Ongelmaa kuvien kanssa.

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by kahh, Nov 26, 2009.

  1. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Kone alko yhtäkkiä hidasteleen kuvien kanssa. Esim jos seilaa deviantart.com:ssa ja yrittää kuunnella musiikkia samaan aikaan niin musiikki pätkii aina uutta sivua aukaistaessa ja suorittimen käyttöaste hyppää 100%. Photoshopillakaan ei paljon mitään voi tehdä, kun hidastelee ja tökkii niin pahasti.
    malwaret, ad-aware, spybot ja ccleaner ajettu läpi ja kaikki roska poistettu eikä auta.
    Hjackthis -logi:
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:22:41, on 26.11.2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\WTClient.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\WINDOWS\System32\Drivers\WTSRV.EXE
    C:\WINDOWS\system32\WISPTIS.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    F:\selaimet\Firefox\firefox.exe
    C:\Program Files\Winamp\winamp.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\WINDOWS\system32\wuauclt.exe
    F:\ohjelmat\Adobe PhotoShopCS2\Photoshop.exe
    C:\WINDOWS\System32\svchost.exe
    C:\DOCUME~1\HRH~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
    C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    C:\DOCUME~1\HRH~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
    F:\ohjelmat\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://adfarm.mediaplex.com/ad/bk/7...ltfarm.mediaplex.com/ad/!fm/8868-59393-3840-0
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [WTClient] WTClient.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "F:\ohjelmat\anti malware\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-21-1390067357-1563985344-682003330-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgres')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: ZDWLan Utility.lnk = C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
    O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

    --
    End of file - 7350 bytes
     
    kahh, Nov 26, 2009
    #1
  2. Hujo

    Hujo Guest

    Poista lisää poista sovelutuksesta

    Spybot - Search & Destroy

    Poista kansio

    C:\Program Files\Spybot - Search & Destroy

    helpottiko
     
    Hujo, Nov 26, 2009
    #2
  3. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    eipä helpottanut. Vieläkin takkuaa.
     
    kahh, Nov 26, 2009
    #3
  4. Hujo

    Hujo Guest

    otas tuo pois päältä

    1. Klikkaa hiiren oikella Ad-Watch-kuvaketta tehtäväpalkissa ja valitse "Restore Ad-Watch".
    2. Ruudun alalaidassa on kaksi rastitettavaa ruutua "Active" ja "Automatic".

    Active: Switches Monitoring On or Off without closing
    Automatic: Switches Automatic Blocking On or Off

    3. Ota rasti pois molemmista (punainen X).

    helpottiko

    Paljos siinä koneessa on keskusmuistia ja mikä on koneen teho
     
    Last edited by a moderator: Nov 26, 2009
    Hujo, Nov 26, 2009
    #4
  5. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Tuommosta Ad-Watchia en löytänyt mutta Ad-Awaren löysin. Siellä sitte oli Ad-Watch, mutta ei noita rakseja. Suljin koko roskan ja käynnistin uudelleen nii photoshop toimii hieman paremmin mutta silti kuvien selaus ja esikatselu tökkii.

    Muistia on 1giga ja prossussa on 2GHz
     
    kahh, Nov 26, 2009
    #5
  6. Hujo

    Hujo Guest

    Onkos tää Malwarebytes Anti-Malware päivitetty viimistä piirtoa myöden.

    ------

    scannaa hjt:lklä merkkaa paina Fix checked

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "F:\ohjelmat\anti malware\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install

    -----

    Kyllähän tuo f-secure on aika raskas ohjelma
    Tota muistia sais olla tuo 2g

    -----

    Lataa: RegSeeker.zip työpöydälle:

    Pura zip C:\RegSeeker\ kansioon. Sieltä käynnistät RegSeeker.exe ohjelman.
    Oikeasa yläkulmassa on Languages.... linkki, josta valitset Suomenkielen.
    Vasemmasta alakulmasta ruksit Luo vrmuuskopio ja sitten linkki Puhdista rekisteri
    Ruksit kaikkiin muihin kohtiin paitsi "Käyttökelvottomat.." sitten "OK" (odotat hetken).
    Ruutuun ilmestyy lista epäkelvoista rekisterimerkinnöistä, jotka alapalkista Valitse kohdasta
    klikkaat Valitse kaikki jolloin valitut saavat keltaisen pohjavärin.
    Alapalkin Toiminnot linkistä klikkaat Poista valitut kohteet
    Ponnahdusikkunaan "Kaikki valitut kohteet poistetaan ? vastaat "OK".
    Seuraavaan Ponnahdusikkunaan "Varmuuskopiot" vastaat "OK".
    Klikaa vasemmalta Lopeta RegSeeker ja käynnistä koneesi uudelleen.
     
