Unknown virus disables my avast...

essexboy · November 3, 2007, 8:02pm

Just the task manager repair via SAS now and an update

system · November 3, 2007, 8:05pm

Ok, I will go with SAS and I’ve done all those registery things too.

You were asking the path about “Delf-FUP”

I can’t remember that anymore, but it was a file I downloaded and it was in C:omat tiedostot/unzipped/…

system · November 3, 2007, 8:11pm

Just the task manager repair via SAS now and an update

Task manager repair function is not there, scanning normal now

essexboy · November 3, 2007, 8:14pm

Oops it reads ENABLE TASK MANAGER sorry

system · November 3, 2007, 8:15pm

Heh, thought so, I did that but nothing visual happened.

essexboy · November 3, 2007, 8:23pm

No as it will repair your registry, have you tried task manager (a reboot may be required, I am not sure as I have never had to use it )

system · November 3, 2007, 8:26pm

Oh yes, Taskmanager works fine. Should I download Avast again and reinstall it? Or maybe the reboot fix that??

essexboy · November 3, 2007, 8:28pm

Do you still have avast on your system ?

I would recommend a fresh download and install to be on the safe side

system · November 3, 2007, 8:29pm

Ok, I remove the older install and do it fresh.

I’ll let you know in ten minutes.

essexboy · November 3, 2007, 8:30pm

OK I am flitting between here and G2G

essexboy · November 3, 2007, 8:33pm

Oh one other thing before I forget

Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to infect your system. Please follow these steps to remove older version Java components and update:
[*]Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
[*]Scroll down to where it says “Java Runtime Environment (JRE)6 Update 3…allows end-users to run Java applications”.
[*]Click the “Download” button to the right.
[*]Read the License Agreement and then check the box that says: “Accept License Agreement”. The page will refresh.
[*]Click on the link to download Windows Offline Installation and save the file to your desktop.
[*]Close any programs you may have running - especially your web browser.
[*]Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
[*]Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
[*]Click the Remove or Change/Remove button.
[*]Repeat as many times as necessary to remove each Java versions.
[*]Reboot your computer once all Java components are removed.
[*]Then from your desktop double-click on jre-6u3-windows-i586-p.exe to install the newest version.

system · November 3, 2007, 9:14pm

Back again.

Avast won’t run after all what we have done. I removed it and instald it in safe-mode but now windows says it’s old and my comp is slowing down to zero. Prosessor goes to 100 % in daskmanager. And no “blue ball” in system tray. When I close asv applications, everything returns back. BUT, Avast icon in desktop stays unnormal (blank). Not exetable (right word heh?).
So, I think virus is still there, what now? I’m totally lost… Oh, I will update Java next.

essexboy · November 3, 2007, 9:19pm

OK then lets do a real deep search

Download WinPFind3u.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.

[*]Close ALL OTHER PROGRAMS.
[*]Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.
[*]Under Additional Scans click the checkboxes in front of the following items to select them:

Reg - Approved Shell Extensions
Reg - Disabled MS Config Items
Reg - File Associations
Reg - Session Manager Settings

[*]Now click the Run Scan button on the toolbar.
[*]Let it run unhindered until it finishes.
[*]When the scan is complete Notepad will open with the report file loaded in it.
[*]Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Use the Add Reply button and Copy/Paste the information back here. I will review it when it comes in. If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

essexboy · November 3, 2007, 9:30pm

What programme/file is using the most in task mananger?

system · November 3, 2007, 9:32pm

svchost.exe is most active. Like you and me here

system · November 3, 2007, 9:38pm

WinPFind3 logfile created on: 3.11.2007 23:33:28
WinPFind3U by OldTimer - Version 1.0.42 Folder = C:\Documents and Settings\Jarkko\Työpöytä\WinPFind3u
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600)
Internet Explorer (Version = 6.0.2900.2180)

2.00 Gb Total Physical Memory | 1.60 Gb Available Physical Memory | 79.84% Memory free
3.85 Gb Paging File | 3.63 Gb Available in Paging File | 94.34% Paging File free
Paging file location(s): C:\pagefile.sys 0 0;

Computer Name: HIGGE
Current User Name: Jarkko
Logged in as Administrator.
Current Boot Mode: Normal

