Suoritinkäyttö 100% jatkuvasti

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Lihamesta, Jul 13, 2008.

  1. Lihamesta

    Lihamesta Member

    Joined:
    Sep 13, 2006
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    11
    Ongelmana on että suoritinkäyttö on 70-100% jatkuvasti vaikka ei teekkään mitään. Kun selaa esimerkiksi nettiä tai pelaa on suoritinkäyttö jatkuvasti 100%. Toisen ytimen käyttö on 80-100% jatkuvasti. Kone on ollut käytössä vasta viikon, mutta aluksi ongelmaa ei esiintynyt. Kone on HP Pavilion Elite m9151. Viruksentorjuntana toimii Norton Internet Security.


    Logfile of HijackThis v1.99.1
    Scan saved at 18:12:04, on 13.7.2008
    Platform: Unknown Windows (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16681)

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\system32\schtasks.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\hp\kbd\kbd.exe
    C:\Windows\System32\mobsync.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Users\Ojanperä\Downloads\HijackThis_v1.99.1.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fi_fi&c=81&bd=Pavilion&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
    O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
    O11 - Options group: [INTERNATIONAL] International*
    O13 - Gopher Prefix:
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O23 - Service: Automaattinen LiveUpdate-ajastustoiminto (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    O23 - Service: LiveUpdate Notice - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
     
    Lihamesta, Jul 13, 2008
    #1
  2. Lihamesta

    Lihamesta Member

    Joined:
    Sep 13, 2006
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    11
    Malwarebytes' Anti-Malware 1.20
    Tietokantaversio: 945
    Windows 6.0.6000

    23:17:48 13.7.2008
    mbam-log-7-13-2008 (23-17-48).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|D:\|E:\|)
    Tarkistetut kohteet: 127593
    Kulunut aika: 38 minute(s), 37 second(s)

    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 0
    Saastuneita rekisteriavaimia: 0
    Saastuneita rekisteriarvoja: 0
    Saastuneita rekisterikohteita: 0
    Saastuneita hakemistoja: 0
    Saastuneita tiedostoja: 0

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriavaimia:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriarvoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisterikohteita:
    (Haitallisia kohteita ei löydetty)

    Saastuneita hakemistoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita tiedostoja:
    (Haitallisia kohteita ei löydetty)





    ComboFix 08-07-15.4 - Ojanperä 2008-07-16 19:45:49.1 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.290 [GMT 3:00]
    Running from: C:\Users\Ojanperä\Desktop\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Windows\system32\cfx32.ocx
    C:\Windows\system32\jusched.exe

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-06-16 to 2008-07-16 )))))))))))))))))
    .