    Hujo, Nov 26, 2009
    #6
  7. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    ei vaikutusta..
     
    kahh, Nov 27, 2009
    #7
  8. Hujo

    Hujo Guest

    scannaa uusi hjt:n loki
     
    Hujo, Nov 27, 2009
    #8
  9. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:29:30, on 27.11.2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\WTClient.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
    C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\WINDOWS\System32\Drivers\WTSRV.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\WINDOWS\system32\WISPTIS.EXE
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Winamp\winamp.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\WINDOWS\system32\wuauclt.exe
    F:\selaimet\Firefox\firefox.exe
    F:\ohjelmat\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://adfarm.mediaplex.com/ad/bk/7...ltfarm.mediaplex.com/ad/!fm/8868-59393-3840-0
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [WTClient] WTClient.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-21-1390067357-1563985344-682003330-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgres')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: ZDWLan Utility.lnk = C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
    O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

    --
    End of file - 6228 bytes
     
    kahh, Nov 27, 2009
    #9
  10. Hujo

    Hujo Guest

    Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.

    Käynnistä koneesi vikasietotilaan:

    sammuta ja käynnistä
    käynnistyksen yhteydessä hakkaa F8 nappia
    valitse nuolinäppäimellä vikasietotila
    paina enter ja enter
    valitse käyttäjätilisi
    paina kyllä

    Jossakin koneissa hakataan F8:sin sijasta F5:tä

    " Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix.
    " Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
    " Paina Y käynnistääksesi skriptin.
    " Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
    " Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
    " Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
    " Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
    " Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
    " Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt
     
    Hujo, Nov 27, 2009
    #10
  11. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    SDFix: Version 1.240
    Run by h”rh” on pe 27.11.2009 at 17:12

    Microsoft Windows XP [versio 5.1.2600]
    Running From: C:\Documents and Settings\h”rh”\Ty”p”yt„\SDFix\SDFix

    Checking Services :


    Restoring Default Security Values
    Restoring Default Hosts File

    Rebooting


    Checking Files :

    No Trojan Files Found






    Removing Temp Files

    ADS Check :



    Final Check :

    catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-11-27 17:15:37
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0


    Remaining Services :




    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\backWeb-7681197.exe"="C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\backWeb-7681197.exe:*:Enabled:backWeb-7681197"
    "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
    "C:\\Program Files\\BitTorrent\\BitTorrent.exe"="C:\\Program Files\\BitTorrent\\BitTorrent.exe:*:Enabled:BitTorrent"
    "C:\\Program Files\\B2BPOKER\\PointPoker\\jre\\bin\\javaw.exe"="C:\\Program Files\\B2BPOKER\\PointPoker\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
    "F:\\pelit\\gearena\\Garena\\Garena.exe"="F:\\pelit\\gearena\\Garena\\Garena.exe:*:Enabled:Garena"
    "C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "F:\\selaimet\\opera\\opera.exe"="F:\\selaimet\\opera\\opera.exe:*:Enabled:Opera Internet Browser"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    Remaining Files :



    Files with Hidden Attributes :


    Finished!


    Lisäsin koneeseen vielä muistia. Nyt on 2g eikä oikeen sekään auttanut.
     
    kahh, Nov 27, 2009
    #11
  12. Hujo

    Hujo Guest

    Katos mikä prosessit siellä syö eniten

    ctrl + alt + del

    ihan hyvä toi muistin lisäys. kun käyttön menee äkkiä toi 512mb muistia.
     