[Processes - Non-Microsoft Only]
aawservice.exe → %ProgramFiles%\Lavasoft\Ad-Aware 2007\aawservice.exe → Lavasoft AB [Ver = 7, 0, 2, 5 | Size = 587096 bytes | Modified Date = 2.11.2007 19:41:14 | Attr = ]
aswupdsv.exe → %ProgramFiles%\Alwil Software\Avast4\aswUpdSv.exe → [Ver = | Size = 16248 bytes | Modified Date = 6.9.2007 12:54:58 | Attr = ]
cdac11ba.exe → %System32%\drivers\CDAC11BA.EXE → C-Dilla Ltd [Ver = 4.11.050 | Size = 39936 bytes | Modified Date = 10.10.2005 21:12:34 | Attr = ]
kpf4gui.exe → %ProgramFiles%\Sunbelt Software\Personal Firewall\kpf4gui.exe → Sunbelt Software [Ver = 4.5.916.0 | Size = 1967664 bytes | Modified Date = 26.4.2007 10:21:28 | Attr = ]
kpf4gui.exe → %ProgramFiles%\Sunbelt Software\Personal Firewall\kpf4gui.exe → Sunbelt Software [Ver = 4.5.916.0 | Size = 1967664 bytes | Modified Date = 26.4.2007 10:21:28 | Attr = ]
kpf4ss.exe → %ProgramFiles%\Sunbelt Software\Personal Firewall\kpf4ss.exe → Sunbelt Software [Ver = 4.5.916.0 | Size = 1234480 bytes | Modified Date = 26.4.2007 10:21:28 | Attr = ]
nvsvc32.exe → %System32%\nvsvc32.exe → NVIDIA Corporation [Ver = 6.14.10.9424 | Size = 159810 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
profileru.exe → %ProgramFiles%\Saitek\Software\ProfilerU.exe → Saitek [Ver = 4.3.3.2059 | Size = 163840 bytes | Modified Date = 18.10.2005 13:34:08 | Attr = ]
raid_tool.exe → %ProgramFiles%\VIA\RAID\raid_tool.exe → VIA Technologies [Ver = 4, 0, 6, 0 | Size = 589824 bytes | Modified Date = 22.2.2005 11:22:32 | Attr = ]
runservice.exe → %SystemRoot%\runservice.exe → [Ver = | Size = 2560 bytes | Modified Date = 13.12.2006 20:02:34 | Attr = ]
saimfd.exe → %ProgramFiles%\Saitek\Software\SaiMfd.exe → Saitek [Ver = 5.5.0.82 | Size = 126976 bytes | Modified Date = 3.11.2005 10:09:50 | Attr = ]
soundman.exe → %SystemRoot%\soundman.exe → Realtek Semiconductor Corp. [Ver = 5, 1, 0, 56 | Size = 577536 bytes | Modified Date = 3.8.2006 4:12:36 | Attr = ]
tbpanel.exe → %SystemRoot%\TBPanel.exe → Gainward Co. [Ver = 3.35 | Size = 2052096 bytes | Modified Date = 3.11.2005 9:13:40 | Attr = ]
uguru.exe → %ProgramFiles%\ABIT\ABIT uGuru\uGuru.exe → ABIT Computer Corporation [Ver = 2, 0, 0, 4 | Size = 1695830 bytes | Modified Date = 21.5.2004 15:07:54 | Attr = ]
uguru_event_receiver.exe → %ProgramFiles%\ABIT\ABIT uGuru\uGuru_Event_Receiver.exe → AIBT Computer Corp. [Ver = 2, 0, 3, 0 | Size = 229376 bytes | Modified Date = 8.4.2004 11:19:32 | Attr = ]
winpfind3u.exe → %UserDesktop%\WinPFind3u\WinPFind3U.exe → OldTimer Tools [Ver = 1.0.42.0 | Size = 322560 bytes | Modified Date = 4.9.2007 10:47:26 | Attr = ]

