ongelmia; windows firewall ym. HJT

Yksityisviestit

Luo uusi yksityisviesti

Kaikki uudet viestit

Ilman vastauksia olevat viestiketjut

Hae viestejä

sunnuntai 9.11.2025 / 20:16

Hae keskustelualueilta:

afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat > ongelmia; windows firewall ym. hjt

Aiheet

Keskustelualueet

Vastaa

Aloita uusi viestiketju

ongelmia; windows firewall ym. HJT

Siirry:

Kirjoittaja

Viesti

Sivu:	1	2	>

kara

Newbie

17. toukokuuta 2006 @ 05:44

Linkki tähän viestiin

Hei
Kotikone meni sekaisin, kaapatuksi luulen.
Safemodessa spy-bot ja ad-ware löytävät ja poistavat vaikka mitä, mutta heti kun avaan normaalitilassa on kone taas tukossa. Osa ongelmaa on se etten saa windowsin palomuuria päälle; antaa ilmoituksen: "Virhe 1060; Palvelua ei asennettu"/ (error 1060: The specified service does not exist as an installed service). Aiemmin palomuuri ollut kyllä päällä.

Asensin ja hijackthis-ohjelman. Ohessa logi. En onnistunut poistamaan (tulivat takaisi)O1-kohdan vieraita (?) hosteja. Pystyisikö kukaan antamaan hyviä vinkkejä mitä tehdä?
MS Internet Exploreria en onnistunut päivittämään (SP2).

