|
|
|
Keskustelualueet
Keskustelualueet
|
|
|
Hjt Logi kone jumittelee...
|
|
|
greenryda
Junior Member
|
26. marraskuuta 2007 @ 22:08 |
Linkki tähän viestiin
|
Kone takkuilee, voisko joku vilkasta??
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:06:02, on 26.11.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/servlet...14&build=RETAIL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {22A19EED-49CF-4BDE-8C6F-FD60B54B655D} (ie_api Class) - https://esignature.sonera.com/exec/xwfm/public/EllosYksityislaina/fi/Ellos_Yksityislaina/a_hakija/1_0_0/PKISignatureAPI/plugin-install/library/binary/win32/dssClient.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/eng/poker_2_0_0_43.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{29837807-683E-4FD6-9715-7017B6C7DF8E}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FE51F59-FCBB-4DDF-B966-667F403C993A}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F3C6E77-62D8-402C-BF36-7943FA7B45F6}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\..\{A350513C-8B01-4CE4-A812-23DCF1798E0F}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
O21 - SSODL: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
O22 - SharedTaskScheduler: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
O23 - Service: Microsoft ASPI Manager (aspi113210) - Unknown owner - C:\WINDOWS\system32\aspi25469.exe (file missing)
O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
--
End of file - 11741 bytes
|
|
tomato71
Suspended due to non-functional email address
|
27. marraskuuta 2007 @ 16:16 |
Linkki tähän viestiin
|
moi
hieno örkkikokoelma :D
aloitetaan tästä....
Tee uusi hjt-scannaus Do a System scan only
Sulje kaikki muut ikkunat ja selaimen.Merkkaa nämä rivit ja paina Fix checked
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O17 - HKLM\System\CCS\Services\Tcpip\..\{29837807-683E-4FD6-9715-7017B6C7DF8E}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FE51F59-FCBB-4DDF-B966-667F403C993A}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F3C6E77-62D8-402C-BF36-7943FA7B45F6}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\..\{A350513C-8B01-4CE4-A812-23DCF1798E0F}: NameServer = 85.255.116.37,85.255.112.85
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
O21 - SSODL: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
O22 - SharedTaskScheduler: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
ja sitten...
Lataa fixwareout.exe täältä > Täältä
tai > Täältä
ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.
ja sitten...
Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.
Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi:
*Käynnistä tietokone
*Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
*Seuraavaksi pitäisi ilmestyä valikko
*Valitse valikosta vikasietotila.
* Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio). Työpöydälle ilmestyy sdfix.exe. Tuplakilikkaa sitä, niin tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM c:\SDFix
* Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
* Paina Y käynnistääksesi skriptin.
* Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, " Press any key to Reboot".
* Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
* Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
* Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, " Finished".
* Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
* Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.
ja vielä...
1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
combofix.exe
combofix.exe
2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
Lähetä c:\fixwareout\report.txt + Report.txt (sdfix) + C:\ComboFix.txt + uusi hjt-loki
www.virustorjunta.net
|
|
greenryda
Junior Member
|
27. marraskuuta 2007 @ 19:18 |
Linkki tähän viestiin
|
Tässä näitä on..
Fixware:
Username "HP_Omistaja" - 27.11.2007 18:30:20 [Fixwareout edited 9/01/2007]
~~~~~ Prerun check
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{29837807-683E-4FD6-9715-7017B6C7DF8E}
"DhcpNameServer"="85.255.116.37,85.255.112.85" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}
"DhcpNameServer"="85.255.116.37,85.255.112.85" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{A350513C-8B01-4CE4-A812-23DCF1798E0F}
"DhcpNameServer"="85.255.116.37,85.255.112.85" <Value cleared.
DNS-tulkintatoiminnon välimuistin tyhjentäminen epäonnistui: Toiminto epäonnistui sitä suoritettaessa.
System was rebooted successfully.
~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"=""
....
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "daolnwodi" Deleted
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "putesprpgd" Deleted
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "onisacputes" Deleted
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....