system · November 3, 2007, 9:41pm

[Win32 Services - Non-Microsoft Only]
(a2AntiMalware) a-squared Anti-Malware Service [Win32_Own | Auto | Stopped] → %ProgramFiles%\a-squared Anti-Malware\a2service.exe → File not found
(aawservice) Ad-Aware 2007 Service [Win32_Own | Auto | Running] → %ProgramFiles%\Lavasoft\Ad-Aware 2007\aawservice.exe → Lavasoft AB [Ver = 7, 0, 2, 5 | Size = 587096 bytes | Modified Date = 2.11.2007 19:41:14 | Attr = ]
(Adobe LM Service) Adobe LM Service [Win32_Own | On_Demand | Stopped] → %CommonProgramFiles%\Adobe Systems Shared\Service\Adobelmsvc.exe → Adobe Systems [Ver = 2.67.010 | Size = 72704 bytes | Modified Date = 18.8.2006 21:27:52 | Attr = ]
(aswUpdSv) avast! iAVS4 Control Service [Win32_Own | Auto | Running] → %ProgramFiles%\Alwil Software\Avast4\aswUpdSv.exe → [Ver = | Size = 16248 bytes | Modified Date = 6.9.2007 12:54:58 | Attr = ]
(avast! Antivirus) avast! Antivirus [Win32_Own | Auto | Stopped] → %ProgramFiles%\Alwil Software\Avast4\ashServ.exe → File not found
(avast! Mail Scanner) avast! Mail Scanner [Win32_Own | On_Demand | Stopped] → %ProgramFiles%\Alwil Software\Avast4\ashMaiSv.exe → File not found
(avast! Web Scanner) avast! Web Scanner [Win32_Own | On_Demand | Stopped] → %ProgramFiles%\Alwil Software\Avast4\ashWebSv.exe → File not found
(btwdins) Bluetooth Service [Win32_Own | Disabled | Stopped] → %ProgramFiles%\MSI\BToes Bluetooth-ohjelmisto\bin\btwdins.exe → Broadcom Corporation. [Ver = 4.0.1.2101 | Size = 258103 bytes | Modified Date = 31.5.2005 13:23:08 | Attr = ]
(C-DillaCdaC11BA) C-DillaCdaC11BA [Win32_Own | Auto | Running] → %System32%\drivers\CDAC11BA.EXE → C-Dilla Ltd [Ver = 4.11.050 | Size = 39936 bytes | Modified Date = 10.10.2005 21:12:34 | Attr = ]
(dmadmin) Loogisen levyn hallinnan valvontapalvelu [Win32_Shared | On_Demand | Stopped] → %System32%\dmadmin.exe → Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 14.9.2004 16:12:04 | Attr = ]
(ewido security suite control) ewido security suite control [Win32_Own | Disabled | Stopped] → %ProgramFiles%\ewido anti-malware\ewidoctrl.exe → File not found
(ewido security suite guard) ewido security suite guard [Win32_Own | Disabled | Stopped] → %ProgramFiles%\ewido anti-malware\ewidoguard.exe → ewido networks [Ver = 3, 0, 0, 1 | Size = 151616 bytes | Modified Date = 18.12.2005 19:41:36 | Attr = ]
(IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] → %CommonProgramFiles%\InstallShield\Driver\11\Intel 32\IDriverT.exe → Macrovision Corporation [Ver = 11.00.28844 | Size = 69632 bytes | Modified Date = 3.4.2005 23:41:10 | Attr = ]
(InCDsrv) InCD Helper [Win32_Own | Disabled | Stopped] → %ProgramFiles%\Ahead\InCD\InCDsrv.exe → Ahead Software AG [Ver = 4, 2, 12, 1 | Size = 1151090 bytes | Modified Date = 7.9.2004 15:25:12 | Attr = ]
(LicCtrlService) LicCtrl Service [Win32_Own | Auto | Running] → %SystemRoot%\runservice.exe → [Ver = | Size = 2560 bytes | Modified Date = 13.12.2006 20:02:34 | Attr = ]
(NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] → %System32%\nvsvc32.exe → NVIDIA Corporation [Ver = 6.14.10.9424 | Size = 159810 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
(O&O Defrag) O&O Defrag [Win32_Own | Disabled | Stopped] → %System32%\oodag.exe → O&O Software GmbH [Ver = 8.0.1398 | Size = 225280 bytes | Modified Date = 11.5.2005 2:09:54 | Attr = ]
(SandraDataSrv) Sandra Data Service [Win32_Own | Disabled | Stopped] → %ProgramFiles%\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe → SiSoftware [Ver = 10.69.2005.10 | Size = 170536 bytes | Modified Date = 9.10.2005 21:32:52 | Attr = ]
(SandraTheSrv) Sandra Service [Win32_Own | Disabled | Stopped] → %ProgramFiles%\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe → SiSoftware [Ver = 10.69.2005.10 | Size = 1079832 bytes | Modified Date = 9.10.2005 21:33:00 | Attr = ]
(sdAuxService) PC Tools Auxiliary Service [Win32_Own | Auto | Stopped] → %ProgramFiles%\Spyware Doctor\svcntaux.exe → File not found
(sdCoreService) PC Tools Security Service [Win32_Own | Auto | Stopped] → %ProgramFiles%\Spyware Doctor\swdsvc.exe → File not found
(ServiceLayer) ServiceLayer [Win32_Own | On_Demand | Stopped] → %ProgramFiles%\PC Connectivity Solution\ServiceLayer.exe → Nokia. [Ver = 6, 82, 69, 3 | Size = 210432 bytes | Modified Date = 6.11.2006 14:21:10 | Attr = ]
(SPF4) Sunbelt Personal Firewall 4 [Win32_Own | Auto | Running] → %ProgramFiles%\Sunbelt Software\Personal Firewall\kpf4ss.exe → Sunbelt Software [Ver = 4.5.916.0 | Size = 1234480 bytes | Modified Date = 26.4.2007 10:21:28 | Attr = ]

