Resurssien hallinta kaatuilee, jotain vikaa?

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Gorga, Mar 5, 2008.

  1. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    Elikkä tää Vistan resurssien hallinta takkuilee ja on koko lailla epästabiili, joten menee hermo ja aattelin gurujen tieto taitoa kalastella ja tossa ois HJT logi, jos siitä ois apuja.


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:18:00, on 5.3.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
    C:\Windows\system32\Dwm.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    C:\Program Files\Comodo\CBOClean\BOC425.EXE
    C:\Program Files\Synaptics\SynTP\SynTPStart.exe
    C:\Program Files\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\conime.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FI_FI&c=73&bd=Pavilion&pf=laptop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FI_FI&c=73&bd=Pavilion&pf=laptop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    F3 - REG:win.ini: load=
    F3 - REG:win.ini: run=
    O1 - Hosts: ::1 localhost
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
    O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    O4 - HKLM\..\Run: [BOC-425] C:\PROGRA~1\Comodo\CBOClean\BOC425.exe
    O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -s
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll
    O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
    O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 10504 bytes
     
    Gorga, Mar 5, 2008
    #1
  2. Hujo

    Hujo Guest

    1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
    combofix1
    combofix2

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
     
    Hujo, Mar 5, 2008
    #2
  3. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    Näyttäisi siltä, ettei tää mun kone(vista) ei tykkää tosta Combofix ohjelmasta yhtään, koska se jumii myös eikä välillä käynnixty ollenkaan. olen kokeillut käynnistää sitä kaikin mahdollisin keinoin, jotka tiedän, eli järjestelmän valvojana, XP yhteen sopivana ja noitten yhdistelmänä, mut ilman toimivaa tulosta
     
    Gorga, Mar 6, 2008
    #3
  4. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    No nyt rupes toimimaan, kun aikansa käynnisteli tota eli tossapa ois logia


    ComboFix 08-03-05.3 - Käyttäjä 2008-03-06 20:03:46.1 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1007 [GMT 2:00]
    Running from: C:\Downloads\Bit\ComboFix.exe
    * Created a new restore point
    .

    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-02-06 to 2008-03-06 )))))))))))))))))
    .

