Löytyisikö boottailun syy? HJT-logi

Logfile of HijackThis v1.99.1
Scan saved at 18:47:34, on 19.4.2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\LVComS.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\PROGRA~1\MediaKey\MMKeybd.EXE
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\winampclassic\Winamp\Winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Winamp\winamp.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
F:\Program Files\BitComet\BitComet.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\winampclassic\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.werro.ee/activex/AxisCamControl.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} - http://a532.g.akamai.net/7/532/6712...com/downloads/player/Install2.0/Installer.exe
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: RadClock - Unknown owner - C:\WINNT\system32\RadClock.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

 

1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

 

Tällänen tuli:


"x" - pe 20.04.2007 12:01:41 Service Pack 4
ComboFix 07-04-19.2V - Running from: C:\Documents and Settings\x\Omat tiedostot\Vastaanotetut tiedostot\


(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\DEFAUL~1\APPLIC~1\netmon\domains.txt
C:\DOCUME~1\DEFAUL~1\APPLIC~1\netmon\log.txt
C:\DOCUME~1\DEFAUL~1\APPLIC~1\netmon


((((((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\nm
-------\LEGACY_CMDSERVICE
-------\LEGACY_NETWORK_MONITOR


((((((((((((((((((((((((((((((( Files Created from 2000-01-07 to 20.04.2007 ))))))))))))))))))))))))))))))))))