[Registry - Non-Microsoft Only]
< Run [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run →
ABIT uGuru → %ProgramFiles%\ABIT\ABIT uGuru\uGuru.exe → ABIT Computer Corporation [Ver = 2, 0, 0, 4 | Size = 1695830 bytes | Modified Date = 21.5.2004 15:07:54 | Attr = ]
avast! → %SystemDrive%\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe → File not found
Gainward → %SystemRoot%\TBPanel.exe → Gainward Co. [Ver = 3.35 | Size = 2052096 bytes | Modified Date = 3.11.2005 9:13:40 | Attr = ]
NvCplDaemon → %System32%\nvcpl.dll [RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup] → NVIDIA Corporation [Ver = 6.14.10.9424 | Size = 7700480 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
NvMediaCenter → %System32%\nvmctray.dll [RUNDLL32.EXE C:\windows\system32\NvMcTray.dll,NvTaskbarInit] → NVIDIA Corporation [Ver = 6.14.10.9424 | Size = 86016 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
Profiler → %ProgramFiles%\Saitek\Software\ProfilerU.exe → Saitek [Ver = 4.3.3.2059 | Size = 163840 bytes | Modified Date = 18.10.2005 13:34:08 | Attr = ]
RaidTool → %ProgramFiles%\VIA\RAID\raid_tool.exe → VIA Technologies [Ver = 4, 0, 6, 0 | Size = 589824 bytes | Modified Date = 22.2.2005 11:22:32 | Attr = ]
SaiMfd → %ProgramFiles%\Saitek\Software\SaiMfd.exe → Saitek [Ver = 5.5.0.82 | Size = 126976 bytes | Modified Date = 3.11.2005 10:09:50 | Attr = ]
SDTray → %ProgramFiles%\Spyware Doctor\SDTrayApp.exe → File not found
SoundMan → %SystemRoot%\soundman.exe → Realtek Semiconductor Corp. [Ver = 5, 1, 0, 56 | Size = 577536 bytes | Modified Date = 3.8.2006 4:12:36 | Attr = ]
SunJavaUpdateSched → %ProgramFiles%\Java\jre1.6.0_03\bin\jusched.exe → Sun Microsystems, Inc. [Ver = 6.0.30.5 | Size = 132496 bytes | Modified Date = 25.9.2007 1:11:36 | Attr = ]
< OptionalComponents [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ →
IMAIL → Installed = 1 →
MAPI → Installed = 1 →
MSFS → Installed = 1 →
< ShellExecuteHooks [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks →
{16664848-0E00-11D2-8059-000000000000} [HKLM] → Reg Data - Key not found → File not found
{54D9498B-CF93-414F-8984-8CE7FDE0D391} [HKLM] → %ProgramFiles%\ewido anti-malware\shellhook.dll [ewido shell guard] → [Ver = | Size = 39488 bytes | Modified Date = 30.9.2004 14:21:58 | Attr = ]
{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} [HKLM] → %ProgramFiles%\SUPERAntiSpyware\SASSEH.DLL → SuperAdBlocker.com [Ver = 1, 0, 0, 1008 | Size = 77824 bytes | Modified Date = 20.12.2006 13:55:48 | Attr = ]
< SecurityProviders [HKLM] > → HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders →
< Winlogon settings [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon →
< Winlogon settings [HKCU] > → HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon →
< Winlogon\Notify settings [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ →
!SASWinLogon → %ProgramFiles%\SUPERAntiSpyware\SASWINLO.dll → SUPERAntiSpyware.com [Ver = 1, 0, 0, 1046 | Size = 294912 bytes | Modified Date = 19.4.2007 13:41:36 | Attr = ]