    2008-03-06 19:39 . 2008-03-06 19:43 <KANSIO> d-------- C:\ComboFix(2)
    2008-03-05 20:04 . 2008-03-05 20:04 <KANSIO> d-------- C:\Program Files\Trend Micro
    2008-02-25 18:39 . 2008-02-25 18:37 838,094 --a------ C:\Windows\System32\oem68.inf
    2008-02-25 18:36 . 2008-02-25 18:35 3,231,744 --a------ C:\Windows\System32\bcmihvsrv.dll
    2008-02-25 18:36 . 2008-02-25 18:35 2,895,872 --a------ C:\Windows\System32\bcmihvui.dll
    2008-02-25 18:36 . 2008-02-25 18:35 87,328 --a------ C:\Windows\System32\bcmwlcoi.dll
    2008-02-25 18:33 . 2008-02-25 18:33 <KANSIO> d-------- C:\Program Files\HP DVB-T TV Tuner
    2008-02-25 18:33 . 2008-02-25 18:33 <KANSIO> d-------- C:\Program Files\Common Files\LightScribe
    2008-02-25 18:17 . 2007-03-21 22:02 37,376 --a------ C:\Windows\System32\drivers\rixdptsk.sys
    2008-02-25 18:11 . 2008-02-25 18:11 <KANSIO> d-------- C:\Windows\System32\Hauppauge
    2008-02-25 18:11 . 2008-02-25 18:11 <KANSIO> d-------- C:\Program Files\WinTV
    2008-02-25 18:11 . 2007-05-01 15:26 258,104 --a------ C:\Windows\System32\hcwpnp32.dll
    2008-02-25 18:11 . 2006-10-10 10:15 98,360 --a------ C:\Windows\System32\hcwi2c32.dll
    2008-02-25 18:11 . 2006-10-10 17:47 36,921 --a------ C:\Windows\System32\hcwutl32_priv.dll
    2008-02-25 18:11 . 2006-10-10 18:47 36,921 --a------ C:\Windows\System32\hcwutl32.dll
    2008-02-24 22:54 . 2008-02-24 22:54 <KANSIO> d-------- C:\Users\All Users\Windows Genuine Advantage
    2008-02-24 13:40 . 2008-02-24 13:41 <KANSIO> d-------- C:\Program Files\World of Warcraft
    2008-02-24 13:40 . 2008-02-24 14:04 <KANSIO> d-------- C:\Program Files\Common Files\Blizzard Entertainment
    2008-02-22 20:58 . 2008-02-22 20:58 <KANSIO> d-------- C:\Program Files\Microsoft Silverlight
    2008-02-22 10:11 . 2008-02-22 10:11 194,560 --a------ C:\Windows\System32\WebClnt.dll
    2008-02-22 10:11 . 2008-02-22 10:11 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys
    2008-02-22 10:09 . 2008-02-22 10:09 1,585,664 --a------ C:\Windows\System32\setupapi.dll
    2008-02-22 10:09 . 2008-02-22 10:09 613,888 --a------ C:\Windows\System32\wpd_ci.dll
    2008-02-22 10:09 . 2008-02-22 10:09 558,080 --a------ C:\Windows\System32\oleaut32.dll
    2008-02-22 10:09 . 2008-02-22 10:09 260,096 --a------ C:\Windows\System32\dpx.dll
    2008-02-22 10:09 . 2008-02-22 10:09 224,824 --a------ C:\Windows\System32\clfs.sys
    2008-02-22 10:09 . 2008-02-22 10:09 221,696 --a------ C:\Windows\System32\umpnpmgr.dll
    2008-02-22 10:09 . 2008-02-22 10:09 101,888 --a------ C:\Windows\System32\drvinst.exe
    2008-02-22 10:09 . 2008-02-22 10:09 35,384 --a------ C:\Windows\System32\drivers\WdfLdr.sys
    2008-02-22 10:09 . 2008-02-22 10:09 19,456 --a------ C:\Windows\System32\cfgmgr32.dll
    2008-02-22 10:09 . 2008-02-22 10:09 6,656 --a------ C:\Windows\System32\kbd106n.dll
    2008-02-22 10:06 . 2008-02-22 10:06 3,504,696 --a------ C:\Windows\System32\ntkrnlpa.exe
    2008-02-22 10:06 . 2008-02-22 10:06 3,470,392 --a------ C:\Windows\System32\ntoskrnl.exe
    2008-02-22 10:06 . 2008-02-22 10:06 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
    2008-02-22 10:06 . 2008-02-22 10:06 109,624 --a------ C:\Windows\System32\drivers\ataport.sys
    2008-02-22 10:06 . 2008-02-22 10:06 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
    2008-02-22 10:06 . 2008-02-22 10:06 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
    2008-02-22 10:06 . 2008-02-22 10:06 15,928 --a------ C:\Windows\System32\drivers\pciide.sys
    2008-02-22 10:05 . 2008-02-22 10:05 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
    2008-02-22 10:05 . 2008-02-22 10:05 1,686,528 --a------ C:\Windows\System32\gameux.dll
    2008-02-22 10:05 . 2008-02-22 10:05 806,400 --a------ C:\Windows\System32\drivers\tcpip.sys
    2008-02-22 10:05 . 2008-02-22 10:05 217,144 --a------ C:\Windows\System32\drivers\netio.sys
    2008-02-22 10:05 . 2008-02-22 10:05 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
    2008-02-22 10:05 . 2008-02-22 10:05 24,064 --a------ C:\Windows\System32\netcfg.exe
    2008-02-22 10:05 . 2008-02-22 10:05 22,016 --a------ C:\Windows\System32\netiougc.exe
    2008-02-22 09:59 . 2008-02-22 09:59 1,244,672 --a------ C:\Windows\System32\mcmde.dll
    2008-02-10 13:00 . 2008-02-10 14:36 <KANSIO> d-------- C:\temp