    2008-07-16 19:45 . 2008-07-16 19:45 6,736 --a------ C:\Windows\System32\drivers\PROCEXP90.SYS
    2008-07-16 19:42 . 2008-07-16 19:42 <KANSIO> d-------- C:\327882R2FWJFW
    2008-07-16 01:37 . 2008-07-16 17:25 312,430,580 --a------ C:\Windows\MEMORY.DMP
    2008-07-14 15:13 . 2008-07-14 15:16 <KANSIO> d-------- C:\Users\All Users\Lavasoft
    2008-07-14 15:13 . 2008-07-14 15:16 <KANSIO> d-------- C:\ProgramData\Lavasoft
    2008-07-14 15:13 . 2008-07-14 15:13 <KANSIO> d-------- C:\Program Files\Lavasoft
    2008-07-14 15:12 . 2008-07-14 15:12 <KANSIO> d-------- C:\Program Files\Common Files\Wise Installation Wizard
    2008-07-14 14:51 . 2008-06-11 14:48 188,960 --a------ C:\Windows\System32\nvapps.xml
    2008-07-14 14:50 . 2008-07-14 15:11 <KANSIO> d-------- C:\NVIDIA
    2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Malwarebytes
    2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\Users\All Users\Malwarebytes
    2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\ProgramData\Malwarebytes
    2008-07-13 22:20 . 2008-07-13 22:20 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-07-13 22:20 . 2008-07-07 17:35 34,296 --a------ C:\Windows\System32\drivers\mbamcatchme.sys
    2008-07-13 22:20 . 2008-07-07 17:35 17,144 --a------ C:\Windows\System32\drivers\mbam.sys
    2008-07-08 22:42 . 2008-07-08 22:42 0 --ah----- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
    2008-07-08 05:53 . 2008-07-10 19:22 107,832 --a------ C:\Windows\System32\PnkBstrB.exe
    2008-07-08 05:53 . 2008-07-08 05:53 66,872 --a------ C:\Windows\System32\PnkBstrA.exe
    2008-07-08 05:53 . 2008-07-10 19:22 22,328 --a------ C:\Windows\System32\drivers\PnkBstrK.sys
    2008-07-08 05:26 . 2008-07-08 05:26 <KANSIO> d-------- C:\Program Files\America's Army Server Manager
    2008-07-08 05:22 . 2008-07-08 05:37 <KANSIO> d-------- C:\Program Files\America's Army
    2008-07-08 05:00 . 2008-07-08 05:00 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\WinRAR
    2008-07-08 03:04 . 2008-07-08 03:04 <KANSIO> d-------- C:\Program Files\MSXML 4.0
    2008-07-08 01:11 . 2008-07-08 01:11 <KANSIO> d-------- C:\Program Files\Common Files\PCSuite
    2008-07-08 01:11 . 2008-07-08 01:11 <KANSIO> d-------- C:\Program Files\Common Files\Nokia
    2008-07-08 01:10 . 2008-07-08 01:10 <KANSIO> d-------- C:\Program Files\DIFX
    2008-07-08 01:10 . 2007-09-17 15:53 21,632 --a------ C:\Windows\System32\drivers\pccsmcfd.sys
    2008-07-08 01:09 . 2008-07-08 01:10 <KANSIO> d----c--- C:\Windows\System32\DRVSTORE
    2008-07-08 01:09 . 2008-07-13 20:18 <KANSIO> d-------- C:\Program Files\PC Connectivity Solution
    2008-07-08 01:06 . 2008-07-08 01:06 <KANSIO> d-------- C:\Users\All Users\Installations
    2008-07-08 01:06 . 2008-07-08 01:06 <KANSIO> d-------- C:\ProgramData\Installations
    2008-07-08 01:06 . 2008-07-08 01:11 <KANSIO> d-------- C:\Program Files\Nokia
    2008-07-08 00:39 . 2008-07-08 22:43 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Nokia
    2008-07-08 00:33 . 2008-07-08 22:43 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\PC Suite
    2008-07-08 00:33 . 2008-07-08 22:43 <KANSIO> d-------- C:\Users\All Users\PC Suite
    2008-07-08 00:33 . 2008-07-08 22:43 <KANSIO> d-------- C:\ProgramData\PC Suite
    2008-07-08 00:31 . 2008-05-07 07:38 90,624 --a------ C:\Windows\System32\nmwcdcls.dll
    2008-07-07 21:38 . 2008-07-10 23:04 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\uTorrent
    2008-07-07 21:38 . 2008-07-07 21:38 <KANSIO> d-------- C:\Program Files\uTorrent
    2008-07-07 19:58 . 2008-07-07 19:58 <KANSIO> d-------- C:\Program Files\Seagate Software
    2008-07-07 19:58 . 2008-07-07 19:58 <KANSIO> d-------- C:\Program Files\Common Files\Borland Shared
    2008-07-07 19:44 . 2008-07-07 19:44 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Music
    2008-07-07 19:04 . 2008-07-07 19:04 <KANSIO> d-------- C:\Windows\PCHEALTH
    2008-07-07 19:03 . 2008-07-10 22:50 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Adobe
    2008-07-07 18:56 . 2008-07-07 19:04 <KANSIO> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
    2008-07-07 18:55 . 2008-07-07 18:55 <KANSIO> d-------- C:\Users\All Users\WLInstaller
    2008-07-07 18:55 . 2008-07-07 18:55 <KANSIO> d-------- C:\ProgramData\WLInstaller
    2008-07-07 18:55 . 2008-07-07 19:04 <KANSIO> d-------- C:\Program Files\Windows Live
    2008-07-07 18:49 . 2008-07-07 18:49 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
    2008-07-07 18:49 . 2008-07-07 18:49 194,560 --a------ C:\Windows\System32\WebClnt.dll
    2008-07-07 18:49 . 2008-07-07 18:49 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys
    2008-07-07 18:46 . 2008-07-07 18:46 1,585,664 --a------ C:\Windows\System32\setupapi.dll
    2008-07-07 18:45 . 2008-07-07 18:45 2,027,008 --a------ C:\Windows\System32\win32k.sys
    2008-07-07 18:45 . 2008-07-07 18:45 296,448 --a------ C:\Windows\System32\gdi32.dll
    2008-07-07 18:45 . 2008-07-07 18:45 223,232 --a------ C:\Windows\System32\WMASF.DLL
    2008-07-07 18:45 . 2008-07-07 18:45 113,664 --a------ C:\Windows\System32\drivers\rmcast.sys
    2008-07-07 18:45 . 2008-07-07 18:45 14,848 --a------ C:\Windows\System32\wshrm.dll
    2008-07-07 18:45 . 2008-07-07 18:45 9,728 --a------ C:\Windows\System32\LAPRXY.DLL
    2008-07-07 18:45 . 2008-07-07 18:45 2,048 --a------ C:\Windows\System32\asferror.dll
    2008-07-07 18:44 . 2008-07-07 18:44 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