system · November 3, 2007, 9:41pm

< CurrentVersion Policy Settings [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoActiveDesktopChanges → 0 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoCDBurning → 0 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\LinkResolveIgnoreLinkInfo → 0 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoResolveSearch → 1 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} → 1 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} → 1073741857 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{0DF44EAA-FF21-4412-828E-260A8728E7F1} → 32 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\dontdisplaylastusername → 0 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\legalnoticecaption → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\legalnoticetext → →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\shutdownwithoutlogon → 1 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\undockwithoutlogon → 1 →
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\DisableTaskMgr → 0 →
< CurrentVersion Policy Settings [HKCU] > → HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ → →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ → →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoAddingComponents → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoComponents → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoDeletingComponents → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoEditingComponents → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoCloseDragDropBands → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoMovingBands → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoHTMLWallPaper → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\NoChangingWallPaper → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ → →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutoRun → ‘
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoActiveDesktop → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoSaveSettings → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ClassicShell → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoThemesTab → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ForceActiveDesktopOn → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ → →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\DisableTaskMgr → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoColorChoice → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoSizeChoice → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoDispScrSavPage → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoDispCPL → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoVisualStyleChoice → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoDispSettingsPage → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoDispAppearancePage → 0 →
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\NoDispBackgroundPage → 0 →
< HOSTS File > (951 bytes) → C:\windows\System32\drivers\etc\Hosts →
127.0.0.1 localhost → →
127.0.0.1 www.pacimedia.com → →
127.0.0.1 www.exactsearch.net → →
127.0.0.1 www.contextplus.net → →
127.0.0.1 www.contextplus.net → →
127.0.0.1 www.contextplus.net → →
127.0.0.1 www.contextplus.net → →
127.0.0.1 www.contextplus.net → →
127.0.0.1 www.contextplus.net → →
127.0.0.1 www.contextplus.net → →
< Internet Explorer Settings > → →
HKLM: Default_Page_URL → http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome →
HKLM: Main\Default_Search_URL → http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch →
HKLM: Search Page → http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch →
HKLM: Start Page → http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home →
HKLM: CustomizeSearch → http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm →
HKLM: Search\Default_Search_URL → http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch →
HKLM: SearchAssistant → http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm →
HKCU: Default_Search_URL → http://ie.search.msn.com →
HKCU: Search Bar → http://search.msn.com/spbasic.htm →
HKCU: Search Page → http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch →
HKCU: Start Page → http://www.msn.com/ →
HKCU: ProxyEnable → 0 →
< Trusted Sites > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ →
msn.com [ - ] → →
online_musicmatch.com [https] → →
< Trusted Sites > → HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ →
*.update_microsoft.com [http] → →
*.update_microsoft.com [https] → →

system · November 3, 2007, 9:43pm

download_windowsupdate.com [http] → →
< BHO’s > → HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ →
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] → %CommonProgramFiles%\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] → Adobe Systems Incorporated [Ver = 8.0.0.2006102200 | Size = 62080 bytes | Modified Date = 22.10.2006 23:08:42 | Attr = ]