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-03-05 16:12 --------- d-----w C:\Program Files\IObit
    2008-03-05 13:17 --------- d-----w C:\Program Files\CCleaner
    2008-03-02 15:41 --------- d-----w C:\ProgramData\NVIDIA
    2008-02-27 12:22 --------- d-----w C:\Program Files\Yahoo!
    2008-02-27 12:21 --------- d-----w C:\Program Files\Movie Joiner
    2008-02-25 16:35 1,044,984 ----a-w C:\Windows\system32\drivers\BCMWL6.SYS
    2008-02-25 16:17 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-02-22 16:31 --------- d-----w C:\ProgramData\Microsoft Help
    2008-02-22 14:35 --------- d-----w C:\Program Files\ffdshow
    2008-02-22 12:41 --------- d-----w C:\Program Files\a-squared Free
    2008-02-22 08:09 495,160 ----a-w C:\Windows\system32\drivers\Wdf01000.sys
    2008-02-22 08:05 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
    2008-02-22 08:05 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
    2008-02-22 08:05 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
    2008-02-22 08:05 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
    2008-02-22 08:01 824,832 ----a-w C:\Windows\System32\wininet.dll
    2008-02-22 08:01 56,320 ----a-w C:\Windows\System32\iesetup.dll
    2008-02-22 08:01 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
    2008-02-22 08:01 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
    2008-02-10 12:15 --------- d-----w C:\ProgramData\Media Center Programs
    2008-01-26 10:12 --------- d-----w C:\Program Files\Microsoft Works
    2008-01-26 10:11 --------- d-----w C:\Program Files\MSBuild
    2008-01-26 10:07 --------- d-----w C:\Program Files\Microsoft.NET
    2008-01-26 10:00 --------- d-----w C:\Program Files\Microsoft Visual Studio 8
    2008-01-24 13:23 --------- d-----w C:\ProgramData\Installations
    2008-01-22 17:33 --------- d-----w C:\ProgramData\Uniblue
    2008-01-22 17:29 --------- d-----w C:\Program Files\Uniblue
    2008-01-22 17:23 --------- d-----w C:\Program Files\Kate's Video Joiner
    2008-01-14 14:02 --------- d-----w C:\Program Files\Microsoft Games
    2008-01-10 16:54 43,520 ----a-w C:\Windows\System32\CmdLineExt03.dll
    2008-01-10 16:45 21,840 ----a-w C:\Windows\System32\SIntfNT.dll
    2008-01-10 16:45 17,212 ----a-w C:\Windows\System32\SIntf32.dll
    2008-01-10 16:45 12,067 ----a-w C:\Windows\System32\SIntf16.dll
    2008-01-10 16:31 94,208 ----a-w C:\Windows\DIIUnin.exe
    2008-01-10 06:41 --------- d-----w C:\Program Files\Windows Mail
    2008-01-09 20:58 1,060,920 ----a-w C:\Windows\system32\drivers\ntfs.sys
    2008-01-09 20:55 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys
    2008-01-09 20:55 --------- d-----w C:\Program Files\Windows Sidebar
    2008-01-09 20:54 11,776 ----a-w C:\Windows\System32\sbunattend.exe
    2008-01-08 15:19 --------- d-----w C:\Program Files\Nokia
    2008-01-08 15:19 --------- d-----w C:\Program Files\Common Files\Nokia
    2007-12-24 11:49 7,680 ----a-w C:\Windows\System32\ff_vfw.dll
    2007-12-22 17:43 669,184 ----a-w C:\Windows\System32\pbsvc.exe
    2007-12-22 17:43 66,872 ----a-w C:\Windows\System32\PnkBstrA.exe
    2007-12-22 17:43 103,736 ----a-w C:\Windows\System32\PnkBstrB.exe
    2007-12-12 13:47 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
    2007-12-12 13:47 223,232 ----a-w C:\Windows\System32\WMASF.DLL
    2007-12-12 13:47 1,327,104 ----a-w C:\Windows\System32\quartz.dll
    2007-11-20 12:51 32 ----a-w C:\Users\All Users\ezsid.dat
    2007-11-20 12:51 32 ----a-w C:\ProgramData\ezsid.dat
    2007-09-20 17:03 174 --sha-w C:\Program Files\desktop.ini
    2006-03-20 12:37 5,689,344 ----a-w C:\Program Files\mplayerc.exe
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VirtualExpanderFile.1]
    @={E4000AC4-5E5F-4956-807A-C5854405D64F}