    2008-07-07 18:44 . 2008-07-07 18:44 1,686,528 --a------ C:\Windows\System32\gameux.dll
    2008-07-07 18:44 . 2008-07-07 18:44 11,776 --a------ C:\Windows\System32\sbunattend.exe
    2008-07-07 18:43 . 2008-07-07 18:43 1,327,104 --a------ C:\Windows\System32\quartz.dll
    2008-07-07 18:43 . 2008-07-07 18:43 130,048 --a------ C:\Windows\System32\drivers\srv2.sys
    2008-07-07 18:43 . 2008-07-07 18:43 101,888 --a------ C:\Windows\System32\drivers\mrxsmb.sys
    2008-07-07 18:43 . 2008-07-07 18:43 84,992 --a------ C:\Windows\System32\drivers\srvnet.sys
    2008-07-07 18:43 . 2008-07-07 18:43 84,480 --a------ C:\Windows\System32\dnsrslvr.dll
    2008-07-07 18:43 . 2008-07-07 18:43 58,368 --a------ C:\Windows\System32\drivers\mrxsmb20.sys
    2008-07-07 18:43 . 2008-07-07 18:43 24,576 --a------ C:\Windows\System32\dnscacheugc.exe
    2008-07-07 18:42 . 2008-07-07 18:42 1,244,672 --a------ C:\Windows\System32\mcmde.dll
    2008-07-07 18:42 . 2008-07-07 18:42 428,032 --a------ C:\Windows\System32\EncDec.dll
    2008-07-07 18:42 . 2008-07-07 18:42 292,352 --a------ C:\Windows\System32\psisdecd.dll
    2008-07-07 18:42 . 2008-07-07 18:42 218,624 --a------ C:\Windows\System32\psisrndr.ax
    2008-07-07 18:42 . 2008-07-07 18:42 80,896 --a------ C:\Windows\System32\MSNP.ax
    2008-07-07 18:42 . 2008-07-07 18:42 68,608 --a------ C:\Windows\System32\Mpeg2Data.ax
    2008-07-07 18:42 . 2008-07-07 18:42 57,856 --a------ C:\Windows\System32\MSDvbNP.ax
    2008-07-07 18:41 . 2008-07-07 18:41 826,368 --a------ C:\Windows\System32\wininet.dll
    2008-07-07 18:26 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Searches
    2008-07-07 18:26 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Searches
    2008-07-07 18:26 . 2008-07-07 18:26 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Symantec
    2008-07-07 18:26 . 2008-07-07 18:26 <KANSIO> d--hs---- C:\$RECYCLE.BIN
    2008-07-07 18:25 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Contacts
    2008-07-07 18:25 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Contacts
    2008-07-07 18:25 . 2008-07-07 18:25 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Identities
    2008-07-07 18:25 . 2008-07-07 18:25 44 --a------ C:\Windows\system\hpsysdrv.dat
    2008-07-07 18:22 . 2008-07-07 18:22 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Macromedia
    2008-07-07 18:22 . 2008-07-07 18:22 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Hewlett-Packard
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Videos
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Videos
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Saved Games
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Saved Games
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Pictures
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Pictures
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Music
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Music
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Links
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Links
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Favorites
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Favorites
    2008-07-07 18:20 . 2008-07-15 00:07 <KANSIO> dr------- C:\Users\Ojanperä\Downloads
    2008-07-07 18:20 . 2008-07-15 00:07 <KANSIO> dr------- C:\Users\Ojanperä\Downloads
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Documents
    2008-07-07 18:20 . 2008-07-13 20:18 <KANSIO> dr------- C:\Users\Ojanperä\Documents
    2008-07-07 18:20 . 2008-07-16 19:38 <KANSIO> dr------- C:\Users\Ojanperä\Desktop
    2008-07-07 18:20 . 2008-07-16 19:38 <KANSIO> dr------- C:\Users\Ojanperä\Desktop
    2008-07-07 18:20 . 2008-07-13 17:06 <KANSIO> d---s---- C:\Users\Ojanperä\AppData\Roaming\Microsoft
    2008-07-07 18:20 . 2006-11-02 15:37 <KANSIO> d-------- C:\Users\Ojanperä\AppData\Roaming\Media Center Programs
    2008-07-07 18:20 . 2008-07-07 18:20 <KANSIO> d--h----- C:\Users\Ojanperä\AppData
    2008-07-07 18:20 . 2008-07-07 18:20 <KANSIO> d--h----- C:\Users\Ojanperä\AppData
    2008-07-07 18:20 . 2008-07-14 15:06 <KANSIO> d-------- C:\Users\Ojanperä
    2008-07-07 18:20 . 2008-07-16 19:50 1,048,576 --ahs---- C:\Users\Ojanperä\ntuser.dat
    2008-07-07 18:20 . 2008-07-16 19:50 1,048,576 --ahs---- C:\Users\Ojanperä\ntuser.dat
    2008-07-07 18:20 . 2008-07-07 18:21 1,927 -rahs---- C:\Windows\System32\drivers\103C_HP_CPC_KA909AA-UUW m9151.sc_YC_0Pavi_QCZH802_E81FIv3PrA2_49_INARRA2_SASUSTek Computer INC._V2.00_B5.13_T071029_WUH0_L40B_M3071_J500_7AMD_8Athlon 64 X2 Dual Core_92.6_#080707_N10DE03EF_Z_G10DE0402.MRK
    2008-07-07 18:18 . 2008-07-07 18:18 1,712,984 --a------ C:\Windows\System32\wuaueng.dll
    2008-07-07 18:18 . 2008-07-07 18:18 1,524,224 --a------ C:\Windows\System32\wucltux.dll
    2008-07-07 18:18 . 2008-07-07 18:18 53,080 --a------ C:\Windows\System32\wuauclt.exe
    2008-07-07 18:18 . 2008-07-07 18:18 43,352 --a------ C:\Windows\System32\wups2.dll
    2008-07-07 18:17 . 2008-07-07 18:17 549,720 --a------ C:\Windows\System32\wuapi.dll
    2008-07-07 18:17 . 2008-07-07 18:17 163,000 --a------ C:\Windows\System32\wuwebv.dll
    2008-07-07 18:17 . 2008-07-07 18:17 80,896 --a------ C:\Windows\System32\wudriver.dll
    2008-07-07 18:17 . 2008-07-07 18:17 33,624 --a------ C:\Windows\System32\wups.dll
    2008-07-07 18:17 . 2008-07-07 18:17 31,232 --a------ C:\Windows\System32\wuapp.exe
    2008-07-07 18:16 . 2008-07-07 18:16 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Contacts