~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
"AGRSMMSG"="AGRSMMSG.exe"
"HPHUPD06"="c:\\Program Files\\HP\\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\\hphupd06.exe"
"HPHmon06"="C:\\WINDOWS\\system32\\hphmon06.exe"
"KBD"="C:\\HP\\KBD\\KBD.EXE"
"Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
"SSC_UserPrompt"="c:\\Program Files\\Common Files\\Symantec Shared\\Security Center\\UsrPrmpt.exe"
"ccApp"="\"c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"PS2"="C:\\WINDOWS\\system32\\ps2.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe\""
"Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""
"YeppStudioAgent"="C:\\Program Files\\Samsung\\SamsungMediaStudio4.1\\SamsungMediaStudioAgent.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~
SDFix:
SDFix: Version 1.115
Run by HP_Omistaja on ti 27.11.2007 at 18:59
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\HP_OMI~1\TYPYT~1\SDFix
Safe Mode:
Checking Services:
Name:
aspi113210
Path:
C:\WINDOWS\system32\aspi25469.exe
aspi113210 - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Trojan Files Found:
C:\WINDOWS\system32\aspi25469.exe - Deleted
C:\WINDOWS\system32\kr_done1 - Deleted
C:\WINDOWS\system32\ws386.ini - Deleted
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-27 19:05:21
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x90\x2022\x20ac|\xff\xff\xff\xff"\x2022\x20ac|\xfe\xbb\xd3w\2]
"b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 3
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Enabled:Internet Explorer"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"
Remaining Files:
---------------
File Backups: - C:\DOCUME~1\HP_OMI~1\TYPYT~1\SDFix\backups\backups.zip
Files with Hidden Attributes:
Sat 3 Jun 2006 213 A.SHR --- "C:\BOOT.BAK"
Sun 22 Jan 2006 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
Sat 24 Jun 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 12 Sep 2005 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.key.bak"
Mon 8 May 2006 28,672 A..H. --- "C:\Documents and Settings\HP_Omistaja\Ty?p?yt?\~WRL2069.tmp"
Thu 15 Nov 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\28daf2e1f8ef97b772dfdbad9c3d0bd9\BIT3.tmp"
Sun 21 May 2006 246,784 ...H. --- "C:\Documents and Settings\HP_Omistaja\Application Data\Microsoft\Word\~WRL0495.tmp"
Sat 24 Jun 2006 4,348 ...H. --- "C:\Documents and Settings\HP_Omistaja\Omat tiedostot\Omat musiikkitiedostot\K?ytt?oikeuden varmuuskopio\drmv1key.bak"
Sun 20 Aug 2006 20 A..H. --- "C:\Documents and Settings\HP_Omistaja\Omat tiedostot\Omat musiikkitiedostot\K?ytt?oikeuden varmuuskopio\drmv1lic.bak"
Sat 24 Jun 2006 312 A.SH. --- "C:\Documents and Settings\HP_Omistaja\Omat tiedostot\Omat musiikkitiedostot\K?ytt?oikeuden varmuuskopio\drmv2key.bak"
Finished!
Combofix:
ComboFix 07-11-19.4 - HP_Omistaja 2007-11-27 19:12:19.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.679 [GMT 2:00]
Running from: C:\Documents and Settings\HP_Omistaja\Työpöytä\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
D:\Autorun.inf
.
((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2007-10-27 to 2007-11-27 )))))))))))))))))
.
2007-11-27 18:57 <KANSIO> d-------- C:\WINDOWS\ERUNT
2007-11-27 00:14 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-11-26 22:05 <KANSIO> d-------- C:\Program Files\Trend Micro
2007-11-24 13:55 <KANSIO> d-------- C:\Program Files\Alwil Software
.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-27 16:24 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-11-26 20:08 --------- d-----w C:\Program Files\MagicDisc
2007-11-24 11:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-24 11:44 --------- d--h--w C:\Program Files\Zero G Registry
2007-11-24 11:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2007-11-24 11:42 --------- d-----w C:\Program Files\BitTorrent
2007-11-22 20:12 --------- d-----w C:\Program Files\Norton Internet Security
2007-11-19 17:32 --------- d-----w C:\Program Files\DC++
2007-11-05 10:54 --------- d-----w C:\Program Files\Java
2007-10-25 16:56 8,458,752 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-09-13 17:32 65,024 ----a-w C:\WINDOWS\IFinst26.exe
2006-09-11 17:10 29,280 ----a-w C:\Documents and Settings\HP_Omistaja\Application Data\GDIPFONTCACHEV1.DAT
2006-01-22 00:33 22 --sha-w C:\WINDOWS\SMINST\HPCD.sys
.