    Last edited by a moderator: Nov 27, 2009
    Hujo, Nov 27, 2009
    #12
  13. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Firefox 80-100% ja välillä fsdfwd.exe 0-20%
    Ei auttanut vaikka operalla kokeilin nettiä selata.. sama juttu.
    Photoshop sitten tietenkin vie 100% kun jotain sillä piirtelee ja tulee ikävästi jälessä välillä. Ennen toiminut ihan kivasti.
     
    kahh, Nov 27, 2009
    #13
  14. Hujo

    Hujo Guest

    1.Lataa Combofix.exe työpöydällesi yhdestä linkistä:
    Combofix1
    Combofix2

    2. Tuplaklikkaa Combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    Älä asenna Palautuskonsolia
     
    Hujo, Nov 27, 2009
    #14
  15. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    ComboFix 09-11-27.02 - hörhö 27.11.2009 22:24.1.1 - x86
    Microsoft Windows XP Professional 5.1.2600.2.1252.358.1035.18.2047.1549 [GMT 2:00]
    Sijainti: f:\ohjelmat\combofix\ComboFix.exe

    VAROITUS - PALAUTUSKONSOLIA EI OLE ASENNETTU !!
    .

    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2009-10-27 to 2009-11-27 )))))))))))))))))
    .

    2009-11-27 17:11 . 2009-11-27 17:11 -------- d-----w- c:\windows\Sun
    2009-11-27 17:10 . 2009-11-27 17:10 411368 ----a-w- c:\windows\system32\deploytk.dll
    2009-11-27 17:10 . 2009-11-27 17:10 -------- d-----w- c:\program files\Java
    2009-11-27 15:11 . 2009-11-27 15:11 577536 -c--a-w- c:\windows\system32\dllcache\user32.dll
    2009-11-27 15:10 . 2009-11-27 15:10 -------- d-----w- c:\windows\ERUNT
    2009-11-26 12:03 . 2007-03-06 04:25 196096 ----a-r- c:\windows\system32\fdco1.dll
    2009-11-26 12:03 . 2007-03-06 04:27 58752 ----a-r- c:\windows\system32\drivers\NVENETFD.sys
    2009-11-26 12:03 . 2007-02-01 09:44 356352 ----a-w- c:\windows\system32\nvunrm.exe
    2009-11-26 12:03 . 2007-03-06 04:27 110592 ----a-r- c:\windows\system32\drivers\nvtcp.sys
    2009-11-26 12:03 . 2007-03-06 04:27 921984 ----a-r- c:\windows\system32\drivers\nvnrm.sys
    2009-11-26 12:03 . 2007-03-06 04:26 261632 ----a-r- c:\windows\system32\drivers\nvsnpu.sys
    2009-11-26 12:03 . 2007-03-06 04:25 9216 ----a-r- c:\windows\system32\bdco1.dll
    2009-11-26 12:03 . 2007-02-01 09:44 36352 ----a-r- c:\windows\system32\nvconrm.dll
    2009-11-26 12:03 . 2007-03-06 04:27 19968 ----a-r- c:\windows\system32\drivers\nvnetbus.sys
    2009-11-26 12:03 . 2007-07-05 14:01 356352 ----a-w- c:\windows\system32\NVUNINST.EXE
    2009-11-26 11:14 . 2009-11-27 15:20 8 ----a-w- c:\windows\system32\nvModes.dat
    2009-11-26 10:56 . 2009-11-26 10:56 -------- d-----w- C:\NVIDIA
    2009-11-26 09:46 . 2009-11-26 08:23 15688 ----a-w- c:\windows\system32\lsdelete.exe
    2009-11-26 08:24 . 2009-11-26 13:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-11-26 08:23 . 2009-11-26 08:22 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
    2009-11-26 08:23 . 2009-11-26 08:23 314712 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\threatwork.exe
    2009-11-26 08:23 . 2009-11-26 08:23 349008 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lavalicense.dll
    2009-11-26 08:23 . 2009-11-26 08:23 25440 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\savapibridge.dll
    2009-11-26 08:23 . 2009-11-26 08:23 168800 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lavamessage.dll
    2009-11-26 08:23 . 2009-11-26 08:23 15688 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lsdelete.exe
    2009-11-26 08:21 . 2009-11-26 08:21 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
    2009-11-26 08:21 . 2009-01-18 21:43 2892112 -c--a-w- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
    2009-11-26 08:21 . 2009-11-26 08:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
    2009-11-26 08:21 . 2009-11-26 08:21 -------- d-----w- c:\program files\Lavasoft
    2009-11-25 18:34 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-11-25 18:34 . 2009-11-25 18:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-11-25 18:34 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-11-24 19:53 . 2000-07-08 13:06 87040 ----a-w- c:\windows\UnGins.exe
    2009-11-22 14:04 . 2009-11-22 14:04 -------- d-----w- c:\program files\MSECache
    2009-11-22 13:48 . 2007-04-09 11:23 28040 ----a-w- c:\windows\system32\mdimon.dll
    2009-11-22 13:44 . 2009-11-22 13:44 -------- d-----w- c:\windows\SHELLNEW
    2009-11-22 13:44 . 2009-11-22 13:44 -------- d-----w- c:\program files\Microsoft.NET
    2009-11-18 11:21 . 2009-11-18 11:22 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
    2009-11-17 13:53 . 2009-11-17 13:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Fallout3
    2009-11-17 13:53 . 2008-09-16 22:20 121064 ----a-w- c:\documents and settings\All Users\Application Data\Fallout3\setup.exe
    2009-11-17 13:49 . 2009-11-17 13:49 -------- d-----w- c:\windows\system32\xlive
    2009-11-06 16:32 . 2009-11-06 16:32 -------- d-----w- c:\program files\Microsoft
    2009-11-06 16:32 . 2009-11-06 16:32 -------- d-----w- c:\program files\Windows Live SkyDrive
    2009-10-29 16:03 . 2009-10-29 16:03 -------- d-----w- c:\windows\system32\XPSViewer
    2009-10-29 16:02 . 2009-10-29 16:02 -------- d-----w- c:\program files\MSBuild
    2009-10-29 16:02 . 2009-10-29 16:02 -------- d-----w- c:\program files\Reference Assemblies
    2009-10-29 16:02 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
    2009-10-29 16:02 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
    2009-10-29 16:02 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
    2009-10-29 16:02 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
    2009-10-29 16:02 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
    2009-10-29 16:01 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
    2009-10-29 16:01 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
    2009-10-29 15:58 . 2009-10-29 15:58 -------- d-----w- c:\program files\MSXML 6.0