No new files created in this timespan


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2014.07.05 15:24 74384 --a------ C:\WINNT\system32\drivers\SCSIPORT.SYS
2014.04.05 09:59 136880 --------- C:\WINNT\system32\drivers\fltmgr.sys
2014.01.04 16:47 4480 --------- C:\WINNT\system32\drivers\SonyUSBF.sys
2013.10.99 00:57 68912 --a------ C:\WINNT\system32\drivers\USBAUDIO.sys
2012.12.02 01:14 7424 --a------ C:\WINNT\system32\drivers\mskssrv.sys
2012.12.02 01:14 5504 --a------ C:\WINNT\system32\drivers\mstee.sys
2012.12.02 01:14 5248 --a------ C:\WINNT\system32\drivers\mspclock.sys
2012.12.02 01:14 4096 --a------ C:\WINNT\system32\drivers\swenum.sys
2012.12.02 01:14 130304 --a------ C:\WINNT\system32\drivers\ks.sys
2012.08.04 01:42 67344 --a------ C:\WINNT\system32\drivers\ipnat.sys
2012.05.05 03:25 320176 --a------ C:\WINNT\system32\drivers\tcpip.sys
2012.05.04 15:14 58000 --a------ C:\WINNT\system32\drivers\cdr4_2K.sys
2012.05.04 15:14 23420 --a------ C:\WINNT\system32\drivers\cdralw2k.sys
2012.03.05 01:28 20640 --------- C:\WINNT\system32\drivers\pxhelp20.sys
2011.09.02 10:20 11510 --------- C:\WINNT\system32\drivers\VMCUSB.sys
2010.11.03 12:31 36232 --------- C:\WINNT\system32\drivers\NETMD033.sys
2010.05.05 12:20 513424 --a------ C:\WINNT\system32\drivers\ntfs.sys
2010.01.03 10:56 30921 --a------ C:\WINNT\system32\drivers\SQCaptur.sys
2010.01.03 09:30 25449 --a------ C:\WINNT\system32\drivers\SQCamD.sys
2009.07.04 05:27 48512 --a------ C:\WINNT\system32\drivers\stream.sys
2009.07.04 03:58 83968 --a------ C:\WINNT\system32\drivers\nabtsfec.sys
2009.07.04 03:58 56832 --a------ C:\WINNT\system32\drivers\msdv.sys
2009.07.04 03:58 18688 --a------ C:\WINNT\system32\drivers\wstcodec.sys
2009.07.04 03:58 16384 --a------ C:\WINNT\system32\drivers\ccdecode.sys
2009.07.04 03:58 15104 --a------ C:\WINNT\system32\drivers\mpe.sys
2009.07.04 03:58 14976 --a------ C:\WINNT\system32\drivers\streamip.sys
2009.07.04 03:58 11392 --a------ C:\WINNT\system32\drivers\bdasup.sys
2009.07.04 03:58 10880 --a------ C:\WINNT\system32\drivers\slip.sys
2009.07.04 03:58 10112 --a------ C:\WINNT\system32\drivers\ndisip.sys
2009.03.05 18:27 41888 --a------ C:\WINNT\system32\drivers\Oreans.sys
2008.08.02 15:51 38951 --------- C:\WINNT\system32\drivers\NETMDUSB.sys
2008.04.05 14:51 63248 --a------ C:\WINNT\system32\drivers\cdfs.sys
2008.04.05 14:51 432976 --a------ C:\WINNT\system32\drivers\mrxsmb.sys
2008.04.05 14:51 175632 --a------ C:\WINNT\system32\drivers\netbt.sys
2006.09.04 09:06 161072 --a------ C:\WINNT\system32\drivers\nwrdr.sys
2005.10.99 00:03 13904 --a------ C:\WINNT\system32\drivers\hidusb.sys
2005.09.06 19:03 3968 --a------ C:\WINNT\system32\drivers\AvgAsCln.sys
2005.01.04 11:12 21648 --a------ C:\WINNT\system32\drivers\HIDKBFLT.SYS
2003.06.05 15:39 116400 --a------ C:\WINNT\system32\drivers\ftdisk.sys
2003.05.05 01:10 238928 --a------ C:\WINNT\system32\drivers\SRV.SYS
2002.12.04 16:07 89328 --a------ C:\WINNT\system32\drivers\mup.sys
2002.12.04 16:07 63280 --a------ C:\WINNT\system32\drivers\udfs.sys
2002.07.03 15:00 9680 --a------ C:\WINNT\system32\drivers\netdtect.sys
2002.07.03 15:00 93360 --a------ C:\WINNT\system32\drivers\ndiswan.sys
2002.07.03 15:00 9200 --a------ C:\WINNT\system32\drivers\ndistapi.sys
2002.07.03 15:00 91408 --a------ C:\WINNT\system32\drivers\nwlnkipx.sys
2002.07.03 15:00 88816 --a------ C:\WINNT\system32\drivers\lvcam.sys
2002.07.03 15:00 86672 --a------ C:\WINNT\system32\drivers\atapi.sys