{53707962-6F74-2D53-2644-206D7942484F} [HKLM] → %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Spybot-S&D IE Protection] → Safer Networking Limited [Ver = 1, 5, 0, 8 | Size = 1122128 bytes | Modified Date = 31.8.2007 16:46:14 | Attr = ]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] → %ProgramFiles%\Java\jre1.6.0_03\bin\ssv.dll [SSVHelper Class] → Sun Microsystems, Inc. [Ver = 6.0.30.5 | Size = 501136 bytes | Modified Date = 25.9.2007 1:11:34 | Attr = ]
< Internet Explorer Bars [HKCU] > → HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ →
{32683183-48a0-441b-a342-7c2a440a9478} [HKLM] → Reg Data - Key not found [Reg Data - Key not found] → File not found
< Internet Explorer ToolBars [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar →
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} [HKLM] → Reg Data - Key not found [Reg Data - Key not found] → File not found
< Internet Explorer Extensions [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ →
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] → %ProgramFiles%\Java\jre1.6.0_03\bin\npjpi160_03.dll [MenuText: Sun Java Console] → Sun Microsystems, Inc. [Ver = 6.0.30.5 | Size = 132496 bytes | Modified Date = 25.9.2007 1:11:34 | Attr = ]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKCU] → %ProgramFiles%\Java\jre1.6.0_03\bin\ssv.dll [MenuText: Sun Java Console] → Sun Microsystems, Inc. [Ver = 6.0.30.5 | Size = 501136 bytes | Modified Date = 25.9.2007 1:11:34 | Attr = ]
{85d1f590-48f4-11d9-9669-0800200c9a66} [HKLM] → Reg Data - Key not found [MenuText: Uninstall BitDefender Online Scanner v8] → File not found
{CCA281CA-C863-46ef-9331-5C8D4460577F} → %ProgramFiles%\MSI\BToes Bluetooth-ohjelmisto\btsendto_ie.htm [ButtonText: @btrez.dll,-4015] → [Ver = | Size = 2681 bytes | Modified Date = 29.5.2003 12:53:08 | Attr = ]
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} [HKLM] → %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [MenuText: Spybot - Search & Destroy Configuration] → Safer Networking Limited [Ver = 1, 5, 0, 8 | Size = 1122128 bytes | Modified Date = 31.8.2007 16:46:14 | Attr = ]
< Internet Explorer Menu Extensions [HKCU] > → HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ →
Easy-WebPrint Add To Print List → %ProgramFiles%\Canon\Easy-WebPrint\Resource.dll\RC_AddToList.htm → File not found
Easy-WebPrint High Speed Print → %ProgramFiles%\Canon\Easy-WebPrint\Resource.dll\RC_HSPrint.htm → File not found
Easy-WebPrint Preview → %ProgramFiles%\Canon\Easy-WebPrint\Resource.dll\RC_Preview.htm → File not found
Easy-WebPrint Print → %ProgramFiles%\Canon\Easy-WebPrint\Resource.dll\RC_Print.htm → File not found
Lähetä &Bluetooth-laitteeseen → %ProgramFiles%\MSI\BToes Bluetooth-ohjelmisto\btsendto_ie_ctx.htm → [Ver = | Size = 1320 bytes | Modified Date = 29.5.2003 12:53:12 | Attr = ]
Vie Microsoft E&xceliin → → File not found
< User Agent Post Platform [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform →
{DBC7390A-FC27-84BA-2257-71E50D7CC230} → →
SV1 → →
< DNS Name Servers [HKLM] > → HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ →
{3766B13A-70ED-465A-8DD3-31D806CE57C7} → (1394-verkkosovitin) →
{8A90937D-A5D1-473C-8C9E-FB9F340B2168} → (1394-verkkosovitin) →
{9A525E15-528A-44DD-BB7C-98BB48C85F5F} → (VIA Networking Velocity Family Giga-bit Ethernet Adapter) →
{A44C81A5-3357-45A7-84D1-7B9A2C2075AB} → () →
< Protocol Handlers [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ →
belarc → %ProgramFiles%\Belarc\Advisor\System\BAVoilaX.dll → Belarc, Inc. [Ver = 7.2a | Size = 33280 bytes | Modified Date = 25.8.2006 10:31:04 | Attr = ]
ipp → Reg Data - Key not found → File not found
msdaipp → Reg Data - Key not found → File not found
< Downloaded Program Files > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ →
{0B79F48A-E8D6-11DB-9283-E25056D89593} → F-Secure Online Scanner 3.1 - CodeBase = http://support.f-secure.com/ols/fscax.cab →
{215B8138-A3CF-44C5-803F-8226143CFC0A} → Trend Micro ActiveX Scan Agent 6.6 - CodeBase = http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab →
{233C1507-6A77-46A4-9443-F871F945D258} → Shockwave ActiveX Control - CodeBase = http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab →
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} → BDSCANONLINE Control - CodeBase = http://download.bitdefender.com/resources/scan8/oscan8.cab →
{8AD9C840-044E-11D1-B3E9-00805F499D93} → Java Plug-in 1.6.0_03 - CodeBase = http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab →
{B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} → TSEasyInstallX Control - CodeBase = http://www.trendsecure.com/easy_install/_activex/en-US/TSEasyInstallX.CAB →
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} → Java Plug-in 1.6.0_03 - CodeBase = http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab →
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} → Java Plug-in 1.6.0_03 - CodeBase = http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab →
DirectAnimation Java Classes → - CodeBase = →
Microsoft XML Parser for Java → - CodeBase = file://C:\WINDOWS\Java\classes\xmldso.cab →