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-11-27 15:19 . 2001-10-09 12:00 80530 ----a-w- c:\windows\system32\perfc00B.dat
    2009-11-27 15:19 . 2001-10-09 12:00 406890 ----a-w- c:\windows\system32\perfh00B.dat
    2009-11-26 10:57 . 2009-09-29 15:31 -------- d-----w- c:\program files\NVIDIA Corporation
    2009-11-17 13:53 . 2009-09-29 10:55 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-11-06 16:32 . 2009-09-29 15:49 -------- d-----w- c:\program files\Windows Live
    2009-11-01 19:03 . 2009-10-21 13:28 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
    2009-10-27 12:06 . 2009-10-05 14:48 -------- d-----w- c:\program files\Betfair
    2009-10-21 16:20 . 2009-10-21 13:29 -------- d-----w- c:\program files\PokerTracker 3
    2009-10-21 13:32 . 2009-10-21 13:32 -------- d-----w- c:\program files\PostgreSQL
    2009-10-18 16:35 . 2009-10-18 16:35 -------- d-----w- c:\program files\PENSUITEPRO
    2009-10-18 16:35 . 2009-10-18 16:34 -------- d-----w- c:\program files\GENIUS TABLET
    2009-10-16 20:49 . 2009-10-16 18:15 -------- d-----w- c:\program files\PartyGaming
    2009-10-15 14:40 . 2009-10-15 14:40 -------- d-----w- c:\program files\B2BPOKER
    2009-10-05 15:40 . 2009-10-05 15:40 40 ----a-w- c:\windows\ujf635.bin
    2009-09-30 15:02 . 2009-09-30 14:59 -------- d-----w- c:\program files\Common Files\Adobe
    2009-09-30 15:01 . 2009-09-30 15:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Adobe Systems
    2009-09-30 15:00 . 2009-09-30 15:00 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
    2009-09-30 14:56 . 2009-09-30 14:56 -------- d-----w- c:\program files\BitTorrent
    2009-09-30 14:24 . 2009-09-29 15:49 -------- dcsh--w- c:\program files\Common Files\WindowsLiveInstaller
    2009-09-30 14:20 . 2009-09-29 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\WLInstaller
    2009-09-29 17:26 . 2009-09-29 17:26 -------- d-----w- c:\program files\K-Lite Codec Pack
    2009-09-29 17:23 . 2009-09-29 17:23 -------- d-----w- c:\program files\Webteh
    2009-09-29 15:50 . 2009-09-29 15:50 -------- d-----w- c:\program files\Common Files\Windows Live
    2009-09-29 15:31 . 2009-09-29 15:31 -------- d-----w- c:\program files\AGEIA Technologies
    2009-09-29 15:31 . 2009-09-29 15:31 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
    2009-09-29 15:31 . 2009-09-29 15:31 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
    2009-09-29 15:30 . 2009-09-29 14:52 -------- d-----w- c:\program files\Winamp
    2009-09-29 15:04 . 2009-09-29 15:04 0 ----a-w- c:\windows\nsreg.dat
    2009-09-29 14:58 . 2009-09-29 14:58 -------- d-----w- c:\program files\ZyDAS Technology Corporation
    2009-09-29 14:58 . 2009-09-29 10:55 -------- d-----w- c:\program files\Common Files\InstallShield
    2009-09-29 11:14 . 2009-09-29 11:13 -------- d-----w- c:\program files\ASUS
    2009-09-29 11:14 . 2009-09-29 11:14 12288 ----a-w- c:\windows\system32\drivers\EIO64_xp.sys
    2009-09-29 11:12 . 2009-09-29 11:12 -------- d-----w- c:\program files\My Company Name
    2009-09-29 10:57 . 2009-09-29 10:57 -------- d-----w- c:\program files\DIFX
    2009-09-29 10:55 . 2009-09-29 10:55 -------- d-----w- c:\program files\Realtek
    2009-09-29 10:49 . 2009-09-29 10:49 81920 ------r- c:\windows\bwUnin-6.1.4.58-7681197L.exe