2002.07.03 15:00 8016 --a------ C:\WINNT\system32\drivers\rasacd.sys
2002.07.03 15:00 79120 --a------ C:\WINNT\system32\drivers\lvcodek.sys
2002.07.03 15:00 7728 --a------ C:\WINNT\system32\drivers\diskperf.sys
2002.07.03 15:00 7600 --a------ C:\WINNT\system32\drivers\fs_rec.sys
2002.07.03 15:00 7312 --a------ C:\WINNT\system32\drivers\dmload.sys
2002.07.03 15:00 65520 --a------ C:\WINNT\system32\drivers\nwlnknb.sys
2002.07.03 15:00 6544 --a------ C:\WINNT\system32\drivers\parvdm.sys
2002.07.03 15:00 62736 --a------ C:\WINNT\system32\drivers\serial.sys
2002.07.03 15:00 60496 --a------ C:\WINNT\system32\drivers\psched.sys
2002.07.03 15:00 6032 --a------ C:\WINNT\system32\drivers\rootmdm.sys
2002.07.03 15:00 60208 --a------ C:\WINNT\system32\drivers\parallel.sys
2002.07.03 15:00 59312 --a------ C:\WINNT\system32\drivers\pci.sys
2002.07.03 15:00 59280 --a------ C:\WINNT\system32\drivers\vdmindvd.sys
2002.07.03 15:00 58480 --a------ C:\WINNT\system32\drivers\nwlnkspx.sys
2002.07.03 15:00 57904 --a------ C:\WINNT\system32\drivers\atmarpc.sys
2002.07.03 15:00 57296 --a------ C:\WINNT\system32\drivers\irda.sys
2002.07.03 15:00 57264 --a------ C:\WINNT\system32\drivers\mf.sys
2002.07.03 15:00 56112 --a------ C:\WINNT\system32\drivers\dlc.sys
2002.07.03 15:00 52112 --a------ C:\WINNT\system32\drivers\rasl2tp.sys
2002.07.03 15:00 52048 --a------ C:\WINNT\system32\drivers\tosdvd.sys
2002.07.03 15:00 50640 --a------ C:\WINNT\system32\drivers\videoprt.sys
2002.07.03 15:00 48496 --a------ C:\WINNT\system32\drivers\atmlane.sys
2002.07.03 15:00 48464 --a------ C:\WINNT\system32\drivers\raspptp.sys
2002.07.03 15:00 46992 --a------ C:\WINNT\system32\drivers\isapnp.sys
2002.07.03 15:00 46992 --a------ C:\WINNT\system32\drivers\i8042prt.sys
2002.07.03 15:00 4624 --a------ C:\WINNT\system32\drivers\intelide.sys
2002.07.03 15:00 4240 --a------ C:\WINNT\system32\drivers\wmilib.sys
2002.07.03 15:00 4240 --a------ C:\WINNT\system32\drivers\mnmdd.sys
2002.07.03 15:00 4080 --a------ C:\WINNT\system32\drivers\beep.sys
2002.07.03 15:00 40432 --a------ C:\WINNT\system32\drivers\ndproxy.sys
2002.07.03 15:00 40176 --a------ C:\WINNT\system32\drivers\usbhub.sys
2002.07.03 15:00 37552 --a------ C:\WINNT\system32\drivers\nmnt.sys
2002.07.03 15:00 37040 --a------ C:\WINNT\system32\drivers\npfs.sys
2002.07.03 15:00 369104 --a------ C:\WINNT\system32\drivers\dmboot.sys
2002.07.03 15:00 35344 --a------ C:\WINNT\system32\drivers\nwlnkfwd.sys
2002.07.03 15:00 35024 --a------ C:\WINNT\system32\drivers\rawwan.sys
2002.07.03 15:00 34832 --a------ C:\WINNT\system32\drivers\classpnp.sys
2002.07.03 15:00 34704 --a------ C:\WINNT\system32\drivers\msgpc.sys
2002.07.03 15:00 34416 --a------ C:\WINNT\system32\drivers\ipfltdrv.sys
2002.07.03 15:00 33616 --a------ C:\WINNT\system32\drivers\fips.sys
2002.07.03 15:00 33456 --a------ C:\WINNT\system32\drivers\netbios.sys
2002.07.03 15:00 331088 --a------ C:\WINNT\system32\drivers\atmuni.sys
2002.07.03 15:00 32848 --a------ C:\WINNT\system32\drivers\uhcd.sys
2002.07.03 15:00 32272 --a------ C:\WINNT\system32\drivers\wanarp.sys
2002.07.03 15:00 30768 --a------ C:\WINNT\system32\drivers\disk.sys
2002.07.03 15:00 29168 --a------ C:\WINNT\system32\drivers\modem.sys
2002.07.03 15:00 2800 --a------ C:\WINNT\system32\drivers\null.sys
2002.07.03 15:00 27984 --a------ C:\WINNT\system32\drivers\cdrom.sys
2002.07.03 15:00 27440 --a------ C:\WINNT\system32\drivers\efs.sys