    [HKEY_CLASSES_ROOT\CLSID\{E4000AC4-5E5F-4956-807A-C5854405D64F}]
    C:\Users\Käyttäjä\AppData\Local\Sony Corporation\VirtualExpander\VEShellExt.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-09 22:54 1232896]
    "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-27 13:21 1006264]
    "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-15 02:50 1021224]
    "QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-02-13 10:38 159744]
    "hpWirelessAssistant"="C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 12:18 472776]
    "WAWifiMessage"="C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 15:12 317128]
    "BOC-425"="C:\PROGRA~1\Comodo\CBOClean\BOC425.exe" [2007-08-08 18:49 338432]
    "SynTPStart"="C:\Program Files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 02:29 102400]
    "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-30 19:14 579072]
    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
    "COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\cfp.exe" [2007-11-22 10:31 1481984]
    "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-11-07 08:05 8534560]
    "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-11-07 08:05 81920]
    "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "Launcher"="%WINDIR%\SMINST\launcher.exe" [ ]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-11-03 14:45 219136]
    "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
    "LogonHoursAction"= 2 (0x2)
    "DontDisplayLogonHoursWarnings"= 1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
    avgwlntf.dll 2007-11-03 14:45 9216 C:\Windows\System32\avgwlntf.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"= C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
    --a------ 2005-02-16 22:11 49152 C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    --a------ 2006-01-12 14:40 155648 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
    --a------ 2007-11-07 08:05 8534560 C:\Windows\system32\NvCpl.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1218168287-3316355153-1681125236-1001]
    "EnableNotificationsRef"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{25114BCA-57F7-4E92-B6CD-4EE175652815}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)|Edge=TRUE|
    "{0F285AD1-2E05-4079-ABAB-F2C438235721}"= C:\Program Files\HP\QuickPlay\QP.exe:Quick Play|Desc=Quick Play
    "{A20445C7-8B0D-4B18-A009-64A3B28732AE}"= C:\Program Files\HP\QuickPlay\QPService.exe:Quick Play Resident Program|Desc=Quick Play Resident Program
    "{D6D351F0-4BFA-4AB9-8B52-09AFAC69C676}"= %ProgramFiles%\Elisa\Avustaja\Elisa.exe:Elisa Avustaja
    "TCP Query User{F17CFB18-67AC-4DD5-9252-40882053F154}C:\program files\internet explorer\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer|Desc=Internet Explorer
    "UDP Query User{AE18205D-31D7-4878-B837-07542893015D}C:\program files\internet explorer\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer|Desc=Internet Explorer
    "TCP Query User{A0B96BE4-BABF-48B9-B9BC-1877114E3732}C:\program files\mirc\mirc.exe"= UDP:C:\program files\mirc\mirc.exe:mIRC|Desc=mIRC
    "UDP Query User{43E84F97-BB09-450D-B3BA-C38B46384DC9}C:\program files\mirc\mirc.exe"= TCP:C:\program files\mirc\mirc.exe:mIRC|Desc=mIRC