(((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 18:04]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 19:06 C:\WINDOWS\AGRSMMSG.exe]
"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 21:34]
"HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 21:29]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 00:44]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 22:43]
"SSC_UserPrompt"="c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-11-08 11:06]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-02-26 11:11]
"PS2"="C:\WINDOWS\system32\ps2.exe" []
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-09-12 00:58]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2007-09-24 15:33]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 10:09]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"YeppStudioAgent"="C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe" []
"NvCplDaemon"="RUNDLL32.exe" [2004-09-15 14:00 C:\WINDOWS\system32\rundll32.exe]
C:\Documents and Settings\All Users\K?ynnist?-valikko\Ohjelmat\K?ynnistys\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-04-17 07:19:13]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-05 02:28:24]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-09-15 14:00 15360 --a------ C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LSBWatcher]
2004-10-14 22:54 253952 --a------ c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\msnmsgr.exe /background
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 10:50 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /installquiet /keeploaded /nodetect
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-09-25 01:11 132496 --a------ C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
R2 Automattinen LiveUpdate-ajastustoiminto;Automattinen LiveUpdate-ajastustoiminto;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
R3 netrcacm;RCA USB Digital Cable Modem Driver;C:\WINDOWS\system32\DRIVERS\netrcacm.sys
S3 WN5401;Liteon Wireless LAN PCI 802.11 a/b/g adapter WN5401A;C:\WINDOWS\system32\DRIVERS\wn5401.sys
*Newly Created Service* - CATCHME
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{016926EC-A7C2-EB46-0200-040003000402}]
C:\WINDOWS\system32\RunDLL32.exe
.
'Ajoitetut tehtävät'-kansion sisältö
"2007-11-23 20:31:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-11-27 01:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Tarkista tietokone - HP_Omistaja.job"
- c:\PROGRA~1\NORTON~1\NORTON~1\NAVW32.EXEh/task:
"2007-11-27 17:13:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDetect.exe
.
**************************************************************************
catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-27 19:13:23
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-11-27 19:13:51
.
--- E O F ---
Hjt:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:17:23, on 27.11.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/servlet...14&build=RETAIL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {22A19EED-49CF-4BDE-8C6F-FD60B54B655D} (ie_api Class) - https://esignature.sonera.com/exec/xwfm/public/EllosYksityislaina/fi/Ellos_Yksityislaina/a_hakija/1_0_0/PKISignatureAPI/plugin-install/library/binary/win32/dssClient.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/eng/poker_2_0_0_43.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
--
End of file - 9308 bytes
|
|
janinik
Suspended due to non-functional email address
|
27. marraskuuta 2007 @ 19:35 |
Linkki tähän viestiin
|
Tämmönen logi tuli..
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:25:32, on 27.11.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Labtec Wireless Desktop\MagicKey.exe
C:\Program Files\Labtec Wireless Desktop\MulMouse.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Labtec Wireless Desktop\OSD.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Grapevine Buzzz\buzzz.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Työkalurivi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll (file missing)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Lexmark Työkalurivi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll (file missing)
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Funk Logo] C:\DOCUME~1\JANINI~1\APPLIC~1\CLOSEF~1\Curb Once.exe
O4 - HKCU\..\Run: [KCeasy] C:\Program Files\KCeasy\KCeasy.exe /hide
O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Enable Labtec Wireless Desktop.lnk = C:\Program Files\Labtec Wireless Desktop\MagicKey.exe
O4 - Global Startup: Shortcut to buzzz.exe.LNK = C:\Program Files\Grapevine Buzzz\buzzz.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
--
End of file - 8160 bytes
|
|
tomato71
Suspended due to non-functional email address
|
27. marraskuuta 2007 @ 19:39 |
Linkki tähän viestiin
|
ja sitten...