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-07-16 16:50 1,048,576 --sha-w C:\Users\Ojanperä\ntuser.dat
    2008-07-16 16:50 1,048,576 --sha-w C:\Users\Ojanperä\ntuser.dat
    2008-07-16 13:51 --------- d-----w C:\ProgramData\Symantec
    2008-07-14 15:59 --------- d-----w C:\ProgramData\NVIDIA
    2008-07-13 19:20 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Malwarebytes
    2008-07-13 19:20 --------- d-----w C:\Program Files\Common Files\Symantec Shared
    2008-07-13 17:18 --------- d-----w C:\Program Files\Microsoft Works
    2008-07-13 14:06 --------- d-s---w C:\Users\Ojanperä\AppData\Roaming\Microsoft
    2008-07-10 20:04 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\uTorrent
    2008-07-10 19:50 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Adobe
    2008-07-10 06:35 174 --sha-w C:\Program Files\desktop.ini
    2008-07-10 06:27 --------- d-----w C:\Program Files\Windows Mail
    2008-07-08 19:43 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\PC Suite
    2008-07-08 19:43 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Nokia
    2008-07-08 02:00 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\WinRAR
    2008-07-07 17:13 --------- d-----w C:\Program Files\Norton Internet Security
    2008-07-07 17:11 --------- d-----w C:\Program Files\Windows Sidebar
    2008-07-07 16:58 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-07-07 16:10 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-07-07 15:50 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
    2008-07-07 15:50 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
    2008-07-07 15:50 542,720 ----a-w C:\Windows\System32\sysmain.dll
    2008-07-07 15:50 502,784 ----a-w C:\Windows\System32\wlansvc.dll
    2008-07-07 15:50 47,104 ----a-w C:\Windows\System32\wlanapi.dll
    2008-07-07 15:50 297,984 ----a-w C:\Windows\System32\wlansec.dll
    2008-07-07 15:50 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
    2008-07-07 15:50 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
    2008-07-07 15:50 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
    2008-07-07 15:50 2,923,520 ----a-w C:\Windows\explorer.exe
    2008-07-07 15:46 944,184 ----a-w C:\Windows\System32\winload.exe
    2008-07-07 15:44 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
    2008-07-07 15:44 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
    2008-07-07 15:44 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
    2008-07-07 15:44 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
    2008-07-07 15:44 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
    2008-07-07 15:43 805 ----a-w C:\Windows\system32\drivers\SYMEVENT.INF
    2008-07-07 15:43 123,952 ----a-w C:\Windows\system32\drivers\SYMEVENT.SYS
    2008-07-07 15:43 10,671 ----a-w C:\Windows\system32\drivers\SYMEVENT.CAT
    2008-07-07 15:43 --------- d-----w C:\Program Files\Symantec
    2008-07-07 15:41 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
    2008-07-07 15:40 56,320 ----a-w C:\Windows\System32\iesetup.dll
    2008-07-07 15:40 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
    2008-07-07 15:40 2,048 ----a-w C:\Windows\System32\tzres.dll
    2008-07-07 15:26 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Symantec
    2008-07-07 15:25 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Identities
    2008-07-07 15:22 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Macromedia
    2008-07-07 15:22 --------- d-----w C:\Users\Ojanperä\AppData\Roaming\Hewlett-Packard
    2008-07-07 15:20 --------- d-----w C:\ProgramData\Hewlett-Packard
    2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Työpöytä
    2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Tiedostot
    2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Suosikit
    2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Mallit
    2008-07-07 15:16 --------- d-sh--w C:\ProgramData\Käynnistä-valikko
    2008-06-13 11:14 24,112 ----a-w C:\Windows\system32\drivers\SymIMV.sys
    2008-06-13 11:14 13,093 ----a-w C:\Windows\system32\drivers\SymRedir.cat
    2008-06-13 11:14 1,611 ----a-w C:\Windows\system32\drivers\SymRedir.inf
    2008-06-13 11:13 96,432 ----a-w C:\Windows\system32\drivers\symfw.sys
    2008-06-13 11:13 41,008 ----a-w C:\Windows\system32\drivers\symndisv.sys
    2008-06-13 11:13 38,576 ----a-w C:\Windows\system32\drivers\symids.sys
    2008-06-13 11:13 22,320 ----a-w C:\Windows\system32\drivers\symredrv.sys
    2008-06-13 11:13 184,240 ----a-w C:\Windows\system32\drivers\symtdi.sys
    2008-06-13 11:13 13,616 ----a-w C:\Windows\system32\drivers\symdns.sys
    2008-06-06 06:24 8,064 ----a-w C:\Windows\system32\drivers\usbser_lowerflt.sys
    2008-05-20 07:32 831,048 ----a-w C:\Windows\System32\WudfUpdate_01005.dll
    2008-05-16 08:58 12,632 ----a-w C:\Windows\System32\lsdelete.exe
    2008-05-16 08:48 446,464 ----a-w C:\Windows\System32\nvuninst.exe
    2008-05-07 04:39 1,419,232 ----a-w C:\Windows\System32\wdfcoinstaller01005.dll
    2008-05-07 04:38 659,968 ----a-w C:\Windows\System32\nmwcdcocls.dll
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-07-07 18:44 1232896]
    "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 15:35 125440]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]
    "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" [2008-06-17 16:00 1249280]
    "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-06-18 14:31 1122816]
    "WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 15:34 2159104 C:\Windows\System32\oobefldr.dll]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 18:01 65536]
    "KBD"="C:\HP\KBD\KbdStub.EXE" [2006-12-08 19:16 65536]
    "OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 14:59 118784]
    "SunJavaUpdateReg"="C:\Windows\system32\jureg.exe" [2007-04-07 03:56 54936]
    "HP Software Update"="c:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 17:24 54840]
    "ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-02-14 11:01 51048]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
    "ALUAlert"="c:\Program Files\Symantec\LiveUpdate\ALuNotify.exe" [2007-08-23 09:35 152952]
    "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2008-05-16 14:01 13535776]
    "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2008-05-16 14:01 92704]
    "RtHDVCpl"="RtHDVCpl.exe" [2007-10-25 16:52 4702208 C:\Windows\RtHDVCpl.exe]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.l3codecp"= l3codecp.acm