___________________________________
Logfile of HijackThis v1.99.1
Scan saved at 18:23:28, on 16.5.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\explorer.exe
C:\Norman\NVC\BIN\ZANDA.EXE
C:\WINDOWS\System32\wdfmgr.exe
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\NORMAN\Nvc\BIN\NVCSCHED.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\NORMAN\Nvc\BIN\ZLH.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\NORMAN\Nvc\BIN\NYMSE.EXE
C:\Program Files\Java\j2re1.4.2_10\bin\jusched.exe
C:\Program Files\Java\j2re1.4.2_10\bin\jucheck.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\winrnt.exe
C:\NORMAN\Nvc\BIN\nvcoas.exe
C:\WINDOWS\System32\winrnt.exe
C:\WINDOWS\System32\brmfrsmq.exe
C:\WINDOWS\System32\7da9422e.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\NORMAN\Nvc\BIN\cclaw.exe
C:\Windows\xpupdate.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Microsoft AntiSpyware\gcasServAlert.exe
C:\Documents and Settings\Karri\Työpöytä\HijackThis_v1.99.1.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\nsjxt.dll/sp.html#63796
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\nsjxt.dll/sp.html#63796
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/uutiset/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\mxjut.dll/sp.html#63796
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\nsjxt.dll/sp.html#63796
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
F3 - REG:win.ini: run=C:\WINDOWS\inet20001\winlogon.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O1 - Hosts: 66.180.173.39 www.google.ie www.google.co.uk google.co.jp search.msn.be www.google.gm www.google.tm www.google.pt
O1 - Hosts: 66.180.173.39 google.rw google.com search.msn.dk google.com.sg www.google.lu beta.search.msn.co.uk au.search.yahoo.com
O1 - Hosts: 66.180.173.39 google.co.ug beta.search.msn.no beta.search.msn.co.za beta.search.sympatico.msn.ca www.google.pl google.com.ar google.com.cu
O1 - Hosts: 66.180.173.39 fr.search.yahoo.com beta.search.msn.be www.google.com.ec www.google.com.au www.google.co.ve www.google.sh www.google.vg
O1 - Hosts: 66.180.173.39 www.google.com.ni search.msn.ch google.ro uk.search.msn.com google.com.sa beta.search.xtramsn.co.nz google.sk
O1 - Hosts: 66.180.173.39 google.co.ls www.google.com.py google.gg google.it google.com.nf www.google.li google.com.mx
O1 - Hosts: 66.180.173.39 google.com.np www.google.com.np www.google.gl google.fm www.google.am www.google.com.ag google.com.pa
O1 - Hosts: 66.180.173.39 www.google.com.pr google.com.ni beta.search.msn.it google.se google.pt search.msn.de google.sm
O1 - Hosts: 66.180.173.39 www.google.com.pa google.fi google.com.fj www.google.ru beta.search.msn.dk ca.search.yahoo.com google.cg
O1 - Hosts: 66.180.173.39 www.google.com.nf google.co.uk www.google.com.tw www.google.co.kr google.com.ua www.google.co.hu google.com.na
O1 - Hosts: 66.180.173.39 www.google.com beta.search.msn.fr www.google.ci search.msn.it search.sympatico.msn.ca google.com.tw mx.search.yahoo.com
O1 - Hosts: 66.180.173.39 search.msn.no www.google.com.mt www.google.fr www.google.com.fj google.tm beta.search.msn.de beta.search.msn.se
O1 - Hosts: 66.180.173.39 www.google.com.sa www.google.cd google.ms google.lu www.google.co.cr google.co.hu google.lt
O1 - Hosts: 66.180.173.39 www.google.com.ly www.google.com.uy google.co.kr beta.search.msn.es www.google.sm toolbar.search.msn.com google.com.pk
O1 - Hosts: 66.180.173.39 google.de google.com.gr google.nl www.google.it beta.search.msn.com.sg www.google.com.vc search.msn.fi
O1 - Hosts: 66.180.173.39 google.az search.msn.nl google.com.ly google.com.au google.ae www.google.com.sg www.google.rw
O1 - Hosts: 66.180.173.39 search.msn.co.uk www.google.com.tr google.co.nz search.msn.at google.dj google.com.mt www.google.com.co
O1 - Hosts: 66.180.173.39 google.dk www.google.com.gi google.cd google.gl www.google.lv google.ci ar.search.yahoo.com
O1 - Hosts: 66.180.173.39 beta.search.msn.at google.co.ve search.msn.fr www.google.com.my google.com.sv www.google.as www.google.co.ug
O1 - Hosts: 66.180.173.39 search.msn.com www.google.at www.google.ca www.google.com.ua beta.search.msn.co.in google.com.hk google.com.co
O1 - Hosts: 66.180.173.39 google.cl www.google.com.vn www.google.co.in google.lv www.google.fi google.ch www.google.az
O1 - Hosts: 66.180.173.39 www.google.nl google.com.py google.com.gt search.ninemsn.com.au search.yahoo.com google.bi www.google.mn