Sitten käytä Windowsin "Etsi" toimintoa.
Käynnistä-valikko "Etsi"
->Lisävaihtoehdot
->Raksi seuraaviin:
-Etsi järjestelmäkansioista
-Etsi piilotiedostoista ja -kansioista
-Etsi alikansioista
->Hakusanaksi C:\WINDOWS\system32\3339_27.dll
Poista jos löytyy
ja sitten...
Varmistu ensin, että piilotiedostot on näkyvillä.
Piilotiedostot näkyviin
Mene --> tänne
Kun sivu on latautunut, klikkaa Selaa-nappulaa ja etsi seuraava tiedosto ja paina Submit.
C:\WINDOWS\IFinst26.exe
Lähetä skannin tulokset seuraavassa viestissäsi.
Jos Jotti on ruuhkainen, yritä samaa Virustotalissa: http://www.virustotal.com/flash/index_en.html
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.
*Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
*Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
*Käynnistä AVG Anti-Spyware.
*Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
*Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
*Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
*Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
*Sitten "Reports" valikon alta:
*Ota täppi pois kohdasta"Automatically generate report after every scan"
*Ota täppi pois kohdasta"Only if threats were found
*Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
*"Resident shield is", muuta tila active:sta inactive:ksi
*Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan, [URL=http://www.virustorjunta.net/modules.php?name=FAQ&myfaq=yes&id_cat=6&categories=Yleisohjeita+ongelmatilanteiden+ratkaisuun#37] Ohje![/URL]
HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
*Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
*Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
*AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
*Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
*Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
*Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
*Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
*Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.
Lähetä avg-loki ja virustotal/jotti tulos + uusi hjt-loki
www.virustorjunta.net
|
|
greenryda
Junior Member
|
29. marraskuuta 2007 @ 21:21 |
Linkki tähän viestiin
|
|
Oliko nää hjeet mulle vai tuolle janinik:lle???
|
|
tomato71
Suspended due to non-functional email address
|
29. marraskuuta 2007 @ 22:44 |
Linkki tähän viestiin
|
|
ohjeet oli greenrydalle
www.virustorjunta.net
|
|
greenryda
Junior Member
|
1. joulukuuta 2007 @ 19:13 |
Linkki tähän viestiin
|
Meinasitko tätä:
Scanner results
Scan taken on 01 Dec 2007 17:09:13 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing
|
|
tomato71
Suspended due to non-functional email address
|
1. joulukuuta 2007 @ 19:20 |
Linkki tähän viestiin
|
Lainaus, alkuperäisen viestin kirjoitti tomato71:
ja sitten...
Sitten käytä Windowsin "Etsi" toimintoa.
Käynnistä-valikko "Etsi"
->Lisävaihtoehdot
->Raksi seuraaviin:
-Etsi järjestelmäkansioista
-Etsi piilotiedostoista ja -kansioista
-Etsi alikansioista
->Hakusanaksi C:\WINDOWS\system32\3339_27.dll
Poista jos löytyy
ja sitten...
Varmistu ensin, että piilotiedostot on näkyvillä.
Piilotiedostot näkyviin
Mene --> tänne
Kun sivu on latautunut, klikkaa Selaa-nappulaa ja etsi seuraava tiedosto ja paina Submit.
C:\WINDOWS\IFinst26.exe
Lähetä skannin tulokset seuraavassa viestissäsi.
Jos Jotti on ruuhkainen, yritä samaa Virustotalissa: http://www.virustotal.com/flash/index_en.html
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.
*Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
*Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
*Käynnistä AVG Anti-Spyware.
*Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
*Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
*Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
*Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
*Sitten "Reports" valikon alta:
*Ota täppi pois kohdasta"Automatically generate report after every scan"
*Ota täppi pois kohdasta"Only if threats were found
*Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
*"Resident shield is", muuta tila active:sta inactive:ksi
*Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan, [URL=http://www.virustorjunta.net/modules.php?name=FAQ&myfaq=yes&id_cat=6&categories=Yleisohjeita+ongelmatilanteiden+ratkaisuun#37] Ohje![/URL]
HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
*Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
*Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
*AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
*Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
*Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
*Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
*Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
*Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.