    2009-09-29 10:49 . 2009-09-29 10:49 -------- d-----w- c:\program files\F-Secure
    2009-09-29 10:39 . 2009-09-29 10:26 86327 ----a-w- c:\windows\PCHEALTH\HELPCTR\OfflineCache\index.dat
    2009-09-29 10:27 . 2009-09-29 10:27 -------- d-----w- c:\program files\microsoft frontpage
    2009-09-29 10:25 . 2009-09-29 10:25 21672 ----a-w- c:\windows\system32\emptyregdb.dat
    2009-09-27 16:19 . 2009-09-27 16:19 3674112 ----a-w- c:\windows\system32\nvwssr.dll
    2009-09-27 14:12 . 2009-09-29 10:37 7655872 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
    2009-09-27 14:12 . 2009-09-29 10:37 5900416 ----a-w- c:\windows\system32\nv4_disp.dll
    2009-09-27 14:12 . 2009-09-27 14:12 888832 ----a-w- c:\windows\system32\nvapi.dll
    2009-09-27 14:12 . 2009-09-27 14:12 2194024 ----a-w- c:\windows\system32\nvcuvid.dll
    2009-09-27 14:12 . 2009-09-27 14:12 2007040 ----a-w- c:\windows\system32\nvcuda.dll
    2009-09-27 14:12 . 2009-09-27 14:12 1714792 ----a-w- c:\windows\system32\nvcuvenc.dll
    2009-09-27 14:12 . 2009-09-27 14:12 170600 ----a-w- c:\windows\system32\nvcodins.dll
    2009-09-27 14:12 . 2009-09-27 14:12 170600 ----a-w- c:\windows\system32\nvcod.dll
    2009-09-27 14:12 . 2009-09-27 14:12 1604482 ----a-w- c:\windows\system32\nvdata.bin
    2009-09-27 14:12 . 2009-09-27 14:12 10756096 ----a-w- c:\windows\system32\nvoglnt.dll
    2009-09-25 05:58 . 2001-10-09 12:00 662016 ----a-w- c:\windows\system32\wininet.dll
    2009-09-25 05:58 . 2009-09-29 10:37 81920 ------w- c:\windows\system32\ieencode.dll
    2009-09-11 14:35 . 2001-10-09 12:00 133632 ----a-w- c:\windows\system32\msv1_0.dll
    2009-09-04 20:46 . 2001-10-09 12:00 58880 ----a-w- c:\windows\system32\msasn1.dll
    2009-09-04 14:44 . 2009-10-05 15:38 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
    2009-09-04 14:44 . 2009-10-05 15:38 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
    2009-09-04 14:44 . 2009-10-05 15:38 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
    2009-09-04 14:29 . 2009-10-05 15:38 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
    2009-09-04 14:29 . 2009-10-05 15:38 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
    2009-09-04 14:29 . 2009-10-05 15:38 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
    2009-09-04 14:29 . 2009-10-05 15:38 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
    2009-09-04 14:29 . 2009-10-05 15:38 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ASUS SmartDoctor"="c:\program files\ASUS\SmartDoctor\SmartDoctor.exe " [X]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "F-Secure Manager"="c:\program files\F-Secure\Common\FSM32.EXE" [2003-07-23 118833]
    "F-Secure TNB"="c:\program files\F-Secure\TNB\TNBUtil.exe" [2003-05-09 647168]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-09-27 86016]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-09-27 13918208]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-27 149280]
    "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-10-30 16269312]
    "SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]
    "WTClient"="WTClient.exe" - c:\windows\system32\WTClient.exe [2007-04-11 40960]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-09-14 15360]