system · November 3, 2007, 9:44pm

[Registry - Additional Scans - Non-Microsoft Only]
< Approved Shell Extensions [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved →
[HKLM] → Reg Data - Key not found → File not found
{0DF44EAA-FF21-4412-828E-260A8728E7F1} [HKLM] → Reg Data - Key not found [Tehtäväpalkki ja Käynnistä-valikko] → File not found
{1CDB2949-8F65-4355-8456-263E7C208A5D} [HKLM] → %System32%\nvshell.dll [Desktop Explorer] → [Ver = | Size = 466944 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
{1E9B04FB-F9E5-4718-997B-B8DA88302A47} [HKLM] → %System32%\nvshell.dll [Desktop Explorer Menu] → [Ver = | Size = 466944 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
{1E9B04FB-F9E5-4718-997B-B8DA88302A48} [HKLM] → %System32%\nvshell.dll [nView Desktop Context Menu] → [Ver = | Size = 466944 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
{32202D8E-04A2-4EB0-A432-332EEB5CC959} [HKLM] → Reg Data - Key not found → File not found
{32683183-48a0-441b-a342-7c2a440a9478} [HKLM] → Reg Data - Key not found [Media-palkki] → File not found
{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} [HKLM] → D:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll [PhoneBrowser] → Nokia [Ver = 6, 82, 63, 9 | Size = 566784 bytes | Modified Date = 10.11.2006 9:29:30 | Attr = ]
{42071714-76d4-11d1-8b24-00a0c9068ff3} [HKLM] → deskpan.dll [Display Panning CPL -laajennus] → File not found
{472083B0-C522-11CF-8763-00608CC02F24} [HKLM] → %ProgramFiles%\Alwil Software\Avast4\ashShell.dll [avast] → ALWIL Software [Ver = 4, 7, 1043, 0 | Size = 75128 bytes | Modified Date = 6.9.2007 12:59:56 | Attr = ]
{4B3081E2-131A-450A-BBBE-C4BA0556A2C0} [HKLM] → Reg Data - Key not found → File not found
{539B3176-8B33-471D-B86D-B282584AC2F1} [HKLM] → Reg Data - Key not found → File not found
{63AFBDFB-5EF8-4791-AF79-9A3C0DE48974} [HKLM] → %ProgramFiles%\EditPlus 2\eppshell.dll [EditPlus Context Menu Handler] → [Ver = | Size = 32256 bytes | Modified Date = 14.3.2007 4:49:56 | Attr = ]
{6A29616F-F8B4-4D88-B6D0-CFF6A0551789} [HKLM] → Reg Data - Key not found → File not found
{6af09ec9-b429-11d4-a1fb-0090960218cb} [HKLM] → %System32%\btneighborhood.dll [My Bluetooth Places] → Broadcom Corporation. [Ver = 4.0.1.2101 | Size = 1019981 bytes | Modified Date = 31.5.2005 13:25:20 | Attr = ]
{6D0A8E88-F6D0-4FAD-BD25-939395C5CFE6} [HKLM] → Reg Data - Key not found → File not found
{764BF0E1-F219-11ce-972D-00AA00A14F56} [HKLM] → Reg Data - Key not found [Tiedostonpakkauksen liittymälaajennukset] → File not found
{798082EF-407A-4788-AAD8-CFB2CFF105DA} [HKLM] → %CommonProgramFiles%\Thomas Molitor EDV Service\FSFKShell.dll [CSE Shell Extension - IconHandler] → Thomas Molitor [Ver = 2.08.0132 | Size = 42152 bytes | Modified Date = 14.6.2006 15:27:20 | Attr = ]
{7A9D77BD-5403-11d2-8785-2E0420524153} [HKLM] → Reg Data - Key not found [Käyttäjätilit] → File not found
{80D360F2-EAF7-4939-8B11-632B9016B7B9} [HKLM] → Reg Data - Key not found → File not found
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} [HKLM] → Reg Data - Key not found [Salauksen pikavalikko] → File not found
{88895560-9AA2-1069-930E-00AA0030EBC8} [HKLM] → %System32%\hticons.dll [HyperTerminal-kuvakkeen tunniste] → Hilgraeve, Inc. [Ver = 5.1.2600.0 | Size = 44544 bytes | Modified Date = 9.10.2001 14:00:00 | Attr = ]
{950FF917-7A57-46BC-8017-59D9BF474000} [HKLM] → %ProgramFiles%\Ahead\InCD\incdshx.dll [Shell Extension for CDRW] → Ahead Software AG [Ver = 4, 2, 12, 1 | Size = 151670 bytes | Modified Date = 7.9.2004 15:26:14 | Attr = ]
{A70C977A-BF00-412C-90B7-034C51DA2439} [HKLM] → %System32%\nvcpl.dll [NvCpl DesktopContext Class] → NVIDIA Corporation [Ver = 6.14.10.9424 | Size = 7700480 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
{AB77609F-2178-4E6F-9C4B-44AC179D937A} [HKLM] → Reg Data - Key not found [a² Context Menu Shell Extension] → File not found
{ADEAB581-20D6-4AE6-8003-061848A3A64C} [HKLM] → Reg Data - Key not found → File not found
{B41DB860-8EE4-11D2-9906-E49FADC173CA} [HKLM] → %ProgramFiles%\WinRAR\RarExt.dll [WinRAR shell extension] → [Ver = | Size = 121344 bytes | Modified Date = 26.12.2004 19:34:38 | Attr = ]
{B8323370-FF27-11D2-97B6-204C4F4F5020} [HKLM] → %ProgramFiles%\SmartFTP Client 2.0\smarthook.dll [SmartFTP Shell Extension DLL] → SmartFTP [Ver = 1.0.2.1 | Size = 73392 bytes | Modified Date = 5.1.2006 18:58:00 | Attr = ]