Lähetä avg-loki ja virustotal/jotti tulos + uusi hjt-loki
jep,se + nämä muut jutut
www.virustorjunta.net
|
|
greenryda
Junior Member
|
1. joulukuuta 2007 @ 21:49 |
Linkki tähän viestiin
|
Täs ois:
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 21:38:44 1.12.2007
+ Scan result:
:mozilla.772:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.773:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.390:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.433:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.592:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.662:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.684:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.687:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.76:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.782:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.78:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@nordea.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@sonyeurope.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.263:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.264:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.265:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.861:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.616:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.617:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.adobe[1].txt -> TrackingCookie.Adobe : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.adobe[2].txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.526:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.527:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.528:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.529:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.530:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.531:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.532:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.113:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.114:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.221:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.222:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.223:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.224:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.225:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.555:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adviva : Cleaned.
:mozilla.199:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.298:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.299:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.301:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.289:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.290:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.291:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.292:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.293:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.294:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.295:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.788:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@connextra[2].txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.101:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.252:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Etracker : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.etracker[1].txt -> TrackingCookie.Etracker : Cleaned.
:mozilla.554:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@a.as-us.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.271:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.272:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.273:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.274:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.484:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.511:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.520:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.100:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.597:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.608:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.656:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.657:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.660:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.661:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.702:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.712:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.778:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ehg-talentumoyi.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.703:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.704:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@searchportal.information[2].txt -> TrackingCookie.Information : Cleaned.
:mozilla.355:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Intelli-direct : Cleaned.
:mozilla.581:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.583:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.886:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.590:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@search.msn[1].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@navrcholu[2].txt -> TrackingCookie.Navrcholu : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@navrcholu[3].txt -> TrackingCookie.Navrcholu : Cleaned.
:mozilla.7:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.556:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.559:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.560:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.356:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.357:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.358:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.735:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.736:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.737:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.738:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.739:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.740:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.741:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.742:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.743:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.619:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.620:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@real[1].txt -> TrackingCookie.Real : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.341:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.342:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.345:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.346:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.347:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.348:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.349:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.351:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.352:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.353:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.813:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@revsci[3].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.44:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.45:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.46:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.47:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.48:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.49:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.50:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.8:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@statistik-gallup[2].txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.695:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.696:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.697:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.105:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.106:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.107:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.296:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.653:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.621:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.622:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.377:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.378:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.379:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.380:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.381:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
::Report end
ja hjt:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:44:01, on 1.12.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://finnish.toggle.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/servlet...14&build=RETAIL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {22A19EED-49CF-4BDE-8C6F-FD60B54B655D} (ie_api Class) - https://esignature.sonera.com/exec/xwfm/public/EllosYksityislaina/fi/Ellos_Yksityislaina/a_hakija/1_0_0/PKISignatureAPI/plugin-install/library/binary/win32/dssClient.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/eng/poker_2_0_0_43.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
--
End of file - 10544 bytes
|
|
tomato71
Suspended due to non-functional email address
|
1. joulukuuta 2007 @ 21:54 |
Linkki tähän viestiin
|
moi
löytykö/poistitko tämän C:\WINDOWS\system32\3339_27.dll
avg ei löytänyt ku evästeitä :(
Skannaa koneesi Kaspersky Online Skannerilla
Käytä Internet Explorer
Sinulta kysytään sallitko ActiveX -komponentin asentamisen Kasperskyltä, klikkaa Kyllä.[list]
[*] Ohjelma käynnistyy ja aloittaa viimeisimpien tunnistetiedostojen lataamisen.
[*] Kun skanneri on asennettu ja tunnistetiedot ladattu, klikkaa Next.