    c:\documents and settings\h”rh”\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

    c:\documents and settings\All Users\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    ZDWLan Utility.lnk - c:\program files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe [2009-9-29 487424]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
    @="Service"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\backWeb-7681197.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
    "c:\\Program Files\\B2BPOKER\\PointPoker\\jre\\bin\\javaw.exe"=
    "f:\\pelit\\gearena\\Garena\\Garena.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "f:\\selaimet\\opera\\opera.exe"=

    R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [29.9.2009 12:49 82144]
    R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [26.11.2009 10:23 64160]
    R2 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\FSfilter.sys [29.9.2009 12:49 48336]
    R2 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\win2k\fsgk.sys [29.9.2009 12:49 40624]
    R2 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\FSrec.sys [29.9.2009 12:49 15984]
    R2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [19.9.2008 2:03 65536]
    S2 BackWeb Client - 7681197;F-Secure Automatic Update;c:\progra~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE [29.9.2009 12:49 16384]
    S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\HRH~1\LOCALS~1\Temp\UNW19F.tmp --> c:\docume~1\HRH~1\LOCALS~1\Temp\UNW19F.tmp [?]
    S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18.1.2009 23:34 1028432]

    --- Muut muistissa olevat ajurit/palvelut ---

    *NewlyCreated* - JAVAQUICKSTARTERSERVICE
    *NewlyCreated* - WMIAPSRV
    .
    'Ajoitetut tehtävät'-kansion sisältö

    2009-11-26 c:\windows\Tasks\Ad-Aware Update (Weekly).job
    - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 08:22]

    2009-11-27 c:\windows\Tasks\WGASetup.job
    - c:\windows\system32\KB905474\wgasetup.exe [2009-10-04 19:18]
    .
    .
    ------- Täydentävä tarkistus -------
    .
    uInternet Connection Wizard,ShellNext = hxxp://adfarm.mediaplex.com/ad/bk/7022-59250-3840-0?Poker_Download_Success=1&mpuid=&mpro=http://altfarm.mediaplex.com/ad/!fm/8868-59393-3840-0
    uInternet Settings,ProxyOverride = localhost
    IE: Vie Microsoft E&xceliin - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    .
    - - - - POISTETUT JÄMÄRIVIT - - - -

    AddRemove-Ad-Aware - c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe REMOVE=TRUE MODIFY=FALSE
    AddRemove-NVIDIA Drivers - c:\windows\system32\NVUNINST.EXE UninstallGUI



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-11-27 22:29
    Windows 5.1.2600 Service Pack 2 NTFS

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja käynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
    "ImagePath"="\??\c:\docume~1\HRH~1\LOCALS~1\Temp\UNW19F.tmp"
    .
    --------------------- LUKITUT REKISTERIAVAIMET ---------------------

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\¹mÓw*]
    "AB79C053C7D38EE4AB9A00CB3B5D2472"="C?\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\PUBPLACE.HTT"
    .
    --------------------- Prosesseihin ladatut DLLt ---------------------

    - - - - - - - > 'explorer.exe'(2008)
    c:\windows\system32\msi.dll
    c:\progra~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
    c:\program files\Common Files\Microsoft Shared\Web Components\11\1035\OWCI11.DLL
    c:\windows\System32\shdoclc.dll
    .
    Valmistumisajankohta: 2009-11-27 22:32
    ComboFix-quarantined-files.txt 2009-11-27 20:32