2002.07.03 15:00 272496 --a------ C:\WINNT\system32\drivers\cinemst2.sys
2002.07.03 15:00 26256 --a------ C:\WINNT\system32\drivers\fdc.sys
2002.07.03 15:00 25232 --a------ C:\WINNT\system32\drivers\parport.sys
2002.07.03 15:00 24752 --a------ C:\WINNT\system32\drivers\hidclass.sys
2002.07.03 15:00 24528 --a------ C:\WINNT\system32\drivers\kbdclass.sys
2002.07.03 15:00 23888 --a------ C:\WINNT\system32\drivers\usbcamd.sys
2002.07.03 15:00 23056 --a------ C:\WINNT\system32\drivers\hidparse.sys
2002.07.03 15:00 22064 --a------ C:\WINNT\system32\drivers\sonydcam.sys
2002.07.03 15:00 22064 --a------ C:\WINNT\system32\drivers\pciidex.sys
2002.07.03 15:00 22000 --a------ C:\WINNT\system32\drivers\tsbvcap.sys
2002.07.03 15:00 21776 --a------ C:\WINNT\system32\drivers\mouclass.sys
2002.07.03 15:00 21712 --a------ C:\WINNT\system32\drivers\rca.sys
2002.07.03 15:00 21328 --a------ C:\WINNT\system32\drivers\msfs.sys
2002.07.03 15:00 20688 --a------ C:\WINNT\system32\drivers\usbd.sys
2002.07.03 15:00 20208 --a------ C:\WINNT\system32\drivers\msircomm.sys
2002.07.03 15:00 19984 --a------ C:\WINNT\system32\drivers\ipinip.sys
2002.07.03 15:00 19952 --a------ C:\WINNT\system32\drivers\irsir.sys
2002.07.03 15:00 19920 --a------ C:\WINNT\system32\drivers\rasirda.sys
2002.07.03 15:00 19312 --a------ C:\WINNT\system32\drivers\flpydisk.sys
2002.07.03 15:00 19088 --a------ C:\WINNT\system32\drivers\cdaudio.sys
2002.07.03 15:00 17840 --a------ C:\WINNT\system32\drivers\asyncmac.sys
2002.07.03 15:00 17680 --a------ C:\WINNT\system32\drivers\ptilink.sys
2002.07.03 15:00 17424 --a------ C:\WINNT\system32\drivers\lvsound.sys
2002.07.03 15:00 173232 --a------ C:\WINNT\system32\drivers\update.sys
2002.07.03 15:00 170928 --a------ C:\WINNT\system32\drivers\ndis.sys
2002.07.03 15:00 16880 --a------ C:\WINNT\system32\drivers\raspti.sys
2002.07.03 15:00 16240 --a------ C:\WINNT\system32\drivers\tdi.sys
2002.07.03 15:00 15120 --a------ C:\WINNT\system32\drivers\usbintel.sys
2002.07.03 15:00 148400 --a------ C:\WINNT\system32\drivers\sfmatalk.sys
2002.07.03 15:00 14832 --a------ C:\WINNT\system32\drivers\smclib.sys
2002.07.03 15:00 14288 --a------ C:\WINNT\system32\drivers\diskdump.sys
2002.07.03 15:00 14160 --a------ C:\WINNT\system32\drivers\serenum.sys
2002.07.03 15:00 13968 --a------ C:\WINNT\system32\drivers\vga.sys
2002.07.03 15:00 137936 --a------ C:\WINNT\system32\drivers\dmio.sys
2002.07.03 15:00 12880 --a------ C:\WINNT\system32\drivers\class2.sys
2002.07.03 15:00 12560 --a------ C:\WINNT\system32\drivers\nwlnkflt.sys
2002.07.03 15:00 12368 --a------ C:\WINNT\system32\drivers\fsvga.sys
2002.07.03 15:00 12016 --a------ C:\WINNT\system32\drivers\ws2ifsl.sys
2002.07.03 15:00 11984 --a------ C:\WINNT\system32\drivers\ndisuio.sys
2002.07.03 15:00 11792 --a------ C:\WINNT\system32\drivers\partmgr.sys
2002.07.03 15:00 109584 --a------ C:\WINNT\system32\drivers\pcmcia.sys
2002.07.03 15:00 10928 --a------ C:\WINNT\system32\drivers\tape.sys
2002.07.03 15:00 105840 --a------ C:\WINNT\system32\drivers\streams.sys
2002.07.03 15:00 10384 --a------ C:\WINNT\system32\drivers\sfloppy.sys
2002.07.03 15:00 10288 --a------ C:\WINNT\system32\drivers\irenum.sys
2002.07.03 15:00 102160 --a------ C:\WINNT\system32\drivers\nbf.sys
2002.07.03 15:00 10064 --a------ C:\WINNT\system32\drivers\dxapi.sys
2002.07.02 15:54 129438 --a------ C:\WINNT\system32\drivers\MR97310c.sys
2002.05.00 05:44 10848 -ra------ C:\WINNT\system32\drivers\SECDRV.SYS