[*] Klikkaa nyt asetuksia, Scan Settings
[*] Tarkista asetuksista, että seuraavat ovat valittuina:
o Scan using the following Anti-Virus database:
+ Extended (Jos valittavissa, muuten valitse Standard)
o Scan Options:
+ Scan Archives
+ Scan Mail Bases
[*] Klikkaa OK
[*] Nyt valitse "select a target to scan" otsikon alta Oma Tietokone, My Computer
[*] Skannaus vie aikaa, joten ole kärsivällinen. Kun skannaus on valmis saat ilmoituksen, jos koneesi on saastunut.
[*] Klikkaa nyt Save as Text-painiketta.
[*] Tallenna tiedosto työpöydällesi.
[*] Kopioi ja Liitä tiedoston sisältö seuraavaan vastaukseesi
www.virustorjunta.net
|
|
greenryda
Junior Member
|
6. joulukuuta 2007 @ 18:17 |
Linkki tähän viestiin
|
|
Moro. en löytäny tätä C:\WINDOWS\system32\3339_27.dll....
|
|
tomato71
Suspended due to non-functional email address
|
6. joulukuuta 2007 @ 18:31 |
Linkki tähän viestiin
|
|
ok
skannaa kasperskyn kanssa ohjeitten mukaisesti
www.virustorjunta.net
|
|
greenryda
Junior Member
|
6. joulukuuta 2007 @ 20:17 |
Linkki tähän viestiin
|
Tämmöst löyty:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, December 06, 2007 8:15:03 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 6/12/2007
Kaspersky Anti-Virus database records: 474036
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
C:\
D:\
E:\
F:\
H:\
I:\
J:\
K:\
Scan Statistics:
Total number of scanned objects: 83519
Number of viruses found: 24
Number of infected objects: 110
Number of suspicious objects: 0
Duration of the scan process: 01:18:26
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Confid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Content.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Privacy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Restrict.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\WebHist.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2007-12-06_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Adobe\Acrobat\8.0\Updater\updater.log Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Adobe\Updater5\aumLib.log Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Sivuhistoria\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\HP_Omistaja\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Omistaja\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\HP_Omistaja\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Sivuhistoria\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Sivuhistoria\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\AntiSpam\Log\Spam.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPStop.log Object is locked skipped
C:\Program Files\MSN Messenger\riched20.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03727B0D.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03E10E93.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\045D4A0A.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\04AE63B0.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\050D2548.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\056512E7.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\05C4547F.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\062D140C.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\068B55A4.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07592AC1.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07AE6E64.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\080D2FFC.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\086B7193.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\090F24E0.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\09913450.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A420F8E.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A583575.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A795951.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0ACE3028.tmp Infected: not-a-virus:AdWare.Win32.180Solutions.as skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0AD733A1.tmp Infected: Trojan-Downloader.Win32.Adload.jm skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0ADB44E5.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B472E6F.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B984815.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0BF135B4.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0C766F20.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0CCB32C3.pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D242062.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D7C0E01.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0DB02DC7.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0DF1757F.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0E2C693F.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0E9E26C1.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F5C29F1.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0FC13F81.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\105420DF.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10991294.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10DA5A4C.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\114C17CE.pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\11975D7C.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12067101.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12653299.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12E8420A.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\13605385.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\139B4744.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14242AAD.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14764453.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14B4620F.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14FF27BC.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15406F74.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15750F3B.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15DA24CB.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\17063B81.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18432424.