    Ennen ajoa: 6 408 364 032 tavua vapaana
    Ajon jälkeen: 6 415 831 040 tavua vapaana

    - - End Of File - - 08EF45E87E227387317E6C737E168520
     
    kahh, Nov 27, 2009
    #15
  16. Hujo

    Hujo Guest

    Uudelleen nimeäminen

    1. Klikkaa hiiren oikealla painikkeella HijackThis ikonia.

    [​IMG]

    2. Valitse Uudelleennineä/ Rename.
    [​IMG]
    3. Kirjoita scanner.exe
    [​IMG]

    scannaa uusi hjt:n loki

    ------

    Tarkista Kaspersky Online Skannerilla

    1. Lue läpi vaatimukset ja yksityisyyssäännökset ja klikkaa Accept.
    2. Skannerin ja virustietokannan lataus alkaa. Sinulta kysytään sallitko Kasperskyltä tulevan ohjelman asentamisen. Klikkaa Aja/Run.
    3. Kun lataus on valmis, klikkaa Settings.
    4. Varmistu, että seuraavat kohdat on valittu. Jos ne eivät ole, valitse ne ja klikkaa Save:
    Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    Mail databases
    5. Klikkaa Oma Tietokone, My Computer Scan-kohdan alapuolelta.
    6. Kun tarkistus on valmis, tulokset näytetään. Klikkaa View Scan Report.
    7. Näet listan saastuneista kohteista. Klikkaa Save Report As....
    8. Tallenna tiedosto työpöydällesi. Muuta Tiedostotyyppi/Files of type muotoon Tekstitiedosto/Text file(.txt) ennen kuin klikkaat Save.
    9. Kopioi ja liitä tiedoston sisältö seuraavaan vastaukseesi uuden HijackThis-lokin kera
     
    Hujo, Nov 27, 2009
    #16
  17. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    En onnistunu tuolla kasperskyllä skannaamaan, kun aina skannaus jumitti jonkin tiedoston kohdalle. Jotain 5 kertaa kokeilin ja aina johonki jumitti. Hjt:n lokin ainakin sain:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:13:08, on 30.11.2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\WTClient.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
    C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\WINDOWS\System32\Drivers\WTSRV.EXE
    C:\WINDOWS\system32\WISPTIS.EXE
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\WINDOWS\System32\wbem\wmiapsrv.exe
    F:\selaimet\Firefox\firefox.exe
    C:\Program Files\Winamp\winamp.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    F:\ohjelmat\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://adfarm.mediaplex.com/ad/bk/7...ltfarm.mediaplex.com/ad/!fm/8868-59393-3840-0
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [WTClient] WTClient.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
    O4 - HKUS\S-1-5-21-1390067357-1563985344-682003330-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgres')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: ZDWLan Utility.lnk = C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
    O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

    --
    End of file - 7009 bytes
     
    kahh, Nov 30, 2009
    #17
  18. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina Fix checked

    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
     
    Last edited by a moderator: Nov 30, 2009
    Hujo, Nov 30, 2009
    #18
  19. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:09:11, on 1.12.2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\WINDOWS\system32\WTClient.exe
    C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
    C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\WINDOWS\System32\Drivers\WTSRV.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\WINDOWS\system32\WISPTIS.EXE
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\WINDOWS\System32\wbem\wmiapsrv.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Winamp\winamp.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\WINDOWS\system32\taskmgr.exe
    F:\selaimet\Firefox\firefox.exe
    F:\ohjelmat\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://adfarm.mediaplex.com/ad/bk/7...ltfarm.mediaplex.com/ad/!fm/8868-59393-3840-0
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [WTClient] WTClient.exe
    O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
    O4 - HKUS\S-1-5-21-1390067357-1563985344-682003330-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgres')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: ZDWLan Utility.lnk = C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
    O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

    --
    End of file - 6600 bytes
     
    kahh, Dec 1, 2009
    #19
  20. kahh

    kahh Member

    Joined:
    Nov 26, 2009
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    11
    Mitään muuta kikkaa vielä?

    Semmosenkin huomasin tässä että piirtopöytä ei toimi enää. Ajureitten uudelleen asennus tarpeessa?
     
    kahh, Dec 10, 2009
    #20

Share This Page