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "UacDisableNotify"=dword:00000001
    "InternetSettingsDisableNotify"=dword:00000001
    "AutoUpdateDisableNotify"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{A96B629F-8044-4782-8987-D7081B4D61BC}"= C:\Program Files\HP\DVDPlay\DVDPlay.exe:DVD Play
    "{1C3BD497-C000-47D2-A089-7E54E5D20641}"= C:\Program Files\HP\DVDPlay\DPService.exe:DVD Play Resident Program
    "{48B8D2D7-DB8B-4C7F-937E-9BA9BAB56AEA}"= c:\Program Files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
    "{2CFE772C-2E99-4CC1-B40F-C65671DA750B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
    "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
    "EnableFirewall"= 0 (0x0)

    R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20080715.002\IDSvix86.sys [2008-06-04 18:26]
    R2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263};C:\Program Files\HP\DVDPlay\000.fcl [2007-10-09 12:07]
    R2 HPBtnSrv;HP Chasis Button Service;c:\hp\HPEZBTN\HPBtnSrv.exe [2007-05-29 18:19]
    R2 LiveUpdate Notice;LiveUpdate Notice;c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-14 11:02]
    R3 COH_Mon;COH_Mon;C:\Windows\system32\Drivers\COH_Mon.sys [2008-03-06 21:32]
    R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;C:\Windows\system32\drivers\HCW85BDA.sys [2007-10-01 12:21]
    R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;C:\Windows\system32\DRIVERS\netr73.sys [2007-09-24 14:09]
    R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2008-06-13 14:13]