O1 - Hosts: 66.180.173.39 www.google.com.sv google.at www.google.ch google.ru www.google.com.ph www.google.be google.as
O1 - Hosts: 66.180.173.39 google.tt google.gm www.google.bi www.google.com.do google.ie google.hn www.google.ae
O1 - Hosts: 66.180.173.39 search.msn.se ct.search.yahoo.com www.google.sk beta.search.ninemsn.com.au google.com.ag www.google.td google.vg
O1 - Hosts: 66.180.173.39 www.google.off.ai www.google.com.gr www.google.ms google.com.tr google.sh google.co.ke google.com.br
O1 - Hosts: 66.180.173.39 google.co.cr www.google.com.na www.google.hn google.es uk.search.yahoo.com google.am beta.search.msn.com
O1 - Hosts: 66.180.173.39 google.pn google.co.je www.google.de www.google.com.hk br.search.yahoo.com www.google.com.mx www.google.ro
O1 - Hosts: 66.180.173.39 search.msn.com.sg www.google.tt google.ca google.be google.com.do search.msn.co.in www.google.com.pk
O1 - Hosts: 66.180.173.39 www.google.com.cu google.td www.google.cg google.co.in google.fr google.com.vn www.google.co.th
O1 - Hosts: 66.180.173.39 google.com.vc google.no www.google.uz search.xtramsn.co.nz www.google.mu google.com.pr it.search.yahoo.com
O1 - Hosts: 66.180.173.39 www.google.fm www.google.com.ar www.google.es google.li google.co.il de.search.yahoo.com search.msn.co.za
O1 - Hosts: 66.180.173.39 google.com.gi google.uz www.google.com.pe google.kz google.mw www.google.co.il www.google.co.jp
O1 - Hosts: 66.180.173.39 www.google.dk google.off.ai google.com.ec www.google.co.ke www.google.pn www.google.se google.com.ph
O1 - Hosts: 66.180.173.39 www.google.dj beta.search.msn.ch beta.search.msn.nl www.google.co.ls google.mu cf.search.yahoo.com google.mn
O1 - Hosts: 66.180.173.39 www.google.co.nz beta.search.msn.fi google.com.uy www.google.cl google.co.th www.google.kz www.google.co.je
O1 - Hosts: 66.180.173.39 www.google.mw www.google.com.br google.pl google.com.my www.google.gg espanol.search.yahoo.com search.msn.es
O1 - Hosts: 66.180.173.39 www.google.no google.com.pe www.google.com.gt www.google.lt auto.search.msn.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {196B9CB5-4C83-46F7-9B06-9672ECD9D99B} - C:\WINDOWS\system32\winbrume.dll
O2 - BHO: Class - {569F191B-24D3-6830-313D-6EC509405F3B} - C:\WINDOWS\system32\appxq.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\Nvc\BIN\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [netss.exe] C:\WINDOWS\netss.exe
O4 - HKLM\..\Run: [NAVNet] "C:\DOCUME~1\Karri\LOCALS~1\Temp\3.tmp" /m
O4 - HKLM\..\Run: [syswp.exe] C:\WINDOWS\syswp.exe
O4 - HKLM\..\Run: [sdkom32.exe] C:\WINDOWS\system32\sdkom32.exe
O4 - HKLM\..\Run: [iexh32.exe] C:\WINDOWS\iexh32.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [atlti32.exe] C:\WINDOWS\atlti32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_10\bin\jusched.exe
O4 - HKLM\..\RunServices: [brmfrsmq] C:\WINDOWS\System32\brmfrsmq.exe
O4 - HKLM\..\RunServices: [brmfrsmq] C:\WINDOWS\System32\brmfrsmq.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [brmfrsmq] C:\WINDOWS\System32\brmfrsmq.exe
O4 - HKCU\..\Run: [7da9422e.exe] C:\Documents and Settings\Karri\Local Settings\Application Data\7da9422e.exe
O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Palvelut - {55520F0D-7DDC-4614-BF11-E635E5DF7203} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {67E28115-4248-4F22-A1D3-A5D35EA1F924} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {CC6266B1-45EB-4813-8AB7-99CA3ED395E3} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {71DA2A4E-ACB3-4065-9E41-8BC42EABE427} - http://scripts.dlv4.com/binaries/IA/svcia32_EN_XP.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - https://java.sun.com/products/plugin/autodl/jinstall-1_4-windows-i586.cab
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://wupd.fotokioski.net/download/XUpload.ocx
O20 - AppInit_DLLs: C:\WINDOWS\System32\svch08.dll
O20 - Winlogon Notify: 20242402reg - C:\Documents and Settings\All Users\Tiedostot\Settings\20242402.dll
O21 - SSODL: Muumit4 - {B6CF7B11-617E-151C-7CF3-FFE5E678D6FB} - C:\Program Files\Norsk Strek AS\Muumit4\dress8.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\ZANDA.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\Nvc\BIN\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\Nvc\BIN\NVCSCHED.EXE


		Käyttäjä	Salasana

		Puuttuuko tunnus? Liity jäseneksi nyt!. Salasana hukassa? Klikkaa tästä.