DLLName"="Ati2evxx.dll" "Asynchronous"=dword:00000000 "Impersonate"=dword:00000001 "Lock"="AtiLockEvent" "Logoff"="AtiLogoffEvent" "Logon"="AtiLogonEvent" "Disconnect"="AtiDisConnectEvent" "Reconnect"="AtiReConnectEvent" "Safe"=dword:00000000 "Shutdown"="AtiShutdownEvent" "StartScreenSaver"="AtiStartScreenSaverEvent" "StartShell"="AtiStartShellEvent" "Startup"="AtiStartupEvent" "StopScreenSaver"="AtiStopScreenSaverEvent" "Unlock"="AtiUnLockEvent" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop] "Upgrade"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Bags\1\Desktop] "Mode"=dword:00000001 "ScrollPos800x600(1).x"=dword:00000000 "ScrollPos800x600(1).y"=dword:00000000 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "ItemPos800x600(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "FFlags"=dword:00000224 "ScrollPos1280x800(1).x"=dword:00000000 "ScrollPos1280x800(1).y"=dword:00000000 "ScrollPos640x480(1).x"=dword:00000000 "ScrollPos640x480(1).y"=dword:00000000 "ItemPos640x480(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "ItemPos1024x768(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "ItemPos1280x800(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "ScrollPos1280x800(2).x"=dword:00000000 "ScrollPos1280x800(2).y"=dword:00000000 "ItemPos1280x800(2)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services : Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabledxpsp2res.dll,-22019" "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabledxpsp2res.dll,-22019" Remaining Files : File Backups: - C:\SDFix\backups\backups.zip Files with Hidden Attributes : Wed 12 May 2004 20,480 A..H. --- "C:\Koulu\Koulu ty”t\~WRL0001.tmp" Wed 23 Sep 2009 26,176 A..H. --- "C:\Program Files\LogMeIn Hamachi\hamachi.sys" Wed 18 Jan 2006 1,658,592 ..SH. --- "C:\Program Files\Messenger\Msmsgs.exe" Wed 23 Sep 2009 26,176 A..H. --- "C:\WINDOWS\system32\hamachi.sys" Wed 6 Sep 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Wed 12 May 2004 20,480 A..H. --- "C:\Plaah\Kalle\Koulu ty”t\~WRL0001.tmp" Tue 15 Nov 2005 78,104 ..SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe" Tue 15 Nov 2005 12,912 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll" Thu 23 Apr 2009 26,176 A..H. --- "C:\WINDOWS\system32\drivers\hamachi.sys" Thu 10 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" Fri 11 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp" Finished! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:19:33, on 23.10.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\LogMeIn Hamachi\hamachi-2.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\Launch Manager\OSD.exe C:\WINDOWS\system32\ctfmon.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\DriverMax\devices.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DriverMax_RESTART] "C:\DriverMax\devices.exe" -RESTART O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: karna.dat O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 6526 bytes
Täs olis: SDFix: Version 1.240 Run by Paksupoika on pe 23.10.2009 at 15:47 Microsoft Windows XP [versio 5.1.2600] Running From: C:\SDFix Checking Services : Restoring Default Security Values Restoring Default Hosts File Rebooting Checking Files : Trojan Files Found: C:\Program Files\Common Files\ujega._sy - Deleted Removing Temp Files ADS Check : Final Check : catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-10-23 16:10:51 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:012e81ac "s2"=dword:62ab7c73 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:8a,f7,50,ae,9c,97,8f,fa,0d,c6,23,1f,16,3e,34,28,ac,81,75,54,52,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,be,d8,01,1b,77,be,84,1a,2a,35,d0,63,3e,7e,8c,fe,30,.. "khjeh"=hex:e4,27,7b,56,b6,37,1a,d7,0b,28,88,2e,5d,7d,c2,b1,05,f8,7d,08,ca,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1b,b3,09,c8,24,d7,3e,69,64,05,56,1e,d1,82,60,cc,57,95,f4,28,b7,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:9b,ef,1f,43,4d,e4,92,a9,1e,bd,9e,f8,1b,68,9b,ac,f1,50,6a,30,84,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:8a,f7,50,ae,9c,97,8f,fa,0d,c6,23,1f,16,3e,34,28,ac,81,75,54,52,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,be,d8,01,1b,77,be,84,1a,2a,35,d0,63,3e,7e,8c,fe,30,.. "khjeh"=hex:e4,27,7b,56,b6,37,1a,d7,0b,28,88,2e,5d,7d,c2,b1,05,f8,7d,08,ca,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1b,b3,09,c8,24,d7,3e,69,64,05,56,1e,d1,82,60,cc,57,95,f4,28,b7,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:9b,ef,1f,43,4d,e4,92,a9,1e,bd,9e,f8,1b,68,9b,ac,f1,50,6a,30,84,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:8a,f7,50,ae,9c,97,8f,fa,0d,c6,23,1f,16,3e,34,28,ac,81,75,54,52,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,be,d8,01,1b,77,be,84,1a,2a,35,d0,63,3e,7e,8c,fe,30,.. "khjeh"=hex:e4,27,7b,56,b6,37,1a,d7,0b,28,88,2e,5d,7d,c2,b1,05,f8,7d,08,ca,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1b,b3,09,c8,24,d7,3e,69,64,05,56,1e,d1,82,60,cc,57,95,f4,28,b7,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:9b,ef,1f,43,4d,e4,92,a9,1e,bd,9e,f8,1b,68,9b,ac,f1,50,6a,30,84,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{077ACEC7-979C-40AB-9835-435BA1511E0D}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{077ACEC7-979C-40AB-9835-435BA1511E0D}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\MPPRE10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\mppre10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{30C7234B-6482-4A55-A11D-ECD9030313F2}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{30C7234B-6482-4A55-A11D-ECD9030313F2}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDM10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\wmdm10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{3FDF25EE-E592-4495-8391-6E9C504DAC2B}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\WMSET10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\wmset10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{60204BB3-7078-4F70-8F69-68297621941C}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{60204BB3-7078-4F70-8F69-68297621941C}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\MPSTUB10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\mpstub10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{981FB688-E76B-4246-987B-92083185B90A}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{981FB688-E76B-4246-987B-92083185B90A}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\WPD10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{A47B3654-48EE-48A5-B629-97D70175E58F}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{A47B3654-48EE-48A5-B629-97D70175E58F}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMFSDK10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmfsdk10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\DRM10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drm10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\MPCD10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\mpcd10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{DD90D410-1823-43EB-9A16-A2331BF08799}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{DD90D410-1823-43EB-9A16-A2331BF08799}" "Version"=dword:000a0000 "Sub-Version"=dword:00000eda "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\WMP10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmp10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Mass Storage] "DeviceInterface"="{53F5630D-B6BF-11D0-94F2-00A0C91EFB8B}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Portable Audio Players] "DeviceInterface"="{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}" "FilterParameter"="UseExtendedWmdm" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE] "DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE RNDIS] "DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDevice] "DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}" "WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDeviceRNDIS] "DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}" "WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\Plugins\SCP\SCPTRANS] "ProgID"="MsScp.SCPTRANS.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB873339] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB873339" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB873339" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB873339\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB883667] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB883667" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB883667" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB883667\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884575] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB884575" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB884575" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884575\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884883] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB884883" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB884883" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB884883\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885523] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885523" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885523" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885523\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885835] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885835" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885835" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885835\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885836] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885836" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885836" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885836\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885855] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885855" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885855" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885855\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885894] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB885894" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB885894" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885894\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886677] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB886677" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB886677" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886677\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886716] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB886716" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB886716" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB886716\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887742] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB887742" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB887742" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887742\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887797] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB887797" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB887797" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB887797\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888111WXPSP2] "Installed"=dword:00000001 "Comments"="High Definition Audio -ohjain KB888111" "Backup Dir"="" "Fix Description"="High Definition Audio -ohjain KB888111" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888111WXPSP2\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888113] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB888113" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB888113" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888113\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888302] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB888302" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB888302" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888302\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888402] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB888402" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB888402" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888402\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB888656] "Installed"=dword:00000001 "Comments"="Windows Media Player 10 Hotfix - KB888656" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889016] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB889016" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB889016" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889016\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889527] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB889527)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB889527)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889527\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889673] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB889673" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB889673" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB889673\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890046] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB890046)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB890046)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890046\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890831] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB890831" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB890831" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890831\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890859] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB890859" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB890859" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890859\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB891122] "Installed"=dword:00000001 "Comments"="Windows Media Format SDK Hotfix - KB891122" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB891781] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB891781" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB891781" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB891781\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB892627] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB892627" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB892627" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB892627\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893056] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB893056" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB893056" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893056\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893066] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB893066)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB893066)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893066\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893357] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB893357)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB893357)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893357\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893756] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB893756)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB893756)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893756\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893803v2] "Installed"=dword:00000001 "Comments"="Windows Installer 3.1" "Backup Dir"="" "Fix Description"="Windows Installer 3.1" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893803v2\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896256] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB896256)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB896256)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896256\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896358] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896358)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896358)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896358\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896422] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896422)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896422)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896422\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896423] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896423)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896423)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896423\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896424] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896424)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896424)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896424\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896427] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB896427)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB896427)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896427\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896428] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB896428)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB896428)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896428\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896626] "Installed"=dword:00000001 "Comments"="Windows XP Hotfix - KB896626" "Backup Dir"="" "Fix Description"="Windows XP Hotfix - KB896626" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896626\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB897663] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB897663)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB897663)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB897663\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898461] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB898461)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB898461)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898461\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898900] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB898900)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB898900)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB898900\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899587] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB899587)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB899587)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899587\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899589] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB899589)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB899589)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899589\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899591] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB899591)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB899591)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB899591\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900725] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB900725)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB900725)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900725\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900930] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB900930)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB900930)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB900930\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901017] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB901017)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB901017)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901017\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901214] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB901214)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB901214)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB901214\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB902344] "Installed"=dword:00000001 "Comments"="Hotfix for Windows Media Format SDK (KB902344)" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB902400] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB902400)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB902400)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB902400\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB903234] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB903234)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB903234)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB903234\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904412] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB904412)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB904412)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904412\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904706] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB904706)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB904706)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB904706\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905414] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB905414)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB905414)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905414\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905749] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB905749)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB905749)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905749\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905915] "Installed"=dword:00000001 "Comments"="Suojauspäivitys Windows XP:lle (KB905915)" "Backup Dir"="" "Fix Description"="Suojauspäivitys Windows XP:lle (KB905915)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB905915\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB906569] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB906569)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB906569)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB906569\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB907865] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB907865)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB907865)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB907865\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB908521] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB908521)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB908521)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB908521\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910437] "Installed"=dword:00000001 "Comments"="Päivitys Windows XP:lle (KB910437)" "Backup Dir"="" "Fix Description"="Päivitys Windows XP:lle (KB910437)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910437\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910728] "Installed"=dword:00000001 "Comments"="Hotfix-päivitys Windows XP:lle (KB910728)" "Backup Dir"="" "Fix Description"="Hotfix-päivitys Windows XP:lle (KB910728)" "Installed By"="" "Installed On"="" "Service Pack"=dword:00000003 "Valid"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB910728\File 1] "Flags"="" "New File"="" "New Link Date"="" "Old Link Date"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OpenGLDrivers\ati2dvag] "Version"=dword:00000002 "DriverVersion"=dword:00000001 "Flags"=dword:00000001 "Dll"="atioglxx.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher] "TracesProcessed"=dword:00000039 "TracesSuccessful"=dword:00000038 "LastTraceFailure"=dword:00000020 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL] "LogSessionName"=str(2):"stdout" "Active"=dword:00000001 "ControlFlags"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\ApiTraceGuid] "Guid"="485e7de9-0a80-11d8-ad15-505054503030" "BitNames"=" API_TRACE_IO" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\DriverProcessTraceGuid] "Guid"="485e7ded-0a80-11d8-ad15-505054503030" "BitNames"=" DP_TRACE_API DP_TRACE_DDI DP_TRACE_GENERAL DP_TRACE_OBJECT DP_TRACE_POOL DP_TRACE_DRIVER DP_TRACE_DEVICE DP_TRACE_REQUEST DP_TRACE_FILEOBJECT DP_TRACE_IO DP_TRACE_PNP DP_TRACE_MEMORY DP_TRACE_IOTARGET DP_TRACE_FUNC DP_TRACE_STRING" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\MgrTraceGuid] "Guid"="485e7dea-0a80-11d8-ad15-505054503030" "BitNames"=" MGR_TRACE_MGR MGR_TRACE_SERVICE_KEY MGR_TRACE_DEVNODE MGR_TRACE_PROCESS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\ProcessHelperTraceGuid] "Guid"="485e7dec-0a80-11d8-ad15-505054503030" "BitNames"=" PROCHELP_TRACE_EVENT PROCHELP_TRACE_QUERY" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\RpcTraceGuid] "Guid"="485e7de8-0a80-11d8-ad15-505054503030" "BitNames"=" RPC_TRACE_AUTHENTICATION RPC_TRACE_SERVER RPC_TRACE_CLIENT RPC_TRACE_GENERAL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDF API DLL\TestTraceGuid] "Guid"="485e7deb-0a80-11d8-ad15-505054503030" "BitNames"=" TEST_TRACE_GENERAL TEST_TRACE_APP TEST_TRACE_TSTDRIVER TEST_TRACE_FLTRDRIVER" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] "DLLName"="Ati2evxx.dll" "Asynchronous"=dword:00000000 "Impersonate"=dword:00000001 "Lock"="AtiLockEvent" "Logoff"="AtiLogoffEvent" "Logon"="AtiLogonEvent" "Disconnect"="AtiDisConnectEvent" "Reconnect"="AtiReConnectEvent" "Safe"=dword:00000000 "Shutdown"="AtiShutdownEvent" "StartScreenSaver"="AtiStartScreenSaverEvent" "StartShell"="AtiStartShellEvent" "Startup"="AtiStartupEvent" "StopScreenSaver"="AtiStopScreenSaverEvent" "Unlock"="AtiUnLockEvent" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop] "Upgrade"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Bags\1\Desktop] "Mode"=dword:00000001 "ScrollPos800x600(1).x"=dword:00000000 "ScrollPos800x600(1).y"=dword:00000000 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "ItemPos800x600(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "FFlags"=dword:00000224 "ScrollPos1280x800(1).x"=dword:00000000 "ScrollPos1280x800(1).y"=dword:00000000 "ScrollPos640x480(1).x"=dword:00000000 "ScrollPos640x480(1).y"=dword:00000000 "ItemPos640x480(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "ItemPos1024x768(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "ItemPos1280x800(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. "ScrollPos1280x800(2).x"=dword:00000000 "ScrollPos1280x800(2).y"=dword:00000000 "ItemPos1280x800(2)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services : Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabledxpsp2res.dll,-22019" "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabledxpsp2res.dll,-22019" Remaining Files : File Backups: - C:\SDFix\backups\backups.zip Files with Hidden Attributes : Wed 12 May 2004 20,480 A..H. --- "C:\Koulu\Koulu ty”t\~WRL0001.tmp" Wed 23 Sep 2009 26,176 A..H. --- "C:\Program Files\LogMeIn Hamachi\hamachi.sys" Wed 18 Jan 2006 1,658,592 ..SH. --- "C:\Program Files\Messenger\Msmsgs.exe" Wed 23 Sep 2009 26,176 A..H. --- "C:\WINDOWS\system32\hamachi.sys" Wed 6 Sep 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Wed 12 May 2004 20,480 A..H. --- "C:\Plaah\Kalle\Koulu ty”t\~WRL0001.tmp" Tue 15 Nov 2005 78,104 ..SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe" Tue 15 Nov 2005 12,912 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll" Thu 23 Apr 2009 26,176 A..H. --- "C:\WINDOWS\system32\drivers\hamachi.sys" Thu 10 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" Fri 11 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp" Finished! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:19:33, on 23.10.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\LogMeIn Hamachi\hamachi-2.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\Launch Manager\OSD.exe C:\WINDOWS\system32\ctfmon.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\DriverMax\devices.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DriverMax_RESTART] "C:\DriverMax\devices.exe" -RESTART O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: karna.dat O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 6526 bytes
Poista kansio => C:\SDFix\ ----------------------------------------------------- Asenna koneellesi YKSI palomuuriohjelma: 1) ZoneAlarm (Asennuksessa poista rasti kohdasta "Include a ZoneAlarm Spy Blocker", koska tämä työkalupalkki ei ole suositeltava. 2) Agnitum 4) Comodo (Asennuksessa poista rasti kohdista "Install Comodo SafeSurf..", Make Comodo my default search provider" ja "Make Comodo Search my homepage". Nämä eivät ole suositeltavia. Ota asennuksessa rasti myös pois kohdasta "Install Comodo Antivirus", jos käytät muuta virustorjuntaa.) Jos käytät sisäänrakennettua Windowsin palomuuria, se ei ole suositeltua sillä se ei estä koneelta ulosmeneviä yhteyksiä. Tämä tarkoittaa että mikä tahansa haittaohjelma koneellasi on vapaa tekemään mitä tahansa internet -yhteydelläsi. Yksinkertaisesti sanottuna, Windows XP sisältää keskivertoa huonomman palomuurin. Tämä palomuuri EI ole mikään korvike omistautuneelle palomuuriratkaisulle. Muista käyttää vain yhtä palomuuria kerrallaan. ---------------------------------------------------------------- Poista ne rivit jotka ovat vielä jäljellä: Sammuta selain ja muut ohjelmat Fixin ajaksi. (ei virustorjuntaa) Käynnistä HijackThis:ja Scan ja ruksaa seuraavat punaisella listatut tiedostot (HJT sammuttaa ohjelman ei poista) O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onl.../fshc/fscax.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: karna.dat sekä sammuta ne.(fix Chekked) napista. Tyhjennä roskakori ja käynnistä koneesi uudelleen. Postita tänne seuraavat lokit: * Tuore HijackThis loki (Otetaan viimeisenä ennen postitusta) * * * Auttoiko ??? *
Ei tuo kone enää niin pahasti oo jumis.. En tiiä johtuuko se tuosta vai mistä et en pääse Explorerilla tai Modzillalla nettiin.. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:46:57, on 23.10.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\LogMeIn Hamachi\hamachi-2.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\Launch Manager\OSD.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\DriverMax\devices.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DriverMax_RESTART] "C:\DriverMax\devices.exe" -RESTART O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (file missing) O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (file missing) O10 - Broken Internet access because of LSP provider 'c:\windows\system32\rsvpsp.dll' missing O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: karna.dat C:\WINDOWS\system32\guard32.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 7163 bytes
Lataa SystemLook by. jpshortstuff TÄÄLTÄ. ja tallenna se työpöydälle. Tupla-klikkaa SystemLook.exe ajaaksesi sen. Kopioi(CTRL+C) alla olevasta laatikosta kaikki teksti, tekstialueeseen. Code: :filefind rsvpsp.dll :dir C:\WINDOWS\system32\drivers\etc /s Klikkaa nappulaa Look aloittaaksesi skannauksen. Kun skannaus on valmis avautuu muistio joka sisältää lokitiedot Klikkaa lokia hiiren oikealla painikkeella ja valitse "Valitse kaikki" Kopio ja liitä se seuraavaan viestiisi. (Loki löytyy myös työpöydältäsi nimellä SystemLook.txt) .
SystemLook v1.0 by jpshortstuff (29.08.09) Log created at 12:58 on 29/10/2009 by Paksupoika (Administrator - Elevation successful) ========== filefind ========== Searching for "rsvpsp.dll" C:\WINDOWS\$NtServicePackUninstall$\rsvpsp.dll -----c 90112 bytes [18:03 09/01/2009] [08:54 18/01/2006] 3B13FBEAE31F4FDD6A862C9B2D4C47F3 C:\WINDOWS\ServicePackFiles\i386\rsvpsp.dll ------ 92672 bytes [16:11 14/04/2008] [16:11 14/04/2008] E3F650908648D710FCC3E49DA1CA1924 C:\WINDOWS\system32\rsvpsp.dll --a--- 92672 bytes [17:43 12/12/2005] [16:11 14/04/2008] E3F650908648D710FCC3E49DA1CA1924 ========== dir ========== C:\WINDOWS\system32\drivers\etc - Parameters: "/s" ---Files--- HOSTS --a--- 686 bytes [12:47 23/10/2009] [12:47 23/10/2009] lmhosts.sam --a--- 3732 bytes [17:46 12/12/2005] [18:53 03/11/2008] networks --a--- 416 bytes [17:46 12/12/2005] [08:52 18/01/2006] protocol --a--- 829 bytes [17:46 12/12/2005] [08:52 18/01/2006] services --a--- 7151 bytes [17:46 12/12/2005] [08:52 18/01/2006] No folders found. -=End Of File=-
Ei toimi Explorer tai Modzilla vieläkään. Ohjelmia pystyy kyllä päivittään mut selaimet ei toimi en tiiä sitte onko ajurit sitte päin persettä..
Täällä on aivankuin raatelun jälkiä !!! IE7 ja IE8 on päällekäin ristissä ja solmussa !!! Yritä poistaa IE8 Lisää / Poista ohjelmalla laita ruxi ensin, että näytä päivitykset. -------------------------------------------------------------------------- Mikä tuon => Microsoft Officen tila on onko vai ei Toimiiko ??? IE7 kannattaisi asentaa sen saattaisi saada toimimaan. Kerropa ??? .