{D0B00EE6-CFBA-4462-9872-75F8690526FE} [HKLM] → %CommonProgramFiles%\Thomas Molitor EDV Service\FSFKShell.dll [FSP Shell Extension - IconHandler] → Thomas Molitor [Ver = 2.08.0132 | Size = 42152 bytes | Modified Date = 14.6.2006 15:27:20 | Attr = ]
{E0D79304-84BE-11CE-9641-444553540000} [HKLM] → %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] → WinZip Computing, Inc. [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 17.12.2004 8:00:00 | Attr = ]
{E0D79305-84BE-11CE-9641-444553540000} [HKLM] → %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] → WinZip Computing, Inc. [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 17.12.2004 8:00:00 | Attr = ]
{E0D79306-84BE-11CE-9641-444553540000} [HKLM] → %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] → WinZip Computing, Inc. [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 17.12.2004 8:00:00 | Attr = ]
{E0D79307-84BE-11CE-9641-444553540000} [HKLM] → %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] → WinZip Computing, Inc. [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 17.12.2004 8:00:00 | Attr = ]
{EB47FF00-225E-11D2-9E1D-00A0C9AB0EEE} [HKLM] → %SystemRoot%\lcmmfu.cpl [eLicense Control] → [Ver = 2.0.10.0 | Size = 122880 bytes | Modified Date = 13.12.2006 20:02:36 | Attr = ]
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} [HKLM] → %ProgramFiles%\Real\RealPlayer\rpshell.dll [Shell Extensions for RealOne Player] → RealNetworks, Inc. [Ver = 1.0.1.1783 | Size = 49198 bytes | Modified Date = 12.11.2005 14:53:38 | Attr = ]
{F5AD31F9-270C-472B-B4B3-3532CFFB1434} [HKLM] → Reg Data - Key not found → File not found
{FFB699E0-306A-11d3-8BD1-00104B6F7516} [HKLM] → %System32%\nvcpl.dll [Play on my TV helper] → NVIDIA Corporation [Ver = 6.14.10.9424 | Size = 7700480 bytes | Modified Date = 19.4.2007 12:26:00 | Attr = ]
< Disabled MSConfig Services [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services →
aswUpdSv → →
avast! Antivirus → →
avast! Mail Scanner → →
avast! Web Scanner → →
btwdins → →
InCDsrv → →
O&O Defrag → →
SandraDataSrv → →
SandraTheSrv → →
< Disabled MSConfig Folder Items[HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\ →
C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^Adobe Reader Speed Launch.lnk → %ProgramFiles%\Adobe\Reader 8.0\Reader\reader_sl.exe → Adobe Systems Incorporated [Ver = 8.0.0.0 | Size = 40048 bytes | Modified Date = 23.10.2006 1:48:20 | Attr = ]
C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^Adobe Reader Synchronizer.lnk → %ProgramFiles%\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe → [Ver = 8.0.0.0 | Size = 734872 bytes | Modified Date = 23.10.2006 0:01:50 | Attr = ]
C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^BTTray.lnk → %ProgramFiles%\MSI\BToes Bluetooth-ohjelmisto\BTTray.exe → Broadcom Corporation. [Ver = 4.0.1.2101 | Size = 577597 bytes | Modified Date = 31.5.2005 13:29:16 | Attr = ]
C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^PCSuiteForNokia6600 Detect.lnk → %SystemDrive%\PROGRA~1\Nokia\PCSUIT~1\CONNMN~1.EXE → File not found
C:^Documents and Settings^All Users^Käynnistä-valikko^Ohjelmat^Käynnistys^PCSuiteForNokia6600 TS.lnk → %SystemDrive%\PROGRA~1\Nokia\PCSUIT~1\ECTASK~1.EXE → File not found
C:^Documents and Settings^Jarkko^Käynnistä-valikko^Ohjelmat^Käynnistys^Adobe Gamma.lnk → %CommonProgramFiles%\Adobe\Calibration\Adobe Gamma Loader.exe → Adobe Systems, Inc. [Ver = 1, 0, 0, 1 | Size = 113664 bytes | Modified Date = 16.3.2005 18:16:50 | Attr = ]
C:^Documents and Settings^Jarkko^Käynnistä-valikko^Ohjelmat^Käynnistys^HotSync Manager.lnk → %ProgramFiles%\palmOne\HOTSYNC.EXE → Palm, Inc. [Ver = 4.0.4 | Size = 299008 bytes | Modified Date = 12.4.2004 21:34:10 | Attr = ]
C:^Documents and Settings^Jarkko^Käynnistä-valikko^Ohjelmat^Käynnistys^PowerReg Scheduler.exe → Reg Data - Value does not exist → File not found
< Disabled MSConfig Registry Items [HKLM] > → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ →
/AutoLaunchHDD70 → %ProgramFiles%\PHILIPS\HDDDMM\DMM\bin\AutoLaunchHDD70.exe → [Ver = 1, 0, 0, 1 | Size = 348256 bytes | Modified Date = 14.6.2004 8:50:46 | Attr = ]
Adobe Photo Downloader → %ProgramFiles%\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe → Adobe Systems Incorporated [Ver = 3.0.0.49815 | Size = 57344 bytes | Modified Date = 6.6.2005 22:46:24 | Attr

Unknown virus disables my avast...

Announcements