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Synchronization Manager"="mobsync.exe /logon"
"NeroCheck"="C:\\WINNT\\system32\\\\NeroCheck.exe"
"MessengerPlus3"="\"C:\\Program Files\\Messenger Plus! 3\\MsgPlus.exe\""
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe"
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"
"Lexmark X1100 Series"="\"C:\\Program Files\\Lexmark X1100 Series\\lxbkbmgr.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"ISUSPM Startup"="C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\UPDATE~1\\isuspm.exe -startup"
"ISUSScheduler"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"MediaKey"="C:\\PROGRA~1\\MediaKey\\MMKeybd.EXE"
"SsAAD.exe"="C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe"
"DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1033"
"WinampAgent"="\"C:\\Program Files\\winampclassic\\Winamp\\Winampa.exe\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"ZoneAlarm Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"=""

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"internat.exe"="internat.exe"
"ufuw"="C:\\PROGRA~1\\COMMON~1\\ufuw\\ufuwm.exe"
"Twtn"="\"C:\\DOCUME~1\\DEFAUL~1\\OMATTI~1\\FNTS~1\\logonui.exe\" -vt yazr"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{35B2861B-2B26-4691-9FF0-09083722C736}"="RadExe Extension"
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\nwprovau

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0nwprovau\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0\0
Notification Packages REG_MULTI_SZ scecli\0\0


[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
rpcss REG_MULTI_SZ RpcSs\0\0
wugroup REG_MULTI_SZ wuauserv\0\0
BITSgroup REG_MULTI_SZ BITS\0\0

hklm\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs*
WmdmPmSN




~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

backup-20070131-134021-204
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
backup-20060411-150027-994
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Unknown owner - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe (file missing)
backup-20060411-150027-327
O23 - Service: F-Secure Management Agent (FSMA) - Unknown owner - C:\Program Files\F-Secure\Common\FSMA32.EXE (file missing)
backup-20060411-150027-732
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\F-Secure\Common\FSAA.EXE (file missing)
backup-20060411-150027-581
O23 - Service: F-Secure Network Request Broker - Unknown owner - C:\Program Files\F-Secure\Common\FNRB32.EXE (file missing)
backup-20060411-150027-298
O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown owner - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe (file missing)
backup-20060411-150027-106
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe (file missing)
backup-20060411-150027-500
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE (file missing)
backup-20060411-150027-770
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.superwebsearch.com/ie/
backup-20060410-220848-900
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/09c91d9dc35b302d1e05/netzip/RdxIE601.cab
backup-20060410-220848-324
O23 - Service: windows dll (dll host) - Unknown owner - C:\WINNT\dllhosts.exe (file missing)
backup-20060410-220848-702
O16 - DPF: {1230CB21-C88D-11CF-B347-000000000000} - http://www.eingang69.de/EroticAccess/Cabs/1854008.cab
backup-20060410-220848-572
O4 - HKLM\..\Run: [P2P Networking] C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTART
backup-20060410-220848-793
O4 - HKLM\..\Run: [websx] C:\Program Files\websx\int102647.exe -auto
backup-20060410-220848-875
R3 - Default URLSearchHook is missing
********************************************************************

catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006
http://www.gmer.net

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

********************************************************************

Completion time: pe 20.04.2007 12:17:45
C:\ComboFix-quarantined-files.txt ... 20.04.07 12:17

 

Jaahans

Lataa tuosta Brute Force Uninstaller työpöydällesi.
[*]Oikea-klikkaa BFU zippiä työpöydälläsi, ja valitse Pura kaikki.
[*]Klikkaa "Seuraava"
[*]Boksissa missä valita mihin haluat tiedostot purkaa,
[*]Klikkaa "Selaa"
[*]Klikkaa + merkkiä oman tietokoneen vieressä
[*]Klikkaa "Paikallinen Levy (C" tai mikä sinun tärkein levysi onkin
[*]Klikkaa "Tee uusi kansio"
[*]Kirjoita BFU
[*]Klikkaa "Seuraava", ja ÄLÄ rastita boksia "Näytä puretut tiedostot" ja klikkaa "Valmis".
OIKEA-KLIKKAA TÄSTÄ ja valitse "Save As" (Explorerissa "Save Target As") ladataksesi Alcra PLUS Poistajan.
Tallenna se samaan kansioon jonka teit aiemmin (c:\BFU).