    *Newly Created Service* - CATCHME
    *Newly Created Service* - COMHOST
    *Newly Created Service* - PROCEXP90
    .
    'Ajoitetut tehtävät'-kansion sisältö
    "2008-07-14 17:12:21 C:\Windows\Tasks\Norton Internet Security - Suorita täysi järjestelmäntarkistus - Ojanperä.job"
    - c:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
    "2008-07-15 17:13:25 C:\Windows\Tasks\User_Feed_Synchronization-{46BF87CF-1C7D-4384-BF9A-F0A5C8751071}.job"
    - C:\Windows\system32\msfeedssync.exe
    .
    - - - - ORPHANS REMOVED - - - -

    HKLM-Run-HP Health Check Scheduler - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe


    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-07-16 19:50:39
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2008-07-16 19:52:58
    ComboFix-quarantined-files.txt 2008-07-16 16:52:35

    Pre-Run: 425,092,956,160 tavua vapaana
    Post-Run: 425,142,464,512 tavua vapaana

    290 --- E O F --- 2008-07-14 12:06:59



    Ei tehonnut Anti-Malware eikä Compofix. Eli sama ongelma jatkuu.
     
    Lihamesta, Jul 16, 2008
    #2
  3. Lada1500s

    Lada1500s Regular member

    Joined:
    Dec 31, 2007
    Messages:
    432
    Likes Received:
    0
    Trophy Points:
    26
    Eli jos kone on suoraan kaupasta tullu ja menny viikos tohon kuntoon, eiköhä kannattas kattoa, että veis koko romun takas kauppaa?

    Koneen pitäisi 3 gigan muistin kans toimia hyvin, koneen tehojen pitäisi olla enemmän kuin tarpeeksi...

    Mitä ohjelmia olet koneesees asentanu?
     