    "{65C307DA-5314-42F7-B079-18AC1780F07E}"= UDP:D:\Games\BF2\BF2.exe:Battlefield 2
    "{DAD24CB4-BE70-455E-BDF2-344831FE82D5}"= TCP:D:\Games\BF2\BF2.exe:Battlefield 2
    "{04167BD7-C7FE-4DE0-828B-1D8192D37491}"= UDP:D:\Games\NWN2\nwn2main.exe:Neverwinter Nights 2 Main
    "{832D2CBD-B080-4DB7-8F41-3AF2DC1AB9E4}"= TCP:D:\Games\NWN2\nwn2main.exe:Neverwinter Nights 2 Main
    "{605767F2-3E60-470C-B095-9F99CB98AC16}"= UDP:D:\Games\NWN2\nwn2main_amdxp.exe:Neverwinter Nights 2 AMD
    "{68F2F303-DB73-4343-BB1F-E9F0FD8313D8}"= TCP:D:\Games\NWN2\nwn2main_amdxp.exe:Neverwinter Nights 2 AMD
    "{53DB3F74-967E-4C2E-B5A3-B8DDEE51E748}"= UDP:D:\Games\NWN2\nwupdate.exe:Neverwinter Nights 2 Updater
    "{0B13ADDD-F0B5-4FEE-A793-929C30B3D62D}"= TCP:D:\Games\NWN2\nwupdate.exe:Neverwinter Nights 2 Updater
    "{4C6C3973-8F45-46AF-B3DE-28FB416F2C92}"= UDP:D:\Games\NWN2\nwn2server.exe:Neverwinter Nights 2 Server
    "{FF84F8AF-5CD7-4C49-8C54-34396698BABD}"= TCP:D:\Games\NWN2\nwn2server.exe:Neverwinter Nights 2 Server
    "TCP Query User{E3B41205-9980-43A2-BD27-E01FE5114137}C:\program files\bitcomet\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client|Desc=BitComet - a BitTorrent Client
    "UDP Query User{D751EB0C-D71B-489B-A4B2-0E391F9BF2D4}C:\program files\bitcomet\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client|Desc=BitComet - a BitTorrent Client
    "{10236174-EABB-4B68-9D5A-026795BE57C8}"= UDP:8027:BitComet 8027 TCP
    "{8079A542-7CEB-40B9-9D1D-AE2767330225}"= TCP:8027:BitComet 8027 UDP
    "TCP Query User{331CEB12-7E02-42F9-901C-9E6E6AA62E70}D:\games\the lord of the rings online\lotroclient.exe"= UDP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
    "UDP Query User{09DE62D0-790F-4E99-A0B5-F3B78FA50F6A}D:\games\the lord of the rings online\lotroclient.exe"= TCP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
    "{427E026D-B27F-4E7D-8AFF-C2C6ED18A499}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{1A59505D-7FF0-4C3D-8E84-DB5CD433FAE5}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
    "{86E28B12-0E2A-4CE9-9F37-0226953808FA}"= UDP:D:\Games\RTS\Company of heroes\RelicCOH.exe:Company of Heroes - Opposing Fronts
    "{E26750D5-E745-4738-9A8E-FDF75A1ADC37}"= TCP:D:\Games\RTS\Company of heroes\RelicCOH.exe:Company of Heroes - Opposing Fronts
    "TCP Query User{9596A72C-93E4-467B-B6AE-8863DBFF78D3}D:\games\day of defeat\steam.exe"= UDP:D:\games\day of defeat\steam.exe:Steam|Desc=Steam
    "UDP Query User{BEE42A06-B48B-42B5-BA54-0E3429053219}D:\games\day of defeat\steam.exe"= TCP:D:\games\day of defeat\steam.exe:Steam|Desc=Steam
    "TCP Query User{547FE48E-D512-4554-BF07-DB1BA9057774}D:\games\the lord of the rings online\lotroclient.exe"= UDP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
    "UDP Query User{CAD777BE-B8A4-415A-8FF3-836DDF857FF1}D:\games\the lord of the rings online\lotroclient.exe"= TCP:D:\games\the lord of the rings online\lotroclient.exe:lotroclient|Desc=lotroclient
    "{D81F5EC7-C6B0-4ECE-95AD-7944EBCC70DA}"= UDP:D:\Games\COD4\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
    "{0FFDA027-7795-457B-B68C-99B024F2B04B}"= TCP:D:\Games\COD4\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