Älä tee mitään tällä vielä!

Käynnistä koneesi vikasietotilaan naputtamalla F8 näppäintä käynnistyksen yhteydessä.

Klikkaa Käynnistä > Oma tietokone ja navigoi C:\BFU kansioon.
[*] Käynnistä Brute Force Uninstaller tupla-klikkaamalla BFU.exe
[*] Scriptline to execute kentässä kirjoita tai liitä c:\bfu\alcanshorty.bfu
[*] Klikkaa Execute ja anna sen tehdä työnsä. (Sinun pitäisi nähdä edistyspalkki jos teit tämän oikein.)
[*]Odota Complete script execution boksia ja klikkaa OK.
[*]Klikkaa exit lopettaaksesi Brute Force Uninstallerin.
Käynnistä normaalisti uudelleen ja postita tuore HijackThis logi.

 

Tällänen logi tuli :

Logfile of HijackThis v1.99.1
Scan saved at 15:48:55, on 20.4.2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\PROGRA~1\MediaKey\MMKeybd.EXE
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\winampclassic\Winamp\Winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\system32\LVComS.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\winampclassic\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.werro.ee/activex/AxisCamControl.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} - http://a532.g.akamai.net/7/532/6712...com/downloads/player/Install2.0/Installer.exe
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: RadClock - Unknown owner - C:\WINNT\system32\RadClock.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

 

Fixaa

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} - http://a532.g.akamai.net/7/532/6712/2.0....0/Installer.exe

********

1,Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi. Jos sinulla on jo kyseinen ohjelma siirry suoraan kohtaan 2!

[*]Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
[*]Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.

2. [*]Käynnistä AVG eAnti-Spyware.
[*]Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
[*]Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
[*]Paina hetken kuluttua uudestaan "Start Update" , jos päivitykset eivät heti onnistu
[*]Jos automaattipäivitys ei jostain syystä toimi, niin tunnisteet voi ladata manuaalisesti http://www.ewido.net/en/download/updates/ -linkin takaa.
[*]Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
[*]Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
[*]Sitten "Reports" valikon alta:
[*]Laita täppi kohtaan "Automatically generate report after every scan"
[*]Ota täppi pois kohdasta"Only if threats were found"
[*]Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
[*]"Resident shield is", muuta tila active:sta inactive:ksi
[*]Sulje ohjelma, ÄLÄ skannaa vielä.

Käynnistä tietokone vikasietotilaan:
1. Käynnistä tietokone uudelleen.
2. Kun tietokone käynnistyy, paina F8-näppäintä.
3. Näyttöön tulee erilaisia käynnistysvaihtoehtoja.
4. Valitse näppäimistön nuolinäppäinten avulla Vikasietotila.
5. Paina ENTER-näppäintä.

HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
[*]Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
[*]Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
[*]AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
[*]Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
[*]Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"

[*]Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
[*]Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
[*]Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

***********

Avaa omatietokone
Paina hiiren oikealla napilla Paikallinen levy (C asemaa (Tai sitä kovalevyasemaa jota käytät, olisi suotavaa jos tekisit tämän kaikille kiintolevyillesi joita omistat esim. D, F, G)
->valitse ominaisuudet
Avaa työkalut välilehti
->aja virheen etsintä
*molemmat kohdat, siis etsi ja korjaa
->eheytä kiintolevy

*********

Lataa tuosta CCleaner ja asenna se: http://ccleaner.com/download/downloadpage.aspx?1
Kun asennat tätä ohjelmaa niin älä asenna sen mukana tulevaa yahoo-toolbaria. Tämä ohjelma
etsii ja poistaa ns. turhia tiedostoja koneeltasi eli esim: temp tiedostot ja tällä saat myös
puhdistettua rekisterisi. -korjaa automaattisesti tiedostojärjestelmän virheet¨
-etsi ja yritä korjata virheelliset sektorit