    Lada1500s, Jul 16, 2008
    #3
  4. ikenbitti

    ikenbitti Member

    Joined:
    Jun 12, 2013
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    11
    en usko, että laitteessa on vikaa; itselläni on sama ongelma joka ilmaantui äskettäin 2 ja ½ vuotta vanhaan kannettavaan koneeseen. Eiköhän vain lie joku tuholainen, mutta mikä?
    HJT näyttää tältä, onko jotain yhteneväistä?
    Logfile of HijackThis v1.99.1
    Scan saved at 1:02:15, on 17.7.2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Acer\Empowering Technology\admServ.exe
    c:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\system32\CAP3RSK.EXE
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Acer\Empowering Technology\eRecovery\Monitor.exe
    C:\Acer\Empowering Technology\admtray.exe
    C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    C:\acer\Empowering Technology\ePower\epm-dm.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
    C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
    C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
    c:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
    C:\WINDOWS\explorer.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\WINDOWS\system32\SearchProtocolHost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.savonkaraokeyhdistys.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
    O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [CAP3ON] C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3ONN.EXE
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
    O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    O4 - HKLM\..\Run: [epm-dm] c:\acer\Empowering Technology\ePower\epm-dm.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
    O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
    O4 - HKCU\..\Run: [updateMgr] c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
    O4 - HKCU\..\Run: [Uniblue SpeedUpMyPC] C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe -s
    O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
    O8 - Extra context menu item: Lähetä &Bluetooth-laitteeseen - c:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\btsendto_ie_ctx.htm
    O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O15 - Trusted Zone: http://*.hp.com (HKLM)
    O16 - DPF: {3B36B017-7E49-426B-95B0-B5CECD83C2E2} (IfolorUploader Control) - http://fika-web.ifolor.net/OrderingGeneral/LowRes/app_support/ActiveX/IfolorUploader_fika.cab
    O16 - DPF: {A8B02DCA-7648-46D6-95A8-B84EC80CA49D} (JamShellLinkX Control) - http://kotisivukone.zoner.fi/applet/SWHTTPUploaderProj.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: HPDCS - {BA135F49-A12C-4E26-A2C4-6EA945999072} - C:\Program Files\Common Files\Hewlett-Packard\HP Device Communication Services\APP\hpdcsapp.dll
    O18 - Protocol: hppfile - {C4E2084B-ED27-4893-A43D-488CA3F370E2} - C:\Program Files\Hewlett-Packard\HP Easy Printer Care\HPPCtrls.dll
    O18 - Protocol: hppsam - {C4E2084B-ED27-4893-A43D-488CA3F370E2} - C:\Program Files\Hewlett-Packard\HP Easy Printer Care\HPPCtrls.dll
    O18 - Protocol: hppzip - {C4E2084B-ED27-4893-A43D-488CA3F370E2} - C:\Program Files\Hewlett-Packard\HP Easy Printer Care\HPPCtrls.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO.EXE
    O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID.EXE
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
     
    ikenbitti, Jul 16, 2008
    #4
  5. Lihamesta

    Lihamesta Member

    Joined:
    Sep 13, 2006
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    11
    Haiskahtais vähän joltain uudelta tuholaiselta? Virusohjelmat ei vielä löydä sitä?

    Muutaman ohjelman oon asentanut.
    uTorrent
    Windows Live Messenger
    Winrar
    Ad-Aware
    Nokia PC Suite
    Americas Army
    Abode Reader
    Malwarebytes Anti-Malware

    Loput ohjelmat olivat esiasennettuna koneelle.
     
    Lihamesta, Jul 17, 2008
    #5
  6. LolzZz

    LolzZz Regular member

    Joined:
    Mar 31, 2007
    Messages:
    197
    Likes Received:
    0
    Trophy Points:
    26
    Olisiko se teidän tuholainen toi Adobe Reader?, itselläni oli Adobe Readerin kanssa sama ongelma ja tehtävien hallinnassa oli nimi "Adobe Updater" suoritinkäyttönä 99-100%, noh etsin netistä apua ja löysin myös ja niissä luki näin

    c:\Program Files\Adobe\Reader 8.0\Reader\plug_ins ja sieltä poistatte Plugin kuvalla olevan Updater-kuvakkeen.

    ja sitte toinen C:\Program Files\Common Files\Adobe\Updater5 ja poistatte Adobe Updater.exe, kuvassa on valkealla pohjalla nuolet ympyränä.

    Nämä poistamalla itseltäni ainakin loppui toi suorittimen käytön korkeus.
     
    Last edited: Aug 3, 2008
    LolzZz, Aug 3, 2008
    #6

Share This Page