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\188B0F44.bs Infected: not-virus:Hoax.Win32.Renos.fi skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\188B0F44.exe Infected: not-virus:Hoax.Win32.Renos.fi skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18A2352B.exe Infected: Trojan-Clicker.Win32.Costrat.m skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18A50FB8.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18ED2B69.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\195240FA.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\199A5CAB.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A201618.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A6507CC.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1AB04D79.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1AEE6B35.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1B6028B7.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1BC86844.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1C3B25C7.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1CB00D45.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D0C24E1.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D5D3E87.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1DCC520D.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E1143C1.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E945331.pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1EB040C3.tmp Infected: Worm.Win32.VB.an skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1EEF6ACD.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1F964815.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1FE10DC3.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20437957.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20B860D6.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20F02A99.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\217F61FA.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\21DE2392.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\22613302.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\22A27ABB.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\25452247.exe Infected: Trojan-Clicker.Win32.Costrat.m skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip/BlackBox.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip ZIP: infected - 3 skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip CryptFF: infected - 3 skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\297D25A3.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2B9D33CF.exe Infected: Trojan-Spy.Win32.BZub.dh skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3A7644BD.exe Infected: Trojan-Downloader.Win32.Small.ccm skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3A7A6EB9.exe Infected: Trojan-Downloader.Win32.Small.ccm skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3EA82B31.exe Infected: Backdoor.Win32.Agent.adr skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\49447640.exe Infected: Trojan-Downloader.Win32.Small.ccm skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4E910DCE.par Infected: P2P-Worm.Win32.Tibick.d skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55E5545A.exe Infected: Backdoor.Win32.Agent.adr skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6212001D.exe Infected: not-a-virus:AdWare.Win32.WinAD.bo skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\639542D2.dll Infected: Trojan.Win32.Agent.pk skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D3378B5.dll Infected: Trojan-Spy.Win32.BZub.dv skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DCD2E0C.exe Infected: Trojan-Dropper.Win32.Small.asw skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71382249.exe Infected: Trojan.Win32.Small.gq skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\714F482F.exe Infected: Trojan-Downloader.Win32.Small.buy skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74207118.tmp Infected: P2P-Worm.Win32.VB.dw skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\75361052.par Infected: P2P-Worm.Win32.Backterra.d skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7A5C3CC4.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7DC62119.exe Infected: Trojan-Spy.Win32.Agent.ol skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7F73069B.exe Infected: not-a-virus:AdWare.Win32.Raze.a skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP577\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{99DD658A-F8BD-40A9-B8DB-0B71CE67AA50}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.
|
|
tomato71
Suspended due to non-functional email address
|
6. joulukuuta 2007 @ 20:36 |
Linkki tähän viestiin
|
jep
tämä tiedosto pitää vielä tarkistaa...
Varmistu ensin, että piilotiedostot on näkyvillä.
Piilotiedostot näkyviin
Mene --> tänne
Kun sivu on latautunut, klikkaa Selaa-nappulaa ja etsi seuraava tiedosto ja paina Submit.
C:\Program Files\MSN Messenger\riched20.dll
Lähetä skannin tulokset seuraavassa viestissäsi.
Jos Jotti on ruuhkainen, yritä samaa Virustotalissa: http://www.virustotal.com/flash/index_en.html
www.virustorjunta.net
|
|
greenryda
Junior Member
|
6. joulukuuta 2007 @ 23:15 |
Linkki tähän viestiin
|
Täs ois...
Scan taken on 06 Dec 2007 21:13:15 (GMT)
A-Squared
Found Adware.Win32.MyWebSearch
AntiVir
Found ADSPY/Mywebsearch.A.47
ArcaVir
Found Adware.Mywebsearch
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found Adware.MyWebSearch.AV
ClamAV
Found Adware.Searchbar-19
CPsecure
Found nothing
Dr.Web
Found Adware.Msearch
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found not-a-virus:AdTool.Win32.MyWebSearch (6, 2, 615)
Fortinet
Found Adware/MyWebSearch
Ikarus
Found not-a-virus:AdTool.Win32.MyWebSearch
Kaspersky Anti-Virus
Found not-a-virus:AdTool.Win32.MyWebSearch
NOD32
Found Win32/FunWeb application
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found AdWare.ToolBar.MyWebSearch
|
|
tomato71
Suspended due to non-functional email address
|
8. joulukuuta 2007 @ 20:08 |
Linkki tähän viestiin
|
|
moi
poista tämä tiedosto
C:\Program Files\MSN Messenger\riched20.dll
vielä ongelmia??
www.virustorjunta.net
|
|
Mainos
|
|
|
|
greenryda
Junior Member
|
9. joulukuuta 2007 @ 11:26 |
Linkki tähän viestiin
|
|
Moi. Nyt rupee kyl olee jo parempi.
Kiitoksia taas kerrran!!!
|
|