*****

Jos sinulla ei ole tätä java versiota (6.1):

Javan päivitys ja välimuistin tyhjennys:

1. Klikkaa Käynnistä -> Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa.
2. Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... )
Niissä pitäisi olla seuraava kuva vieressä:
3. Valitse kaikki entiset Java versiosi ja valitse Poista.
4. Asenna uusin Java päivitys seuraavasta linkistä..
5. Käynnistä kone uudelleen asennuksen jälkeen:

http://java.sun.com/javase/downloads/index.jsp

Rullaa alas kohteeseen Java Runtime Environment (JRE) 6u1

Paina Download

Ruksaa Accept, ota offline installation, tallenna vaikka työpöydälle ja asenna se.

6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).

7. General Settings -osion alla, vedä liukusäädintä (Disk Space) pienemmälle, ja klikkaa Delete Files -nappia.

(Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle).

8. Varmista että kaikki kaksi valintaa ovat rastitettuja:

*Applications and Applets

*Trace and Log Files


Ja paina OK -nappia

9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.

10. Klikkaa OK jättääksesi Java asetusikkunasi.

*********

Uusi Hijackthis logi ja onko ongelmia?

 

Tätä kohtaa en löytäny Sunjavasta:

8. Varmista että kaikki kaksi valintaa ovat rastitettuja:

*Applications and Applets

*Trace and Log Files


Mutta tässä on logit:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 21:00:41 21.4.2007

+ Scan result:



:mozilla.519:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.520:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.642:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.643:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.644:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.645:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.646:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.760:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.793:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.163:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.165:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.167:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.447:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.555:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.556:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.305:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.112:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.115:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.44:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.45:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.46:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.47:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.308:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\x\Cookies\x@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.497:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.316:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.317:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.318:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.319:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.158:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
:mozilla.160:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.161:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.134:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.391:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.392:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.29:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.686:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.810:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Etracker : Cleaned.
:mozilla.151:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.152:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.153:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.280:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.523:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.568:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.109:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.409:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.487:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.509:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.662:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.767:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.790:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.48:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.49:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.733:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Information : Cleaned.
C:\Documents and Settings\x\Cookies\x@searchportal.information[1].txt -> TrackingCookie.Information : Cleaned.
:mozilla.789:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.228:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.229:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.589:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.590:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.567:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.85:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.457:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.458:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.459:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.460:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.461:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.462:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.463:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.464:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.465:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.466:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.135:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.136:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.137:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.138:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.139:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.297:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.489:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.490:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.491:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.492:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.493:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.494:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.753:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.580:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.240:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.241:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.242:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.243:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.244:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.299:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.300:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.446:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.448:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.449:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.450:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.451:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.11:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\x\Cookies\x@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.574:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.575:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.576:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.337:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Toplist : Cleaned.
:mozilla.39:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.40:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.41:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.42:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\x\Cookies\x@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.622:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.623:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.94:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.601:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.780:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.538:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.81:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.82:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.83:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.84:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.306:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.307:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.309:C:\Documents and Settings\x\Omat tiedostot\cookies.txt -> TrackingCookie.Zedo : Cleaned.
F:\Program Files\DC++\Downloads\Tekstitykset\Symantec Norton 2005 Key Generators ( antivirus, ghost, internet security, partitionmagic, systemworks )\Symantec Norton Ghost 9.00 Key Generator\KEY GENERATOR.exe -> Trojan.Keygen.s : Cleaned with backup (quarantined).


::Report end





HJT:


Logfile of HijackThis v1.99.1
Scan saved at 23:46:41, on 21.4.2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\MediaKey\MMKeybd.EXE
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINNT\system32\LVComS.exe
C:\Program Files\winampclassic\Winamp\Winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\winampclassic\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.werro.ee/activex/AxisCamControl.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: RadClock - Unknown owner - C:\WINNT\system32\RadClock.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

 

loki näyttää olevan kunnossa, ongelmia`?

 

Vieläkin boottailee :/ mutta epäilen että syy on kohta hajoavassa kovalevyssä

 

jep, se voi olla syynä,