    "{5867A4D2-D23A-45B5-855A-562CC2DEC61C}"= UDP:D:\Games\Crysis\Bin32\Crysis.exe:Crysis_32
    "{6BDA8073-9B20-44C3-A7A5-B477F6314A6F}"= TCP:D:\Games\Crysis\Bin32\Crysis.exe:Crysis_32
    "{2CFA3CAF-700A-4296-B550-0C348F94BCDA}"= UDP:D:\Games\Crysis\Bin32\CrysisDedicatedServer.exe:CrysisDedicatedServer_32
    "{65864A89-FA73-42E1-9250-1E0C544659D0}"= TCP:D:\Games\Crysis\Bin32\CrysisDedicatedServer.exe:CrysisDedicatedServer_32
    "{7F35911B-A77F-4F21-8028-03C02BE4974D}"= UDP:C:\Windows\System32\PnkBstrA.exe:pnkBstrA
    "{D9C9F077-A455-49F7-809A-3417140390DB}"= TCP:C:\Windows\System32\PnkBstrA.exe:pnkBstrA
    "{8D678519-4E9F-4F7D-95C6-ABEF88170510}"= UDP:C:\Windows\System32\PnkBstrB.exe:pnkBstrB
    "{CB7D5961-394D-4E59-AF48-5C1C94543803}"= TCP:C:\Windows\System32\PnkBstrB.exe:pnkBstrB
    "{BBAA22E8-172F-443A-8D09-EB07BC493E59}"= UDP:D:\Games\Gears of war\Binaries\WarGame-G4WLive.exe:Gears of War
    "{D7F410FA-1979-4449-B08A-9127421AE5B2}"= TCP:D:\Games\Gears of war\Binaries\WarGame-G4WLive.exe:Gears of War
    "{5ABCF9E8-C8DF-4F46-9569-85CF5C3661F9}"= UDP:D:\Games\Hellgate London\Launcher.exe:Hellgate: London
    "{3C85E6B6-713E-4BD8-979C-FB5DA32AE126}"= TCP:D:\Games\Hellgate London\Launcher.exe:Hellgate: London
    "{B0F1FCF6-AA08-4A0F-8227-3CFD205955D2}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
    "{C46A319F-3713-4FC7-8DE8-5B18A6105CE7}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{601D7205-EF0F-4C5F-A06A-1C79282FB000}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{BA595031-8E1C-4543-9197-D6BF1E30D3B4}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{26980AF8-B0B5-49B8-8C8B-4673892DC87D}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{DE0D1835-E03B-4F4B-8C9C-FE6E70F9A258}"= UDP:D:\Games\Supreme Commander\GPGNet\GPG.Multiplayer.Client.exe:GPGNet - Supreme Commander
    "{52E39E86-D080-4828-B0D4-AF77368F2D45}"= TCP:D:\Games\Supreme Commander\GPGNet\GPG.Multiplayer.Client.exe:GPGNet - Supreme Commander
    "TCP Query User{E635A9EA-81DB-4C44-85AA-07C061276C4D}C:\program files\skype\phone\skype.exe"= UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath |Desc=Skype. Take a deep breath
    "UDP Query User{B700D587-8314-424F-8F45-B125458AA0F0}C:\program files\skype\phone\skype.exe"= TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath |Desc=Skype. Take a deep breath
    "TCP Query User{ECEDFA7B-3B76-4388-9F14-DDB34528E5A4}D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe"= UDP:D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader
    "UDP Query User{5279DE98-B706-4195-81E7-DC21DA861901}D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe"= TCP:D:\games\world of warcraft\wow-2.3.0-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader
    "TCP Query User{784533AC-48C5-45B1-8BB8-D78118156C0B}D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe"= UDP:D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader
    "UDP Query User{3BBAF5A2-2766-4D90-A0A3-5595A8432907}D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe"= TCP:D:\games\world of warcraft\wow-2.3.0.7561-to-2.3.2.7741-engb-downloader.exe:Blizzard Downloader|Desc=Blizzard Downloader

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
    "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

    R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys [2007-11-20 22:37]
    R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys [2007-11-20 22:37]
    R2 ASBroker;Logon Session Broker;C:\Windows\System32\svchost.exe [2006-11-02 11:45]
    R2 ASChannel;Local Communication Channel;C:\Windows\System32\svchost.exe [2006-11-02 11:45]
    R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2007-07-10 05:27]
    R3 nvsmu;nvsmu;C:\Windows\system32\DRIVERS\nvsmu.sys [2007-02-17 01:50]
    S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-02-25 18:35]
    S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2007-10-25 20:04]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    Cognizance REG_MULTI_SZ ASBroker ASChannel
    GPSvcGroup REG_MULTI_SZ GPSvc

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5e55a65a-6843-11dc-80a0-001b248d51f9}]
    \shell\AutoRun\command - G:\autorun.exe


    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
    "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
    .
    'Ajoitetut tehtävät'-kansion sisältö
    "2008-02-24 01:00:00 C:\Windows\Tasks\AdwareAlert Scheduled Scan.job"
    - C:\Program Files\AdwareAlert\AdwareAlert.ex
    - C:\Program Files\AdwareAlert
    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-03-06 21:18:26
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Windows\system32\WLANExt.exe
    c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    C:\Program Files\Comodo\CBOClean\BOCORE.exe
    C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\PnkBstrA.exe
    C:\Windows\system32\DRIVERS\xaudio.exe
    C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
    C:\Windows\system32\conime.exe
    C:\Program Files\Comodo\CBOClean\BOC425.EXE
    C:\Program Files\Grisoft\AVG7\avgcc.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
    C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    .
    **************************************************************************
    .
    Completion time: 2008-03-06 21:21:08 - machine was rebooted
    .
    2008-03-05 13:14:01 --- E O F ---

    ja tossa ois HjT logia, jos sillekkin ois käyttöä

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:22:18, on 6.3.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\conime.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    C:\Program Files\Comodo\CBOClean\BOC425.EXE
    C:\Program Files\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Comodo\Firewall\cfp.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
    C:\Windows\Explorer.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\system32\notepad.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FI_FI&c=73&bd=Pavilion&pf=laptop
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
    O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    O4 - HKLM\..\Run: [BOC-425] C:\PROGRA~1\Comodo\CBOClean\BOC425.exe
    O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -s
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll
    O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
    O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 10084 bytes
     
    Gorga, Mar 6, 2008
    #4
  5. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina Fix checked

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

    ==========

    Päivitä AVG Anti-Spyware 7.5 ja aja vikasiedossa.
     
    Hujo, Mar 6, 2008
    #5
  6. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    AVG 7.5 päivitetty ja ajettu vikasieto tilassa ja toi R3 rivi fixattu, mut ei tuntunu olevan apuja, vieläkin tuntuu toi resurssien hallinta kaatuvan.
     
    Gorga, Mar 7, 2008
    #6
  7. Hujo

    Hujo Guest

    poista koneelta a-squared Free

    eihän tämän AVG Anti-Spyware 7.5 logo ole kellon vieressä värillinen
     
    Last edited by a moderator: Mar 7, 2008
    Hujo, Mar 7, 2008
    #7
  8. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    A-squared poistettu ja ei ole värillinen toi AVG Anti-Spyware 7.5, mutta vieläkin toi resurssienhallinta kaatuilee.


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:31:41, on 8.3.2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    C:\Program Files\Comodo\CBOClean\BOC425.EXE
    C:\Program Files\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Comodo\Firewall\cfp.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\Explorer.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Program Files\Ventrilo\Ventrilo.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FI_FI&c=73&bd=Pavilion&pf=laptop
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Elisa Avustaja Plugin - {DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516} - C:\Program Files\Elisa\Avustaja\IEFixItNowPlugin.dll
    O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    O4 - HKLM\..\Run: [BOC-425] C:\PROGRA~1\Comodo\CBOClean\BOC425.exe
    O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -s
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\DVDXST~1\DVDXUT~1.6\DVDGhost\DVDGHO~1.DLL C:\Windows\system32\guard32.dll
    O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
    O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 9887 bytes
     
    Gorga, Mar 8, 2008
    #8
  9. Hujo

    Hujo Guest

    Paljos koneessa on keskusmuistia
     
    Hujo, Mar 8, 2008
    #9
  10. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    2Gt ois ram
     
    Gorga, Mar 8, 2008
    #10
  11. Hujo

    Hujo Guest

    ok.. ihan hyvin on
     
    Hujo, Mar 8, 2008
    #11
  12. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    joo kyl tää kone mun mielestä ihan kelvollinen on mun tarpeille, mutta ainut ongelma tuntus olevan toi vista. Taitaa joutua hyllylle toi vista ja pistää vanha kunnon XP tilalle
     
    Gorga, Mar 8, 2008
    #12
  13. Hujo

    Hujo Guest

    niin se tuntuu toi vista olevan se suurin ongelma.
     
    Hujo, Mar 8, 2008
    #13
  14. Gorga

    Gorga Member

    Joined:
    Mar 5, 2008
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    no voi olla, että vistan uudelleen asennus vois auttaa, tai sit vaan toi XP tilalle, oli miten oli kiitoksia avusta kuitenkin.
     
    Gorga, Mar 8, 2008
    #14

Share This Page